9655 matches found
CVE-2023-41265
creationtimestamp| type| source ---|---|--- 2023-08-30 02:17:44+00:00| seen| https://t.me/cibsecurity/69400 2023-09-22 16:47:08+00:00| published-proof-of-concept| https://t.me/ctinow/138755 2023-11-30 08:45:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus28/2023 2023-11-30...
MongoDB Driver may publish events containing authentication-related data
Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6311-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6311-1 advisory. William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in...
CVE-2023-3955
creationtimestamp| type| source ---|---|--- 2023-08-24 08:20:12+00:00| seen| https://t.me/ctinow/132601 2023-09-13 16:55:52+00:00| seen| https://t.me/KomunitiSiber/787 2023-09-13 18:29:02+00:00| seen| Telegram/Eqz54UavaIWHVUW9FJ7x8kPgHx309M56ivVEiN1xHvAsg 2023-09-14 15:21:47+00:00| seen|...
CVE-2023-38035
creationtimestamp| type| source ---|---|--- 2023-08-21 20:41:18+00:00| seen| https://t.me/cibsecurity/68902 2023-08-22 05:25:40+00:00| published-proof-of-concept| https://t.me/CyberWatchinsider/38 2023-08-22 07:20:28+00:00| exploited| https://t.me/KomunitiSiber/686 2023-08-22 07:54:38+00:00|...
Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Published Desktop session stuck at grey screen on session launch
Published Desktop session stuck at grey screen on session launch. You may see Citrix CTXUVI error events in Windows system Event logs with ID 1003/1005 on Citrix VDAs CTXUVI Driver Injection failure...
Malicious code in wpi-rules-valid-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f8f8319f361dae60da61058ccd4776881160f6a820fbad5fe51373e6084e45b The OpenSSF Package Analysis project identified 'wpi-rules-valid-events' @ 6.6.6 npm as malicious. It is considered malicious because: - The...
CVE-2023-20209
creationtimestamp| type| source ---|---|--- 2023-08-17 00:36:41+00:00| seen| https://t.me/cibsecurity/68688 2023-09-27 20:08:31+00:00| seen| https://t.me/proxybar/1737 2023-09-28 05:04:24+00:00| seen| Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ 2023-09-28 12:08:15+00:00|...
Server side request forgery (ssrf)
The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network...
PT-2023-20207 · Zte · Zte Mobile Phones
Name of the Vulnerable Software and Affected Versions: ZTE mobile phones affected versions not specified Description: There is a permission and access control issue in some ZTE mobile phones, allowing applications to monitor touch events due to improper access control. Recommendations: At the...
RHSA-2023:4650
creationtimestamp| type| source ---|---|--- 2023-08-15 03:29:25+00:00| seen| https://t.me/CyberWatchinsider/24 2023-08-15 03:29:35+00:00| seen| https://t.me/CyberWatchinsider/25...
CVE-2023-3259
creationtimestamp| type| source ---|---|--- 2023-08-13 00:35:05+00:00| seen| Telegram/VpXAGUF4cO1MuYFhAZ5lmwu7ffPJ7a-da7Q0woxSdA5mg 2023-08-13 00:44:59+00:00| seen| https://t.me/KomunitiSiber/643 2023-08-14 07:18:59+00:00| seen| https://t.me/cibsecurity/68410...
CVE-2023-0871
creationtimestamp| type| source ---|---|--- 2023-08-11 20:16:42+00:00| seen| https://t.me/cibsecurity/68375 2023-08-15 16:12:09+00:00| seen| https://t.me/ctinow/130691...
CVE-2023-40224
MISP 2.4.174 allows XSS in app/View/Events/index.ctp...
CVE-2023-40224
MISP 2.4.174 allows XSS in app/View/Events/index.ctp...
Design/Logic Flaw
MISP 2.4.174 allows XSS in app/View/Events/index.ctp...
CVE-2023-40224
CVE-2023-40224 affects MISP version 2.4.174, with a cross-site scripting vulnerability in app/View/Events/index.ctp. The available connected sources consistently describe an XSS issue due to insufficient input filtering/escaping, enabling arbitrary script execution via crafted payloads in the aff...
PT-2023-27338 · Misp · Misp
Name of the Vulnerable Software and Affected Versions: MISP version 2.4.174 Description: The issue allows for XSS in the app/View/Events/index.ctp file. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents wher...
