CVE-2024-30859

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...

WordPress Responsive theme <= 5.0.2 - Missing Authorization to HMTL Injection vulnerability

Missing Authorization to HMTL Injection vulnerability discovered by Krzysztof Zając - CERT PL, Muhammad Zeeshan Xib3rR4dAr in WordPress Theme Responsive versions = 5.0.2...

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/configISCGroupSSLCert.php file...

CVE-2024-0450

creationtimestamp| type| source ---|---|--- 2024-03-19 17:26:53+00:00| seen| https://t.me/ctinow/211729 2025-04-11 22:51:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11505 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

CVE-2023-6597

creationtimestamp| type| source ---|---|--- 2024-03-19 17:26:52+00:00| seen| https://t.me/ctinow/211728 2024-03-19 17:27:12+00:00| seen| https://t.me/ctinow/211745 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

Malicious code in cert-orchestration-adapter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a46ccca932f3d69709f16aef0e3bc3498916b7e0b87a1d69a340ce1d65677dc4 The OpenSSF Package Analysis project identified 'cert-orchestration-adapter' @ 5.9.1 pypi as malicious. It is considered malicious because: - Th...

CVE-2024-2193

creationtimestamp| type| source ---|---|--- 2024-03-13 09:16:22+00:00| seen| https://t.me/ctinow/206483 2024-03-13 14:57:21+00:00| seen| https://t.me/itsecnews/4196 2024-03-14 11:19:45+00:00| published-proof-of-concept| https://t.me/truesecator/5520 2024-03-15 19:23:06+00:00| seen|...

CVE-2023-47534

creationtimestamp| type| source ---|---|--- 2024-03-12 16:26:38+00:00| seen| https://t.me/ctinow/205805 2024-03-12 16:32:06+00:00| seen| https://t.me/ctinow/205821 2024-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1246 2024-03-13 21:52:26+00:00| seen|...

Siemens RUGGEDCOM APE1808 with Fortigate NGFW Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SENTRON

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: cosign, flux-source-controller, caddy, kube-rbac-proxy, bank-vaults, goreleaser, kots, apko, rabbitmq-messaging-topology-operator, guac, rook, cloudflared, k3s, kargo, nerdctl, rekor, policy-controller, skaffold, dgraph, falcoctl, skopeo, temporal, aactl, dex,...

AZL-35837 CVE-2024-28180 affecting package cert-manager for versions less than 1.11.2-14

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if t...

AZL-35875 CVE-2024-28180 affecting package cert-manager for versions less than 1.12.12-1

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if t...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: zot, flux-kustomize-controller, nerdctl, rook, oauth2-proxy, caddy-fips, slsa-verifier, temporal-ui-server-fips, sops, rekor-fips, ko-fips, step, kubescape, vault-csi-provider, cloudflared, kargo, vexctl, timestamp-authority, policy-controller, kubernetes-dashboard,...

CVE-2023-52590

creationtimestamp| type| source ---|---|--- 2024-03-06 23:57:01+00:00| seen| https://t.me/ctinow/201937 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-03...

CVE-2023-52586

creationtimestamp| type| source ---|---|--- 2024-03-06 23:46:41+00:00| seen| https://t.me/ctinow/201917 2025-02-14 17:39:47+00:00| seen| Telegram/rlbnNF-jij67DefhaWE2LbN5fl2EUUZ-rkEH-Fpnh2-vyvll 2025-02-14 21:08:31+00:00| published-proof-of-concept|...

CVE-2023-33875

creationtimestamp| type| source ---|---|--- 2024-03-06 13:11:39+00:00| seen| https://t.me/ctinow/201309 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-32651

creationtimestamp| type| source ---|---|--- 2024-03-06 12:41:26+00:00| seen| https://t.me/ctinow/201286 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...