CVE-2023-51952

creationtimestamp| type| source ---|---|--- 2024-01-10 16:32:10+00:00| seen| https://t.me/ctinow/165909 2024-01-13 08:17:08+00:00| seen| https://t.me/ctinow/167737 2024-01-28 14:26:36+00:00| seen| https://t.me/ctinow/174945...

CVE-2023-51971

creationtimestamp| type| source ---|---|--- 2024-01-10 14:31:50+00:00| seen| https://t.me/ctinow/165821 2024-01-12 23:16:28+00:00| seen| https://t.me/ctinow/167586 2024-01-28 11:56:52+00:00| seen| https://t.me/ctinow/174910...

CVE-2023-48253

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerability it is possible to exfiltrate other users’ password hashes or update them with arbitrary values and access their...

CVE-2023-48253

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerability it is possible to exfiltrate other users’ password hashes or update them with arbitrary values and access their...

CVE-2023-48253

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerability it is possible to exfiltrate other users’ password hashes or update them with arbitrary values and access their...

CVE-2023-48243

creationtimestamp| type| source ---|---|--- 2024-01-10 12:21:54+00:00| seen| https://t.me/ctinow/165737 2024-01-28 10:26:53+00:00| seen| https://t.me/ctinow/174885...

CVE-2023-48250

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts...

CVE-2023-48250

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts...

CVE-2023-48250

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts...

CVE-2023-48250

CVE-2023-48250 affects Bosch Nexo devices; vulnerable component is the web authentication layer with hard-coded hidden accounts, enabling remote authentication with high privileges. Documents mention NEXO-OS and Bosch Nexo cordless nutrunner as affected, with the root cause cited as multiple hard...

CVE-2023-48250

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts...

CVE-2023-47994

creationtimestamp| type| source ---|---|--- 2024-01-10 00:26:43+00:00| seen| https://t.me/ctinow/165465 2024-01-17 01:16:35+00:00| seen| https://t.me/ctinow/169070 2024-01-28 07:56:54+00:00| seen| https://t.me/ctinow/174848...

CVE-2023-37297

creationtimestamp| type| source ---|---|--- 2024-01-10 00:26:39+00:00| seen| https://t.me/ctinow/165461 2024-01-28 06:51:26+00:00| seen| https://t.me/ctinow/174842...

CVE-2023-37296

creationtimestamp| type| source ---|---|--- 2024-01-10 00:26:38+00:00| seen| https://t.me/ctinow/165460 2024-01-27 07:07:24+00:00| seen| https://t.me/ctinow/174653...

CVE-2019-2989

creationtimestamp| type| source ---|---|--- 2024-01-09 18:46:51+00:00| seen| https://t.me/ctinow/165209 2024-01-09 20:16:15+00:00| seen| https://t.me/ctinow/165315...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 for OpenShift image enhancement and security update

A new image is available for Red Hat Single Sign-On 7.6.6, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

USN-6571-1 monit vulnerability

Youssef Rebahi-Gilbert discovered that Monit did not properly process credentials for disabled accounts. An attacker could possibly use this issue to login to the platform with an expired account and a valid password...

CVE-2019-10247

creationtimestamp| type| source ---|---|--- 2024-01-09 13:11:27+00:00| seen| https://t.me/ctinow/164991 2024-01-09 19:47:10+00:00| seen| https://t.me/ctinow/165279 2024-01-15 12:37:18+00:00| seen| https://t.me/ctinow/168316...

Authorization

SAP S/4HANA Finance for Advanced Payment Management - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application...

CVE-2024-21736 Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

SAP S/4HANA Finance for Advanced Payment Management - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application...