CVE-2023-49092

RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is...

Design/Logic Flaw

RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is...

CVE-2023-49092

RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is...

CVE-2023-49092 RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is...

CVE-2023-49092 RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is...

GHSA-V94H-HVHG-MF9H Spring Framework vulnerable to denial of service

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC or Spring WebFlux...

UBUNTU-CVE-2023-34053

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC or Spring WebFlux...

CVE-2023-34053 Spring Framework server Web Observations DoS Vulnerability

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC or Spring WebFlux...

CVE-2023-39796

creationtimestamp| type| source ---|---|--- 2023-11-23 14:03:27+00:00| seen| https://t.me/arpsyndicate/501 2025-01-31 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-31 2025-03-21 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-03-21...

RUSTSEC-2023-0071 Marvin Attack: potential key recovery through timing sidechannels

Impact Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. Patches No patch is yet available, however work is underway to migrate...

CVE-2020-8927

creationtimestamp| type| source ---|---|--- 2023-11-12 17:36:20+00:00| seen| https://t.me/arpsyndicate/121 2023-12-11 02:15:28+00:00| seen| https://t.me/arpsyndicate/1689 2025-05-30 04:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqedwihsig2o...

CVE-2023-47204

creationtimestamp| type| source ---|---|--- 2023-11-02 11:22:23+00:00| seen| https://t.me/cibsecurity/73416...

CVE-2023-5606

creationtimestamp| type| source ---|---|--- 2023-11-02 11:22:21+00:00| seen| https://t.me/cibsecurity/73414...

CVE-2023-45015

creationtimestamp| type| source ---|---|--- 2023-11-02 06:22:26+00:00| seen| https://t.me/cibsecurity/73408...

CVE-2023-21340

creationtimestamp| type| source ---|---|--- 2023-10-30 19:19:47+00:00| seen| https://t.me/cibsecurity/73140...

CVE-2023-46662

creationtimestamp| type| source ---|---|--- 2023-10-27 00:18:08+00:00| seen| https://t.me/cibsecurity/73009...

CVE-2023-5693

creationtimestamp| type| source ---|---|--- 2023-10-23 02:37:05+00:00| seen| https://t.me/cibsecurity/72747...

CVE-2023-5639

creationtimestamp| type| source ---|---|--- 2023-10-19 07:34:18+00:00| seen| https://t.me/cibsecurity/72551...

CVE-2023-43803

creationtimestamp| type| source ---|---|--- 2023-10-19 00:33:55+00:00| seen| https://t.me/cibsecurity/72539...

Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability

Since early October 2023, Microsoft has observed two North Korean nation-state threat actors – Diamond Sleet and Onyx Sleet – exploiting CVE-2023-42793, a remote-code execution vulnerability affecting multiple versions of JetBrains TeamCity server. TeamCity is a continuous integration/continuous...