CVE-2023-48810

creationtimestamp| type| source ---|---|--- 2023-12-21 14:42:42+00:00| seen| https://t.me/ctinow/157719...

Windows CLFS and five exploits used by ransomware operators (Exploit #4 – CVE-2023-23376)

This is part five of our study about the Common Log File System CLFS and five vulnerabilities in this Windows OS component that have been used in ransomware attacks throughout the year. Please read the previous parts first if you havent already. You can skip to the other parts using this table of...

Windows CLFS and five exploits used by ransomware operators

In April 2023, we published a blog post about a zero-day exploit we discovered in ransomware attacks that was patched as CVE-2023-28252 after we promptly reported it to Microsoft. In that blog post, we mentioned that the zero-day exploit we discovered was very similar to other Microsoft Windows...

Windows CLFS and five exploits used by ransomware operators (Exploit #5 – CVE-2023-28252)

This is part six of our study about the Common Log File System CLFS and five vulnerabilities in this Windows OS component that have been used in ransomware attacks throughout the year. Please read the previous parts first if you havent already. You can go to other parts using this table of...

CVE-2023-45609

creationtimestamp| type| source ---|---|--- 2023-12-21 09:41:32+00:00| seen| https://t.me/ctinow/157559...

CVE-2023-6433

creationtimestamp| type| source ---|---|--- 2023-12-21 08:02:54+00:00| seen| https://t.me/ctinow/157516...

CVE-2023-29485

creationtimestamp| type| source ---|---|--- 2023-12-21 02:22:26+00:00| seen| https://t.me/ctinow/157459 2023-12-29 08:16:38+00:00| seen| https://t.me/ctinow/160368 2024-01-14 08:36:57+00:00| seen| https://t.me/ctinow/167963...

CVE-2023-50984

creationtimestamp| type| source ---|---|--- 2023-12-20 23:42:28+00:00| seen| https://t.me/ctinow/157388 2023-12-22 23:17:07+00:00| seen| https://t.me/ctinow/158659 2024-01-14 08:06:58+00:00| seen| https://t.me/ctinow/167951...

CVE-2023-35876

creationtimestamp| type| source ---|---|--- 2023-12-20 16:23:55+00:00| seen| https://t.me/ctinow/157119 2024-01-13 15:21:57+00:00| seen| https://t.me/ctinow/167854...

CVE-2023-49701

creationtimestamp| type| source ---|---|--- 2023-12-20 15:18:36+00:00| seen| https://t.me/ctinow/157068...

CVE-2023-6898

creationtimestamp| type| source ---|---|--- 2023-12-20 11:17:58+00:00| seen| https://t.me/ctinow/156876 2024-01-11 21:02:15+00:00| seen| https://t.me/ctinow/166826...

CVE-2020-8608

creationtimestamp| type| source ---|---|--- 2023-12-18 01:24:46+00:00| seen| https://t.me/arpsyndicate/1880...

CVE-2023-35075

creationtimestamp| type| source ---|---|--- 2023-12-16 20:52:19+00:00| seen| https://t.me/ctinow/155479...

CVE-2023-6306

creationtimestamp| type| source ---|---|--- 2023-12-16 17:47:39+00:00| seen| https://t.me/ctinow/155442...

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-447)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-447 advisory. Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to b...

CVE-2023-42799

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit 50c0a51b10ecc5b3415ea78c21d96d679e2288f9 due to unmitigated usage of unsafe C functions and improper bounds checking. A malicious ga...

CVE-2023-42800

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit 50c0a51b10ecc5b3415ea78c21d96d679e2288f9 due to unmitigated usage of unsafe C functions and improper bounds checking. A malicious ga...

Buffer overflow

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit 50c0a51b10ecc5b3415ea78c21d96d679e2288f9 due to unmitigated usage of unsafe C functions and improper bounds checking. A malicious ga...

Buffer overflow

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit f57bd745b4cbed577ea654fad4701bea4d38b44c. A malicious game streaming server could exploit a buffer overflow vulnerability to crash a...

CVE-2023-42801 Stack buffer overflow due to `strcpy` into fixed size buffer in `extractVersionQuadFromString`

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit f57bd745b4cbed577ea654fad4701bea4d38b44c. A malicious game streaming server could exploit a buffer overflow vulnerability to crash a...