The vulnerabilities of Cisco Packaged Contact Center Enterprise, Unified Communications Manager, Unified Communications Manager IM & Presence Service, Unified Communications Manager Session Management Edition, Unified Contact Center Enterprise, Unified Contact Center Express, Unity Connection, and Virtualized Voice Browser involve defects in the deserialization mechanism, allowing attackers to execute arbitrary code.

The vulnerabilities of Cisco Packaged Contact Center Enterprise, Unified Communications Manager, Unified Communications Manager IM & Presence Service, Unified Communications Manager Session Management Edition, Unified Contact Center Enterprise, Unified Contact Center Express, Unity Connection, an...

PT-2024-1619 · D Link · D-Link Dap-1650

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1650 affected versions not specified Description: A command injection issue exists when handling UPnP SUBSCRIBE messages, allowing an unauthenticated attacker to gain command execution on the device as root. The vulnerability is...

PT-2024-1822 · Provectus · Kafka-Ui

Name of the Vulnerable Software and Affected Versions: provectus kafka-ui versions 0.4.0 through 0.7.1 Description: The issue is related to incorrect code generation management in the web interface for managing Apache Kafka clusters, kafka-ui. Exploitation of this issue may allow a remote attacke...

Any authenticated user may obtain private message details from other users on the same instance

Summary Users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message report contains the private message itself, which means any user can just iterate over message ids to loudly obtain all private messages of an...

CVE-2023-52039

creationtimestamp| type| source ---|---|--- 2024-01-24 19:26:54+00:00| seen| https://t.me/ctinow/173025 2024-01-26 16:08:58+00:00| seen| https://t.me/arpsyndicate/2998 2024-01-30 23:16:44+00:00| seen| https://t.me/ctinow/176338 2024-02-18 09:11:52+00:00| seen| https://t.me/ctinow/187181...

CVE-2024-23649

Lemmy is a link aggregator and forum for the fediverse. Starting in version 0.17.0 and prior to version 0.19.1, users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message report contains the private message...

CVE-2024-23649 Any authenticated user may obtain private message details from other users on the same instance

Lemmy is a link aggregator and forum for the fediverse. Starting in version 0.17.0 and prior to version 0.19.1, users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message report contains the private message...

CVE-2024-22725

creationtimestamp| type| source ---|---|--- 2024-01-24 17:27:05+00:00| seen| https://t.me/ctinow/172942 2024-01-26 21:10:50+00:00| seen| https://t.me/arpsyndicate/3073 2024-02-18 08:41:14+00:00| seen| https://t.me/ctinow/187177...

CVE-2024-22651

creationtimestamp| type| source ---|---|--- 2024-01-24 17:27:04+00:00| seen| https://t.me/ctinow/172941 2024-01-26 23:26:49+00:00| seen| https://t.me/arpsyndicate/3113 2024-01-30 23:16:40+00:00| seen| https://t.me/ctinow/176335 2024-02-18 08:41:12+00:00| seen| https://t.me/ctinow/187175...

CVE-2024-22309

creationtimestamp| type| source ---|---|--- 2024-01-24 13:26:17+00:00| seen| https://t.me/ctinow/172744 2024-01-26 15:28:58+00:00| seen| https://t.me/arpsyndicate/2983 2024-02-17 23:21:41+00:00| seen| https://t.me/ctinow/187070 2025-05-23 16:47:09+00:00| published-proof-of-concept|...

CVE-2024-22301

creationtimestamp| type| source ---|---|--- 2024-01-24 13:26:15+00:00| seen| https://t.me/ctinow/172742 2024-01-28 12:03:02+00:00| seen| https://t.me/arpsyndicate/3283 2024-02-17 22:56:16+00:00| seen| https://t.me/ctinow/187062...

CVE-2023-43997

creationtimestamp| type| source ---|---|--- 2024-01-24 11:26:18+00:00| seen| https://t.me/ctinow/172681 2024-01-26 17:20:23+00:00| seen| https://t.me/arpsyndicate/3011 2024-01-27 04:16:10+00:00| seen| https://t.me/ctinow/174608 2024-02-17 20:51:53+00:00| seen| https://t.me/ctinow/187042 2025-06-2...

CVE-2023-43996

creationtimestamp| type| source ---|---|--- 2024-01-24 11:26:17+00:00| seen| https://t.me/ctinow/172680 2024-01-26 19:41:19+00:00| seen| https://t.me/arpsyndicate/3047 2024-01-27 04:16:11+00:00| seen| https://t.me/ctinow/174609 2024-02-17 20:21:33+00:00| seen| https://t.me/ctinow/187040 2025-06-2...

PT-2024-20000 · Lemmy · Lemmy

Name of the Vulnerable Software and Affected Versions: Lemmy versions 0.17.0 through 0.19.0 Description: The issue allows any authenticated user to obtain arbitrary private message contents by creating a private message report. This is possible because the API response to creating a private messa...

Lemmy Authorization Issues Vulnerability

Lemmy is Lemmy open source free software for building social news aggregators and web forums. An authorization issue vulnerability exists in Lemmy version 0.17.0 through versions prior to 0.19.1, which stems from the fact that any authenticated user can gain access to arbitrary private message...

CVE-2024-23217

creationtimestamp| type| source ---|---|--- 2024-01-23 02:31:59+00:00| seen| https://t.me/ctinow/171640 2024-02-16 18:16:53+00:00| seen| https://t.me/ctinow/186549 2024-02-16 18:16:55+00:00| seen| https://t.me/ctinow/186551...

CVE-2024-23215

creationtimestamp| type| source ---|---|--- 2024-01-23 02:31:58+00:00| seen| https://t.me/ctinow/171639 2024-02-16 17:46:52+00:00| seen| https://t.me/ctinow/186532 2024-02-16 17:46:53+00:00| seen| https://t.me/ctinow/186533 2024-02-16 17:46:56+00:00| seen| https://t.me/ctinow/186535...

CVE-2024-23203

creationtimestamp| type| source ---|---|--- 2024-01-23 02:31:44+00:00| seen| https://t.me/ctinow/171628 2024-02-16 14:21:54+00:00| seen| https://t.me/ctinow/186398 2024-02-16 14:21:55+00:00| seen| https://t.me/ctinow/186399...

CVE-2023-42937

creationtimestamp| type| source ---|---|--- 2024-01-23 02:31:43+00:00| seen| https://t.me/ctinow/171627 2024-02-16 16:21:42+00:00| seen| https://t.me/ctinow/186491 2024-02-16 16:21:43+00:00| seen| https://t.me/ctinow/186492 2024-02-16 16:52:00+00:00| seen| https://t.me/ctinow/186503...

CVE-2023-40528

creationtimestamp| type| source ---|---|--- 2024-01-23 02:31:36+00:00| seen| https://t.me/ctinow/171621 2024-02-16 15:51:51+00:00| seen| https://t.me/ctinow/186468 2024-02-16 16:21:39+00:00| seen| https://t.me/ctinow/186488 2024-02-16 16:21:40+00:00| seen| https://t.me/ctinow/186489...