CVE-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR...

CVE-2025-20236

creationtimestamp| type| source ---|---|--- 2025-04-16 18:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349133435273045 2025-04-16 20:14:24+00:00| seen| https://t.me/cvedetector/23135 2025-04-17 03:18:34+00:00| seen|...

CVE-2024-7102

creationtimestamp| type| source ---|---|--- 2025-02-13 01:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzjaojbha2x 2025-02-13 02:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113994296216432932 2025-02-13 04:25:08+00:00| seen|...

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 27, 2025 to February 2, 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

CVE-2024-54499

creationtimestamp| type| source ---|---|--- 2025-01-27 22:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxptz2bi2i 2025-01-28 06:23:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113904542375076518 2025-03-18 04:00:00+00:00| seen|...

CVE-2024-13079

creationtimestamp| type| source ---|---|--- 2024-12-31 19:36:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113749118548440059 2024-12-31 20:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lemug2qbr225 2024-12-31 22:05:55+00:00| seen|...

CVE-2024-11120 GeoVision EOL devices - OS Command Injection

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received relat...

CVE-2024-11120

Certain EOL GeoVision devices have an OS Command Injection vulnerability. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device. Moreover, this vulnerability has already been exploited by attackers, and we have received relat...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 26, 2024 to September 1, 2024)

Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Through October 7th, 2024, XSS vulnerabilities in all plugins and themes with =1,000 Active Installs are in scope for all researchers. In addition, through October 14th, 2024, researchers c...

Rapid7 Infuses Generative AI into the InsightPlatform to Supercharge SecOps and Augment MDR Services

In the ever-evolving landscape of cybersecurity, staying ahead of threats is not just a goal—it's a necessity. At Rapid7, we are pioneering the infusion of artificial intelligence AI into our platform and service offerings, transforming the way security operations centers SOCs around the globe...

CVE-2023-48788

creationtimestamp| type| source ---|---|--- 2024-03-12 16:26:39+00:00| seen| https://t.me/ctinow/205806 2024-03-12 16:32:08+00:00| seen| https://t.me/ctinow/205822 2024-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1246 2024-03-13 15:30:05+00:00| seen|...

BIT-GITLAB-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR...

How AI hallucinations are making bug hunting harder

Bug bounty programs that pay people for finding bugs are a very useful tool for improving the security of software. But with the availability of artificial intelligence AI as seen in the popular large language models LLMs like ChatGPT, Bard, and others it looks like there is a new problem on the...

CVE-2023-4863

creationtimestamp| type| source ---|---|--- 2023-09-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1106 2023-09-12 05:06:39+00:00| exploited| https://t.me/cKure/11554 2023-09-12 07:20:18+00:00| exploited| https://t.me/thehackernews/3855 2023-09-12 08:09:15+00:00|...

CVE-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR...

Authorization

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR...

CVE-2023-1167

Removed by vendor...

CVE-2023-1167

CVE-2023-1167 : Improper authorization in GitLab EE/CE allows unauthorized access to security reports in Merge Requests. Affected versions include GitLab EE/CE: 12.3.0 up to before 15.8.5, 15.9 up to before 15.9.4, and 15.10 up to before 15.10.1. The issue is documented across multiple sources (N...

CVE-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR...

CVE-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR...