9085 matches found
CVE-2023-45740
creationtimestamp| type| source ---|---|--- 2023-12-26 09:26:46+00:00| seen| https://t.me/ctinow/159280 2024-01-19 10:16:36+00:00| seen| https://t.me/ctinow/170125...
CVE-2023-28616
An issue was discovered in Stormshield Network Security SNS before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1. It affects user accounts for which the password has an equals sign or space character. The serverd process logs such passwords in cleartext, and potentially sends...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
winDED Custom exploit for CVE-2023-38831 using python. Int...
PT-2023-8386 · D Link · D-Link Dir-822
Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.2 Description: The issue is related to a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords. This is due to the lack of authentication for a critica...
CVE-2023-49226
creationtimestamp| type| source ---|---|--- 2023-12-25 09:31:24+00:00| seen| https://t.me/ctinow/159175 2024-01-04 01:17:25+00:00| seen| https://t.me/ctinow/162724 2024-01-19 09:16:24+00:00| seen| https://t.me/ctinow/170104...
CVE-2023-37188
creationtimestamp| type| source ---|---|--- 2023-12-25 08:26:28+00:00| seen| https://t.me/ctinow/159162 2023-12-29 21:17:15+00:00| seen| https://t.me/ctinow/160684 2024-01-19 08:11:46+00:00| seen| https://t.me/ctinow/170086...
CVE-2023-7095
creationtimestamp| type| source ---|---|--- 2023-12-25 02:26:19+00:00| seen| https://t.me/ctinow/159114 2024-01-03 23:17:18+00:00| seen| https://t.me/ctinow/162655...
The vulnerability of the Accounts component in operating systems macOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Accounts component in operating systems such as macOS, iOS, iPadOS, and watchOS is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2023-51386
Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially read data from the events table by sending request payloads to the events API, collecting information on planned...
Design/Logic Flaw
Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially read data from the events table by sending request payloads to the events API, collecting information on planned...
CVE-2023-51386
CVE-2023-51386 affects Sandbox Accounts for Events. An authenticated user could read data from the events table by sending requests to the events API, exposing information such as planned events, timeframes, budgets, and owner email addresses. The issue has been patched in version 1.10.0. Affecte...
CVE-2023-51386 Sandbox Accounts for Events vulnerable to privilege escalation to read running events data
Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially read data from the events table by sending request payloads to the events API, collecting information on planned...
CVE-2023-50928
"Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially claim and access empty AWS accounts by sending request payloads to the account API containing non-existent event...
Deserialization of untrusted data
"Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially claim and access empty AWS accounts by sending request payloads to the account API containing non-existent event...
CVE-2023-50928
CVE-2023-50928 affects the Sandbox Accounts for Events tool. Affected: Sandbox Accounts for Events prior to version 1.1.0. Root cause: access control misconfiguration allows an authenticated user to claim and access empty AWS accounts by sending payloads to the account API with non-existent event...
CVE-2023-50928 sandbox-accounts-for-events security misconfiguration leads to budget exceed
"Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially claim and access empty AWS accounts by sending request payloads to the account API containing non-existent event...
CVE-2023-50928 sandbox-accounts-for-events security misconfiguration leads to budget exceed
"Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially claim and access empty AWS accounts by sending request payloads to the account API containing non-existent event...
CVE-2023-49088
creationtimestamp| type| source ---|---|--- 2023-12-22 18:23:26+00:00| seen| https://t.me/ctinow/158513 2023-12-29 21:17:14+00:00| seen| https://t.me/ctinow/160683...