2009 matches found
CVE-2023-33758
creationtimestamp| type| source ---|---|--- 2024-01-25 09:26:28+00:00| seen| https://t.me/ctinow/173337 2024-01-26 15:43:12+00:00| seen| https://t.me/arpsyndicate/2989 2024-01-31 23:16:59+00:00| seen| https://t.me/ctinow/177171 2024-02-18 13:41:44+00:00| seen| https://t.me/ctinow/187246 2025-06-2...
DRUPAL-CONTRIB-2024-003
This module enables you to allow and/or require users to use a second authentication method in addition to password authentication. In some cases, the module allows users to log in with an authentication plugin that an administrator has disabled. This vulnerability is mitigated by the fact that a...
Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-003
This module enables you to allow and/or require users to use a second authentication method in addition to password authentication. In some cases, the module allows users to log in with an authentication plugin that an administrator has disabled. This vulnerability is mitigated by the fact that a...
CVE-2023-52325
A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in PrestaShop due to an SQL injection vulnerability in the JmsSetting::getSecondImgs...
CVE-2023-48248
creationtimestamp| type| source ---|---|--- 2024-01-10 12:21:59+00:00| seen| https://t.me/ctinow/165742 2024-01-28 10:26:56+00:00| seen| https://t.me/ctinow/174888...
CVE-2023-39853
creationtimestamp| type| source ---|---|--- 2024-01-06 05:31:41+00:00| seen| https://t.me/ctinow/163819 2024-01-11 17:17:11+00:00| seen| https://t.me/ctinow/166653 2024-01-25 00:21:22+00:00| seen| https://t.me/ctinow/173180...
CVE-2024-21623
creationtimestamp| type| source ---|---|--- 2024-01-02 22:26:53+00:00| seen| https://t.me/ctinow/162057 2024-01-03 01:37:28+00:00| seen| https://t.me/cibsecurity/74203 2024-01-08 23:17:28+00:00| seen| https://t.me/ctinow/164700 2026-05-31 14:07:25+00:00| seen|...
CVE-2023-27172
creationtimestamp| type| source ---|---|--- 2024-01-02 19:16:26+00:00| seen| https://t.me/ctinow/161955 2024-01-13 11:21:57+00:00| seen| https://t.me/ctinow/167801...
DEBIAN-CVE-2023-4641
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from...
UBUNTU-CVE-2023-4641
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from...
CVE-2023-48690
creationtimestamp| type| source ---|---|--- 2023-12-21 22:27:24+00:00| seen| https://t.me/ctinow/158003 2023-12-29 17:17:08+00:00| seen| https://t.me/ctinow/160604...
[SECURITY] [DLA 3684-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-3684-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 07, 2023 https://wiki.debian.org/LTS -...
CVE-2023-46474
creationtimestamp| type| source ---|---|--- 2023-12-06 13:22:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6097 2024-01-12 00:07:06+00:00| seen| https://t.me/ctinow/166946 2024-01-12 08:18:50+00:00| published-proof-of-concept| https://t.me/CNArsenal/1831 2024-01-14...
Diamond Sleet supply chain compromise distributes a modified CyberLink installer
Microsoft Threat Intelligence has uncovered a supply chain attack by the North Korea-based threat actor Diamond Sleet ZINC involving a malicious variant of an application developed by CyberLink Corp., a software company that develops multimedia software products. This malicious file is a legitima...
USN-6504-1: tracker-miners vulnerability
It was discovered that tracker-miners incorrectly handled sandboxing. If a second security issue was discovered in tracker-miners, an attacker could possibly use this issue in combination with it to escape the sandbox...
split-second.ca Cross Site Scripting vulnerability OBB-3784346
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
kernel: net/mlx5e: Don't clone flow post action attributes second time
A use-after-free flaw was discovered in the Linux kernel’s mlx5e networking driver. The code erroneously cloned flow post action attributes a second time in mlx5etcpostactadd despite an earlier clone in mlx5ecloneflowattrforpostact. This second clone is not properly updated during neighbor update...
shadow-utils: possible password leak during passwd(1) change
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from...
