The vulnerability of the web interface of the E-DDC3.3 automation station’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the E-DDC3.3 automation station’s web interface involves incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted web requests via the CGI protocol...

Payment EX vulnerable to information disclosure

Overview Payment EX provided by Simplesite contains an information disclosure vulnerability CWE-200. Impact A remote unauthenticated attacker may obtain the information of the user who purchases merchandise using Payment EX. Solution Update the Software Update the software to the latest version...

Ubuntu 16.04 ESM / 18.04 ESM : X.Org X Server regression (USN-6587-4)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6587-4 advisory. USN-6587-1 fixed vulnerabilities in X.Org X Server. The fix was incomplete resulting in a possible regression. This update fixes the problem. Tenable...

CVE-2023-52028

creationtimestamp| type| source ---|---|--- 2024-01-30 12:16:52+00:00| seen| https://t.me/ctinow/175857 2025-01-31 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-31 2025-02-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-01...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : X.Org X Server regression (USN-6587-3)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6587-3 advisory. USN-6587-1 fixed vulnerabilities in X.Org X Server. The fix was incomplete resulting in a possible regression. This update fixes the problem. ...

CVE-2019-18466

creationtimestamp| type| source ---|---|--- 2024-01-29 11:41:07+00:00| seen| https://t.me/ctinow/175174...

PT-2024-1441 · Se Elektronic Gmbh · E-Ddc3.3

Name of the Vulnerable Software and Affected Versions: SE-elektronic GmbH E-DDC3.3 versions 03.07.03 and higher Description: The issue is related to a remote command execution vulnerability in the web configuration functionality of the device, allowing an attacker to send different commands from...

CVE-2023-46673

creationtimestamp| type| source ---|---|--- 2024-01-28 05:55:22+00:00| seen| https://t.me/arpsyndicate/3224...

CVE-2019-5013

creationtimestamp| type| source ---|---|--- 2024-01-27 11:41:41+00:00| seen| https://t.me/ctinow/174738...

CVE-1999-1386

creationtimestamp| type| source ---|---|--- 2024-01-26 20:16:32+00:00| seen| https://t.me/ctinow/174451...

CVE-2023-48132

creationtimestamp| type| source ---|---|--- 2024-01-26 08:31:22+00:00| seen| https://t.me/ctinow/174040 2024-01-30 18:17:03+00:00| seen| https://t.me/ctinow/176140 2024-02-19 08:56:26+00:00| seen| https://t.me/ctinow/187517...

USN-6608-1 linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-6.2, linux-azure-fde-6.2, linux-gcp, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-oem-6.5, linux-oracle, linux-raspi, linux-starfive vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate the server frame size in certain situation, leading to an out-of-bounds read vulnerability. An attacker could use this to construct a malicious CIFS image that, when operated on, could...

CVE-2024-22768

creationtimestamp| type| source ---|---|--- 2024-01-23 06:21:32+00:00| seen| https://t.me/ctinow/171718 2024-02-16 20:21:30+00:00| seen| https://t.me/ctinow/186609 2026-04-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-04-12 2026-06-23 14:06:11+00:00| exploited|...

CVE-2023-48118

SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page...

CVE-2024-22113

Open redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary websites and conduct phishing attacks via a specially crafted URL...

CVE-2023-51926

YonBIP v323.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component...

CVE-2023-51948

A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to list the files hosted by the web application...

CVE-2023-38738

creationtimestamp| type| source ---|---|--- 2024-01-19 02:26:45+00:00| seen| https://t.me/ctinow/170035 2024-02-12 17:17:08+00:00| seen| https://t.me/ctinow/183250 2025-06-16 20:37:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18534...

CVE-2023-52027

creationtimestamp| type| source ---|---|--- 2024-01-18 01:16:39+00:00| seen| https://t.me/ctinow/169530 2024-01-30 11:46:45+00:00| seen| https://t.me/ctinow/175847...

Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in E-Business suite and components. A malicious party could exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Access to sensitive data Oracle...