13031 matches found
CVE-2023-6766
creationtimestamp| type| source ---|---|--- 2023-12-18 23:17:40+00:00| seen| https://t.me/ctinow/156175 2024-01-10 08:36:31+00:00| seen| https://t.me/ctinow/165625...
CVE-2023-47326
creationtimestamp| type| source ---|---|--- 2023-12-18 23:17:38+00:00| seen| https://t.me/ctinow/156173 2024-01-10 10:41:22+00:00| seen| https://t.me/ctinow/165696...
CVE-2023-6894
creationtimestamp| type| source ---|---|--- 2023-12-18 15:47:48+00:00| seen| https://t.me/ctinow/155944 2023-12-21 23:16:44+00:00| seen| https://t.me/ctinow/158034...
PT-2023-8541 · Publiccms · Publiccms
Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0 Description: The issue exists due to a lack of protection for the web page structure in the Online Preview component of PublicCMS. This allows a remote attacker to conduct cross-site scripting XSS attacks. The...
CVE-2023-31546
creationtimestamp| type| source ---|---|--- 2023-12-13 15:20:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9579 2023-12-18 23:17:47+00:00| seen| https://t.me/ctinow/156180 2024-01-10 16:41:54+00:00| seen| https://t.me/ctinow/165936 2024-08-16 08:56:12+00:00|...
CVE-2023-45725
Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions are: list show rewrite update An attacker can leak the session component using an HTML-like output,...
UBUNTU-CVE-2023-45725
Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions are: list show rewrite update An attacker can leak the session component using an HTML-like output,...
Design/Logic Flaw
Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions are: list show rewrite update An attacker can leak the session component using an HTML-like output,...
CVE-2023-45725 Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents
Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions are: list show rewrite update An attacker can leak the session component using an HTML-like output,...
CVE-2023-3517
Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources...
CVE-2023-3517 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not restrict JNDI identifiers during the creation of XActions, allowing control of system level data sources...
PT-2023-8591 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.1.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigatio...
Hitachi Vantara Pentaho Data Integration & Analytics Security Breach
Hitachi Vantara Pentaho Data Integration & Analytics is a data integration and analytics system from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Vantara Pentaho Data Integration & Analytics versions prior to 9.5.0.1, prior to 9.3.0.5, and 8.3.x, which stems from an...
PT-2023-8629 · Adobe · Dimension
Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.10 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Dimension, which could lead to the disclosure of sensitive memory. This can be exploited by an attacker to bypass...
PT-2023-8577 · Adobe · After Effects
Name of the Vulnerable Software and Affected Versions: Adobe After Effects versions 24.0.3 and earlier Adobe After Effects versions 23.6.0 and earlier Description: The issue is related to a Use After Free vulnerability in Adobe After Effects, which can be exploited to execute arbitrary code with...
CVE-2023-6448
creationtimestamp| type| source ---|---|--- 2023-12-11 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-15 08:48:48+00:00| seen| MISP/c578cb44-e440-486d-80a4-8cf6256c1d53 2023-12-24 07:30:47+00:00| seen| https://t.me/arpsyndicate/2159 2024-01-15 09:02:20+00:00| seen|...
CVE-2023-45842
creationtimestamp| type| source ---|---|--- 2023-12-11 17:49:23+00:00| seen| https://t.me/CyberSecurityTechnologies/9569 2024-08-16 08:56:11+00:00| seen| https://t.me/Rootsec2/2248...
Improper Handling of Insufficient Privileges (Leaky Vessels)
Overview Affected versions of this package are vulnerable to Improper Handling of Insufficient Privileges Leaky Vessels via APIs for running interactive containers based on built images. It is possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, runnin...
PT-2023-8347 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.2 Description: The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to arbitrary code execution when processing an image. This is due to improper memory...