{"vulnerability": "2023-05", "sightings": [{"uuid": "c5e3e449-cb6e-4333-ad6e-c8e5e299db4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0527", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51494", "content": "", "creation_timestamp": "2023-05-31T00:00:00.000000Z"}, {"uuid": "f76515d0-62cc-4d7c-bbbb-42ccd4cae138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0552", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-05)", "content": "", "creation_timestamp": "2025-02-05T00:00:00.000000Z"}, {"uuid": "6048aa87-fd26-4ed5-aa9b-949ce2e495aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0590", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "67729965-7e95-491c-8197-2a0b5295eb74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0568", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02", "content": "", "creation_timestamp": "2026-01-27T11:00:00.000000Z"}, {"uuid": "a323a856-f9ca-46c4-b96d-6a59ffb0db02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0567", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02", "content": "", "creation_timestamp": "2026-01-27T11:00:00.000000Z"}, {"uuid": "78590d42-4228-4f2c-bf66-d3d3df34c075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0545", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/733", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0545\n\ud83d\udd39 Description: The Hostel WordPress plugin before 1.1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2023-06-05T13:38:58.659Z\n\ud83d\udccf Modified: 2025-01-08T17:06:22.275Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b604afc8-61d0-4e98-8950-f3d29f9e9ee1", "creation_timestamp": "2025-01-08T17:12:55.000000Z"}, {"uuid": "f288b639-b000-4c80-a7b3-37f693bff056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0598", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2056", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0598\n\ud83d\udd39 Description: \nGE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software. \n\n\n\ud83d\udccf Published: 2023-03-16T19:13:52.427Z\n\ud83d\udccf Modified: 2025-01-16T21:41:46.328Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-03\n2. https://digitalsupport.ge.com/s/article/iFIX-Secure-Deployment-Guide?language=en_US", "creation_timestamp": "2025-01-16T21:56:25.000000Z"}, {"uuid": "02cf7c1f-e094-49a4-8737-c6ac4163c473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0520", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0520\n\ud83d\udd39 Description: The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vulnerability which could be used against high-privilege users such as admin, furthermore lack of csrf protection means an attacker can trick a logged in admin to perform the attack by submitting a hidden form.\n\ud83d\udccf Published: 2023-05-15T12:15:38.396Z\n\ud83d\udccf Modified: 2025-01-24T20:55:12.178Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/be4f7ff9-af79-477b-9f47-e40e25a3558e", "creation_timestamp": "2025-01-24T21:05:15.000000Z"}, {"uuid": "ef237357-9fff-4058-a408-ceb4d7843a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0507", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6888", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0507\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Grafana is an open-source platform for monitoring and observability. \n\nStarting with the 8.1 branch, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. \n\nThe stored XSS vulnerability was possible due to map attributions weren't properly sanitized and allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance. \n\nAn attacker needs to have the Editor role in order to change a panel to include a map attribution containing JavaScript. \n\nThis means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. \n\nUsers may upgrade to version 8.5.21, 9.2.13 and 9.3.8 to receive a fix.\n\ud83d\udccf Published: 2023-03-01T15:35:55.259Z\n\ud83d\udccf Modified: 2025-03-07T19:33:21.129Z\n\ud83d\udd17 References:\n1. https://grafana.com/security/security-advisories/cve-2023-0507/\n2. https://security.netapp.com/advisory/ntap-20230413-0001/", "creation_timestamp": "2025-03-07T20:40:37.000000Z"}, {"uuid": "030613f7-4147-4e7d-b7b9-2e8f9fd2234f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0594", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6887", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0594\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Grafana is an open-source platform for monitoring and observability. \n\nStarting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. \n\nThe stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this will be rendered when the span's attributes/resources are expanded.\n\nAn attacker needs to have the Editor role in order to change the value of a trace view visualization to contain JavaScript. \n\nThis means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. \n\nUsers may upgrade to version 8.5.21, 9.2.13 and 9.3.8 to receive a fix. \n\n\n\ud83d\udccf Published: 2023-03-01T15:36:43.881Z\n\ud83d\udccf Modified: 2025-03-07T19:34:28.387Z\n\ud83d\udd17 References:\n1. https://grafana.com/security/security-advisories/cve-2023-0594/", "creation_timestamp": "2025-03-07T20:40:33.000000Z"}, {"uuid": "158abf96-4fdd-4c83-855d-5960d53f667d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0597", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7362", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0597\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory.\n\ud83d\udccf Published: 2023-02-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T19:17:33.462Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/linus/97e3d26b5e5f371b3ee223d94dd123e6c442ba80\n2. http://www.openwall.com/lists/oss-security/2023/07/28/1", "creation_timestamp": "2025-03-12T19:41:07.000000Z"}, {"uuid": "f20bbbec-626a-416c-b515-e570f795a7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0541", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7372", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0541\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GS Books Showcase WordPress plugin before 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-21T08:50:54.939Z\n\ud83d\udccf Modified: 2025-03-12T20:27:51.775Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8453e587-cc8c-491a-af09-fc4ab215134b", "creation_timestamp": "2025-03-12T20:42:31.000000Z"}, {"uuid": "67ae1c49-fcbb-4dea-ab74-68937af83b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0519", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9649", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0519\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.\n\ud83d\udccf Published: 2023-01-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T14:28:28.435Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/891ad0cb-d12f-4c5e-aac8-d7326caf2129\n2. https://github.com/modoboa/modoboa/commit/eef9ab72b5305578a3ad7a7463bd284aa645e98b", "creation_timestamp": "2025-03-31T14:31:53.000000Z"}, {"uuid": "5130fb97-93ad-41fe-af55-b4425a160707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0512", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9715", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0512\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.\n\ud83d\udccf Published: 2023-01-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T16:44:58.673Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74\n2. https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835\n3. https://support.apple.com/kb/HT213677\n4. https://support.apple.com/kb/HT213675\n5. https://support.apple.com/kb/HT213670\n6. http://seclists.org/fulldisclosure/2023/Mar/17\n7. http://seclists.org/fulldisclosure/2023/Mar/18\n8. http://seclists.org/fulldisclosure/2023/Mar/21\n9. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/", "creation_timestamp": "2025-03-31T17:31:07.000000Z"}, {"uuid": "d8f364ec-840c-4d68-8dbb-67956a09eae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0509", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0509\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.\n\ud83d\udccf Published: 2023-01-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T16:45:30.444Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/a370e0c2-a41c-4871-ad91-bc6f31a8e839\n2. https://github.com/pyload/pyload/commit/a9098bdf7406e6faf9df3da6ff2d584e90c13bbb", "creation_timestamp": "2025-03-31T17:31:05.000000Z"}, {"uuid": "64507d3d-7183-4db0-8b1a-1dfb0ac92c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0597", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3640\n\ud83d\udd25 CVSS Score: 7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.\n\ud83d\udccf Published: 2023-07-24T15:19:29.983Z\n\ud83d\udccf Modified: 2025-04-15T11:40:03.124Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:6583\n2. https://access.redhat.com/security/cve/CVE-2023-3640\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2217523", "creation_timestamp": "2025-04-15T11:55:55.000000Z"}, {"uuid": "c9c20ff5-3149-4faa-82e5-18ac5c504b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0535", "type": "seen", "source": "Telegram/Zb3ib3mfCdi-7lB8SDKP9FMa4-TYZbpQuB8Dq_H6x1dbi6-C", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "e9ba8693-6903-4099-b98b-96ea52bb5ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0582", "type": "seen", "source": "Telegram/M5Uaq7uo80VKT6zEzM58Elf77UEdLddsxT5KxWdxioRhO8wl", "content": "", "creation_timestamp": "2025-03-10T19:39:07.000000Z"}, {"uuid": "102f4e8b-ce82-4205-a9c3-a93c7c3cb9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0548", "type": "seen", "source": "Telegram/4UK_nw2uSlMGeRijGoXOQb4KV1bJm_reY1hqniR4BFXk7AUp", "content": "", "creation_timestamp": "2025-03-10T19:39:13.000000Z"}, {"uuid": "86e48605-b4f4-4787-b3e3-a07c49c31fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0504", "type": "seen", "source": "Telegram/HBoc_j6QgQPoKC77rB5Jv21mjSrlfa5USqqtDQSeOd-4kMFm", "content": "", "creation_timestamp": "2025-02-19T19:13:55.000000Z"}, {"uuid": "4a97fa69-0b9a-4146-9900-2450572ddd60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0505", "type": "seen", "source": "Telegram/Emv6GLAKCNS8RhJWiFCYAw202nA5xdl1geTtUPnYnAQqHP09", "content": "", "creation_timestamp": "2025-02-20T01:27:44.000000Z"}, {"uuid": "b28c8cb9-7202-4718-b204-64e693a1222a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0523", "type": "seen", "source": "Telegram/ENfajmR4_9Bd2vioNkIHXp1i99pSBNkb6Ar8h982vJVXczW1", "content": "", "creation_timestamp": "2025-02-14T10:00:36.000000Z"}, {"uuid": "300514fb-94e0-4fc2-9478-46ba3ce249d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0565", "type": "seen", "source": "https://t.me/arpsyndicate/3051", "content": "#ExploitObserverAlert\n\nCVE-2023-0565\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2023-0565. Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.\n\nFIRST-EPSS: 0.000510000\nNVD-IS: 3.6\nNVD-ES: 1.2", "creation_timestamp": "2024-01-26T20:05:58.000000Z"}, {"uuid": "d03866eb-84bb-4a62-b0cb-7d490f892963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0566", "type": "seen", "source": "https://t.me/arpsyndicate/3068", "content": "#ExploitObserverAlert\n\nCVE-2023-0566\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to CVE-2023-0566. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.\n\nFIRST-EPSS: 0.000510000\nNVD-IS: 2.7\nNVD-ES: 1.7", "creation_timestamp": "2024-01-26T20:55:25.000000Z"}, {"uuid": "9265268e-eb24-4e24-bf89-2bc526676243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0572", "type": "seen", "source": "https://t.me/arpsyndicate/3104", "content": "#ExploitObserverAlert\n\nCVE-2023-0572\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to CVE-2023-0572. Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.\n\nFIRST-EPSS: 0.000530000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2024-01-26T22:56:43.000000Z"}, {"uuid": "f8032708-3b63-4090-b17a-e4c7ba23c769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0564", "type": "seen", "source": "https://t.me/arpsyndicate/3028", "content": "#ExploitObserverAlert\n\nCVE-2023-0564\n\nDESCRIPTION: Exploit Observer has 4 entries in 4 file formats related to CVE-2023-0564. Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.\n\nFIRST-EPSS: 0.000540000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-26T18:13:00.000000Z"}, {"uuid": "5292bafd-e8b1-4cda-87b2-9645216cb4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0558", "type": "seen", "source": "https://t.me/arpsyndicate/2457", "content": "#ExploitObserverAlert\n\nCVE-2023-0558\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-0558. The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys.\n\nFIRST-EPSS: 0.001650000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T12:38:54.000000Z"}, {"uuid": "fafd807a-bb5c-43ea-b9ee-a7f96d8ab64d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0550", "type": "seen", "source": "https://t.me/arpsyndicate/1699", "content": "#ExploitObserverAlert\n\nCVE-2023-0550\n\nDESCRIPTION: Exploit Observer has 13 entries related to CVE-2023-0550. The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the fact that during menu item deletion/modification, the plugin does not verify that the post ID provided to the AJAX action is indeed a menu item. This makes it possible for authenticated attackers, with subscriber-level access or higher, to modify or delete arbitrary posts.\n\nFIRST-EPSS: 0.000510000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2023-12-11T04:34:27.000000Z"}, {"uuid": "7af718f9-2432-45ec-ad42-d51dc038e044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0597", "type": "seen", "source": "https://t.me/arpsyndicate/763", "content": "#ExploitObserverAlert\n\nCVE-2023-3640\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-3640. A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-11-29T15:54:06.000000Z"}, {"uuid": "c14df8a4-84b3-404d-a4bd-8c51ac7de2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-05857", "type": "seen", "source": "Telegram/IkaXyGRzjLGciKhOw34Boi3zU16le4mKP46Wn6noa9q_CRI", "content": "", "creation_timestamp": "2024-06-02T04:21:22.000000Z"}, {"uuid": "bfafdf58-da33-4821-a69c-8c96e184470c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0506", "type": "seen", "source": "https://t.me/cibsecurity/71517", "content": "\u203c CVE-2023-0506 \u203c\n\nThe web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T18:46:27.000000Z"}, {"uuid": "b65b7c5d-730f-48f1-9cd7-820336779a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0551", "type": "seen", "source": "https://t.me/cibsecurity/68641", "content": "\u203c CVE-2023-0551 \u203c\n\nThe REST API TO MiniProgram WordPress plugin through 4.6.1 does not have authorisation and CSRF checks in an AJAX action, allowing ay authenticated users, such as subscriber to call and delete arbitrary attachments\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T16:50:29.000000Z"}, {"uuid": "f5986c0d-9ef6-48cd-8a70-53663be5b604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0525", "type": "seen", "source": "https://t.me/cibsecurity/67740", "content": "\u203c CVE-2023-0525 \u203c\n\nWeak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions 01.49.000 and prior, GS21 model versions 01.49.000 and prior, GT Designer3 Version1 (GOT2000) versions 1.295H and prior and GT SoftGOT2000 versions 1.295H and prior allows a remote unauthenticated attacker to obtain plaintext passwords by sniffing packets containing encrypted passwords and decrypting the encrypted passwords, in the case of transferring data with GT Designer3 Version1(GOT2000) and GOT2000 Series or GOT SIMPLE Series with the Data Transfer Security function enabled, or in the case of transferring data by the SoftGOT-GOT link function with GT SoftGOT2000 and GOT2000 series with the Data Transfer Security function enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:37.000000Z"}, {"uuid": "1f8fff33-ad36-4b91-bc3a-ece20fbe0067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0597", "type": "seen", "source": "https://t.me/cibsecurity/67157", "content": "\u203c CVE-2023-3640 \u203c\n\nA possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-24T20:26:12.000000Z"}, {"uuid": "c4212a73-53d6-4717-bfa3-0dc1ce6b3da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0547", "type": "seen", "source": "https://t.me/cibsecurity/64921", "content": "\u203c CVE-2023-0547 \u203c\n\nOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T20:39:35.000000Z"}, {"uuid": "4009394d-f726-4aaf-b747-67c8755dc070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0520", "type": "seen", "source": "https://t.me/cibsecurity/64129", "content": "\u203c CVE-2023-0520 \u203c\n\nThe RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vulnerability which could be used against high-privilege users such as admin, furthermore lack of csrf protection means an attacker can trick a logged in admin to perform the attack by submitting a hidden form.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:43:22.000000Z"}, {"uuid": "064d8d3f-a97b-42dc-87bb-82e0e0f2ece4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0522", "type": "seen", "source": "https://t.me/cibsecurity/63443", "content": "\u203c CVE-2023-0522 \u203c\n\nThe Enable/Disable Auto Login when Register WordPress plugin through 1.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T18:37:59.000000Z"}, {"uuid": "4a34000b-fa8a-4166-9216-5d1c35878e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0537", "type": "seen", "source": "https://t.me/cibsecurity/63428", "content": "\u203c CVE-2023-0537 \u203c\n\nThe Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T18:37:37.000000Z"}, {"uuid": "f7d2d5f6-7d86-461a-bfe2-4a89929243cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0546", "type": "seen", "source": "https://t.me/cibsecurity/61771", "content": "\u203c CVE-2023-0546 \u203c\n\nThe Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in iframes in it's custom HTML field type, allowing a logged in user with roles as low as contributor to inject arbitrary javascript into a form which will trigger for any visitor to the form or admins previewing or editing the form.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:39:02.000000Z"}, {"uuid": "f134c0e1-18db-4019-9f08-8a9710a36251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0580", "type": "seen", "source": "https://t.me/cibsecurity/61570", "content": "\u203c CVE-2023-0580 \u203c\n\nInsecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T20:27:09.000000Z"}, {"uuid": "987c116f-3c4b-462c-ab07-32868b75529b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0523", "type": "seen", "source": "https://t.me/cibsecurity/61519", "content": "\u203c CVE-2023-0523 \u203c\n\nAn issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS was possible via a malicious email address for certain instances.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T00:26:51.000000Z"}, {"uuid": "b7942bf3-81eb-4149-8a9c-e0e9852dbdc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0589", "type": "seen", "source": "https://t.me/cibsecurity/60799", "content": "\u203c CVE-2023-0589 \u203c\n\nThe WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:49:57.000000Z"}, {"uuid": "29f81b35-23ae-40dc-aa74-4702475be11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0502", "type": "seen", "source": "https://t.me/cibsecurity/60814", "content": "\u203c CVE-2023-0502 \u203c\n\nThe WP News WordPress plugin through 1.1.9 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:15.000000Z"}, {"uuid": "9b82aaa4-4252-4846-ac17-d7af418566a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0590", "type": "seen", "source": "https://t.me/cibsecurity/60621", "content": "\u203c CVE-2023-0590 \u203c\n\nA use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 (\"net: sched: fix race condition in qdisc_graft()\") not applied yet, then kernel could be affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T23:37:01.000000Z"}, {"uuid": "675fadec-1468-4d14-81c4-7acc1aa356e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0598", "type": "seen", "source": "https://t.me/cibsecurity/60202", "content": "\u203c CVE-2023-0598 \u203c\n\nGE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T23:30:58.000000Z"}, {"uuid": "8af676d5-4f6e-43ad-a049-1e1bbe3acc9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0538", "type": "seen", "source": "https://t.me/cibsecurity/59909", "content": "\u203c CVE-2023-0538 \u203c\n\nThe Campaign URL Builder WordPress plugin before 1.8.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T19:23:11.000000Z"}, {"uuid": "3ba3de67-5001-4eb1-ab1d-09ee51496a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0576", "type": "seen", "source": "https://t.me/cibsecurity/57419", "content": "\u203c CVE-2023-0576 \u203c\n\nServer-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in Yugabyte DB allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte DB: v2.17.0.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:10.000000Z"}, {"uuid": "ee93f546-550d-4d68-802a-fb2b28be6dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0599", "type": "seen", "source": "https://t.me/cibsecurity/57370", "content": "\u203c CVE-2023-0599 \u203c\n\nRapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization. Using this vulnerability, an authenticated attacker can execute arbitrary HTML and script code in the target browser against another Metasploit Pro user using a specially crafted request. Note that in most deployments, all Metasploit Pro users tend to enjoy privileges equivalent to local administrator.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T02:14:22.000000Z"}, {"uuid": "40605ea8-a1f3-4ae1-a24f-1c7573ac9e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0507", "type": "seen", "source": "https://t.me/cibsecurity/59247", "content": "\u203c CVE-2023-0507 \u203c\n\nGrafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch, Grafana had a stored XSS vulnerability affecting the core plugin GeoMap. The stored XSS vulnerability was possible due to map attributions weren't properly sanitized and allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance. An attacker needs to have the Editor role in order to change a panel to include a map attribution containing JavaScript. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. Users may upgrade to version 8.5.21, 9.2.13 and 9.3.8 to receive a fix.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T18:33:48.000000Z"}, {"uuid": "4bba9ad7-3e9e-4cdc-b7e6-be51fbe10486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0594", "type": "seen", "source": "https://t.me/cibsecurity/59243", "content": "\u203c CVE-2023-0594 \u203c\n\nGrafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this will be rendered when the span's attributes/resources are expanded. An attacker needs to have the Editor role in order to change the value of a trace view visualization to contain JavaScript. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. Users may upgrade to version 8.5.21, 9.2.13 and 9.3.8 to receive a fix.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T18:33:44.000000Z"}, {"uuid": "219ad619-ab57-43ae-9e16-a881ee6ba135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0585", "type": "seen", "source": "https://t.me/cibsecurity/58879", "content": "\u203c CVE-2023-0585 \u203c\n\nThe All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Administrator role or above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T18:19:26.000000Z"}, {"uuid": "0533e5e0-4bee-4284-8e09-9557fa87d251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0586", "type": "seen", "source": "https://t.me/cibsecurity/58881", "content": "\u203c CVE-2023-0586 \u203c\n\nThe All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Contributor+ role to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T18:19:28.000000Z"}, {"uuid": "620875a9-1803-431d-9394-b7d4d1d112a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0595", "type": "seen", "source": "https://t.me/cibsecurity/58862", "content": "\u203c CVE-2023-0595 \u203c\n\nA CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T14:49:15.000000Z"}, {"uuid": "f3360fd7-9731-49c0-bc20-e4784dcfdf6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0597", "type": "seen", "source": "https://t.me/cibsecurity/58804", "content": "\u203c CVE-2023-0597 \u203c\n\nA flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T22:18:26.000000Z"}, {"uuid": "c401b66c-7be5-4e30-b1ca-01b066bf0cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0559", "type": "seen", "source": "https://t.me/cibsecurity/58565", "content": "\u203c CVE-2023-0559 \u203c\n\nThe GS Portfolio for Envato WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:37.000000Z"}, {"uuid": "c191b030-8688-45a5-a623-26e6aa20a74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0568", "type": "seen", "source": "https://t.me/cibsecurity/58307", "content": "\u203c CVE-2023-0568 \u203c\n\nIn PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T12:37:15.000000Z"}, {"uuid": "5ec39161-0095-412b-a318-ffe39e85ed6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0574", "type": "seen", "source": "https://t.me/cibsecurity/57824", "content": "\u203c CVE-2023-0574 \u203c\n\nServer-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0 through 2.13.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T18:25:56.000000Z"}, {"uuid": "cb5223b8-6263-4fa5-841e-dfd339fd3073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0575", "type": "seen", "source": "https://t.me/cibsecurity/57848", "content": "\u203c CVE-2023-0575 \u203c\n\nExternal Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py. This issue affects Yugabyte DB: Lesser then 2.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:21.000000Z"}, {"uuid": "5cb157f7-99de-4fe2-88b8-f1da0888a1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0591", "type": "seen", "source": "https://t.me/cibsecurity/57217", "content": "\u203c CVE-2023-0591 \u203c\n\nubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the process has write access to that file or directory). This is due to the fact that a node name (dent_node.name) is considered trusted and joined to the extraction directory path during processing, then the node content is written to that joined path. By crafting a malicious UBIFS file with node names holding path traversal payloads (e.g. ../../tmp/outside.txt), it's possible to force ubi_reader to write outside of the extraction directory. This issue affects ubi-reader before 0.8.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T12:38:07.000000Z"}, {"uuid": "6287c68b-e40e-4b7a-a6ad-241414d5c980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0593", "type": "seen", "source": "https://t.me/cibsecurity/57216", "content": "\u203c CVE-2023-0593 \u203c\n\nA path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction directory. This issue affects yaffshiv up to version 0.1 included, which is the most recent at time of publication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T12:38:06.000000Z"}, {"uuid": "b29cb144-d65d-4dea-81f8-d6fbe6c342c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0587", "type": "seen", "source": "https://t.me/cibsecurity/57251", "content": "\u203c CVE-2023-0587 \u203c\n\nA file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory (i.e., \\PCCSRV\\TEMP\\SampleSubmission) on the server. The attacker can upload a large number of large files to fill up the file system on which the Apex One server is installed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T07:14:09.000000Z"}, {"uuid": "690f702e-c932-4770-800c-59e8389e78b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0592", "type": "seen", "source": "https://t.me/cibsecurity/57215", "content": "\u203c CVE-2023-0592 \u203c\n\nA path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T12:38:04.000000Z"}, {"uuid": "88d35427-999b-43f0-802c-a0b3589528e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0533", "type": "seen", "source": "https://t.me/cibsecurity/57032", "content": "\u203c CVE-2023-0533 \u203c\n\nA vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this issue is some unknown functionality of the file admin/expense_report.php. The manipulation of the argument from_date leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-219602 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T14:34:29.000000Z"}, {"uuid": "301f61a3-2e83-4e2b-9aac-e2575f51ce0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0534", "type": "seen", "source": "https://t.me/cibsecurity/57031", "content": "\u203c CVE-2023-0534 \u203c\n\nA vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file admin/expense_report.php. The manipulation of the argument to_date leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219603.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T14:34:27.000000Z"}, {"uuid": "5d0dc448-a51b-4381-a8a7-53f2f2e447bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0512", "type": "seen", "source": "https://t.me/cibsecurity/57167", "content": "\u203c CVE-2023-0512 \u203c\n\nDivide By Zero in GitHub repository vim/vim prior to 9.0.1247.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T18:36:14.000000Z"}, {"uuid": "a9cf3dc5-916f-44fe-bf38-9353492d99f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0581", "type": "seen", "source": "https://t.me/cibsecurity/57166", "content": "\u203c CVE-2023-0581 \u203c\n\nThe PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it possible for unauthenticated attackers to bypass any login restrictions that may prevent a brute force attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T18:36:13.000000Z"}, {"uuid": "464af019-9f00-4f37-a5f2-6170fb42bd88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0572", "type": "seen", "source": "https://t.me/cibsecurity/57136", "content": "\u203c CVE-2023-0572 \u203c\n\nUnchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T02:49:07.000000Z"}, {"uuid": "7a762ba2-6e13-4cca-8de7-f04b5e2fe4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0549", "type": "seen", "source": "https://t.me/cibsecurity/57113", "content": "\u203c CVE-2023-0549 \u203c\n\nA vulnerability, which was classified as problematic, has been found in YAFNET 3.1.9/3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.11 is able to address this issue. The name of the patch is 2237a9d552e258a43570bb478a92a5505e7c8797. It is recommended to upgrade the affected component. The identifier VDB-219665 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T22:34:46.000000Z"}, {"uuid": "de2d5264-120f-4a8f-8a27-d31bbccf6754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0563", "type": "seen", "source": "https://t.me/cibsecurity/57131", "content": "\u203c CVE-2023-0563 \u203c\n\nA vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219717 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-29T05:09:35.000000Z"}, {"uuid": "ce3179a8-6fb5-4711-9cb8-78338c1c7eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0562", "type": "seen", "source": "https://t.me/cibsecurity/57130", "content": "\u203c CVE-2023-0562 \u203c\n\nA vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-219716.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-29T02:35:45.000000Z"}, {"uuid": "79de4777-828b-4144-a9c0-739eb553e19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0532", "type": "seen", "source": "https://t.me/cibsecurity/57030", "content": "\u203c CVE-2023-0532 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/disapprove_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219601 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T14:34:26.000000Z"}, {"uuid": "14b381e1-8a52-4c0f-b2fe-e658687149c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0528", "type": "seen", "source": "https://t.me/cibsecurity/57029", "content": "\u203c CVE-2023-0528 \u203c\n\nA vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219597 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T14:34:25.000000Z"}, {"uuid": "070eac6b-d7d1-443b-b77b-46e2fa058e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0531", "type": "seen", "source": "https://t.me/cibsecurity/57028", "content": "\u203c CVE-2023-0531 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/booking_report.php. The manipulation of the argument to_date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219600.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T14:34:24.000000Z"}, {"uuid": "f5d99d94-2c84-4eca-a1c6-3e3a0463f72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0529", "type": "seen", "source": "https://t.me/cibsecurity/57027", "content": "\u203c CVE-2023-0529 \u203c\n\nA vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/add_payment.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219598 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T14:34:23.000000Z"}, {"uuid": "b8cd97e9-6fc9-482a-8590-355bd41320ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0527", "type": "seen", "source": "https://t.me/cibsecurity/57026", "content": "\u203c CVE-2023-0527 \u203c\n\nA vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. The manipulation of the argument searchdata with the input \">alert(document.domain) leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219596.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T14:34:22.000000Z"}, {"uuid": "e6f4077e-54a5-4786-ba77-f9e883e30149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0530", "type": "seen", "source": "https://t.me/cibsecurity/57025", "content": "\u203c CVE-2023-0530 \u203c\n\nA vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/approve_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219599.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T14:34:21.000000Z"}, {"uuid": "c4cf1156-9cfb-4f55-ad5f-48e2701cdae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0593", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7674", "content": "#exploit\n1. CVE-2022-4510, CVE-2023-0591,\nCVE-2023-0592, CVE-2023-0593:\nRCE in ReFirm Labs binwalk\nhttps://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk\n\n2. CVE-2023-23924:\nCritical-Severity RCE Flaw Found in Dompdf Library\nhttps://securityonline.info/cve-2023-23924-critical-severity-rce-flaw-found-in-popular-dompdf-library", "creation_timestamp": "2023-02-02T11:01:01.000000Z"}, {"uuid": "01eb0e04-2ea9-4819-b106-f145e1f89337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0592", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7674", "content": "#exploit\n1. CVE-2022-4510, CVE-2023-0591,\nCVE-2023-0592, CVE-2023-0593:\nRCE in ReFirm Labs binwalk\nhttps://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk\n\n2. CVE-2023-23924:\nCritical-Severity RCE Flaw Found in Dompdf Library\nhttps://securityonline.info/cve-2023-23924-critical-severity-rce-flaw-found-in-popular-dompdf-library", "creation_timestamp": "2023-02-02T11:01:01.000000Z"}, {"uuid": "20ad1d47-0c45-4f62-ad86-8ccdc3848180", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0552", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/036eaf0e-75d2-477e-a9c9-0cb7b1ef5e8a", "content": "", "creation_timestamp": "2026-06-23T14:06:13.885565Z"}, {"uuid": "7c732b4c-9bc5-47af-9a5b-791f19b1baba", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-0552", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2ca6966-fb27-42ac-8e30-7d01b3129894", "content": "", "creation_timestamp": "2026-06-30T09:23:52.605334Z"}]}