CVE-2023-1671

creationtimestamp| type| source ---|---|--- 2023-04-04 14:36:57+00:00| seen| https://t.me/cibsecurity/61374 2023-04-05 15:15:02+00:00| seen| https://t.me/truesecator/4254 2023-04-24 04:35:31+00:00| published-proof-of-concept| https://t.me/CNArsenal/525 2023-04-25 09:47:32+00:00|...

Actors, Threats and Vulnerabilities 27 March to 2 April 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of Nine attacks that were executed...

CISA Known Exploited Vulnerability Catalog March 2023

For a detailed CISAs KEV Catalog, download the pdf file here Summary For a detailed CISAs KEV Catalog, download the pdf file here The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. To be included ...

CVE-2023-23162

creationtimestamp| type| source ---|---|--- 2023-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51215...

CVE-2023-23161

creationtimestamp| type| source ---|---|--- 2023-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51214...

CVE-2023-23163

creationtimestamp| type| source ---|---|--- 2023-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51216...

Zimbra email platform vulnerability exploited to steal European govt emails

By Deeba Ahmed Researchers have noted that attackers are targeting a medium-severity Zimbra vulnerability that the company patched in version 9.0.0 Patch 24, one year ago. This is a post from HackRead.com Read the original post: Zimbra email platform vulnerability exploited to steal European govt...

CVE-2023-27159

creationtimestamp| type| source ---|---|--- 2023-03-31 22:22:25+00:00| seen| https://t.me/cibsecurity/61274 2025-03-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-09 2026-06-23 14:06:13+00:00| exploited|...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2023-25114)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to buffer overflow, which can be exploited by attackers to obtain sensitive information...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2023-25115)

Foxit PDF Reader is a PDF reader from Foxit, a Chinese company. Foxit PDF Reader is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to obtain sensitive information...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2023-25113)

Foxit PDF Reader is a PDF reader from Foxit, a Chinese company. Foxit PDF Reader is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to obtain sensitive information...

X-Man SQL注入漏洞

X-Man is a backend system based on ThinkPHP framework developed by S1xGod individual developers. A security vulnerability exists in X-Man version 1.0. An attacker exploited the vulnerability to perform SQL injection attacks...

CVE-2023-29059

creationtimestamp| type| source ---|---|--- 2023-03-30 20:21:26+00:00| exploited| https://t.me/cibsecurity/61180 2023-12-27 12:34:26+00:00| exploited| https://t.me/truesecator/5250 2026-06-19 12:46:57+00:00| exploited|...

CVE-2023-29059

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX...

ClicShopping v3.402 - Cross-Site Scripting (XSS)

Title: ClicShopping v3.402 - Cross-Site Scripting XSS Author: nu11secur1ty Date: 11.20.2022 Vendor: https://www.clicshopping.org/forum/ Software: https://github.com/ClicShopping/ClicShoppingV3/releases/tag/version3402 Reference:...

CVE-2023-29059

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX...

CVE-2023-29059

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX...

Delta Electronics InfraSuite Device Master Deserialization Vulnerability (CNVD-2023-23883)

Delta Electronics InfraSuite Device Master is a device for simplifying and automating the monitoring of critical equipment from Delta Electronics of Taiwan, China. A deserialization vulnerability exists in Delta Electronics InfraSuite Device Master versions prior to 1.0.5, which can be exploited ...

D-Link DIR-1935 安全漏洞

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-1935. An attacker has exploited the vulnerability to bypass authentication on the system...

WordPress WP Education Plugin < 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Education Type Plugin Vulnerable versions 1.2.7 Fixed in 1.2.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-0498 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID bede27b04a59 Credits Lana Codes Required...