13033 matches found
CVE-2023-2453
creationtimestamp| type| source ---|---|--- 2023-09-05 18:17:04+00:00| seen| https://t.me/cibsecurity/69854 2023-09-05 21:06:26+00:00| seen| https://t.me/ctinow/134883...
PT-2023-4940 Ā· CactiĀ +1 Ā· CactiĀ +1
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.25 Description: The issue exists due to inadequate protection of the web page structure in the data debug.php script of the Cacti network monitoring tool. This allows a remote attacker to conduct cross-site scripti...
PT-2023-5426 Ā· CactiĀ +1 Ā· CactiĀ +1
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.25 Description: The issue is related to a Stored Cross-Site-Scripting XSS vulnerability in Cacti, an open source operational monitoring and fault management framework. This vulnerability allows an authenticated use...
PT-2023-4934 Ā· CactiĀ +1 Ā· CactiĀ +1
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.25 Description: The issue exists due to inadequate protection of the web page structure in the Cacti network monitoring tool. This allows a remote attacker to conduct cross-site scripting attacks. An authenticated...
PT-2023-4992 Ā· CactiĀ +1 Ā· CactiĀ +1
Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.25 Description: Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability that allows an authenticated user to...
GHSA-JQCX-CCGC-XWHV
creationtimestamp| type| source ---|---|--- 2023-09-02 23:00:03+00:00| published-proof-of-concept| https://t.me/MrVGunz/891 2024-03-03 21:29:38+00:00| published-proof-of-concept| Telegram/xqaS9oQHj19EK8HlDk1UF-Sk0jvrfWjgjfI0LppzJ-gDvVs 2024-04-05 21:43:54+00:00| published-proof-of-concept|...
CVE-2023-4714
creationtimestamp| type| source ---|---|--- 2023-09-02 00:14:06+00:00| seen| https://t.me/cibsecurity/69692 2023-09-24 02:26:29+00:00| published-proof-of-concept| https://t.me/codeb0ss/1187 2023-09-28 05:04:24+00:00| seen| Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ 2023-09-28...
CVE-2023-31168
creationtimestamp| type| source ---|---|--- 2023-08-31 20:13:33+00:00| seen| https://t.me/cibsecurity/69574 2023-09-06 13:09:23+00:00| seen| https://t.me/KomunitiSiber/749 2023-09-06 14:28:04+00:00| seen| Telegram/H3UUabEv1xs7Kg01Ip9h9p1g1MjfOWbKEpWB7-OtFk2Ew...
CVE-2023-34392
creationtimestamp| type| source ---|---|--- 2023-08-31 20:13:29+00:00| seen| https://t.me/cibsecurity/69573 2023-09-06 13:09:23+00:00| seen| https://t.me/KomunitiSiber/749 2023-09-06 14:28:04+00:00| seen| Telegram/H3UUabEv1xs7Kg01Ip9h9p1g1MjfOWbKEpWB7-OtFk2Ew...
CLSA-2023-1693419971 Fix CVE(s): CVE-2023-3817
SECURITY UPDATE: Checking excessively long DH keys or parameters may be very slow. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. - debian/patches/CVE-2023-3817.patch: Add a prior check and process only a correc...
CVE-2023-4522
creationtimestamp| type| source ---|---|--- 2023-08-30 12:17:05+00:00| seen| https://t.me/cibsecurity/69409 2023-12-28 17:17:02+00:00| seen| https://t.me/ctinow/160115...
CVE-2023-41265
creationtimestamp| type| source ---|---|--- 2023-08-30 02:17:44+00:00| seen| https://t.me/cibsecurity/69400 2023-09-22 16:47:08+00:00| published-proof-of-concept| https://t.me/ctinow/138755 2023-11-30 08:45:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus28/2023 2023-11-30...
CVE-2023-40195
creationtimestamp| type| source ---|---|--- 2023-08-28 12:26:58+00:00| seen| https://t.me/cibsecurity/69273 2023-09-08 16:07:57+00:00| seen| https://t.me/ctinow/135724...
CVE-2023-35150
creationtimestamp| type| source ---|---|--- 2023-08-28 05:23:38+00:00| published-proof-of-concept| https://t.me/CNArsenal/950 2023-08-28 11:01:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8928...
Spring-Kafka has Java Deserialization vulnerability When Improperly Configured
In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers...
GHSA-CRQF-Q9FP-HWJW Spring-Kafka has Java Deserialization vulnerability When Improperly Configured
In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers...
Deserialization of untrusted data
In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers...
CVE-2023-34040 Java Deserialization vulnerability in Spring-Kafka When Improperly Configured
In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers...
CVE-2023-3955
creationtimestamp| type| source ---|---|--- 2023-08-24 08:20:12+00:00| seen| https://t.me/ctinow/132601 2023-09-13 16:55:52+00:00| seen| https://t.me/KomunitiSiber/787 2023-09-13 18:29:02+00:00| seen| Telegram/Eqz54UavaIWHVUW9FJ7x8kPgHx309M56ivVEiN1xHvAsg 2023-09-14 15:21:47+00:00| seen|...
CVE-2023-38831
creationtimestamp| type| source ---|---|--- 2023-08-23 14:16:53+00:00| exploited| https://t.me/BleepingComputer/17884 2023-08-23 14:27:10+00:00| exploited| https://t.me/BleepingComputer/17885 2023-08-23 14:30:43+00:00| exploited| https://t.me/alexmakus/5107 2023-08-23 18:42:17+00:00| exploited|...