CVE-2023-2309

creationtimestamp| type| source ---|---|--- 2023-07-24 14:25:57+00:00| seen| https://t.me/cibsecurity/67143...

CVE-2023-32050

creationtimestamp| type| source ---|---|--- 2023-07-11 22:35:59+00:00| seen| https://t.me/cibsecurity/66430...

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

UBUNTU-CVE-2023-0386

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...

CVE-2022-45636

creationtimestamp| type| source ---|---|--- 2023-03-21 21:35:07+00:00| seen| https://t.me/cibsecurity/60404...

CVE-2023-24859

creationtimestamp| type| source ---|---|--- 2023-03-14 19:30:17+00:00| seen| https://t.me/cibsecurity/60002...

CLSA-2023-1678396066 systemd: Fix of CVE-2022-4415

CVE-2022-4415: coredump: do not allow user to access coredumps with changed uid/gid/capabilities...

CVE-2023-22805

creationtimestamp| type| source ---|---|--- 2023-02-15 20:46:42+00:00| seen| https://t.me/cibsecurity/58251...

SUSE CVE-2007-3099

usr/mgmtipc.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 checks the client's UID on the listening AFLOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service iscsid exit or iSCSI connection loss...

SUSE CVE-2007-6206

The docoredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive informatio...

SUSE CVE-2013-1979

The scmsetcred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application...

SUSE CVE-2013-4340

wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified userID parameter...

SUSE CVE-2016-6190

SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive information about appointments with the "View the Date & Time" restriction, as demonstrated by correlating UIDs and DTSTAMPs between all...

SUSE CVE-2018-8754

The libevtrecordvaluesreadevent function in libevtrecordvalues.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub...

The vulnerability of the IBM Rational Asset Manager (RAM) system, related to deficiencies in access control, allows a hacker to bypass security restrictions.

The vulnerability of the IBM Rational Asset Manager RAM system relates to deficiencies in access control when processing UID parameters. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

GitLab Enterprise Edition和GitLab Community Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE versions 10.0 through 15.5.7 prior, 15...

CVE-2022-41675

creationtimestamp| type| source ---|---|--- 2022-11-29 07:28:52+00:00| seen| https://t.me/cibsecurity/53633...

CVE-2020-23587

creationtimestamp| type| source ---|---|--- 2022-11-23 07:13:32+00:00| seen| https://t.me/cibsecurity/53387 2025-04-25 21:08:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13548 2026-09-22 07:00:11+00:00| seen| Telegram/ZCdi5I9p-Xc5z40zki51FeiOFOjVkkHbDLVUITujH0...

CVE-2022-41932 Creation of new database tables through login form on PostgreSQL

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make XWiki create many new schemas and fill them with tables just by using a crafted user identifier in the login form. This may lead to degraded database performance. The...

PT-2022-25071 · Unknown · Callbgprovider

Name of the Vulnerable Software and Affected Versions: CallBGProvider versions prior to SMR Nov-2022 Release 1 Description: The issue is related to an improper authorization vulnerability. It allows a local attacker to grant permission for accessing information with phone uid. Recommendations: Fo...