4280 matches found
HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...
AZL-35295 CVE-2023-45853 affecting package tcl for versions less than 8.6.13-3
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...
CVE-2023-45109
creationtimestamp| type| source ---|---|--- 2023-10-13 18:29:10+00:00| seen| https://t.me/cibsecurity/72255...
CVE-2023-26366
creationtimestamp| type| source ---|---|--- 2023-10-13 12:28:48+00:00| seen| https://t.me/cibsecurity/72217...
CVE-2023-44995
creationtimestamp| type| source ---|---|--- 2023-10-10 20:16:43+00:00| seen| https://t.me/cibsecurity/71962...
CVE-2023-44261
creationtimestamp| type| source ---|---|--- 2023-10-10 14:30:09+00:00| seen| https://t.me/cibsecurity/71905...
CVE-2023-44766
creationtimestamp| type| source ---|---|--- 2023-10-06 16:26:46+00:00| seen| https://t.me/cibsecurity/71717...
CVE-2023-43072
creationtimestamp| type| source ---|---|--- 2023-10-05 22:13:12+00:00| seen| https://t.me/cibsecurity/71683...
CVE-2023-4491
creationtimestamp| type| source ---|---|--- 2023-10-04 16:11:58+00:00| seen| https://t.me/cibsecurity/71568...
CVE-2023-41244
creationtimestamp| type| source ---|---|--- 2023-10-03 18:46:20+00:00| seen| https://t.me/cibsecurity/71511...
CVE-2023-5298
A vulnerability was found in Tongda OA 2017. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/hr/recruit/requirements/delete.php. The manipulation of the argument REQUIREMENTSID leads to sql injection. The exploit has been disclosed to the...
CVE-2023-5287
creationtimestamp| type| source ---|---|--- 2023-09-30 00:37:59+00:00| seen| https://t.me/cibsecurity/71333...
CVE-2023-5264
A vulnerability classified as critical was found in huakecms 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/cmscontent.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...
CVE-2023-44466
creationtimestamp| type| source ---|---|--- 2023-09-29 12:37:40+00:00| seen| https://t.me/cibsecurity/71262...
CVE-2023-40375
creationtimestamp| type| source ---|---|--- 2023-09-28 22:36:58+00:00| seen| https://t.me/cibsecurity/71221...
CVE-2023-5222
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
CVE-2023-5002
creationtimestamp| type| source ---|---|--- 2023-09-22 18:31:52+00:00| seen| https://t.me/cibsecurity/70949...
CVE-2023-4094
creationtimestamp| type| source ---|---|--- 2023-09-19 18:29:30+00:00| seen| https://t.me/cibsecurity/70729...