CVE-2023-6329

creationtimestamp| type| source ---|---|--- 2023-12-17 09:37:18+00:00| seen| https://t.me/ctinow/155548 2024-08-26 23:26:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/idsecureauthbypass.rb 2025-02-06 03:13:46+00:00| seen|...

CVE-2016-7243

creationtimestamp| type| source ---|---|--- 2023-12-04 04:22:24+00:00| seen| https://t.me/arpsyndicate/1112 2025-02-06 02:42:30+00:00| seen| Telegram/psXgTuU25g9o9GoDdIyB333kYaHa7QQX9pbMSZsyM82keh 2025-02-14 10:00:28+00:00| seen| Telegram/AzEpltXhM-qKwE8827oAchP7-Bkt-ISVLU6IjwHoVJ85Dtm...

febc.net Cross Site Scripting vulnerability OBB-3798719

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 39 Update: fbthrift-2023.10.16.00-1.fc39

Thrift is a serialization and RPC framework for service communication. Thrift enables these features in all major languages, and there is strong support for C++, Python, Hack, and Java. Most services at Facebook are written using Thri ft for RPC, and some storage systems use Thrift for serializin...

CVE-2023-5197

creationtimestamp| type| source ---|---|--- 2023-09-27 18:45:53+00:00| seen| https://t.me/cibsecurity/71094 2025-02-14 10:09:21+00:00| seen| Telegram/NXVcfDJscgjnH3CFgjwgOP6uWs2dKvWipptCcMdfhETbcCtS...

CVE-2023-38146

creationtimestamp| type| source ---|---|--- 2023-09-12 20:29:23+00:00| seen| https://t.me/cibsecurity/70331 2023-09-14 12:39:51+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5133 2023-09-14 12:49:46+00:00| published-proof-of-concept| https://t.me/arvinclub1/750 2023-09-14...

CVE-2023-41642

creationtimestamp| type| source ---|---|--- 2023-08-31 18:13:03+00:00| seen| https://t.me/cibsecurity/69546 2023-10-11 03:19:16+00:00| published-proof-of-concept| https://t.me/codeb0ss/1231 2023-10-22 22:26:28+00:00| published-proof-of-concept| Telegram/7a7fweCj36f2cd-3XHNsj84vMqrUUzQeix11cFhtTPw...

CVE-2023-41266

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...

CVE-2023-41265

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...

Path traversal

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...

CVE-2023-32002

creationtimestamp| type| source ---|---|--- 2023-08-21 20:41:15+00:00| seen| https://t.me/cibsecurity/68899 2024-02-09 17:56:48+00:00| seen| https://t.me/ctinow/182169 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08 2025-02-11 18:08:38+00:00| seen|...

CVE-2023-34124

creationtimestamp| type| source ---|---|--- 2023-07-13 15:09:07+00:00| seen| https://t.me/truesecator/4611 2023-08-21 21:23:47+00:00| published-proof-of-concept| https://t.me/proxybar/1692 2023-09-08 10:11:37+00:00| seen|...

CVE-2023-34192

creationtimestamp| type| source ---|---|--- 2023-07-06 20:20:39+00:00| seen| https://t.me/cibsecurity/66147 2023-07-17 15:17:53+00:00| exploited| https://t.me/ctinow/124273 2023-08-20 14:30:22+00:00| published-proof-of-concept| https://t.me/MrVGunz/843 2025-02-25 16:23:14+00:00| seen|...

CVE-2023-21237

creationtimestamp| type| source ---|---|--- 2023-06-28 22:19:19+00:00| seen| https://t.me/cibsecurity/65664 2024-03-05 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-03-06 13:41:52+00:00| exploited| https://t.me/informationsecuritychannel/51677 2024-03-24 21:16:55+00:00| see...

BlackCat Ransomware Deploys New Signed Kernel Driver

In this blog post, we will provide details on a BlackCat ransomware incident that occurred in February 2023, where we observed a new capability, mainly used for the defense evasion phase...

CVE-2023-24955

creationtimestamp| type| source ---|---|--- 2023-05-09 22:44:55+00:00| seen| https://t.me/cibsecurity/63677 2023-05-10 13:00:06+00:00| seen| https://t.me/truesecator/4360 2023-09-30 12:17:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9116 2023-12-15 08:55:17+00:00|...

CVE-2023-1585

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use TOCTOU vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later...

CVE-2023-29084

creationtimestamp| type| source ---|---|--- 2023-04-16 01:03:19+00:00| published-proof-of-concept| https://t.me/cKure/10917 2023-04-16 12:59:50+00:00| published-proof-of-concept| https://t.me/RespaldoHackingTeam/1201 2023-04-16 16:39:36+00:00| published-proof-of-concept|...

CVE-2023-26065

Certain Lexmark devices through 2023-02-19 have an Integer Overflow...

Design/Logic Flaw

An authenticated attacker can leverage an exposed resource.db accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version o...