CVE-2023-39737

The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

PT-2023-8905

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.11.24 RabbitMQ versions prior to 3.12.7 Description The issue is related to the HTTP API of RabbitMQ, a multi-protocol messaging and streaming broker, which did not enforce an HTTP request body limit. This made it...

CVE-2023-46287

creationtimestamp| type| source ---|---|--- 2023-10-20 18:35:14+00:00| seen| https://t.me/cibsecurity/72692 2023-10-20 18:41:16+00:00| seen| https://t.me/cibsecurity/72693...

Design/Logic Flaw

The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

Attacks on 5G Infrastructure From User Devices: ASN.1 Vulnerabilities in 5G Cores

In the second part of this series, we will examine how attackers can trigger vulnerabilities by sending control messages masquerading as user traffic to cross over from user plane to control plane...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : PackageKit vulnerabilities (USN-4538-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4538-1 advisory. Vaisha Bernard discovered that PackageKit incorrectly handled certain methods. A local attacker could use this issue to learn the...

CVE-2023-5654

The React Developer Tools extension registers a message listener with window.addEventListener'message', in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived from the received message via fetch. The URL is not...

CVE-2022-24401

Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of...

CVE-2022-24401 Keystream recovery for arbitrary frames in TETRA

Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of...

CVE-2023-45145

creationtimestamp| type| source ---|---|--- 2023-10-19 00:33:58+00:00| seen| https://t.me/cibsecurity/72542 2024-02-08 03:02:10+00:00| seen| https://t.me/ctinow/181114 2024-02-08 03:41:27+00:00| seen| https://t.me/ctinow/181139...

CVE-2023-39731

The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

PT-2023-27088 · Unknown · Kaibutsunosato

Name of the Vulnerable Software and Affected Versions: Kaibutsunosato version 13.6.1 Description: The leakage of the client secret allows attackers to obtain the channel access token and send crafted broadcast messages. Recommendations: For Kaibutsunosato version 13.6.1, update to a version that...

CVE-2023-39731

The CVE-2023-39731 entry concerns Kaibutsunosato v13.6.1, where leakage of the client secret enables attackers to obtain the channel access token and issue crafted broadcast messages. Public sources in the connected documents consistently describe an information-disclosure flaw in the client that...

Denial Of Service (DoS)

vrite is vulnerable to Denial of Service DoS. This vulnerability exists due to the absence of rate limits, which allows an attacker to send spam messages to the victim's email inbox...

CVE-2022-43891

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 240454...

CVE-2022-22384

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due to hazardous input validation. IBM X-Force ID: 221961...

CVE-2023-43120

creationtimestamp| type| source ---|---|--- 2023-10-16 22:32:04+00:00| seen| https://t.me/cibsecurity/72329 2023-10-28 14:57:37+00:00| seen| Telegram/VzfsxeavYLvW2XALTkauXYsJUhJ3faIECE9uhMx98Ya-vA 2024-03-29 18:27:12+00:00| seen| https://t.me/Teamx1945x/1024...

CVE-2023-45131 Unauthenticated access to new private chat messages in Discourse

Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus. This issue is patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. Users are advised to upgrade. There are no known workarounds for...

Grafana Security Vulnerabilities

Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus. A security vulnerability exists in Grafana versions 0.9.0 through 1.2.2 that stems from not properly...

Discourse Information Disclosure Vulnerability

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse suffers from an information disclosure vulnerability that originates from allowing an attacker to read new chat messages by sending a POST request to MessageBus...