ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...

CVE-2023-52251

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. No fixed release is available; the project has had no commit since 2024-04-08...

CVE-2023-52251

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. No fixed release is available; the project has had no commit since 2024-04-08...

kafka-ui OS Command Injection Vulnerability

kafka-ui is an open source Web UI for Apache Kafka. A security vulnerability in kafka-ui versions 0.4.0 through 0.7.1 exists that originates from a vulnerability that could allow a remote attacker to execute arbitrary code via parameter q in /api/clusters/local/topics/messages...

Cisco Packaged Contact Center Enterprise Code Execution

The vulnerabilities of Cisco Packaged Contact Center Enterprise, Unified Communications Manager, Unified Communications Manager IM & Presence Service, Unified Communications Manager Session Management Edition, Unified Contact Center Enterprise, Unified Contact Center Express, Unity Connection, an...

PT-2024-1822 · Provectus · Kafka-Ui

Name of the Vulnerable Software and Affected Versions: provectus kafka-ui versions 0.4.0 through 0.7.1 Description: The issue is related to incorrect code generation management in the web interface for managing Apache Kafka clusters, kafka-ui. Exploitation of this issue may allow a remote attacke...

PT-2024-1619

Name of the Vulnerable Software and Affected Versions D-Link DAP-1650 affected versions not specified Description A command injection issue exists when handling UPnP SUBSCRIBE messages, allowing an unauthenticated attacker to gain command execution on the device as root. The vulnerability is...

CVE-2023-52251: Improper Control of Generation of Code

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. No fixed release is available; the project has had no commit since 2024-04-08...

Any authenticated user may obtain private message details from other users on the same instance

Summary Users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message report contains the private message itself, which means any user can just iterate over message ids to loudly obtain all private messages of an...

CVE-2023-52039

creationtimestamp| type| source ---|---|--- 2024-01-24 19:26:54+00:00| seen| https://t.me/ctinow/173025 2024-01-26 16:08:58+00:00| seen| https://t.me/arpsyndicate/2998 2024-01-30 23:16:44+00:00| seen| https://t.me/ctinow/176338 2024-02-18 09:11:52+00:00| seen| https://t.me/ctinow/187181...

CVE-2024-23649

Lemmy is a link aggregator and forum for the fediverse. Starting in version 0.17.0 and prior to version 0.19.1, users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message report contains the private message...

CVE-2024-23649 Any authenticated user may obtain private message details from other users on the same instance

Lemmy is a link aggregator and forum for the fediverse. Starting in version 0.17.0 and prior to version 0.19.1, users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message report contains the private message...

CVE-2024-22725

creationtimestamp| type| source ---|---|--- 2024-01-24 17:27:05+00:00| seen| https://t.me/ctinow/172942 2024-01-26 21:10:50+00:00| seen| https://t.me/arpsyndicate/3073 2024-02-18 08:41:14+00:00| seen| https://t.me/ctinow/187177...

CVE-2024-22651

creationtimestamp| type| source ---|---|--- 2024-01-24 17:27:04+00:00| seen| https://t.me/ctinow/172941 2024-01-26 23:26:49+00:00| seen| https://t.me/arpsyndicate/3113 2024-01-30 23:16:40+00:00| seen| https://t.me/ctinow/176335 2024-02-18 08:41:12+00:00| seen| https://t.me/ctinow/187175...

CVE-2024-22309

creationtimestamp| type| source ---|---|--- 2024-01-24 13:26:17+00:00| seen| https://t.me/ctinow/172744 2024-01-26 15:28:58+00:00| seen| https://t.me/arpsyndicate/2983 2024-02-17 23:21:41+00:00| seen| https://t.me/ctinow/187070 2025-05-23 16:47:09+00:00| published-proof-of-concept|...

CVE-2024-22301

creationtimestamp| type| source ---|---|--- 2024-01-24 13:26:15+00:00| seen| https://t.me/ctinow/172742 2024-01-28 12:03:02+00:00| seen| https://t.me/arpsyndicate/3283 2024-02-17 22:56:16+00:00| seen| https://t.me/ctinow/187062...

CVE-2023-43997

creationtimestamp| type| source ---|---|--- 2024-01-24 11:26:18+00:00| seen| https://t.me/ctinow/172681 2024-01-26 17:20:23+00:00| seen| https://t.me/arpsyndicate/3011 2024-01-27 04:16:10+00:00| seen| https://t.me/ctinow/174608 2024-02-17 20:51:53+00:00| seen| https://t.me/ctinow/187042 2025-06-2...

CVE-2023-43996

creationtimestamp| type| source ---|---|--- 2024-01-24 11:26:17+00:00| seen| https://t.me/ctinow/172680 2024-01-26 19:41:19+00:00| seen| https://t.me/arpsyndicate/3047 2024-01-27 04:16:11+00:00| seen| https://t.me/ctinow/174609 2024-02-17 20:21:33+00:00| seen| https://t.me/ctinow/187040 2025-06-2...

CVE-2024-23649: Improper Authorization

Lemmy is a link aggregator and forum for the fediverse. Starting in version 0.17.0 and prior to version 0.19.1, users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message report contains the private message...

PT-2024-20000 · Lemmy · Lemmy

Name of the Vulnerable Software and Affected Versions: Lemmy versions 0.17.0 through 0.19.0 Description: The issue allows any authenticated user to obtain arbitrary private message contents by creating a private message report. This is possible because the API response to creating a private messa...