Amazon Linux AMI : xorg-x11-server (ALAS-2023-1702)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1702 advisory. A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed...

Patch CVE-2023-23397 Immediately: What You Need To Know and Do

We break down the basic information of CVE-2023-23397, the zero-day, zero-touch vulnerability that was rated 9.8 on the Common Vulnerability Scoring System CVSS scale...

Amazon Linux 2023 : dbus, dbus-common, dbus-daemon (ALAS2023-2023-100)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-100 advisory. An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus t...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2023-102)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-102 advisory. A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the SProcRenderCompositeGlyphs function due to improper validation of the request length. CVE-2021-4008 A fla...

CVE-2023-1500

creationtimestamp| type| source ---|---|--- 2023-03-19 23:33:38+00:00| seen| https://t.me/cibsecurity/60295 2025-02-26 19:24:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5574...

CVE-2023-28115

creationtimestamp| type| source ---|---|--- 2023-03-17 14:49:52+00:00| published-proof-of-concept| https://github.com/KnpLabs/snappy/security/advisories/GHSA-gq6w-q6wh-jggc 2023-03-18 01:31:50+00:00| seen| https://t.me/cibsecurity/60277 2023-03-23 11:05:11+00:00| published-proof-of-concept|...

CVE-2023-27040

creationtimestamp| type| source ---|---|--- 2023-03-16 19:30:53+00:00| seen| https://t.me/cibsecurity/60171 2025-02-26 20:24:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5598...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

CVE-2023-23150

creationtimestamp| type| source ---|---|--- 2023-03-16 06:30:22+00:00| seen| https://t.me/cibsecurity/60102...

MAL-2023-785 Malicious code in sp-yammer-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e8aa9f2fdde63c7f1d8b9e4885d5fb8dcc69ae8544c66b319067aba02d0c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-yammer-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e8aa9f2fdde63c7f1d8b9e4885d5fb8dcc69ae8544c66b319067aba02d0c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-27507

creationtimestamp| type| source ---|---|--- 2023-03-15 23:30:08+00:00| seen| https://t.me/cibsecurity/60090 2025-03-02 11:44:19+00:00| seen| Telegram/fyzFqjuXCkdPmO83bEGfiGYI8venyJkbQsk1XacvxPClMfq...

CVE-2022-46773

IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951...

MAL-2023-907 Malicious code in ts-infra-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd47b4be284dd70bab7f8e9fe313c2b801c8ee87b2d44363e711d723212d06e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-infra-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd47b4be284dd70bab7f8e9fe313c2b801c8ee87b2d44363e711d723212d06e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-643 Malicious code in npo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7254cfce2ac433959ef4d93d3b6849ceeefc1c407e39b4d5368c174d7fd72dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7254cfce2ac433959ef4d93d3b6849ceeefc1c407e39b4d5368c174d7fd72dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-21019 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.4.5 Description: An arbitrary file upload vulnerability in the CommonController.php component allows attackers to execute arbitrary code via a crafted phtml file. This issue is related to the admincCommonController.php...

CVE-2023-28343

creationtimestamp| type| source ---|---|--- 2023-03-14 23:23:21+00:00| seen| https://t.me/cibsecurity/60030 2023-03-21 11:46:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4000 2023-03-23 15:28:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4017 2023-03-25...