GHSA-HWCC-4CV8-CF3H

creationtimestamp| type| source ---|---|--- 2023-12-22 21:02:53+00:00| seen| https://t.me/ctinow/158609 2024-01-18 09:41:40+00:00| seen| https://t.me/ctinow/169635...

CVE-2023-50928

CVE-2023-50928 affects the Sandbox Accounts for Events tool. Affected: Sandbox Accounts for Events prior to version 1.1.0. Root cause: access control misconfiguration allows an authenticated user to claim and access empty AWS accounts by sending payloads to the account API with non-existent event...

CVE-2023-50924

CVE-2023-50924 affects the Englesystem shift planning system. Prior to v3.4.1, it performed insufficient validation of user-supplied data in the DECT number, mobile number, and work-log comment fields. This allowed an authenticated user to inject JavaScript into other users’ sessions, with the in...

CVE-2023-51019

creationtimestamp| type| source ---|---|--- 2023-12-22 20:24:58+00:00| seen| https://t.me/ctinow/158597 2023-12-28 01:16:11+00:00| seen| https://t.me/ctinow/159856...

CVE-2023-51018

creationtimestamp| type| source ---|---|--- 2023-12-22 20:24:57+00:00| seen| https://t.me/ctinow/158596 2023-12-28 01:16:13+00:00| seen| https://t.me/ctinow/159857 2025-04-17 20:58:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12343...

CVE-2023-51015

creationtimestamp| type| source ---|---|--- 2023-12-22 20:24:51+00:00| seen| https://t.me/ctinow/158593 2023-12-28 01:16:19+00:00| seen| https://t.me/ctinow/159862...

CVE-2023-51012

creationtimestamp| type| source ---|---|--- 2023-12-22 20:24:46+00:00| seen| https://t.me/ctinow/158590 2023-12-28 01:16:23+00:00| seen| https://t.me/ctinow/159865 2024-01-18 11:46:32+00:00| seen| https://t.me/ctinow/169670...

CVE-2023-51011

creationtimestamp| type| source ---|---|--- 2023-12-22 20:24:45+00:00| seen| https://t.me/ctinow/158589 2023-12-28 01:16:24+00:00| seen| https://t.me/ctinow/159866 2024-01-18 11:46:30+00:00| seen| https://t.me/ctinow/169669...

CVE-2023-51026

creationtimestamp| type| source ---|---|--- 2023-12-22 19:21:58+00:00| seen| https://t.me/ctinow/158562 2023-12-28 01:16:17+00:00| seen| https://t.me/ctinow/159860 2024-01-18 12:16:28+00:00| seen| https://t.me/ctinow/169679...

CVE-2023-51023

creationtimestamp| type| source ---|---|--- 2023-12-22 19:21:55+00:00| seen| https://t.me/ctinow/158559 2023-12-28 01:16:29+00:00| seen| https://t.me/ctinow/159870...

CVE-2023-7075

creationtimestamp| type| source ---|---|--- 2023-12-22 13:31:52+00:00| seen| https://t.me/ctinow/158375 2023-12-29 13:16:41+00:00| seen| https://t.me/ctinow/160490 2024-01-18 09:11:17+00:00| seen| https://t.me/ctinow/169615...

CVE-2023-7059

creationtimestamp| type| source ---|---|--- 2023-12-22 06:32:18+00:00| seen| https://t.me/ctinow/158201 2023-12-28 17:17:00+00:00| seen| https://t.me/ctinow/160114 2024-01-14 15:12:07+00:00| seen| https://t.me/ctinow/168048...

CVE-2023-49686

creationtimestamp| type| source ---|---|--- 2023-12-22 01:21:58+00:00| seen| https://t.me/ctinow/158123 2023-12-27 23:17:23+00:00| seen| https://t.me/ctinow/159825...

CVE-2023-49086

creationtimestamp| type| source ---|---|--- 2023-12-22 01:21:55+00:00| seen| https://t.me/ctinow/158120 2023-12-29 23:16:40+00:00| seen| https://t.me/ctinow/160708...

CVE-2023-49683

creationtimestamp| type| source ---|---|--- 2023-12-22 00:22:26+00:00| seen| https://t.me/ctinow/158077 2023-12-27 23:17:27+00:00| seen| https://t.me/ctinow/159828...

CVE-2023-49679

creationtimestamp| type| source ---|---|--- 2023-12-22 00:22:21+00:00| seen| https://t.me/ctinow/158073 2023-12-27 23:17:18+00:00| seen| https://t.me/ctinow/159821...

Amazon Sandbox Accounts for Events Access Control Error Vulnerability

Amazon Sandbox Accounts for Events is an application from Amazon.com, Inc. It allows multiple temporary AWS accounts to be provisioned to multiple authenticated users at the same time through a browser-based GUI. An access control error vulnerability exists in Amazon Sandbox Accounts for Events...

The vulnerability of the `perf_event_validate_size()` function in the kernel/events/core.c module of the perf subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby enhancing their privileges within the system.

The vulnerability of the perfeventvalidatesize function in the kernel/events/core.c module of the Linux operating system’s perf subsystem is related to writing beyond the boundaries of a allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2023-31801 · Unknown · Sandbox Accounts For Events

Name of the Vulnerable Software and Affected Versions: Sandbox Accounts for Events versions prior to 1.10.0 Description: The issue allows authenticated users to potentially read data from the events table by sending request payloads to the "events API", collecting information on planned events,...

Amazon Sandbox Accounts for Events Security Breach

Amazon Sandbox Accounts for Events is an application from Amazon.com, Inc. It allows multiple temporary AWS accounts to be made available to multiple authenticated users at the same time through a browser-based GUI. A security vulnerability exists in Amazon Sandbox Accounts for Events prior to...