CVE-2023-30854

creationtimestamp| type| source ---|---|--- 2023-04-28 20:27:33+00:00| seen| https://t.me/cibsecurity/63082 2023-05-12 18:27:23+00:00| seen| https://t.me/cibsecurity/64034 2023-05-25 09:36:02+00:00| published-proof-of-concept| https://t.me/CNArsenal/593 2025-01-23 21:03:27+00:00|...

SUSE CVE-2023-1387

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter authtoken and use it as the authentication token. By enabling the "urllogin" configuration option disabled by default, a...

Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers

Google on Wednesday said it obtained a temporary court order in the U.S. to disrupt the distribution of a Windows-based information-stealing malware called CryptBot and "decelerate" its growth. The tech giant's Mike Trinh and Pierre-Marc Bureau said the efforts are part of steps it takes to "not...

CVE-2023-26244

creationtimestamp| type| source ---|---|--- 2023-04-27 07:39:52+00:00| seen| https://t.me/cibsecurity/62958 2023-11-24 07:11:36+00:00| seen| https://t.me/arpsyndicate/519 2023-12-10 14:04:57+00:00| seen| https://t.me/arpsyndicate/1631...

CVE-2023-1387

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter authtoken and use it as the authentication token. By enabling the "urllogin" configuration option disabled by default, a...

CVE-2023-1387

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter authtoken and use it as the authentication token. By enabling the "urllogin" configuration option disabled by default, a...

UBUNTU-CVE-2023-1387

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter authtoken and use it as the authentication token. By enabling the "urllogin" configuration option disabled by default, a...

Authentication flaw

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter authtoken and use it as the authentication token. By enabling the "urllogin" configuration option disabled by default, a...

CVE-2023-1387

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter authtoken and use it as the authentication token. By enabling the "urllogin" configuration option disabled by default, a...

CVE-2023-20869

creationtimestamp| type| source ---|---|--- 2023-04-26 02:25:17+00:00| seen| https://t.me/cibsecurity/62876 2023-04-26 09:08:22+00:00| seen| https://t.me/thehackernews/3283 2023-04-26 09:59:58+00:00| seen| https://t.me/KomunitiSiber/109 2023-04-26 10:02:59+00:00| seen|...

JWT URL-login flow leaks token to data sources through request parameter in proxy requests

Grafana is an open-source platform for monitoring and observability. Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter authtoken and use it as the authentication token. By enabling the “urllogin” configuration option disabled by default, a...

CVE-2022-45291

creationtimestamp| type| source ---|---|--- 2023-04-25 22:25:22+00:00| seen| https://t.me/cibsecurity/62835 2025-02-06 02:41:39+00:00| seen| Telegram/y86AXzrwp0NoM427ANW-UkNxePAbRWN3ncGP-CPvCESczHov 2025-02-06 02:42:29+00:00| seen| Telegram/HO2yT5Z8bIikClWyV0Y0WwIwKMyccHKtnJckPsEBKeeoLiD...

CVE-2023-29552

creationtimestamp| type| source ---|---|--- 2023-04-25 15:36:49+00:00| exploited| https://t.me/thehackernews/3282 2023-04-25 20:02:10+00:00| seen| Telegram/jNOQaSS6WIfk39XQXCw2qQeJoi2-3-FLwOGvgRF5EFSFfs 2023-04-25 20:24:58+00:00| seen| https://t.me/cibsecurity/62820 2023-04-26 08:38:19+00:00| see...

CVE-2023-30626

creationtimestamp| type| source ---|---|--- 2023-04-25 00:19:33+00:00| seen| https://t.me/cibsecurity/62768 2023-04-25 00:19:37+00:00| seen| https://t.me/cibsecurity/62771...

CVE-2023-1624

creationtimestamp| type| source ---|---|--- 2023-04-24 22:19:32+00:00| seen| https://t.me/cibsecurity/62743 2025-02-06 02:42:29+00:00| seen| Telegram/Sa2g86eHn7FrTNZFgc56tZGggvAUlADWDoG1ExA75wlaN37...

Vulristics News: EPSS v3 Support, Integration into Cloud Advisor

Vulristics News: EPSS v3 Support, Integration into Cloud Advisor. Hello everyone! This episode will focus on the news from my open source Vulristics project for vulnerability analysis and prioritization. Alternative video link for Russia: https://vk.com/video-149273431456239122 EPSS v3 The third...

CVE-2017-6742

creationtimestamp| type| source ---|---|--- 2023-04-23 07:46:30+00:00| exploited| https://t.me/SecLabNews/13650 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 02:55:04+00:00| seen| https://t.me/arpsyndicate/1097 2024-12-24 20:34:15+00:00| seen|...

CVE-2023-27350

creationtimestamp| type| source ---|---|--- 2023-04-20 20:30:49+00:00| seen| https://t.me/cibsecurity/62536 2023-04-21 00:00:00+00:00| seen| MISP/fe2a6b30-c779-4b47-994a-53cdecd26ed8 2023-04-22 08:22:51+00:00| seen| https://t.me/thehackernews/3271 2023-04-22 09:51:45+00:00| exploited|...

PT-2023-3585 · Git +10 · Git +10

Name of the Vulnerable Software and Affected Versions: Git versions prior to 2.30.9 Git versions prior to 2.31.8 Git versions prior to 2.32.7 Git versions prior to 2.33.8 Git versions prior to 2.34.8 Git versions prior to 2.35.8 Git versions prior to 2.36.6 Git versions prior to 2.37.7 Git versio...

Tour of the Underground: Master the Art of Dark Web Intelligence Gathering

The Deep, Dark Web – The Underground – is a haven for cybercriminals, teeming with tools and resources to launch attacks for financial gain, political motives, and other causes. But did you know that the underground also offers a goldmine of threat intelligence and information that can be harness...