CVE-2023-4010

creationtimestamp| type| source ---|---|--- 2023-07-31 20:37:44+00:00| seen| https://t.me/cibsecurity/67475 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-37920

creationtimestamp| type| source ---|---|--- 2023-07-26 00:27:14+00:00| seen| https://t.me/cibsecurity/67259 2024-01-09 08:26:13+00:00| seen| https://t.me/arpsyndicate/2732 2025-02-14 10:06:09+00:00| seen| Telegram/PTqyZw9K84dkqHqcBNKUfhWMVoX3uMvDMzyIwbQke9W5OqO 2025-02-14 10:08:09+00:00| seen|...

CVE-2023-1386

creationtimestamp| type| source ---|---|--- 2023-07-24 20:26:13+00:00| seen| https://t.me/cibsecurity/67158 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-0160

creationtimestamp| type| source ---|---|--- 2023-07-18 20:31:05+00:00| seen| https://t.me/cibsecurity/66928 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-35365

creationtimestamp| type| source ---|---|--- 2023-07-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1062...

PT-2023-5383 · D Link · D-Link Dwl-6610Ap

Name of the Vulnerable Software and Affected Versions: D-LINK DWL-6610AP version 4.3.0.8B003C Description: A command injection issue was discovered in the web cert download handler function, allowing attackers to execute arbitrary commands via the certDownload parameter. This could potentially...

INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime

A suspected senior member of a French-speaking hacking crew known as OPERA1ER has been arrested as part of an international law enforcement operation codenamed Nervone, Interpol has announced. "The group is believed to have stolen an estimated USD 11 million -- potentially as much as 30 million -...

GHSA-HR8G-6V94-X4M9 Bouncy Castle For Java LDAP injection vulnerability

Bouncy Castle provides the X509LDAPCertStoreSpi.java class which can be used in conjunction with the CertPath API for validating certificate paths. Pre-1.73 the implementation did not check the X.500 name of any certificate, subject, or issuer being passed in for LDAP wild cards, meaning the...

Artemis - A Modular Web Reconnaissance Tool And Vulnerability Scanner

A modular web reconnaissance tool and vulnerability scanner based on Karton https://github.com/CERT-Polska/karton. The Artemis project has been initiated by the KN Cyber science club of Warsaw University of Technology and is currently being maintained by CERT Polska. Artemis is experimental...

CVE-2023-20178

creationtimestamp| type| source ---|---|--- 2023-06-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1039 2023-06-08 10:30:23+00:00| seen| https://t.me/kasperskyb2b/679 2023-06-08 13:51:47+00:00| seen| https://t.me/truesecator/4479 2023-06-10 08:33:18+00:00| seen|...

AZL-27020 CVE-2023-2253 affecting package cert-manager for versions less than 1.11.2-14

A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive strin...

CVE-2022-3162 affecting package cert-manager for versions less than 1.11.2-1

CVE-2022-3162 affecting package cert-manager for versions less than 1.11.2-1. An upgraded version of the package is available that resolves this issue...

DEBIAN-CVE-2023-0767

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

CVE-2023-20161

creationtimestamp| type| source ---|---|--- 2023-05-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1027 2023-05-18 07:31:55+00:00| seen| https://t.me/cibsecurity/64361 2023-05-18 11:59:24+00:00| published-proof-of-concept| https://t.me/truesecator/4394 2023-05-22...

CVE-2023-22787

creationtimestamp| type| source ---|---|--- 2023-05-10 13:22:06+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-arubaos-und-aruba-instantos-updates-verfugbar...

CVE-2023-24943

creationtimestamp| type| source ---|---|--- 2023-05-09 22:39:03+00:00| seen| https://t.me/cibsecurity/63666 2023-05-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1023 2023-05-10 13:00:06+00:00| seen| https://t.me/truesecator/4360...

pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

CERT-UA Warns of SmokeLoader and RoarBAT Malware Attacks Against Ukraine

An ongoing phishing campaign with invoice-themed lures is being used to distribute the SmokeLoader malware in the form of a polyglot file, according to the Computer Emergency Response Team of Ukraine CERT-UA. The emails, per the agency, are sent using compromised accounts and come with a ZIP...

CVE-2023-29942

creationtimestamp| type| source ---|---|--- 2023-05-05 18:25:17+00:00| seen| https://t.me/cibsecurity/63376 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-29935

creationtimestamp| type| source ---|---|--- 2023-05-05 18:25:03+00:00| seen| https://t.me/cibsecurity/63366 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...