21732 matches found
CVE-2023-36808
creationtimestamp| type| source ---|---|--- 2023-07-06 00:27:17+00:00| seen| https://t.me/cibsecurity/66018 2026-06-10 15:00:07+00:00| published-proof-of-concept| Telegram/UP0bHdwN2udFarZFpAo4dW5awpjME5BMssCjsrIyWufG1U...
CVE-2023-2880
creationtimestamp| type| source ---|---|--- 2023-07-05 14:36:43+00:00| seen| https://t.me/cibsecurity/65954...
PT-2023-18294 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a weak configuration in the Modem due to improper input validation when processing LTE security mode command messages received from the network. This can lead to...
Qualcomm Chipsets 缓冲区错误漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption issue when parsing QMI firmware response messages...
Rockwell Automation Select Communication Modules Out-of-Bounds Write (CVE-2023-3595)
A vulnerability exists in the 1756 EN2 and 1756 EN3 products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device...
CVE-2023-37306
MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...
CVE-2023-37306
MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...
Information disclosure
MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...
CVE-2023-37306
MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...
CVE-2023-37306
MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...
Android Spy App LetMeSpy Suffers Major Data Breach, Exposing Users' Personal Data
Android-based phone monitoring app LetMeSpy has disclosed a security breach that allowed an unauthorized third-party to steal sensitive data associated with thousands of Android users. "As a result of the attack, the criminals gained access to email addresses, telephone numbers and the content of...
Information Disclosure
Vaadin is vulnerable to Information Disclosure. The vulnerability exists due to lack of masking sensitive debug messages which allows an attacker to view information such as class and method names included in RPC responses by sending modified requests...
PT-2023-25334 · Stw · Stw Tcg-4 Connectivity Module
Name of the Vulnerable Software and Affected Versions: STW TCG-4 Connectivity Module versions 3.03r0-Impala through 3.04r2-Jellyfish STW TCG-4lite Connectivity Module version 3.04r2-Jellyfish Description: The issue allows an attacker to gain full remote access with root privileges without the nee...
USN-6190-1 accountsservice vulnerability
Kevin Backhouse discovered that AccountsService incorrectly handled certain D-Bus messages. A local attacker could use this issue to cause AccountsService to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-6190-1: AccountsService vulnerability
Kevin Backhouse discovered that AccountsService incorrectly handled certain D-Bus messages. A local attacker could use this issue to cause AccountsService to crash, resulting in a denial of service, or possibly execute arbitrary code...
Stalkerware Vendor Hacked
The stalkerware company LetMeSpy has been hacked: TechCrunch reviewed the leaked data, which included years of victims call logs and text messages dating back to 2013. The database we reviewed contained current records on at least 13,000 compromised devices, though some of the devices shared litt...
protobuf-java: Message-Type Extensions parsing issue leads to DoS
A flaw was found in Message-Type Extensions in protobuf-java core that can lead to a denial of service. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields can cause objects to convert between mutable and immutable forms, resulting in long garbag...
protobuf-java: Textformat parsing issue leads to DoS
A flaw was found in Textformat in protobuf-java core that can lead to a denial of service. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields can cause objects to convert between mutable and immutable forms, resulting in long garbage collection...