CVE-2023-32644

creationtimestamp| type| source ---|---|--- 2024-03-06 12:41:24+00:00| seen| https://t.me/ctinow/201285 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-25951

creationtimestamp| type| source ---|---|--- 2024-03-06 10:11:38+00:00| seen| https://t.me/ctinow/201179 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

AZL-35635 CVE-2024-24786 affecting package cert-manager for versions less than 1.12.12-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35556 CVE-2024-24786 affecting package cert-manager for versions less than 1.11.2-14

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, pulumi-kubernetes-operator, dynamic-localpv-provisioner-fips, kyverno-policy-reporter-ui, crossplane-provider-aws-s3, prometheus-alertmanager, trust-manager, scorecard, prometheus-pushgateway-fips, prometheus-nats-exporter,...

CVE-2023-52508

creationtimestamp| type| source ---|---|--- 2024-03-04 20:31:14+00:00| seen| https://t.me/ctinow/199546 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-52569

creationtimestamp| type| source ---|---|--- 2024-03-04 19:01:50+00:00| seen| https://t.me/ctinow/199461 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-52561

creationtimestamp| type| source ---|---|--- 2024-03-04 18:37:38+00:00| seen| https://t.me/ctinow/199449 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-03...

CVE-2023-52485

creationtimestamp| type| source ---|---|--- 2024-02-29 16:26:47+00:00| seen| https://t.me/ctinow/196782 2024-02-29 16:32:18+00:00| seen| https://t.me/ctinow/196785 2024-03-01 06:51:47+00:00| seen| https://t.me/ctinow/197322 2025-12-03 14:14:49+00:00| seen|...

CVE-2023-52481

creationtimestamp| type| source ---|---|--- 2024-02-29 07:03:37+00:00| seen| Telegram/HQexdO9BC5AncqO3BP1hEUSnK5hYdGZxATzx0lfw1wjFM2H 2024-02-29 07:22:01+00:00| seen| https://t.me/ctinow/196275 2024-02-29 07:26:41+00:00| seen| https://t.me/ctinow/196292 2024-02-29 12:47:00+00:00| seen|...

New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT

Ukrainian entities based in Finland have been targeted as part of a malicious campaign distributing a commercial remote access trojan known as Remcos RAT using a malware loader called IDAT Loader. The attack has been attributed to a threat actor tracked by the Computer Emergency Response Team of...

CVE-2023-48795 affecting package cert-manager for versions less than 1.11.2-7

CVE-2023-48795 affecting package cert-manager for versions less than 1.11.2-7. A patched version of the package is available...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: k8sgpt, flux-source-controller, kubescape, zarf, up, cilium-cli, eksctl, flux-helm-controller, helm-operator, zot, helm-push, trivy, kubevela, kots, k9s, chartmuseum...

CVE-2023-52452

creationtimestamp| type| source ---|---|--- 2024-02-22 18:53:38+00:00| seen| https://t.me/ctinow/191008 2024-02-23 15:11:30+00:00| seen| https://t.me/ctinow/191796 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

TinyTurla-NG in-depth tooling and command and control analysis

Cisco Talos, in cooperation with CERT.NGO, has discovered new malicious components used by the Turla APT. New findings from Talos illustrate the inner workings of the command and control C2 scripts deployed on the compromised WordPress servers utilized in the compromise we previously disclosed...

AZL-34584 CVE-2024-26147 affecting package cert-manager for versions less than 1.12.13-1

Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an index.yaml file or a plugins plugin.yaml file were missing all metadata a panic would...

AZL-34454 CVE-2024-26147 affecting package cert-manager for versions less than 1.11.2-10

Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an index.yaml file or a plugins plugin.yaml file were missing all metadata a panic would...

SUSE: Security Advisory (SUSE-SU-2023:2881-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: k8sgpt, kots, kubescape, flux-helm-controller, zarf, kubevela, eksctl, helm-push, zot, trivy, helm-operator, chartmuseum, k9s, cilium-cli, up, flux-source-controller...

Chinese Hackers Using Deepfakes in Advanced Mobile Banking Malware Attacks

A Chinese-speaking threat actor codenamed GoldFactory has been attributed to the development of highly sophisticated banking trojans, including a previously undocumented iOS malware called GoldPickaxe that's capable of harvesting identity documents, facial recognition data, and intercepting SMS...