CVE-2023-38386

creationtimestamp| type| source ---|---|--- 2023-07-31 09:13:42+00:00| seen| https://t.me/thehackernews/3671 2023-07-31 10:36:25+00:00| seen| Telegram/TVzNbCj39jddHJ0wyoRxjoN5ENQMo13tFhhm0Se71sQw 2023-07-31 10:49:30+00:00| seen| https://t.me/KomunitiSiber/572 2026-09-01 17:00:08+00:00| seen|...

CVE-2023-38393

creationtimestamp| type| source ---|---|--- 2023-07-31 09:13:42+00:00| seen| https://t.me/thehackernews/3671 2023-07-31 10:36:25+00:00| seen| Telegram/TVzNbCj39jddHJ0wyoRxjoN5ENQMo13tFhhm0Se71sQw 2023-07-31 10:49:30+00:00| seen| https://t.me/KomunitiSiber/572 2026-09-01 17:00:07+00:00| seen|...

GHSA-68P4-95XF-7GX8 Denial of service from large image

Impact An high-privileged user could create a Package referencing an arbitrarily large image containing that Crossplane would then parse, possibly resulting in exhausting all the available memory and therefore in the container being OOMKilled. The impact is low due to the high privileges required...

Denial of service from large image

Impact An high-privileged user could create a Package referencing an arbitrarily large image containing that Crossplane would then parse, possibly resulting in exhausting all the available memory and therefore in the container being OOMKilled. The impact is low due to the high privileges required...

PT-2023-26735 · Boofcv · Boofcv

Name of the Vulnerable Software and Affected Versions: BoofCV version 0.42 Description: The issue is related to a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability can be exploited by loading a crafted camera calibration file...

Code injection

Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, Crossplane's image backend does not validate the byte contents of Crossplane packages. As such, Crossplane does not detect if an attacker has tampered...

CVE-2023-37979

creationtimestamp| type| source ---|---|--- 2023-07-27 18:28:50+00:00| seen| https://t.me/cibsecurity/67325 2023-07-31 09:13:42+00:00| seen| https://t.me/thehackernews/3671 2023-07-31 10:36:25+00:00| seen| Telegram/TVzNbCj39jddHJ0wyoRxjoN5ENQMo13tFhhm0Se71sQw 2023-07-31 10:49:30+00:00| seen|...

CVE-2023-38495 Crossplane vulnerable to possible image tampering from missing image validation for Packages

Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, Crossplane's image backend does not validate the byte contents of Crossplane packages. As such, Crossplane does not detect if an attacker has tampered...

CVE-2023-38495 Crossplane vulnerable to possible image tampering from missing image validation for Packages

Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, Crossplane's image backend does not validate the byte contents of Crossplane packages. As such, Crossplane does not detect if an attacker has tampered...

CVE-2022-43711

Interactive Forms IAF in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks XSS because the CSP header uses eval in the script-src...

CVE-2023-33802

creationtimestamp| type| source ---|---|--- 2023-07-26 13:23:32+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8738 2023-07-29 15:57:21+00:00| published-proof-of-concept| https://t.me/crackcodes/3961 2023-07-29 15:57:54+00:00| published-proof-of-concept|...

CVE-2022-24404

creationtimestamp| type| source ---|---|--- 2023-07-25 19:29:22+00:00| seen| https://t.me/truesecator/4656 2023-10-19 14:34:19+00:00| seen| https://t.me/cibsecurity/72552 2024-04-26 21:54:48+00:00| seen| https://t.me/darkcommunityofficial/482 2026-09-02 23:00:05+00:00| seen|...

CVE-2023-32001

creationtimestamp| type| source ---|---|--- 2023-07-25 07:52:06+00:00| seen| https://t.me/ctinow/125999 2023-07-27 15:48:20+00:00| seen| https://t.me/ctinow/126649 2024-08-20 01:48:11+00:00| seen| https://t.me/criticalbug/1437...

CVE-2023-3446

A vulnerability was found in OpenSSL. This security flaw occurs because the applications that use the DHcheck, DHcheckex, or EVPPKEYparamcheck functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an...

CVE-2023-38606

creationtimestamp| type| source ---|---|--- 2023-07-25 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1074 2023-07-25 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1075 2023-07-25 05:40:26+00:00| exploited| https://t.me/thehackernews/3639...

CVE-2023-33952

creationtimestamp| type| source ---|---|--- 2023-07-24 20:26:17+00:00| seen| https://t.me/cibsecurity/67161...

CVE-2023-26078

creationtimestamp| type| source ---|---|--- 2023-07-24 15:03:22+00:00| seen| https://t.me/thehackernews/3638 2023-07-24 15:39:33+00:00| seen| https://t.me/KomunitiSiber/535 2023-07-24 17:18:00+00:00| seen| Telegram/nzqazI8-kualjvJFrdWZIIOGbqrwgHhSvvDpGa8OJfCDaw 2023-07-24 20:26:21+00:00| seen|...

Denial Of Service (DoS)

gpac is vulnerable to Denial of Service DoS attacks. If keys or parameters are received from an unreliable source, applications employing DHcheck, DHcheckex, or EVPPKEYparamcheck may face lengthy delays, resulting in denial of service conditions...

UBUNTU-CVE-2023-3446

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...

GHSA-M88M-CRR9-JVQQ OpenRefine vulnerable to zip slip in project import

Impact A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution if a user can be convinced to import it. Patches The vulnerability exists in all versions of OpenRefine up to and including 3.7.3. Users should update to OpenRefine 3.7.4 as soon as...