PT-2023-6077 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to a heap buffer overflow in the PDF component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted PDF file...

PT-2023-5970 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in Fullscreen mode, allowing an attacker to bypass navigation restrictions via a crafted Chrome Extension if a user is convince...

CVE-2023-43643

AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a potential for a mutation XSS mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the...

CVE-2023-21266

creationtimestamp| type| source ---|---|--- 2023-10-06 22:13:39+00:00| seen| https://t.me/cibsecurity/71752 2023-12-28 01:19:53+00:00| seen| https://t.me/arpsyndicate/2172 2024-01-19 19:27:03+00:00| seen| https://t.me/arpsyndicate/2953 2025-05-05 15:20:17+00:00| published-proof-of-concept|...

CVE-2023-40284

creationtimestamp| type| source ---|---|--- 2023-10-06 08:11:16+00:00| seen| https://t.me/thehackernews/3973 2023-10-06 09:18:47+00:00| seen| https://t.me/KomunitiSiber/895 2023-10-06 09:19:18+00:00| seen| Telegram/1ijNbUbO8yc9BpkvNnkSlSSRpt94dd66KRvmrGADFgP41g 2026-09-01 17:00:17+00:00| seen|...

CVE-2022-22071

creationtimestamp| type| source ---|---|--- 2023-10-04 10:12:19+00:00| exploited| https://t.me/kasperskyb2b/917 2023-10-04 13:13:09+00:00| seen| https://t.me/truesecator/4924 2023-12-05 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:35:47+00:00| seen|...

CVE-2023-33106

creationtimestamp| type| source ---|---|--- 2023-10-03 19:17:46+00:00| exploited| Telegram/Rxu4zo-zqPtpxwJhXuMIjF4FHa6XqkwC7R1LNZHIISepQ 2023-10-03 19:23:21+00:00| exploited| https://t.me/KomunitiSiber/881 2023-10-04 10:12:19+00:00| exploited| https://t.me/kasperskyb2b/917 2023-10-04...

CVE-2023-39410

creationtimestamp| type| source ---|---|--- 2023-09-29 20:37:50+00:00| seen| https://t.me/cibsecurity/71314 2024-02-09 07:51:29+00:00| seen| https://t.me/ctinow/181834 2024-02-09 08:21:45+00:00| seen| https://t.me/ctinow/181857 2024-02-09 11:21:48+00:00| seen| https://t.me/ctinow/181960...

CVE-2023-40044

creationtimestamp| type| source ---|---|--- 2023-09-29 08:31:16+00:00| seen| https://t.me/thehackernews/3938 2023-09-29 09:43:11+00:00| seen| https://t.me/KomunitiSiber/861 2023-09-29 09:57:03+00:00| seen| Telegram/coCViSpTdBJIO6f5nGTY2jkmcohpMEICdIU3s8ly80oqRQ 2023-09-29 11:44:51+00:00| seen|...

OESA-2023-1700 snappy-java security update

A Java port of the snappy, a fast compresser/decompresser written in C++. Security Fixes: snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service DoS attacks when decompressing data wit...

CVE-2023-20109

creationtimestamp| type| source ---|---|--- 2023-09-27 22:36:02+00:00| seen| https://t.me/cibsecurity/71138 2023-09-28 19:37:44+00:00| exploited| https://t.me/ctinow/139989 2023-09-29 05:10:10+00:00| seen| https://t.me/eaglecyberwashere/2643 2023-09-29 05:10:10+00:00| seen|...

CVE-2023-5197

creationtimestamp| type| source ---|---|--- 2023-09-27 18:45:53+00:00| seen| https://t.me/cibsecurity/71094 2025-02-14 10:09:21+00:00| seen| Telegram/NXVcfDJscgjnH3CFgjwgOP6uWs2dKvWipptCcMdfhETbcCtS...

DEBIAN-CVE-2023-43642

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverab...

Input validation

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverab...

UBUNTU-CVE-2023-43642

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverab...

CVE-2023-43642 Missing upper bound check on chunk length in snappy-java

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverab...

CVE-2023-43642

CVE-2023-43642 (snappy-java) : The SnappyInputStream lacks an upper bound check on chunk length, enabling a DoS with large chunks. All versions up to 1.1.10.3 are vulnerable; a fix was added in commit 9f8c3cf74 and will be included in 1.1.10.4. Affected products/versions are Snappy Java releases ...

CVE-2023-43642

snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverab...

PT-2023-8389

Name of the Vulnerable Software and Affected Versions snappy-java versions 1.1.10.3 and earlier Description The SnappyInputStream in snappy-java is vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size due to a missing upper bound check on chunk length,...

CVE-2023-41993

creationtimestamp| type| source ---|---|--- 2023-09-21 22:30:44+00:00| exploited| https://t.me/cibsecurity/70921 2023-09-22 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1116 2023-09-22 07:35:26+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus16/2023...