CVE-2023-1500

creationtimestamp| type| source ---|---|--- 2023-03-19 23:33:38+00:00| seen| https://t.me/cibsecurity/60295 2025-02-26 19:24:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5574...

CVE-2023-28115

creationtimestamp| type| source ---|---|--- 2023-03-17 14:49:52+00:00| published-proof-of-concept| https://github.com/KnpLabs/snappy/security/advisories/GHSA-gq6w-q6wh-jggc 2023-03-18 01:31:50+00:00| seen| https://t.me/cibsecurity/60277 2023-03-23 11:05:11+00:00| published-proof-of-concept|...

CVE-2023-27040

creationtimestamp| type| source ---|---|--- 2023-03-16 19:30:53+00:00| seen| https://t.me/cibsecurity/60171 2025-02-26 20:24:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5598...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

CVE-2023-23150

creationtimestamp| type| source ---|---|--- 2023-03-16 06:30:22+00:00| seen| https://t.me/cibsecurity/60102...

MAL-2023-785 Malicious code in sp-yammer-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e8aa9f2fdde63c7f1d8b9e4885d5fb8dcc69ae8544c66b319067aba02d0c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-yammer-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e8aa9f2fdde63c7f1d8b9e4885d5fb8dcc69ae8544c66b319067aba02d0c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-27507

creationtimestamp| type| source ---|---|--- 2023-03-15 23:30:08+00:00| seen| https://t.me/cibsecurity/60090 2025-03-02 11:44:19+00:00| seen| Telegram/fyzFqjuXCkdPmO83bEGfiGYI8venyJkbQsk1XacvxPClMfq...

CVE-2022-46773

IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951...

MAL-2023-907 Malicious code in ts-infra-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd47b4be284dd70bab7f8e9fe313c2b801c8ee87b2d44363e711d723212d06e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-infra-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd47b4be284dd70bab7f8e9fe313c2b801c8ee87b2d44363e711d723212d06e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-643 Malicious code in npo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7254cfce2ac433959ef4d93d3b6849ceeefc1c407e39b4d5368c174d7fd72dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7254cfce2ac433959ef4d93d3b6849ceeefc1c407e39b4d5368c174d7fd72dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-21019 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.4.5 Description: An arbitrary file upload vulnerability in the CommonController.php component allows attackers to execute arbitrary code via a crafted phtml file. This issue is related to the admincCommonController.php...

CVE-2023-28343

creationtimestamp| type| source ---|---|--- 2023-03-14 23:23:21+00:00| seen| https://t.me/cibsecurity/60030 2023-03-21 11:46:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4000 2023-03-23 15:28:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4017 2023-03-25...

CVE-2023-23419

Windows Resilient File System ReFS Elevation of Privilege Vulnerability...

CVE-2023-25618

creationtimestamp| type| source ---|---|--- 2023-03-14 12:54:12+00:00| seen| https://t.me/cibsecurity/59953 2025-02-27 15:29:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5686...

CVE-2022-23790

creationtimestamp| type| source ---|---|--- 2023-03-14 12:53:52+00:00| seen| https://t.me/cibsecurity/59938...

Malicious Package

Overview sp-yammer-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...