CVE-2023-28252

Windows Common Log File System Driver Elevation of Privilege Vulnerability Recent assessments: ccondon-r7 at April 12, 2023 3:18pm UTC reported: This was discovered because of zero-day exploitation perpetrated by a skilled adversary — final payload was Nokoyawa ransomware in at least one case, as...

CVE-2023-1406

creationtimestamp| type| source ---|---|--- 2023-04-10 18:36:03+00:00| seen| https://t.me/cibsecurity/61761...

containers-common bug fix and enhancement update

An update is available for containers-common. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The containers-common package contains common configuration files a...

WALinuxAgent bug fix update

An update is available for WALinuxAgent. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Windows Azure Linux Agent supports provisioning and running Linux...

389-ds:1.4 bug fix update

An update is available for 389-ds-base, module.389-ds-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3...

CVE-2023-1787

creationtimestamp| type| source ---|---|--- 2023-04-06 00:26:54+00:00| seen| https://t.me/cibsecurity/61522...

CVE-2023-1708

creationtimestamp| type| source ---|---|--- 2023-04-06 00:26:44+00:00| seen| https://t.me/cibsecurity/61512...

CVE-2023-27488

creationtimestamp| type| source ---|---|--- 2023-04-04 22:25:49+00:00| seen| https://t.me/cibsecurity/61422...

CVE-2023-1671

creationtimestamp| type| source ---|---|--- 2023-04-04 14:36:57+00:00| seen| https://t.me/cibsecurity/61374 2023-04-05 15:15:02+00:00| seen| https://t.me/truesecator/4254 2023-04-24 04:35:31+00:00| published-proof-of-concept| https://t.me/CNArsenal/525 2023-04-25 09:47:32+00:00|...

Malicious Package

Overview prism-subapps-react-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

Malicious Package

Overview iris-node-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Solaris 10 libXm - Buffer overflow Local privilege escalation

/ Exploit Title: Solaris 10 libXm - Buffer overflow Local privilege escalation raptordtprintlibXmas.c - Solaris 10 CDE ForeverDay LPE Copyright c 2023 Marco Ivaldi "What has been will be again, what has been done will be done again; there is nothing new under the Sun." -- Ecclesiastes 1:9 Solaris...

CVE-2023-1773

creationtimestamp| type| source ---|---|--- 2023-03-31 16:22:12+00:00| seen| https://t.me/cibsecurity/61243 2026-01-10 09:00:04+00:00| published-proof-of-concept| Telegram/kEi9aG3inm6wEBgriTJElzfBktIEkXFyp3hKxyuN5JDe4...

CVE-2022-30350

creationtimestamp| type| source ---|---|--- 2023-03-30 20:35:53+00:00| seen| https://t.me/cibsecurity/61184...

CVE-2023-25040

creationtimestamp| type| source ---|---|--- 2023-03-30 16:26:20+00:00| seen| https://t.me/cibsecurity/61171...

CVE-2023-28507

creationtimestamp| type| source ---|---|--- 2023-03-30 00:15:43+00:00| seen| https://t.me/cibsecurity/61138...

CVE-2022-43649

creationtimestamp| type| source ---|---|--- 2023-03-29 22:31:57+00:00| seen| https://t.me/cibsecurity/61123...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2023-25194)

Summary Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library as part of the Kafka integration. The latest patch includes Apache Kafka 3.4.0 to fix the vulnerability. CVE-2023-25194 Vulnerability Details CVEID:CVE-2023-25194 DESCRIPTION: Apache Kafka could...

编号已被CVE保留

No details are available at this time...

rubygem-rack: crafted requests can cause shell escape sequences

A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...