BIT-JENKINS-2023-44487

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

CVE-2023-50257

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

BIT-KONG-2023-44487

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

CVE-2019-10743

creationtimestamp| type| source ---|---|--- 2024-01-29 15:41:10+00:00| seen| https://t.me/ctinow/175336 2025-08-03 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlb6pziv2n...

CVE-2023-6112

creationtimestamp| type| source ---|---|--- 2024-01-29 11:38:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9870 2024-08-16 09:12:43+00:00| published-proof-of-concept| https://t.me/Rootsec2/2634 2024-08-16 09:12:55+00:00| published-proof-of-concept|...

CVE-2023-51651

AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix double-dot, a URI path traversal is possible. The issue exists in the buildEndpoint method in the RestSerializer component of the AWS SDK f...

CVE-2023-50834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech WooCommerce Menu Extension allows Stored XSS.This issue affects WooCommerce Menu Extension: from n/a through 1.6.2...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech WooCommerce Menu Extension allows Stored XSS.This issue affects WooCommerce Menu Extension: from n/a through 1.6.2...

CVE-2023-50834

CVE-2023-50834 : Stored Cross-Site Scripting in WooCommerce Menu Extension (Affected: WooCommerce Menu Extension

CVE-2023-6253

creationtimestamp| type| source ---|---|--- 2023-12-02 03:15:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9500 2024-08-16 08:53:07+00:00| published-proof-of-concept| https://t.me/Rootsec2/2171...

CVE-2022-41678

creationtimestamp| type| source ---|---|--- 2023-11-30 12:31:42+00:00| seen| https://t.me/ctinow/152559 2023-12-04 10:25:34+00:00| seen| https://t.me/arpsyndicate/1179 2023-12-06 12:50:53+00:00| seen| https://t.me/arpsyndicate/1484 2023-12-08 11:40:19+00:00| seen| https://t.me/arpsyndicate/1549...

CVE-2023-26269

creationtimestamp| type| source ---|---|--- 2023-11-26 12:45:59+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9465 2024-08-16 08:52:58+00:00| published-proof-of-concept| https://t.me/Rootsec2/2105...

AMD Ryzen Master™ SDK August 2023 Security Update

AMD has informed HP of potential security vulnerabilities identified in the AMD® Ryzen Master™ SDK, which might allow arbitrary code execution, denial of service, or information disclosure. AMD has released software updates to mitigate the potential vulnerabilities. AMD has released updates to...

CVE-2023-48365

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backe...

PT-2023-6923

Name of the Vulnerable Software and Affected Versions Qlik Sense Enterprise for Windows versions prior to August 2023 Patch 2 Description The issue is related to improper validation of HTTP headers, allowing a remote attacker to elevate their privilege by tunneling HTTP requests and execute HTTP...

Intel Dynamic Tuning Technology Software August 2023 Security Update

Intel has informed HP of a potential security vulnerability in the Intel® Dynamic Tuning Technology DTT software which may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerabilit...

CVE-2023-42802

GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unverified object instantiation allows one to upload malicious PHP files to unwanted directories. Depending on web server configuration and available system libraries, malicious PH...

august-nilles.de Improper Access Control vulnerability OBB-3769290

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

clemens-and-august.de Improper Access Control vulnerability OBB-3764915

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

AZL-31325 CVE-2023-44487 affecting package moby-buildx for versions less than 0.7.1-14

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...