CVE-2022-27596

creationtimestamp| type| source ---|---|--- 2023-01-30 07:36:52+00:00| seen| https://t.me/cibsecurity/57141 2023-01-31 05:13:36+00:00| seen| https://t.me/thehackernews/3005 2023-01-31 11:05:10+00:00| seen| https://t.me/truesecator/4004 2023-01-31 18:56:44+00:00| seen| https://t.me/ctinow/90388...

CVE-2023-21839

creationtimestamp| type| source ---|---|--- 2023-01-29 15:43:57+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3716 2023-02-22 06:20:02+00:00| published-proof-of-concept| Telegram/rtIvSzNDcGJDjAmNbpFbRjMYLO0j4LkJOjAcfYVbCa7YVw 2023-02-22 08:16:14+00:00| published-proof-of-concept|...

Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers

The Mozilla Foundation Security Advisory describes this flaw as: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers...

PT-2023-18666 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.6 Description: The issue concerns cross-site scripting via malicious RSS feeds. An administrator can import a malicious RSS feed containing Cross Site Scripting XSS payloads inside RSS links. When victims visit the...

golang: regexp: stack exhaustion via a deeply nested expression

A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large...

CVE-2023-23560

creationtimestamp| type| source ---|---|--- 2023-01-24 00:25:12+00:00| seen| https://t.me/cibsecurity/56873 2023-01-27 09:37:57+00:00| seen| https://t.me/ctinow/89659 2023-01-27 10:09:59+00:00| published-proof-of-concept| https://t.me/truesecator/3994 2023-01-30 16:44:35+00:00|...

golang: regexp/syntax: limit memory used by parsing regexps

A flaw was found in the golang package, where programs that compile regular expressions from untrusted sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is linear in the input size. Still, in some cases, the constant factor can be as high as...

AZL-13025 CVE-2022-41953 affecting package git for versions less than 2.33.8-2

Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GUI has a function to clone repositories. Immediately after the local clone is available, Git GUI will automatically post-process it,...

golang: regexp/syntax: limit memory used by parsing regexps

A flaw was found in the golang package, where programs that compile regular expressions from untrusted sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is linear in the input size. Still, in some cases, the constant factor can be as high as...

CVE-2023-22598

creationtimestamp| type| source ---|---|--- 2023-01-17 17:41:17+00:00| seen| https://t.me/truesecator/3950 2023-05-16 17:37:53+00:00| seen| https://t.me/truesecator/4386...

CVE-2022-47966

creationtimestamp| type| source ---|---|--- 2023-01-13 19:02:18+00:00| seen| https://t.me/ctinow/86860 2023-01-17 11:48:32+00:00| published-proof-of-concept| https://t.me/thehackernews/2959 2023-01-17 14:32:08+00:00| seen| https://t.me/ctinow/87322 2023-01-17 15:37:02+00:00| seen|...

CVE-2015-2291

creationtimestamp| type| source ---|---|--- 2023-01-12 18:05:06+00:00| exploited| https://t.me/truesecator/3932 2023-02-10 11:10:31+00:00| seen| MISP/9170cfc5-2232-445c-bca8-923516dfdd3f 2023-02-13 12:15:03+00:00| exploited| https://t.me/itsecnews/2187 2023-06-14 21:10:03+00:00| seen|...

plugin: Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Pipeline: Groovy Plugin

A flaw was found in Jenkins Groovy Plugin. The plugin allows pipelines to load Groovy source files. The intent is to allow Global Shared Libraries to execute without sandbox protection. The issue is that the plugin allows any Groovy source files bundled with Jenkins core and plugins to be loaded...

CVE-2022-4342

creationtimestamp| type| source ---|---|--- 2023-01-12 07:29:54+00:00| seen| https://t.me/cibsecurity/56404 2023-04-06 00:26:37+00:00| seen| https://t.me/cibsecurity/61511...

CVE-2022-4704

creationtimestamp| type| source ---|---|--- 2023-01-10 20:28:48+00:00| seen| https://t.me/cibsecurity/56249 2023-01-10 20:28:50+00:00| seen| https://t.me/cibsecurity/56251...

PT-2023-1038 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30418 and earlier Adobe Acrobat Reader versions 22.003.20281 and earlier Adobe Acrobat Reader versions 22.003.20282 and earlier Description: The issue is related to an out-of-bounds write vulnerability tha...

PT-2023-1035 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.6 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2023-6085 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0009 Tecnomatix Plant Simulation versions prior to V2302.0003 Description: A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end ...

PT-2023-1111 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 18.0 and earlier Adobe InDesign versions 17.4 and earlier Description: The issue is related to insufficient input validation in Adobe InDesign, which could allow an attacker to execute arbitrary code. Exploitation of...

CVE-2022-44877

creationtimestamp| type| source ---|---|--- 2023-01-05 19:40:32+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6905 2023-01-06 02:19:20+00:00| seen| https://t.me/cibsecurity/56025 2023-01-06 08:11:28+00:00| published-proof-of-concept| https://t.me/proxybar/1261 2023-01-07...