Malicious Package

Overview iris-node-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Solaris 10 libXm - Buffer overflow Local privilege escalation

/ Exploit Title: Solaris 10 libXm - Buffer overflow Local privilege escalation raptordtprintlibXmas.c - Solaris 10 CDE ForeverDay LPE Copyright c 2023 Marco Ivaldi "What has been will be again, what has been done will be done again; there is nothing new under the Sun." -- Ecclesiastes 1:9 Solaris...

CVE-2023-1773

creationtimestamp| type| source ---|---|--- 2023-03-31 16:22:12+00:00| seen| https://t.me/cibsecurity/61243 2026-01-10 09:00:04+00:00| published-proof-of-concept| Telegram/kEi9aG3inm6wEBgriTJElzfBktIEkXFyp3hKxyuN5JDe4...

CVE-2022-30350

creationtimestamp| type| source ---|---|--- 2023-03-30 20:35:53+00:00| seen| https://t.me/cibsecurity/61184...

CVE-2023-25040

creationtimestamp| type| source ---|---|--- 2023-03-30 16:26:20+00:00| seen| https://t.me/cibsecurity/61171...

CVE-2023-28507

creationtimestamp| type| source ---|---|--- 2023-03-30 00:15:43+00:00| seen| https://t.me/cibsecurity/61138...

CVE-2022-43649

creationtimestamp| type| source ---|---|--- 2023-03-29 22:31:57+00:00| seen| https://t.me/cibsecurity/61123...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2023-25194)

Summary Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library as part of the Kafka integration. The latest patch includes Apache Kafka 3.4.0 to fix the vulnerability. CVE-2023-25194 Vulnerability Details CVEID:CVE-2023-25194 DESCRIPTION: Apache Kafka could...

编号已被CVE保留

No details are available at this time...

rubygem-rack: crafted requests can cause shell escape sequences

A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...

GHSA-WVC4-J7G5-4F79 NATS TLS certificate common name validation bypass

The NATS official Rust clients are vulnerable to MitM when using TLS. A fix for the nats crate hasn't been released yet. Since the nats crate is going to be deprecated anyway, consider switching to async-nats = 0.29 which already fixed this vulnerability. The common name of the server's TLS...

CVE-2022-4126 Use of Default Password

Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and Passwords.This issue affects RCCMD: before 4.40 230207...

编号已被CVE保留

No details are available at this time...

CVE-2023-21019

creationtimestamp| type| source ---|---|--- 2023-03-24 23:50:43+00:00| seen| https://t.me/cibsecurity/60703 2025-02-24 17:21:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5177...

CVE-2023-1177

creationtimestamp| type| source ---|---|--- 2023-03-24 17:50:55+00:00| seen| https://t.me/cibsecurity/60645 2023-03-28 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8011 2023-03-29 17:51:47+00:00| published-proof-of-concept|...

PT-2023-17845 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is caused by a logic error in the code of EUTRAN LCS ConvertLCS MOLRReq in LPP CommonUtil.c, leading to a possible out of bounds write. This could result in remote code execution with System execution...

CVE-2023-20112

creationtimestamp| type| source ---|---|--- 2023-03-23 19:36:56+00:00| seen| https://t.me/cibsecurity/60595...

CVE-2023-1410

creationtimestamp| type| source ---|---|--- 2023-03-23 11:36:38+00:00| seen| https://t.me/cibsecurity/60547 2025-03-04 21:35:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6432...

CVE-2023-1595

CVE-2023-1595 affects novel-plus 3.6.2, specifically the file path common/log/list. The root cause is manipulation of the sort argument, enabling SQL injection. The vulnerability can be exploited remotely, and public disclosure exists. Connected sources describe it as a high-severity issue with S...

CVE-2023-1595 novel-plus list sql injection

A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...