PT-2023-31713 · Unknown · Sandbox Accounts For Events

Name of the Vulnerable Software and Affected Versions: Sandbox Accounts for Events versions prior to 1.1.0 Description: The issue allows authenticated users to potentially claim and access empty AWS accounts by sending request payloads to the account API containing non-existent event ids and...

Amazon Sandbox Accounts for Events Access Control Error Vulnerability

Amazon Sandbox Accounts for Events is an application from Amazon.com, Inc. It allows multiple temporary AWS accounts to be provisioned to multiple authenticated users at the same time through a browser-based GUI. An access control error vulnerability exists in Amazon Sandbox Accounts for Events...

Amazon Sandbox Accounts for Events Security Breach

Amazon Sandbox Accounts for Events is an application from Amazon.com, Inc. It allows multiple temporary AWS accounts to be made available to multiple authenticated users at the same time through a browser-based GUI. A security vulnerability exists in Amazon Sandbox Accounts for Events prior to...

PT-2023-31801 · Unknown · Sandbox Accounts For Events

Name of the Vulnerable Software and Affected Versions: Sandbox Accounts for Events versions prior to 1.10.0 Description: The issue allows authenticated users to potentially read data from the events table by sending request payloads to the "events API", collecting information on planned events,...

CVE-2023-41097

creationtimestamp| type| source ---|---|--- 2023-12-21 22:27:11+00:00| seen| https://t.me/ctinow/157992 2024-01-14 17:16:31+00:00| seen| https://t.me/ctinow/168079...

CVE-2023-50732

creationtimestamp| type| source ---|---|--- 2023-12-21 21:21:56+00:00| seen| https://t.me/ctinow/157958 2024-01-04 21:21:57+00:00| seen| https://t.me/ctinow/163224 2024-01-13 13:21:03+00:00| seen| https://t.me/ctinow/167819...

CVE-2023-44481

creationtimestamp| type| source ---|---|--- 2023-12-21 20:22:27+00:00| seen| https://t.me/ctinow/157932 2023-12-29 21:17:11+00:00| seen| https://t.me/ctinow/160681...

CVE-2023-50822

creationtimestamp| type| source ---|---|--- 2023-12-21 16:28:07+00:00| seen| https://t.me/ctinow/157796 2024-01-14 12:46:51+00:00| seen| https://t.me/ctinow/168011 2025-04-24 15:06:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13254...

CVE-2023-50377

creationtimestamp| type| source ---|---|--- 2023-12-21 16:28:05+00:00| seen| https://t.me/ctinow/157794 2024-01-14 12:16:17+00:00| seen| https://t.me/ctinow/168009...

CVE-2023-45703

creationtimestamp| type| source ---|---|--- 2023-12-21 01:23:54+00:00| seen| https://t.me/ctinow/157439 2024-01-14 09:07:12+00:00| seen| https://t.me/ctinow/167970...

Design/Logic Flaw

An issue was discovered in Stormshield Network Security SNS 3.7.0 through 3.7.39, 3.11.0 through 3.11.27, 4.3.0 through 4.3.22, 4.6.0 through 4.6.9, and 4.7.0 through 4.7.1. It's possible to know if a specific user account exists on the SNS firewall by using remote access commands...

CVE-2023-50990

creationtimestamp| type| source ---|---|--- 2023-12-20 23:42:34+00:00| seen| https://t.me/ctinow/157394 2023-12-22 23:17:00+00:00| seen| https://t.me/ctinow/158653 2024-01-14 08:07:03+00:00| seen| https://t.me/ctinow/167955...

CVE-2023-33209

creationtimestamp| type| source ---|---|--- 2023-12-20 17:23:45+00:00| seen| https://t.me/ctinow/157157 2024-01-13 15:21:56+00:00| seen| https://t.me/ctinow/167853...

CVE-2023-36520

creationtimestamp| type| source ---|---|--- 2023-12-20 16:23:58+00:00| seen| https://t.me/ctinow/157121 2024-01-13 14:51:40+00:00| seen| https://t.me/ctinow/167842...

CVE-2023-50249

creationtimestamp| type| source ---|---|--- 2023-12-20 15:23:34+00:00| seen| https://t.me/ctinow/157083 2024-01-12 12:11:26+00:00| seen| https://t.me/ctinow/167208...

CVE-2023-6885

creationtimestamp| type| source ---|---|--- 2023-12-20 11:18:00+00:00| seen| https://t.me/ctinow/156878 2024-01-11 18:31:28+00:00| seen| https://t.me/ctinow/166719...

Alert: Chinese-Speaking Hackers Pose as UAE Authority in Latest Smishing Wave

The Chinese-speaking threat actors behind Smishing Triad have been observed masquerading as the United Arab Emirates Federal Authority for Identity and Citizenship to send malicious SMS messages with the ultimate goal of gathering sensitive information from residents and foreigners in the country...

CVE-2023-6912

Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords...

Authentication flaw

Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords...

CVE-2023-6912 Brute force vulnerability in M-Files user authentication

Lack of protection against brute force attacks in M-Files Server before 23.12.13205.0 allows an attacker unlimited authentication attempts, potentially compromising targeted M-Files user accounts by guessing passwords...