PT-2023-4537

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 23.00 Description The issue is related to an integer underflow in the 7z file parser component of 7-Zip, allowing a remote attacker to execute arbitrary code on affected installations. This can be achieved by tricking t...

PT-2023-11668 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows remote attackers to run arbitrary code via the opening of a crafted psd file. This is due to a Buffer Overflow vulnerability in the psdThumbnail::Read function in PSDParser.cpp...

PT-2023-25510 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: langchain version 0.0.171 Description: An issue in langchain allows a remote attacker to execute arbitrary code via a JSON file to the load prompt parameter. This is related to subclasses or a template. Recommendations: For langchain version...

CVE-2023-38035

creationtimestamp| type| source ---|---|--- 2023-08-21 20:41:18+00:00| seen| https://t.me/cibsecurity/68902 2023-08-22 05:25:40+00:00| published-proof-of-concept| https://t.me/CyberWatchinsider/38 2023-08-22 07:20:28+00:00| exploited| https://t.me/KomunitiSiber/686 2023-08-22 07:54:38+00:00|...

PT-2023-18871 · Typora · Typora

Name of the Vulnerable Software and Affected Versions: Typora versions prior to 1.6.7 Description: The issue allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora's main window via loading typora://app/typemark/updater/update.html in an tag. This can be exploite...

CVE-2023-40168 Malicious projects can read and upload arbitrary files from disk in TurboWarp Desktop

TurboWarp is a desktop application that compiles scratch projects to JavaScript. TurboWarp Desktop versions prior to version 1.8.0 allowed a malicious project or custom extension to read arbitrary files from disk and upload them to a remote server. The only required user interaction is opening th...

CVE-2023-39975

creationtimestamp| type| source ---|---|--- 2023-08-16 18:52:41+00:00| seen| https://t.me/cibsecurity/68664 2024-02-09 20:22:03+00:00| seen| https://t.me/ctinow/182235 2024-02-09 21:01:48+00:00| seen| https://t.me/ctinow/182240...

CVE-2023-27531

creationtimestamp| type| source ---|---|--- 2023-08-16 15:18:00+00:00| seen| https://t.me/ctinow/130894 2025-01-09 00:56:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113795675424067393 2025-01-09 01:14:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/865 2025-01-09...

Gigabud RAT Android Banking Malware Targets Institutions Across Countries

Account holders of over numerous financial institutions in Thailand, Indonesia, Vietnam, the Philippines, and Peru are being targeted by an Android banking malware called Gigabud RAT. "One of Gigabud RAT's unique features is that it doesn't execute any malicious actions until the user is authoriz...

RHSA-2023:4650

creationtimestamp| type| source ---|---|--- 2023-08-15 03:29:25+00:00| seen| https://t.me/CyberWatchinsider/24 2023-08-15 03:29:35+00:00| seen| https://t.me/CyberWatchinsider/25...

PT-2023-5922 · Sap · Sap Powerdesigner Client

Name of the Vulnerable Software and Affected Versions: SAP PowerDesigner Client version 16.7 Description: The issue is related to the import function of BPMN files in the Business Process Modeling BPM module of the SAP PowerDesigner enterprise architecture modeling tool. It does not sufficiently...

CVE-2023-0871

creationtimestamp| type| source ---|---|--- 2023-08-11 20:16:42+00:00| seen| https://t.me/cibsecurity/68375 2023-08-15 16:12:09+00:00| seen| https://t.me/ctinow/130691...

CVE-2023-35356

creationtimestamp| type| source ---|---|--- 2023-08-11 11:17:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8828 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-10-25 17:30:00+00:00| seen|...

PT-2025-1449 · Ashlar Vellum · Ashlar-Vellum Cobalt

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt versions prior to v12 SP2 Build 1204.200 Description: The affected application lacks proper validation of user-supplied data when parsing CO files, which could lead to a heap-based buffer overflow. An attacker could...

CVE-2022-40982

creationtimestamp| type| source ---|---|--- 2023-08-09 19:29:27+00:00| exploited| https://t.me/xakepru/14494 2023-08-09 20:04:12+00:00| seen| Telegram/Z-TCSZwyPrx2SRzSQYAF7fm2y9wwmz9UezFFDtTwe8sYNg 2023-08-09 20:11:13+00:00| seen| https://t.me/KomunitiSiber/626 2023-08-10 10:42:34+00:00| seen|...

CVE-2023-20569

creationtimestamp| type| source ---|---|--- 2023-08-09 19:00:06+00:00| published-proof-of-concept| https://t.me/truesecator/4710 2023-08-09 20:04:12+00:00| seen| Telegram/Z-TCSZwyPrx2SRzSQYAF7fm2y9wwmz9UezFFDtTwe8sYNg 2023-08-09 20:11:13+00:00| seen| https://t.me/KomunitiSiber/626 2023-10-01...

CVE-2023-4243

The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to execute code by installing...

FULL - Customer < 2.3 - Subscriber+ Arbitrary Plugin Installation

Description The plugin does not have proper authorisation in its install-plugin REST API, allowing any authenticated users, such as subscriber to install plugins from arbitrary sources...

PT-2023-4697 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension version 3.4.9 Description: The issue is a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a...

kernel: net: macvlan: fix memory leaks of macvlan_common_newlink

In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in macvlancommonnewlink, as follows: ip link add link eth0 name .. type macvlan mode source macaddr add kmemleak reports: unreferenced object...