CVE-2022-45080

creationtimestamp| type| source ---|---|--- 2023-04-23 16:33:28+00:00| seen| https://t.me/cibsecurity/62670...

CVE-2023-30621

creationtimestamp| type| source ---|---|--- 2023-04-22 00:32:06+00:00| seen| https://t.me/cibsecurity/62638...

CVE-2023-2141

creationtimestamp| type| source ---|---|--- 2023-04-21 20:31:46+00:00| seen| https://t.me/cibsecurity/62625 2023-06-07 14:02:04+00:00| seen| https://t.me/truesecator/4473...

CVE-2023-28328

creationtimestamp| type| source ---|---|--- 2023-04-20 02:30:22+00:00| seen| https://t.me/cibsecurity/62490 2023-11-15 16:53:03+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5977...

OpenJDK: certificate validation issue in TLS session negotiation (8298310)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...

CVE-2023-29413

creationtimestamp| type| source ---|---|--- 2023-04-19 00:29:43+00:00| seen| https://t.me/cibsecurity/62399 2023-04-25 17:40:06+00:00| seen| https://t.me/truesecator/4321...

CVE-2023-2160

creationtimestamp| type| source ---|---|--- 2023-04-18 20:29:12+00:00| seen| https://t.me/cibsecurity/62362 2024-01-26 15:59:54+00:00| seen| https://t.me/arpsyndicate/2996...

CVE-2023-21931

...

Remote Code Execution (RCE)

org.apache.linkis:linkis-common is vulnerable to Remote Code Execution RCE. Lack of proper checking of supplied zip paths in ZipUtils.scala allows an attacker to upload and execute malicious code on the system...

Important: kernel-livepatch-5.10.162-141.675

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition with a resultant use-after-free or NULL pointer dereference...

CVE-2023-29201 org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability

XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1, only escaped and -tags but neither attributes that can be used to inject scripts nor other dangerous HTML tags like . ...

CVE-2023-22897

creationtimestamp| type| source ---|---|--- 2023-04-13 02:29:31+00:00| seen| https://t.me/cibsecurity/62035 2023-04-14 13:24:16+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8116 2023-07-27 01:42:23+00:00| published-proof-of-concept| https://t.me/codeb0ss/962 2025-01-3...

The vulnerability of the CGI microprogramming interface of the Nighthawk WiFi 6 Router (RAX30) allows a hacker to execute arbitrary code.

The vulnerability of the CGI microprogramming interface of the Nighthawk WiFi 6 Router RAX30 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-24931

creationtimestamp| type| source ---|---|--- 2023-04-12 00:29:45+00:00| seen| https://t.me/cibsecurity/61943...

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vulnerability that is already being used in active attacks. Not to be outdone, Apple has released a set of important updates addressing two zero-day...

The vulnerability of the Windows Common Log File System (CLFS) driver in the Windows operating system allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2023-28252

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-43951

creationtimestamp| type| source ---|---|--- 2023-04-11 20:23:33+00:00| seen| https://t.me/cibsecurity/61892...

CVE-2023-28252

CVE-2023-28252 – Windows CLFS driver local privilege escalation : The vulnerability stems from CLFS.sys handling of file blocks in memory (m_rgBlocks) and associated metadata, enabling an out-of-bounds access that lets an unprivileged user hijack the SYSTEM token. Public PoCs and in-the-wild acti...

CVE-2023-28252 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...