CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

mysql2 安全漏洞

MySQL2 is a MySQL client for Node.js by Andrey Sidorov, a personal developer. A security vulnerability exists in mysql2 2 versions prior to 3.9.7, which originates from an arbitrary code injection via an incorrect cleanup of the timezone parameter in the readCodeFor function by calling the native...

Joda-Time 安全漏洞

Joda-Time is a Joda open source replacement for the widely used Java date and time classes prior to Java SE 8. A security vulnerability exists in Joda-Time version v2.12.5 that stems from the presence of a null pointer exception...

CVE-2024-23082

ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTimeFormatter::parseCharSequence, ParsePosition. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a...

UBUNTU-CVE-2024-23082

DISPUTED ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTimeFormatter::parseCharSequence, ParsePosition. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence o...

PT-2024-19477 · Linksys · Linksys Router E1700

Name of the Vulnerable Software and Affected Versions: Linksys Router E1700 version 1.0.04 build 3 Description: An issue was discovered in the Linksys Router E1700, allowing authenticated attackers to execute arbitrary code via the setDateTime function. Recommendations: For Linksys Router E1700...

CVE-2019-17332

creationtimestamp| type| source ---|---|--- 2024-02-13 09:56:57+00:00| seen| https://t.me/ctinow/183688...

CVE-2023-28900

creationtimestamp| type| source ---|---|--- 2024-02-12 12:36:20+00:00| seen| https://t.me/ctinow/183074...

GHSA-GWR4-PJ6R-2576

creationtimestamp| type| source ---|---|--- 2024-01-26 23:52:03+00:00| seen| https://t.me/arpsyndicate/3120...

CVE-2023-44291

creationtimestamp| type| source ---|---|--- 2023-12-23 09:11:40+00:00| seen| https://t.me/ctinow/158737...

The vulnerability in the implementation of the S/MIME encryption standard for the Thunderbird email client allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the S/MIME encryption standard implementation in the Thunderbird email client is related to errors in verifying the cryptographic signature due to discrepancies in the date and time of its creation. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2023-6423

creationtimestamp| type| source ---|---|--- 2023-12-21 08:37:45+00:00| seen| https://t.me/ctinow/157530...

CVE-2023-45311

creationtimestamp| type| source ---|---|--- 2023-10-07 00:13:46+00:00| seen| https://t.me/cibsecurity/71766 2025-12-02 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6ztowndtr2l...

CVE-2023-44766

creationtimestamp| type| source ---|---|--- 2023-10-06 16:26:46+00:00| seen| https://t.me/cibsecurity/71717...

CVE-2023-43704

creationtimestamp| type| source ---|---|--- 2023-09-30 07:38:24+00:00| seen| https://t.me/cibsecurity/71347...

Cloudflare Zero Trust Security Breach

Cloudflare Zero Trust is Cloudflare's replacement for traditional security perimeters, providing teams around the world with a platform for a faster, more secure Internet. Cloudflare Zero Trust suffers from a security vulnerability that stems from a lack of server-side authentication, where an...

CVE-2023-38243

creationtimestamp| type| source ---|---|--- 2023-08-10 18:15:47+00:00| seen| https://t.me/cibsecurity/68208...

CVE-2023-3572

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

CVE-2023-3572

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...

CVE-2023-3572 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device...