13556 matches found
CVE-2023-28507
creationtimestamp| type| source ---|---|--- 2023-03-30 00:15:43+00:00| seen| https://t.me/cibsecurity/61138...
CVE-2022-43649
creationtimestamp| type| source ---|---|--- 2023-03-29 22:31:57+00:00| seen| https://t.me/cibsecurity/61123...
Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2023-25194)
Summary Apache Kafka is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library as part of the Kafka integration. The latest patch includes Apache Kafka 3.4.0 to fix the vulnerability. CVE-2023-25194 Vulnerability Details CVEID:CVE-2023-25194 DESCRIPTION: Apache Kafka could...
编号已被CVE保留
No details are available at this time...
rubygem-rack: crafted requests can cause shell escape sequences
A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...
GHSA-WVC4-J7G5-4F79 NATS TLS certificate common name validation bypass
The NATS official Rust clients are vulnerable to MitM when using TLS. A fix for the nats crate hasn't been released yet. Since the nats crate is going to be deprecated anyway, consider switching to async-nats = 0.29 which already fixed this vulnerability. The common name of the server's TLS...
CVE-2022-4126 Use of Default Password
Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and Passwords.This issue affects RCCMD: before 4.40 230207...
编号已被CVE保留
No details are available at this time...
CVE-2023-21019
creationtimestamp| type| source ---|---|--- 2023-03-24 23:50:43+00:00| seen| https://t.me/cibsecurity/60703 2025-02-24 17:21:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5177...
CVE-2023-1177
creationtimestamp| type| source ---|---|--- 2023-03-24 17:50:55+00:00| seen| https://t.me/cibsecurity/60645 2023-03-28 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8011 2023-03-29 17:51:47+00:00| published-proof-of-concept|...
PT-2023-17845 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is caused by a logic error in the code of EUTRAN LCS ConvertLCS MOLRReq in LPP CommonUtil.c, leading to a possible out of bounds write. This could result in remote code execution with System execution...
CVE-2023-20112
creationtimestamp| type| source ---|---|--- 2023-03-23 19:36:56+00:00| seen| https://t.me/cibsecurity/60595...
CVE-2023-1410
creationtimestamp| type| source ---|---|--- 2023-03-23 11:36:38+00:00| seen| https://t.me/cibsecurity/60547 2025-03-04 21:35:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6432...
CVE-2023-1595
CVE-2023-1595 affects novel-plus 3.6.2, specifically the file path common/log/list. The root cause is manipulation of the sort argument, enabling SQL injection. The vulnerability can be exploited remotely, and public disclosure exists. Connected sources describe it as a high-severity issue with S...
CVE-2023-1595 novel-plus list sql injection
A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...
CVE-2023-1595 novel-plus list sql injection
A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...
PT-2023-17104 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue has been found in an unknown functionality of the file common/log/list. The manipulation of the sort argument leads to SQL injection. The attack can be launched remotely. Recommendations:...
novel-plus SQL注入漏洞
novel-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system. A security vulnerability exists in novel-plus version 3.6.2, which stems from a problem in the file /common/sysFile/list, where the operation of the parameter sort can lead to sql injection...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : amanda regression (USN-5966-2)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5966-2 advisory. USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update...
