CVE-2023-37557

creationtimestamp| type| source ---|---|--- 2023-08-03 16:40:01+00:00| seen| https://t.me/cibsecurity/67664 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-04 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-...

CVE-2023-37548

creationtimestamp| type| source ---|---|--- 2023-08-03 16:39:59+00:00| seen| https://t.me/cibsecurity/67662 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-04 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-...

CVE-2023-37550

creationtimestamp| type| source ---|---|--- 2023-08-03 16:39:59+00:00| seen| https://t.me/cibsecurity/67662 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-04 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-...

CVE-2023-37549

creationtimestamp| type| source ---|---|--- 2023-08-03 16:39:59+00:00| seen| https://t.me/cibsecurity/67662 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-04 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-...

8x8 Bounty: Jitsi: Bridge Message Spoofing due to Improper JSON Handling leads to Prototype Pollution

The Jitsi VideoBridge failed to properly handle JSON messages with duplicate colibriClass keys, enabling clients to send messages interpreted differently by the bridge and resulting in unauthorized actions within video conferences. Jitsi Security Advisory has been published...

CVE-2023-4069

creationtimestamp| type| source ---|---|--- 2023-08-03 15:05:05+00:00| seen| https://t.me/truesecator/4689 2023-10-26 06:10:31+00:00| published-proof-of-concept| https://t.me/WARLOCKDARKARMYOFFICIALS/3477 2023-10-26 10:59:01+00:00| published-proof-of-concept|...

CVE-2023-38418

creationtimestamp| type| source ---|---|--- 2023-08-02 21:10:31+00:00| seen| https://t.me/cibsecurity/67606 2023-10-10 16:16:48+00:00| seen| https://t.me/cibsecurity/71925...

CVE-2023-20583

creationtimestamp| type| source ---|---|--- 2023-08-02 13:25:09+00:00| published-proof-of-concept| https://t.me/truesecator/4682 2023-08-09 20:04:12+00:00| seen| Telegram/Z-TCSZwyPrx2SRzSQYAF7fm2y9wwmz9UezFFDtTwe8sYNg 2023-08-09 20:11:13+00:00| seen| https://t.me/KomunitiSiber/626 2026-07-26...

SUSE CVE-2023-3817

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability

Open-Xchange AppSuite is a set of Web cloud desktop environments from Open-Xchange Germany. The environment allows users to more intuitively manage email, tasks, files, and more. A security vulnerability exists in Open-Xchange AppSuite that stems from the OX Chat web service not specifying a medi...

PT-2023-20644 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue is related to the integrated oAuth Authorization Service, where functions with insufficient randomness were used to generate authorization tokens. This made authorization codes...

CVE-2023-34634

creationtimestamp| type| source ---|---|--- 2023-08-01 22:58:33+00:00| seen| https://t.me/cibsecurity/67517 2023-08-17 14:46:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/greenshotdeserializecve202334634.rb 2023-08-18 09:13:05+00:00...

DOS for Handling of crafted recursive ASN.1 structures

Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources, s...

PT-2023-24959 · .Net · Greenshot

Name of the Vulnerable Software and Affected Versions: Greenshot versions 1.2.10 and below Description: The issue allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened. Recommendations: For Greenshot versions 1.2.10 and below, as a...

CVE-2023-3817

creationtimestamp| type| source ---|---|--- 2023-07-31 20:37:50+00:00| seen| https://t.me/cibsecurity/67480 2023-11-17 06:28:22+00:00| seen| https://t.me/arpsyndicate/222 2023-11-29 16:29:15+00:00| seen| https://t.me/arpsyndicate/769 2023-12-02 02:24:58+00:00| seen| https://t.me/arpsyndicate/881...

DEBIAN-CVE-2023-3817

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...

AZL-27815 CVE-2023-3817 affecting package openssl for versions less than 1.1.1k-26

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...

AZL-31139 CVE-2023-3817 affecting package edk2 for versions less than 20230301gitf80f052277c8-37

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...

CVE-2023-3817 Excessive time spent checking DH q parameter value

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...

CVE-2023-30625

creationtimestamp| type| source ---|---|--- 2023-07-31 13:41:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rudderserversqlirce.rb 2023-10-04 00:55:17+00:00| published-proof-of-concept| https://t.me/codeb0ss/1207 2023-10-11 03:23:45+00:00|...