24981 matches found
CVE-2023-4466
creationtimestamp| type| source ---|---|--- 2023-12-29 11:16:11+00:00| seen| https://t.me/ctinow/160416 2023-12-29 11:26:33+00:00| seen| https://t.me/ctinow/160435 2023-12-30 01:37:19+00:00| seen| https://t.me/cibsecurity/73933...
OESA-2023-2000 netty security update
Security Fixes: Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no...
OESA-2023-2001 netty security update
Security Fixes: Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no...
OESA-2023-1999 netty security update
Security Fixes: Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no...
CVE-2023-4464
creationtimestamp| type| source ---|---|--- 2023-12-29 10:46:40+00:00| seen| https://t.me/ctinow/160411 2023-12-29 11:26:31+00:00| seen| https://t.me/ctinow/160433 2023-12-30 01:37:09+00:00| seen| https://t.me/cibsecurity/73931...
CVE-2023-46623
creationtimestamp| type| source ---|---|--- 2023-12-29 10:26:39+00:00| seen| https://t.me/ctinow/160403 2023-12-30 01:36:05+00:00| seen| https://t.me/cibsecurity/73918 2024-01-21 08:41:33+00:00| seen| https://t.me/ctinow/170764...
CVE-2023-45751
creationtimestamp| type| source ---|---|--- 2023-12-29 10:26:38+00:00| seen| https://t.me/ctinow/160402 2023-12-30 01:36:00+00:00| seen| https://t.me/cibsecurity/73917 2024-01-21 08:41:32+00:00| seen| https://t.me/ctinow/170763...
CVE-2023-32095
creationtimestamp| type| source ---|---|--- 2023-12-29 10:26:35+00:00| seen| https://t.me/ctinow/160400 2023-12-30 01:35:50+00:00| seen| https://t.me/cibsecurity/73915 2024-01-21 07:07:57+00:00| seen| https://t.me/ctinow/170754...
CVE-2023-6939
creationtimestamp| type| source ---|---|--- 2023-12-29 05:27:06+00:00| seen| https://t.me/ctinow/160341 2023-12-30 01:34:16+00:00| seen| https://t.me/cibsecurity/73896 2024-01-20 18:16:59+00:00| seen| https://t.me/ctinow/170691...
CVE-2023-23431
creationtimestamp| type| source ---|---|--- 2023-12-29 03:26:13+00:00| seen| https://t.me/ctinow/160282 2023-12-30 01:30:53+00:00| seen| https://t.me/cibsecurity/73855 2024-01-20 20:21:48+00:00| seen| https://t.me/ctinow/170715...
Wrangler Authorization Issues Vulnerability
Cloudflare Wrangler is a repository from Cloudflare, Inc. A security vulnerability exists in Wrangler versions prior to 3.19.0, which stems from the fact that sending specially crafted HTTP requests and inspector messages could cause any file on a user's computer to be accessible over the local...
CVE-2023-7136
creationtimestamp| type| source ---|---|--- 2023-12-28 22:26:18+00:00| seen| https://t.me/ctinow/160222 2024-01-03 08:17:00+00:00| seen| https://t.me/ctinow/162252 2024-01-20 09:16:33+00:00| seen| https://t.me/ctinow/170561...
CVE-2023-42183
creationtimestamp| type| source ---|---|--- 2023-12-28 21:16:38+00:00| seen| https://t.me/ctinow/160195 2024-01-11 08:56:59+00:00| seen| https://t.me/ctinow/166369...
msgpackr's conversion of property names to strings can trigger infinite recursion
Impact When decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. Patches The fix is available in v1.10.1 Workarounds Exploits seem to require structured cloning, replacing the 0x70 extension with your own that...
GHSA-7HPJ-7HHX-2FGX msgpackr's conversion of property names to strings can trigger infinite recursion
Impact When decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. Patches The fix is available in v1.10.1 Workarounds Exploits seem to require structured cloning, replacing the 0x70 extension with your own that...
CVE-2023-50843
creationtimestamp| type| source ---|---|--- 2023-12-28 20:26:48+00:00| seen| https://t.me/ctinow/160173 2024-01-20 14:46:17+00:00| seen| https://t.me/ctinow/170636...
CVE-2023-52079
msgpackr is a fast MessagePack NodeJS/JavaScript implementation. Prior to 1.10.1, when decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. The fix is available in v1.10.1. Exploits seem to require structured...
CVE-2023-52079
CVE-2023-52079 concerns msgpackr (NodeJS/JavaScript) before version 1.10.1. When decoding user-supplied MessagePack messages, the decoder can get stuck in a loop, tying up threads. The issue is associated with how certain extensions (e.g., 0x70) may be processed; a mitigation path involves replac...