CVE-2023-32879

creationtimestamp| type| source ---|---|--- 2024-01-02 04:26:56+00:00| seen| https://t.me/ctinow/161474 2024-01-03 01:31:23+00:00| seen| https://t.me/cibsecurity/74129 2024-01-22 15:11:34+00:00| seen| https://t.me/ctinow/171209...

Velociraptor 0.7.1 Release

Written by Dr. Michael Cohen Sigma Support, ETW Multiplexing, Local Encrypted Storage and New VQL Capabilities Highlight the Last Release of 2023 Rapid7 is excited to announce that version 0.7.1 of Velociraptor is live and available for download. There are several new features and capabilities th...

CVE-2023-7146

creationtimestamp| type| source ---|---|--- 2023-12-29 03:26:27+00:00| seen| https://t.me/ctinow/160292 2024-02-05 20:15:07+00:00| seen| https://t.me/cibsecurity/73865...

[SECURITY] Fedora 39 Update: squid-6.6-1.fc39

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Sql injection

A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2023-50857

creationtimestamp| type| source ---|---|--- 2023-12-28 12:26:45+00:00| seen| https://t.me/ctinow/160015 2024-01-20 10:41:32+00:00| seen| https://t.me/ctinow/170580...

CVE-2023-7124

creationtimestamp| type| source ---|---|--- 2023-12-28 04:26:29+00:00| seen| https://t.me/ctinow/159916 2024-01-04 21:21:58+00:00| seen| https://t.me/ctinow/163225 2024-01-19 16:11:58+00:00| seen| https://t.me/ctinow/170257...

PT-2023-32902 · Unknown · Code-Projects Client Details System

Name of the Vulnerable Software and Affected Versions: code-projects Client Details System version 1.0 Description: A vulnerability was found in the code-projects Client Details System, classified as problematic. It affects an unknown function of the file /admin/update-clients.php. The manipulati...

NewStart CGSL MAIN 6.06 : bind Multiple Vulnerabilities (NS-SA-2023-0094)

The remote NewStart CGSL host, running version MAIN 6.06, has bind packages installed that are affected by multiple vulnerabilities: - By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter...

Privilege escalation

A flaw was found in sudo in the handling of ipahostname, where ipahostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them...

CVE-2023-49678

creationtimestamp| type| source ---|---|--- 2023-12-22 00:22:20+00:00| seen| https://t.me/ctinow/158072 2023-12-27 23:17:19+00:00| seen| https://t.me/ctinow/159822...

CVE-2023-47990

creationtimestamp| type| source ---|---|--- 2023-12-20 20:29:24+00:00| seen| https://t.me/ctinow/157288 2023-12-27 23:17:12+00:00| seen| https://t.me/ctinow/159816 2024-01-13 19:26:52+00:00| seen| https://t.me/ctinow/167900...

[SECURITY] Fedora 39 Update: xorg-x11-server-Xwayland-23.2.3-1.fc39

Xwayland is an X server for running X clients under Wayland...

CVE-2023-6920

An incomplete fix was found in the Keycloak Core patch. An attacker can steal authorization codes or tokens from clients using a wildcard in the JARM response mode "formpost.jwt". Changing the responsemode parameter in the original proof of concept from "formpost" to "formpost.jwt" can bypass the...

Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2023-462)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-462 advisory. AWS is aware of CVE-2023-48795, also known as Terrapin, which is found in the SSH protocol and affects SSH channel integrity. A protocol extension has been introduced by OpenSSH which needs to be applie...

QNAP QTS / QuTS hero Vulnerabilities in Samba (QSA-23-20)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-20 advisory. - A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to an attacker obtaining sensitive information due to a vulnerability in web browser clients (CVE-2023-47741).

Summary IBM Db2 Mirror for i GUI is a web browser client interface implementation. The browser implementation could allow sensitive information including passwords to be left in memory which could be viewed using common tools for viewing process information on a PC CVE-2023-47741. IBM Db2 Mirror...

Security Bulletin: IBM i is vulnerable to an attacker obtaining sensitive information due to a vulnerability in web browser clients (CVE-2023-47741).

Summary IBM i includes support for IBM Navigator for i and IBM Digital Certificate Manager for i which are web browser client interface implementations. The browser implementation could allow sensitive information including passwords to be left in memory which could be viewed using common tools f...

CVE-2023-42801

CVE-2023-42801 affects Moonlight-common-c, the core GameStream client code. The vulnerability is a stack-based buffer overflow in the library that begins after pairing, exploitable by sending a malicious game streaming server to a Moonlight client. Exploitation could crash the client and, in theo...

CVE-2023-43586

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access...