CVE-2023-28998

creationtimestamp| type| source ---|---|--- 2023-04-04 16:30:51+00:00| seen| https://t.me/cibsecurity/61394...

Changes to Citrix Workspace Standard and ShareFile Content Collaboration in Citrix Workspace Bundles

Effective April 17, 2023, Cloud Software Group has made the decision to end of renewal EoR Citrix Workspace Standard and remove ShareFile Content Collaboration from the Citrix Workspace cloud and on-prem subscriptions. This change is part of our ongoing efforts to enhance our product offerings an...

Jenkins Plugin Veracode Scan 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

The vulnerability of the crypt_64bit_up/down() function in the Telnet service of Netgear’s microprogrammed router Orbi RBR750 allows a hacker to execute arbitrary commands.

The vulnerability of the crypt64bitup/down function in the Telnet service of Netgear Orbi RBR750 microprogramming routers is related to the presence of hidden functionality when using the Blowfish cryptographic algorithm. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2023-27241

creationtimestamp| type| source ---|---|--- 2023-03-27 20:56:09+00:00| seen| https://t.me/cibsecurity/60821...

CVE-2023-0816

creationtimestamp| type| source ---|---|--- 2023-03-27 20:50:09+00:00| seen| https://t.me/cibsecurity/60808 2025-02-19 19:13:55+00:00| seen| Telegram/R97rn0W91PvxHSGpXyydl6up8ZPjuPofIxnMgptdkrvUcbi...

PT-2023-21726 · Directus · Directus

Name of the Vulnerable Software and Affected Versions: Directus versions prior to 9.23.3 Description: The issue concerns the improper redaction of the directus refresh token from log outputs, allowing it to be used to impersonate users without their permission. This can lead to issues with...

Directus 日志信息泄露漏洞

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in Directus versions prior to 9.23.3, which stems from directusrefreshtoken not being properly edited from log output, and can be used to impersonate a user without...

InsightCloudSec 代码注入漏洞

InsightCloudSec is a fully integrated cloud-native security platform from InsightCloudSec. A security vulnerability exists in versions of InsightCloudSec prior to 23.3.21 that stems from an attacker being able to utilize the publicly available resource.db accessor method to invoke Python methods...

CVE-2023-1205

creationtimestamp| type| source ---|---|--- 2023-03-10 20:21:16+00:00| seen| https://t.me/cibsecurity/59808 2025-02-28 16:26:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5910 2025-03-02 11:45:37+00:00| seen| Telegram/vxcN21UbBXgOXIEulgUW7uQiFebqZkbsUixB4PwN3bbmb2O-...

CVE-2023-0064

creationtimestamp| type| source ---|---|--- 2023-03-06 16:12:42+00:00| seen| https://t.me/cibsecurity/59469 2025-03-08 04:34:10+00:00| seen| Telegram/9JCyhLIQp1Xl4AIutsh1mjNbGMkD82pOExrCAzkmYVH65YE...

PT-2023-3270 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. The specific flaw exists within a shared library used by the...

CVE-2023-0887 phjounin TFTPD64-SE tftpd64_svc.exe unquoted search path

A vulnerability was found in phjounin TFTPD64-SE 4.64 and classified as critical. This issue affects some unknown processing of the file tftpd64svc.exe. The manipulation leads to unquoted search path. An attack has to be approached locally. The complexity of an attack is rather high. The...

SUSE CVE-2010-0093

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095...

SUSE CVE-2010-0839

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

SUSE CVE-2013-1705

Heap-based buffer underflow in the cryptojsinterpretkeygentype function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Certificate Request Message Format CRMF request...

SUSE CVE-2015-0505

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL...

SUSE CVE-2015-0511

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : SP...

SUSE CVE-2015-8777

The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LDPOINTERGUARD environment variable...

SUSE CVE-2016-7892

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution...