CVE-2024-2275

creationtimestamp| type| source ---|---|--- 2024-03-08 02:27:00+00:00| seen| https://t.me/ctinow/202961 2024-03-08 02:27:04+00:00| seen| https://t.me/ctinow/202964 2024-03-09 18:17:06+00:00| seen| https://t.me/ctinow/204036...

PT-2024-15171 · Kontrol +2 · Kontrol +3

Name of the Vulnerable Software and Affected Versions: Sciener firmware affected versions not specified Description: The issue concerns the use of a non-unique AES key in the pairing process between locks using Sciener firmware and wireless keypads. This key can be reused, potentially compromisin...

BIT-GITLAB-2023-4008 Incorrect Ownership Assignment in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible to takeover GitLab Pages with unique domain URLs if the random string added was known...

CVE-2022-46088

creationtimestamp| type| source ---|---|--- 2024-03-05 17:27:25+00:00| seen| https://t.me/ctinow/200469 2024-03-05 17:31:44+00:00| seen| https://t.me/ctinow/200472...

CVE-2023-52525

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:40+00:00| seen| https://t.me/ctinow/198503 2024-03-02 23:32:23+00:00| seen| https://t.me/ctinow/198523 2024-03-04 21:16:46+00:00| seen| https://t.me/ctinow/199595...

CVE-2023-52514

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:23+00:00| seen| https://t.me/ctinow/198492 2024-03-04 21:11:37+00:00| seen| https://t.me/ctinow/199587...

Cross-site Scripting (XSS)

Overview sidekiq-unique-jobs is a package containing unique jobs that were removed from sidekiq. Affected versions of this package are vulnerable to Cross-site Scripting XSS via filter functions. An attacker can obtain sensitive information from the application using this package, including...

CVE-2024-1941

creationtimestamp| type| source ---|---|--- 2024-03-01 02:26:39+00:00| seen| https://t.me/ctinow/197221 2024-03-01 02:31:08+00:00| seen| https://t.me/ctinow/197225...

Advice for manufacturers on the coming PSTI regulation

TL;DR PSTI: The UK Product Security and Telecommunications Infrastructure Product Security Act Regulations effective from 29 April 2024 Assess how, where, why, and when you may be affected Review supply chain and in-house teams for compliance readiness Specific obligations for manufacturers,...

Signal to shield user phone numbers by default

Chat app Signal will shield user’s phone numbers by default from now on. And, it will no longer be necessary to exchange phone numbers when people want to connect through the app. In November, we reported that Signal was testing usernames to eliminate the need to share your phone number. Signal h...

CVE-2023-3509

creationtimestamp| type| source ---|---|--- 2024-02-22 00:21:47+00:00| seen| https://t.me/ctinow/190235 2024-02-22 00:31:45+00:00| seen| https://t.me/ctinow/190242 2024-03-13 12:07:45+00:00| seen| https://t.me/ctinow/206615...

CVE-2023-6640

creationtimestamp| type| source ---|---|--- 2024-02-21 21:31:51+00:00| seen| https://t.me/ctinow/190087 2024-02-21 21:36:33+00:00| seen| https://t.me/ctinow/190097 2024-02-22 19:50:05+00:00| seen| https://t.me/arpsyndicate/4022...

Signal Introduces Usernames, Allowing Users to Keep Their Phone Numbers Private

End-to-end encrypted E2EE messaging app Signal said it's piloting a new feature that allows users to create unique usernames not to be confused with profile names and keep the phone numbers away from prying eyes. "If you use Signal, your phone number will no longer be visible to everyone you chat...

CVE-2023-47422

creationtimestamp| type| source ---|---|--- 2024-02-20 23:26:52+00:00| seen| https://t.me/ctinow/188998 2024-02-20 23:27:05+00:00| seen| https://t.me/ctinow/189006...

CVE-2024-25122

sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, bu...

Design/Logic Flaw

sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, bu...

CVE-2024-25122 Cross-site Scripting sidekiq-unique-jobs UI server vulnerability

sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, bu...

CVE-2024-25122 Cross-site Scripting sidekiq-unique-jobs UI server vulnerability

sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, bu...

CVE-2024-25122 Cross-site Scripting sidekiq-unique-jobs UI server vulnerability

sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, bu...

CVE-2024-25122

CVE-2024-25122 affects sidekiq-unique-jobs (admin UI) with a Cross-Site Scripting vulnerability exploitable via crafted GET parameters to /changelogs, /locks, or /expiring_locks. Public reports (GHSA, OSV, Red Hat, NVD) describe a reflected XSS that could exfiltrate cookies, sessions, or localSto...