CVE-2023-45751

creationtimestamp| type| source ---|---|--- 2023-12-29 10:26:38+00:00| seen| https://t.me/ctinow/160402 2023-12-30 01:36:00+00:00| seen| https://t.me/cibsecurity/73917 2024-01-21 08:41:32+00:00| seen| https://t.me/ctinow/170763...

CVE-2023-32095

creationtimestamp| type| source ---|---|--- 2023-12-29 10:26:35+00:00| seen| https://t.me/ctinow/160400 2023-12-30 01:35:50+00:00| seen| https://t.me/cibsecurity/73915 2024-01-21 07:07:57+00:00| seen| https://t.me/ctinow/170754...

CVE-2023-6939

creationtimestamp| type| source ---|---|--- 2023-12-29 05:27:06+00:00| seen| https://t.me/ctinow/160341 2023-12-30 01:34:16+00:00| seen| https://t.me/cibsecurity/73896 2024-01-20 18:16:59+00:00| seen| https://t.me/ctinow/170691...

CVE-2023-23431

creationtimestamp| type| source ---|---|--- 2023-12-29 03:26:13+00:00| seen| https://t.me/ctinow/160282 2023-12-30 01:30:53+00:00| seen| https://t.me/cibsecurity/73855 2024-01-20 20:21:48+00:00| seen| https://t.me/ctinow/170715...

Wrangler Authorization Issues Vulnerability

Cloudflare Wrangler is a repository from Cloudflare, Inc. A security vulnerability exists in Wrangler versions prior to 3.19.0, which stems from the fact that sending specially crafted HTTP requests and inspector messages could cause any file on a user's computer to be accessible over the local...

CVE-2023-7136

creationtimestamp| type| source ---|---|--- 2023-12-28 22:26:18+00:00| seen| https://t.me/ctinow/160222 2024-01-03 08:17:00+00:00| seen| https://t.me/ctinow/162252 2024-01-20 09:16:33+00:00| seen| https://t.me/ctinow/170561...

CVE-2023-42183

creationtimestamp| type| source ---|---|--- 2023-12-28 21:16:38+00:00| seen| https://t.me/ctinow/160195 2024-01-11 08:56:59+00:00| seen| https://t.me/ctinow/166369...

GHSA-7HPJ-7HHX-2FGX msgpackr's conversion of property names to strings can trigger infinite recursion

Impact When decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. Patches The fix is available in v1.10.1 Workarounds Exploits seem to require structured cloning, replacing the 0x70 extension with your own that...

msgpackr's conversion of property names to strings can trigger infinite recursion

Impact When decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. Patches The fix is available in v1.10.1 Workarounds Exploits seem to require structured cloning, replacing the 0x70 extension with your own that...

CVE-2023-50843

creationtimestamp| type| source ---|---|--- 2023-12-28 20:26:48+00:00| seen| https://t.me/ctinow/160173 2024-01-20 14:46:17+00:00| seen| https://t.me/ctinow/170636...

CVE-2023-52079

msgpackr is a fast MessagePack NodeJS/JavaScript implementation. Prior to 1.10.1, when decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. The fix is available in v1.10.1. Exploits seem to require structured...

CVE-2023-52079

CVE-2023-52079 concerns msgpackr (NodeJS/JavaScript) before version 1.10.1. When decoding user-supplied MessagePack messages, the decoder can get stuck in a loop, tying up threads. The issue is associated with how certain extensions (e.g., 0x70) may be processed; a mitigation path involves replac...

CVE-2023-50852

creationtimestamp| type| source ---|---|--- 2023-12-28 13:26:51+00:00| seen| https://t.me/ctinow/160045 2024-01-20 11:46:26+00:00| seen| https://t.me/ctinow/170592...

CVE-2023-45702

creationtimestamp| type| source ---|---|--- 2023-12-28 09:26:25+00:00| seen| https://t.me/ctinow/159968 2024-01-20 07:11:59+00:00| seen| https://t.me/ctinow/170544...

CVE-2023-45701

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

HCL Technologies HCL Launch Security Breach

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch versions 7.0 through 7.0.5.18, 7.1 through 7.1.2.14, 7.2...

PT-2023-9033 · Msgpackr +1 · Msgpack +1

Name of the Vulnerable Software and Affected Versions: msgpackr versions prior to 1.10.1 Description: The issue is related to the decoding of user-supplied MessagePack messages, which can cause threads to become stuck in a loop. This can be triggered by crafting specific messages. Exploits seem t...

PT-2023-29654 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further...

CVE-2023-52096

creationtimestamp| type| source ---|---|--- 2023-12-27 00:26:35+00:00| seen| https://t.me/ctinow/159486 2024-01-04 08:16:45+00:00| seen| https://t.me/ctinow/162830...

CVE-2023-48003

An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redirect targeted victims to any URL via the 'meta http-equiv="refresh"' in the WebSocket messages...