CVE-2023-6448

creationtimestamp| type| source ---|---|--- 2023-12-11 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-15 08:48:48+00:00| seen| MISP/c578cb44-e440-486d-80a4-8cf6256c1d53 2023-12-24 07:30:47+00:00| seen| https://t.me/arpsyndicate/2159 2024-01-15 09:02:20+00:00| seen|...

Building a Robust Threat Intelligence with Wazuh

Threat intelligence refers to gathering, processing, and analyzing cyber threats, along with proactive defensive measures aimed at strengthening security. It enables organizations to gain a comprehensive insight into historical, present, and anticipated threats, providing context about the...

CVE-2023-46355

In the module "CSV Feeds PRO" csvfeeds 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead t...

CVE-2023-46355

In the module "CSV Feeds PRO" csvfeeds 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead t...

Default credentials

In the module "CSV Feeds PRO" csvfeeds 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead t...

CVE-2023-46355

CVE-2023-46355—CSV Feeds PRO (PrestaShop) affects Bl Modules csvfeeds module prior to version 2.6.1. The root cause is overly permissive access control that does not require an administrator to authenticate when accessing feeds, allowing guests to download exports and potentially leak personal da...

CVE-2023-46355

In the module "CSV Feeds PRO" csvfeeds 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead t...

Missing sanity checks in Chainlink response

Lines of code Vulnerability details Summary Chainlink responses from price feeds are being used without any sanity checks. Impact The ChainlinkPriceOracle contract is used to interface with the Chainlink price feeds for the different LST assets in scope in the protocol. The current implementation...

CVE-2023-47246

creationtimestamp| type| source ---|---|--- 2023-11-09 14:10:24+00:00| exploited| https://t.me/informationsecuritychannel/50972 2023-11-09 16:08:00+00:00| seen| https://t.me/ctinow/148364 2023-11-09 17:17:30+00:00| exploited| https://t.me/CyberWatchinsider/190 2023-11-09 17:33:49+00:00| seen|...

CVE-2023-46356

In the module "CSV Feeds PRO" csvfeeds before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method SearchApiCsv::getProducts has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection...

CVE-2023-46356

In the module "CSV Feeds PRO" csvfeeds before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method SearchApiCsv::getProducts has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection...

CVE-2023-46356

In the module "CSV Feeds PRO" csvfeeds before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method SearchApiCsv::getProducts has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection...

Sql injection

In the module "CSV Feeds PRO" csvfeeds before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method SearchApiCsv::getProducts has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop CSV Feeds PRO prior to version 2.6.1, which stems from the...

CVE-2023-46356

CVE-2023-46356 affects PrestaShop module CSV Feeds PRO prior to 2.6.1. The vulnerability is a SQL injection in SearchApiCsv::getProducts(), exploitable by a guest via a trivial HTTP request due to a sensitive SQL call. Impact is high (potential data compromise/alteration and service disruption) a...

CVE-2023-46356

In the module "CSV Feeds PRO" csvfeeds before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method SearchApiCsv::getProducts has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection...

PT-2023-29976 · Prestashop · Csv Feeds Pro

Name of the Vulnerable Software and Affected Versions: PrestaShop module CSV Feeds PRO versions prior to 2.6.1 Description: The issue allows a guest to perform SQL injection due to a sensitive SQL call in the SearchApiCsv::getProducts method. This can be exploited with a trivial HTTP call, allowi...

CVE-2023-46356

In the module "CSV Feeds PRO" csvfeeds before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method SearchApiCsv::getProducts has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection...

CVE-2023-46604

creationtimestamp| type| source ---|---|--- 2023-10-27 18:17:07+00:00| seen| https://t.me/cibsecurity/73057 2023-11-01 20:42:27+00:00| seen| MISP/f9c19fe0-d99a-4345-8423-5635b5d8bf1f 2023-11-02 05:37:58+00:00| exploited| https://t.me/thehackernews/4088 2023-11-02 06:01:02+00:00|...

CVE-2023-46748

creationtimestamp| type| source ---|---|--- 2023-10-27 00:18:13+00:00| seen| https://t.me/cibsecurity/73014 2023-10-31 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-01 09:43:20+00:00| exploited| https://t.me/itsecnews/3578 2023-11-01 10:48:35+00:00| exploited|...