{"vulnerability": "2023-14", "sightings": [{"uuid": "d42a3f10-3a9d-4a7d-a6f2-68fe2d81f76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1419", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113497810143520970", "content": "", "creation_timestamp": "2024-11-17T10:25:44.536876Z"}, {"uuid": "4259e583-4adc-4fcf-a0af-1db4defafe40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-05)", "content": "", "creation_timestamp": "2025-02-05T00:00:00.000000Z"}, {"uuid": "68783cb0-9c22-4bcf-9e68-7d63b7d97b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-21)", "content": "", "creation_timestamp": "2025-03-21T00:00:00.000000Z"}, {"uuid": "870e5694-b1b0-4a84-8570-eb358d43eef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-26)", "content": "", "creation_timestamp": "2025-03-26T00:00:00.000000Z"}, {"uuid": "78c42fcf-7b27-4de0-a578-886bfb419289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "ad18ac7b-583a-4ae5-96a5-8490dcd09dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "content": "", "creation_timestamp": "2025-04-07T00:00:00.000000Z"}, {"uuid": "9a54aeda-9752-4cba-b121-f917337aa048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-24)", "content": "", "creation_timestamp": "2025-04-24T00:00:00.000000Z"}, {"uuid": "33cf8e61-cfb7-4c89-9739-f943cde24346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "a5ed93ce-2b01-47b7-8a7c-49c3342373f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "content": "", "creation_timestamp": "2025-05-25T00:00:00.000000Z"}, {"uuid": "f0ae729b-6c0f-4cae-bd28-4b89182c8654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1486", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lseymlfjut2i", "content": "", "creation_timestamp": "2025-06-24T21:02:27.208983Z"}, {"uuid": "86085e70-a816-4704-8d2f-71dda85d3b69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2023-1496", "type": "seen", "source": "https://gist.github.com/an1msh/a3b1bba21074b5db9ba9569fcfb4f235", "content": "", "creation_timestamp": "2025-07-07T14:10:08.000000Z"}, {"uuid": "1b78fd97-342e-48b5-9037-f4dfb3df99c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "content": "", "creation_timestamp": "2025-09-19T00:00:00.000000Z"}, {"uuid": "3b8de24f-6a79-4483-8bf4-03b75c5ed066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1400", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyqetbokgu62", "content": "", "creation_timestamp": "2025-09-13T18:12:53.492638Z"}, {"uuid": "5b722526-a4dd-41ac-8a5f-bd2dd991cb00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1495", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lysbqnohhbs2", "content": "", "creation_timestamp": "2025-09-14T12:21:53.874038Z"}, {"uuid": "f5a09d3d-248a-4939-816f-90038a23ca5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1405", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lzyvtqsusa2i", "content": "", "creation_timestamp": "2025-09-29T21:02:20.089914Z"}, {"uuid": "2b8f8972-abe6-48d5-98b1-c2a796e56c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "9f3c1b4a-7e69-4c5f-9def-2903e9c6f149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "ba502df2-9714-4432-8891-b42d3b23bccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-07)", "content": "", "creation_timestamp": "2026-02-07T00:00:00.000000Z"}, {"uuid": "602e703e-9509-4e13-84cf-6a2c76bdceea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "content": "", "creation_timestamp": "2025-12-10T00:00:00.000000Z"}, {"uuid": "e8b5c15c-0d66-4319-8ca2-34d8308997b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-06)", "content": "", "creation_timestamp": "2026-01-06T00:00:00.000000Z"}, {"uuid": "0d07fe58-e372-416e-9b80-2dd5eb3b88fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "70800a00-04bb-402a-9aec-bab6402785c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "content": "", "creation_timestamp": "2026-01-12T00:00:00.000000Z"}, {"uuid": "0c10f341-9378-437c-9b09-f14ef115f640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "ca210551-e785-4344-a09a-1b6d0fc72c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-11)", "content": "", "creation_timestamp": "2026-04-11T00:00:00.000000Z"}, {"uuid": "38b050b3-cfd5-4aaf-b094-e4bd6c7faa98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}, {"uuid": "b4585b2a-7b19-49f3-8d85-e55ea0eb53f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4173", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u68c0\u6d4b\n\u63cf\u8ff0\uff1aCVE-2023-1454\u6f0f\u6d1e\u68c0\u6d4b\u811a\u672c\nURL\uff1ahttps://github.com/BugFor-Pings/CVE-2023-1454-POC\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u68c0\u6d4b", "creation_timestamp": "2023-04-13T19:58:22.000000Z"}, {"uuid": "2904a699-4170-40bf-9cf1-b42c22e9683a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4168", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-1454 jeecg-boot Unauthorized SQL injection vulnerability\nURL\uff1ahttps://github.com/CKevens/CVE-2023-1454-EXP\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-13T07:21:20.000000Z"}, {"uuid": "a607bd31-a418-44cd-ac5a-0ccba29e49d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4230", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1asql\u6ce8\u5165\n\u63cf\u8ff0\uff1aCVE-2023-1454,Jeecg-Boot \u524d\u53f0SQL\u6ce8\u5165,CVE-2023-1454\u6279\u91cf\u68c0\u6d4b\nURL\uff1ahttps://github.com/padbergpete47/CVE-2023-1454\n\n\u6807\u7b7e\uff1a#sql\u6ce8\u5165", "creation_timestamp": "2023-04-21T09:56:35.000000Z"}, {"uuid": "9819091d-a269-40cf-8a98-ec11024226b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4024", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1ajeecg-boot unauthorized SQL Injection Vulnerability (CVE-2023-1454)\nURL\uff1ahttps://github.com/gobysec/CVE-2023-1454\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-03-24T03:10:54.000000Z"}, {"uuid": "c868b9b0-c859-4a71-9ad3-e8ea5575987a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4174", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u68c0\u6d4b\n\u63cf\u8ff0\uff1aCVE-2023-1454\u6f0f\u6d1e\u68c0\u6d4b\u811a\u672c\nURL\uff1ahttps://github.com/BugFor-Pings/CVE-2023-1454\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u68c0\u6d4b", "creation_timestamp": "2023-04-13T20:41:25.000000Z"}, {"uuid": "e6198f0a-d959-4454-b6af-4c4b0f888ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6344", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aJeecgBoot SQL\uff08CVE-2023-1454\uff09\nURL\uff1ahttps://github.com/shad0w0sec/CVE-2023-1454-EXP\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-12-31T06:51:38.000000Z"}, {"uuid": "d3ec9bfb-cf4b-4463-a695-7a2dbebd4197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5505", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1436\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.\n\n\n\ud83d\udccf Published: 2023-03-16T20:59:51.072Z\n\ud83d\udccf Modified: 2025-02-26T15:02:24.639Z\n\ud83d\udd17 References:\n1. https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/", "creation_timestamp": "2025-02-26T15:26:08.000000Z"}, {"uuid": "60f21e98-340b-40d9-ac16-ab13319aaf2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1463", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5506", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1463\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.\n\ud83d\udccf Published: 2023-03-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T15:00:21.210Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/f6683c3b-a0f2-4615-b639-1920c8ae12e6\n2. https://github.com/nilsteampassnet/teampass/commit/4e06fbaf2b78c3615d0599855a72ba7e31157516", "creation_timestamp": "2025-02-26T15:26:09.000000Z"}, {"uuid": "76c32f54-91f4-499d-b055-201f42a15c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1450", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5517", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1450\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223295.\n\ud83d\udccf Published: 2023-03-17T06:47:51.148Z\n\ud83d\udccf Modified: 2025-02-26T14:48:56.132Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.223295\n2. https://vuldb.com/?ctiid.223295\n3. https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc\n4. https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc/blob/main/id_000005%2Csig_08%2Csrc_000166%2B000357%2Ctime_3137250%2Cexecs_3545598%2Cop_splice%2Crep_16", "creation_timestamp": "2025-02-26T15:26:25.000000Z"}, {"uuid": "c1d3ec14-90ec-4142-b186-3ca727e5c5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1448", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1448\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the file media_tools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223293 was assigned to this vulnerability.\n\ud83d\udccf Published: 2023-03-17T06:43:19.758Z\n\ud83d\udccf Modified: 2025-02-26T14:51:03.068Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.223293\n2. https://vuldb.com/?ctiid.223293\n3. https://github.com/gpac/gpac/issues/2388\n4. https://github.com/xxy1126/Vuln/blob/main/gpac/3", "creation_timestamp": "2025-02-26T15:26:24.000000Z"}, {"uuid": "d106923c-751f-4ae6-8939-455e8d44e42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1444", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5514", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1444\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability.\n\ud83d\udccf Published: 2023-03-17T06:33:20.430Z\n\ud83d\udccf Modified: 2025-02-26T14:53:46.761Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.223289\n2. https://vuldb.com/?ctiid.223289\n3. https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1444\n4. https://drive.google.com/file/d/1KrkezTwgmt5CnhzlyyWVNLIAeiMvuDEr/view", "creation_timestamp": "2025-02-26T15:26:19.000000Z"}, {"uuid": "55cc2177-fcfc-4aab-8d28-28c46ec4b81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1462", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5549", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1462\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Authorization Bypass Through User-Controlled Key vulnerability in Vadi Corporate Information Systems DigiKent allows Authentication Bypass, Authentication Abuse.\u00a0This issue affects DigiKent: before 23.03.20.\n\ud83d\udccf Published: 2023-03-21T08:16:26.952Z\n\ud83d\udccf Modified: 2025-02-26T16:54:01.740Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-23-0161", "creation_timestamp": "2025-02-26T17:24:22.000000Z"}, {"uuid": "7037b9de-95d8-417f-a2ea-ce537df10862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1466", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5541", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1466\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function view_student of the file admin/?page=students/view_student. The manipulation of the argument id with the input 3' AND (SELECT 2100 FROM (SELECT(SLEEP(5)))FWlC) AND 'butz'='butz leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223325 was assigned to this vulnerability.\n\ud83d\udccf Published: 2023-03-17T11:45:20.312Z\n\ud83d\udccf Modified: 2025-02-26T17:15:02.678Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.223325\n2. https://vuldb.com/?ctiid.223325", "creation_timestamp": "2025-02-26T17:24:11.000000Z"}, {"uuid": "66b353a1-6abb-4cb3-8f48-28cf0624e02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1482", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1482\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability.\n\ud83d\udccf Published: 2023-03-18T09:31:03.575Z\n\ud83d\udccf Modified: 2025-02-26T17:16:47.300Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.223365\n2. https://vuldb.com/?ctiid.223365\n3. https://gitee.com/Hk_Cms/HkCms/issues/I6J7ZD", "creation_timestamp": "2025-02-26T17:24:10.000000Z"}, {"uuid": "4bb1c8d2-72f5-4628-96ca-767e638829c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1495", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1495\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/robot/approval/list. The manipulation of the argument q leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is c9474f84e5f376dd2ade2078e3039961a9425da7. It is recommended to apply a patch to fix this issue. The identifier VDB-223381 was assigned to this vulnerability.\n\ud83d\udccf Published: 2023-03-18T23:31:04.026Z\n\ud83d\udccf Modified: 2025-02-26T17:17:50.826Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.223381\n2. https://vuldb.com/?ctiid.223381\n3. https://github.com/getrebuild/rebuild/issues/594\n4. https://github.com/getrebuild/rebuild/commit/c9474f84e5f376dd2ade2078e3039961a9425da7", "creation_timestamp": "2025-02-26T17:24:09.000000Z"}, {"uuid": "1687dee7-0ddb-48c4-ba3b-8c1257055ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1496", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5603", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1496\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.\n\ud83d\udccf Published: 2023-03-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T19:32:21.656Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2\n2. https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b689", "creation_timestamp": "2025-02-26T20:24:57.000000Z"}, {"uuid": "bc9ee45e-01b2-4fc9-8c38-5d946dddc333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1474", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5576", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1474\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/question_papers/manage_question_paper.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223336.\n\ud83d\udccf Published: 2023-03-17T14:39:53.522Z\n\ud83d\udccf Modified: 2025-02-26T19:12:43.043Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.223336\n2. https://vuldb.com/?ctiid.223336\n3. https://github.com/19FF/bug_report/blob/main/SQLi.md", "creation_timestamp": "2025-02-26T19:24:05.000000Z"}, {"uuid": "1c68c3bf-32bd-4049-afb3-b7cff940c583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1429", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1429\n\ud83d\udd25 CVSS Score: 4 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.\n\ud83d\udccf Published: 2023-03-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T21:16:00.292Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f\n2. https://github.com/pimcore/pimcore/commit/7588c336edb24050656111b89d69e69cc9feb5f5", "creation_timestamp": "2025-02-26T21:25:24.000000Z"}, {"uuid": "33156189-6de8-4db4-8dc0-07232bc550db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "803644db-4781-48de-a52f-39acf10348f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1405", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18100", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1405\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.\n\ud83d\udccf Published: 2024-01-16T15:56:18.763Z\n\ud83d\udccf Modified: 2025-06-11T17:08:21.790Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8c727a31-ff65-4472-8191-b1becc08192a/", "creation_timestamp": "2025-06-11T17:34:28.000000Z"}, {"uuid": "a65aeac8-f04c-4119-86d4-f363bdde8aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1410", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6432", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1410\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:N)\n\ud83d\udd39 Description: Grafana is an open-source platform for monitoring and observability.\u00a0\n\nGrafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. \n\nThe stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized.\n\nAn attacker needs to have control over the Graphite data source in order to manipulate a function description and a Grafana admin needs to configure the data source, later a Grafana user needs to select a tampered function and hover over the description.\u00a0\n\n  Users may upgrade to version 8.5.22, 9.2.15 and 9.3.11 to receive a fix.\n\ud83d\udccf Published: 2023-03-23T07:48:56.246Z\n\ud83d\udccf Modified: 2025-03-04T21:22:03.229Z\n\ud83d\udd17 References:\n1. https://grafana.com/security/security-advisories/cve-2023-1410/\n2. https://github.com/grafana/bugbounty/security/advisories/GHSA-qrrg-gw7w-vp76\n3. https://security.netapp.com/advisory/ntap-20230420-0003/", "creation_timestamp": "2025-03-04T21:35:40.000000Z"}, {"uuid": "0dfe8874-52f9-41c4-9e12-57d23cf2299e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1424", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/751", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 \u062f\u0631 PLC\u200c\u0647\u0627\u06cc CPU \u0633\u0631\u06cc MELSEC iQ-F \u0634\u0631\u06a9\u062a \u0645\u06cc\u062a\u0633\u0648\u0628\u06cc\u0634\u06cc \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0633\u0631\u0631\u06cc\u0632 \u067e\u0634\u062a\u0647 \u0628\u0627\u0641\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u0634\u0648\u062f. \n\n\u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u062e\u0627\u0635\u060c \u0633\u0631\u0648\u06cc\u0633 \u0631\u0627 \u0627\u0646\u06a9\u0627\u0631 \u06a9\u0646\u062f \u06cc\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\nBDU: 2023-02792\nCVE-2023-1424\n\n\u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0647\u0627 \u0631\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a)\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u06cc\u0644\u062a\u0631 \u0622\u062f\u0631\u0633 IP (\u0628\u062e\u0634 \"12.1 \u0639\u0645\u0644\u06a9\u0631\u062f \u0641\u06cc\u0644\u062a\u0631 IP\" \u062f\u0631 \u06a9\u062a\u0627\u0628\u0686\u0647 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 MELSEC iQ-F FX5 (\u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0627\u062a\u0631\u0646\u062a)\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (VPN).\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0633\u0627\u0632\u0646\u062f\u0647\nhttps://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-003_en.pdf\n\n\u0644\u0637\u0641\u0627 \u0646\u0638\u0631\u0627\u062a \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \u0627\u0632 \u0628\u0627\u0632\u062e\u0648\u0631\u062f \u0634\u0645\u0627 \u0627\u0633\u062a\u0642\u0628\u0627\u0644 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2023-05-31T20:18:36.000000Z"}, {"uuid": "6f26c3ef-37a8-4f7d-81a0-e2f98f92d922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1419", "type": "seen", "source": "https://t.me/cvedetector/11258", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-1419 - MySQL Debezium Script Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-1419 \nPublished : Nov. 17, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an attacker to send a malicious request to inject a parameter that may allow the viewing of unauthorized data. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-17T12:56:58.000000Z"}, {"uuid": "06ed202a-ff6d-43fc-83d9-e211dbe14c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1435", "type": "seen", "source": "Telegram/DdXZMAlqLxeg6elbQww0fRPdS896I_ee_-xmxQiACUILtaIU", "content": "", "creation_timestamp": "2025-02-06T02:42:28.000000Z"}, {"uuid": "b7fafc97-3a07-4c01-b8dd-020dce46e5de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1414", "type": "seen", "source": "Telegram/uZR7u1f1Xy6z12pFpV72Kl5uDDeqPfNW4k-CGy1LWWK6piHs", "content": "", "creation_timestamp": "2025-02-06T02:41:37.000000Z"}, {"uuid": "6a150887-3409-43ac-9fc6-cd0ec7745015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1417", "type": "seen", "source": "Telegram/yJ_jWKS47FdfOdXGG7cepv8eOg6W2GE9dP82C4rTWmlMQ7R0", "content": "", "creation_timestamp": "2025-02-14T10:03:09.000000Z"}, {"uuid": "fbfd3971-f8c5-40f4-bd6f-a5ca3f4e286d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "Telegram/oHP8R6rQpO8E4nEBBBMmcV3PiuGU9AfrSsjxuqFDC6WptA", "content": "", "creation_timestamp": "2023-06-22T10:11:29.000000Z"}, {"uuid": "b70e041b-4f32-4bb0-ae6b-a7ee059dac31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3090", "content": "25 Tools \ud83d\udd27 \ud83d\udd28\ud83d\udd27\ud83d\udd28-  Hackers Factory \n\n\u200b\u200bCVE-2023-27997u\n\nSafely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing.\n\nhttps://github.com/BishopFox/CVE-2023-27997-check\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bServer-Side Prototype Pollution\n\nThis repository contains a collection of Server-Side Prototype Pollution gadgets in Node.js core code and 3rd party NPM packages.\n\nhttps://github.com/yuske/server-side-prototype-pollution\n\n#cybersecurity #infosec\n\n\u200b\u200bRIDS - Remote ID Spoofer\n\nAn ESP8266/NodeMCU Drone RemoteID Spoofer. This spawns 16 different fake drones broadcasting RemoteID, with them all flying in random directions around a particular GPS location. \n\nhttps://github.com/jjshoots/RemoteIDSpoofer\n\n#cybersecurity #infosec\n\n\u200b\u200bSteganim\n\nNim implementation of storing a payload into the least significant bit of each byte of an image. Using this technique to remotely fetch shellcode or other secrets at runtime can help into removing some IOCs like payload entropy.\n\nhttps://github.com/OffenseTeacher/Steganim\n\n#infosec #pentesting #redteam\n\n\u200b\u200bqualcomm_baseband_scripts\n\nCollection of scripts for reversing Qualcomm Hexagon baseband / modem firmware.\n\nhttps://github.com/mzakocs/qualcomm_baseband_scripts\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-1454\n\nJeecg Boot qurestSql SQL vuln\n\nhttps://github.com/Sweelg/CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bSilent Spring\n\nPrototype Pollution Leads to Remote Code Execution in Node.js\n\nhttps://github.com/yuske/silent-spring\n\n#cybersecurity #infosec\n\n\u200b\u200bSemgrep Rules for Android Application Security\n\nA collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.\n\nhttps://github.com/mindedsecurity/semgrep-rules-android-security\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-30347\n\nReflected Cross-Site-Scripting in Neox Contact Center\n\nhttps://github.com/huzefa2212/CVE-2023-30347\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bEFI Resolver\n\nA Binary Ninja plugin that automatically resolves type information for EFI protocol usage.\n\nhttps://github.com/Vector35/efi-resolver\n\n#cybersecurity #infosec\n\n\u200b\u200bGhostFart\n\nUnhooking is performed via indirect syscalls Leveraging NTAPI to grab NTDLL for unhooking without triggering \"PspCreateProcessNotifyRoutine\"\n\nhttps://github.com/mansk1es/GhostFart\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-27372\n\nSPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.\n\nhttps://github.com/nuts7/CVE-2023-27372\n\ncve #cybersecurity #infosec\n\n\u200b\u200bkbtls\n\nKey-Based TLS - Mutually Trusted TLS Connections Based on a Pre-Shared Connection Key.\n\nhttps://github.com/RedTeamPentesting/kbtls\n\n#infosec #pentesting #redteam\n\n\u200b\u200bArtemis\n\nA modular web reconnaissance tool and vulnerability scanner based on Karton.\n\nhttps://github.com/CERT-Polska/Artemis\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bRS-Shell\n\nA dirty PoC for a reverse shell with cool features in Rust.\n\nhttps://github.com/BlWasp/rs-shell\n\n#infosec #pentesting #redteam\n\n\u200b\u200bInvoke-PowerExtract\n\nThis tool is able to parse memory dumps of the LSASS process without any additional tools (e.g. Debuggers) or additional sideloading of mimikatz. It is a pure PowerShell implementation for parsing and extracting secrets (LSA / MSV and Kerberos) of the LSASS process.\n\nhttps://github.com/powerseb/PowerExtract\n\n#infosec #pentesting #redteam\n\nRPC Firewall\n\nCheck out our RPC Firewall blog post or our BlackHat talk to gain better understanding of RPC, RPC attacks and the solution: the RPC Firewall.\n\nhttps://github.com/zeronetworks/rpcfirewall\n\n#cybersecurity #infosec\n\n\u200b\u200bGooFuzz \n\nA tool to perform fuzzing with an #OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200b1/2", "creation_timestamp": "2023-06-24T16:00:44.000000Z"}, {"uuid": "4a32d6c3-9fad-42c9-a4c9-e69fedbb2927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1403", "type": "seen", "source": "https://t.me/true_secator/5470", "content": "\u0413\u043b\u0443\u0431\u043e\u043a\u043e \u043f\u043e\u043b\u044e\u0431\u0438\u0432\u0448\u0438\u0435\u0441\u044f \u0431\u0430\u043d\u0434\u0430\u043c ransomware \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 Progress Software \u0432\u043d\u043e\u0432\u044c \u0442\u0440\u0435\u043d\u0434\u0435 \u0443\u0433\u0440\u043e\u0437.\n\n\u041e\u0431\u043e\u0448\u043b\u043e\u0441\u044c \u0431\u0435\u0437 \u043d\u043e\u0432\u043e\u0439 MOVEit MFT 0-day, \u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430.\n\n\u041d\u043e\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 OpenEdge Authentication Gateway \u0438 AdminServer \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 11.7.19, 12.2.14, 12.8.1 \u0438 \u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0432\u0441\u0435 10.0 \u0431\u0430\u043b\u043b\u043e\u0432 CVSS.\n\nCVE-2023-1403 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 OpenEdge LTS 11.7.19, 12.2.14 \u0438 12.8.1. \u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0438\u043c\u0435\u044e\u0442\u00a0\u043a\u0440\u0430\u0442\u043a\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.\n\n\u041a\u0430\u043a \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442 Progress Software, \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043e.\n\n\u0412\u043e \u0432\u0441\u044f\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043a\u0430. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-02-29T12:37:05.000000Z"}, {"uuid": "79efff91-a189-4cf2-a160-1dd6100d18d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1424", "type": "seen", "source": "https://t.me/true_secator/4433", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cisco Talos \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u043e\u043c \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 Mitsubishi MELSEC iQ-F FX5U, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS \u0438 \u0434\u0430\u0436\u0435 \u043a RCE.\n\niQ-F FX5U \u2014 \u044d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u041f\u041b\u041a Mitsubishi MELSEC, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c, \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u043f\u0438\u0442\u0430\u043d\u0438\u044f, Ethernet \u0438 16 \u0442\u043e\u0447\u043a\u0430\u043c\u0438 \u0432\u0432\u043e\u0434\u0430/\u0432\u044b\u0432\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u041f\u041b\u041a \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u043b\u0443\u0436\u0431 (HTTP-\u0441\u0435\u0440\u0432\u0435\u0440, FTP-\u0441\u0435\u0440\u0432\u0435\u0440, FTP-\u043a\u043b\u0438\u0435\u043d\u0442, \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 MODBUS/TCP \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u0434\u043b\u044f Mitsubishi \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0TALOS-2023-1727\u00a0(CVE-2023-1424) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e MELSOFT Direct \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442, \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0430\u043a\u0435\u0442.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS \u0432 \u0437\u0430\u0434\u0430\u0447\u0435 RTOS, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 MELSOFT Direct, \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\nCisco Talos \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 Mitsubishi \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u00a0\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u043e\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043f\u0430\u0442\u0447. \n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b: Mitsubishi Electric Corp. MELSEC iQ-F FX5U, \u0432\u0435\u0440\u0441\u0438\u0438 1.240 \u0438 1.260.\n\nCisco \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u0430\u043a\u043e Mitsubishi \u0442\u0430\u043a\u0436\u0435\u00a0\u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438 1.220 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435.", "creation_timestamp": "2023-05-29T17:25:05.000000Z"}, {"uuid": "722f63dd-fc7c-4a02-aaae-ae9d8b5e9af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/3716", "content": "\ud83d\udda5Data Leaks :\n\n\ud83d\udd31Bombardier Recreational Products (brp.com) Leak : https://www.system32.ink/2023/06/bombardier-recreational-products-brpcom.html\n\nf\ud83d\udd31nde_gov_br Database leak :  https://www.system32.ink/2023/06/fndegovbr-database-leak-national-fund.html\n\n\ud83d\udd31Leak Sim\u00f3n Bol\u00edvar Adventist School (casb.edu.co) Database : https://www.system32.ink/2023/06/leak-simon-bolivar-adventist-school.html\n\n\ud83d\udda5Tools: \n\n\ud83d\udd31HCL AppScan Standard v10.2.1  : https://www.system32.ink/2023/06/hcl-appscan-standard-v1021.html\n\n\ud83d\udd31Qualcomm baseband scripts (reverse Engineering) : https://www.system32.ink/2023/06/qualcomm-baseband-scripts.html\n\n\ud83d\udd31The Deepfake Offensive Toolkit : https://www.system32.ink/2023/06/the-deepfake-offensive-toolkit.html\n\n\ud83d\udda5Exploits:\n\n\ud83d\udd31CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln Exploit : https://www.system32.ink/2023/06/cve-2023-1454-jeecg-boot-qurestsql.html\n\n\ud83d\udd31CVE-2023-30347 Exploit : Reflected Cross-Site-Scripting in Neox Contact Center : https://www.system32.ink/2023/06/cve-2023-30347-exploit-reflected-cross.html\n\n\ud83d\udda5ScamPages:\n\nJ\ud83d\udd31PMorgan Chase Bank Phishing Page : https://www.system32.ink/2023/06/jpmorgan-chase-bank-phishing-page.html\n\n@crackcodes | crackcodes.in | system32.ink", "creation_timestamp": "2023-06-22T09:44:11.000000Z"}, {"uuid": "9e88d609-0ac1-4ba7-855c-c0161bf552a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/182504", "content": "https://ift.tt/1vbLsuV\nCVE-2023-1436 | Oracle Siebel CRM Prior to 23.8 EAI denial of service", "creation_timestamp": "2024-02-10T10:11:46.000000Z"}, {"uuid": "ab7d0fba-c214-462b-9da6-cb06b345f7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181300", "content": "https://ift.tt/qSwITr9\nCVE-2023-1436 | Oracle Banking Cash Management up to 14.7.0 Accessibility denial of service", "creation_timestamp": "2024-02-08T11:36:47.000000Z"}, {"uuid": "5a6dfdb8-6489-4de0-b315-017cbb2bab08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181248", "content": "https://ift.tt/RJZS95Y\nCVE-2023-1436 | Oracle Enterprise Manager Ops Center 12.4.0.0 Networking denial of service", "creation_timestamp": "2024-02-08T09:41:29.000000Z"}, {"uuid": "fd0f35f1-0a63-43d8-9128-3399e41c3958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181246", "content": "https://ift.tt/sBG1rYg\nCVE-2023-1436 | Oracle Enterprise Manager for Virtual Infrastructure 13.5.0.0 Nimbula Generic Bugs denial of service", "creation_timestamp": "2024-02-08T09:41:26.000000Z"}, {"uuid": "5f54cfc9-1abb-4130-b118-f7ee99dac677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181245", "content": "https://ift.tt/2SzHVMU\nCVE-2023-1436 | Oracle Enterprise Manager for Database 13.5.0.0 EM/OCI Bridge denial of service", "creation_timestamp": "2024-02-08T09:41:25.000000Z"}, {"uuid": "5b8af45d-f232-413d-8183-783506433aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181244", "content": "https://ift.tt/f2xUHyg\nCVE-2023-1436 | Oracle Enterprise Manager for Fusion Middleware 13.5.0.0 FMW Control Plugin denial of service", "creation_timestamp": "2024-02-08T09:41:24.000000Z"}, {"uuid": "fd563218-f598-474e-8eac-08f0788c18e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/182189", "content": "https://ift.tt/ZmrMY0G\nCVE-2023-1436 | Oracle JD Edwards EnterpriseOne Orchestrator Prior to 9.2.8.0 E1 IOT Orchestrator Security denial of service", "creation_timestamp": "2024-02-09T18:26:38.000000Z"}, {"uuid": "3719a972-1263-470e-957e-f17c9e5b54d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181400", "content": "https://ift.tt/neEPthQ\nCVE-2023-1436 | Oracle Banking Supply Chain Finance up to 14.7.0 Security denial of service", "creation_timestamp": "2024-02-08T14:41:41.000000Z"}, {"uuid": "3110ff97-c180-4131-9526-8e968d0ea238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181452", "content": "https://ift.tt/FMV5h4q\nCVE-2023-1436 | Oracle FLEXCUBE Private Banking up to 14.7.0 Miscellaneous denial of service", "creation_timestamp": "2024-02-08T16:07:09.000000Z"}, {"uuid": "470a4751-02b3-4df8-928b-bab199659af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181417", "content": "https://ift.tt/AxMkdG5\nCVE-2023-1436 | Oracle Banking Virtual Account Management up to 14.7.0 Common Core denial of service", "creation_timestamp": "2024-02-08T15:11:35.000000Z"}, {"uuid": "ccac96c4-b494-4529-a202-6ab161a8d804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181339", "content": "https://ift.tt/sbDFneV\nCVE-2023-1436 | Oracle Banking Credit Facilities Process Management up to 14.7.0 Common denial of service", "creation_timestamp": "2024-02-08T12:36:48.000000Z"}, {"uuid": "813dc18f-8746-444e-9a84-d545afd7afed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1436", "type": "seen", "source": "https://t.me/ctinow/181234", "content": "https://ift.tt/dn93T7B\nCVE-2023-1436 | Oracle Enterprise Manager Base Platform 13.5.0.0 Agent Next Gen denial of service", "creation_timestamp": "2024-02-08T09:11:54.000000Z"}, {"uuid": "ef954ed6-767c-4410-bcc4-ed3fcdc63604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1405", "type": "seen", "source": "https://t.me/ctinow/168904", "content": "https://ift.tt/MHKFIvS\nCVE-2023-1405", "creation_timestamp": "2024-01-16T17:27:03.000000Z"}, {"uuid": "b79edbdd-65da-4456-b910-1def281fead1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1405", "type": "seen", "source": "https://t.me/ctinow/172140", "content": "https://ift.tt/6n9WDJx\nCVE-2023-1405 Exploit", "creation_timestamp": "2024-01-23T17:17:00.000000Z"}, {"uuid": "c6f823d5-5cbe-497a-b8af-1c7862c9c5c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1409", "type": "seen", "source": "https://t.me/cibsecurity/69075", "content": "\u203c CVE-2023-1409 \u203c\n\nIf the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate.This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-23T20:12:52.000000Z"}, {"uuid": "dc67788d-6bbb-42b5-8d16-ff7903c54f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1465", "type": "seen", "source": "https://t.me/cibsecurity/68643", "content": "\u203c CVE-2023-1465 \u203c\n\nThe WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in pages, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T16:50:32.000000Z"}, {"uuid": "1b50f649-c5e0-4945-8090-bf250e1f6233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1437", "type": "seen", "source": "https://t.me/cibsecurity/67628", "content": "\u203c CVE-2023-1437 \u203c\n\nAll versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent client could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain access to the remote file system and the ability to execute commands and overwrite files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-03T02:44:33.000000Z"}, {"uuid": "303dd902-0f6d-46db-8fff-ff55a863bef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1401", "type": "seen", "source": "https://t.me/cibsecurity/67291", "content": "\u203c CVE-2023-1401 \u203c\n\nAn issue has been discovered in GitLab DAST scanner affecting all versions starting from 3.0.29 before 4.0.5, in which the DAST scanner leak cross site cookies on redirect during authorization.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T12:28:24.000000Z"}, {"uuid": "72009d7a-c4c0-4581-88ac-e63667c78b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1428", "type": "seen", "source": "https://t.me/cibsecurity/65097", "content": "\u203c CVE-2023-1428 \u203c\n\nThere exists an vulnerability causing an abort() to be called in gRPC.\u00c2\u00a0The following headers cause gRPC's C++ implementation to abort() when called via http2:te: x (x != trailers):scheme: x (x != http, https)grpclb_client_stats: x (x == anything)On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit\u00c2\u00a02485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-09T14:21:39.000000Z"}, {"uuid": "4882e2be-9971-4c03-a902-e7b1826f3962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1477", "type": "seen", "source": "https://t.me/cibsecurity/63066", "content": "\u203c CVE-2023-1477 \u203c\n\nImproper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T18:27:31.000000Z"}, {"uuid": "ce8e758d-dca5-42d8-a281-9857f0897912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1414", "type": "seen", "source": "https://t.me/cibsecurity/62744", "content": "\u203c CVE-2023-1414 \u203c\n\nThe WP VR WordPress plugin before 8.3.0 does not have authorisation and CSRF checks in various AJAX actions, one in particular could allow any authenticated users, such as subscriber to update arbitrary tours\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T22:19:36.000000Z"}, {"uuid": "ec481ac9-d016-4c33-bc15-235cc9fb4922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1435", "type": "seen", "source": "https://t.me/cibsecurity/62741", "content": "\u203c CVE-2023-1435 \u203c\n\nThe Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape various parameters before outputting them back in pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T22:19:30.000000Z"}, {"uuid": "fe1790b9-bc36-4d96-9f38-728c22870736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1420", "type": "seen", "source": "https://t.me/cibsecurity/62740", "content": "\u203c CVE-2023-1420 \u203c\n\nThe Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape a parameter before outputting it back in a response of an AJAX action, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T22:19:29.000000Z"}, {"uuid": "fb92c164-a051-42c0-b28d-16f015693c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1424", "type": "seen", "source": "https://t.me/cibsecurity/64674", "content": "\u203c CVE-2023-1424 \u203c\n\nBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (DoS) condition or execute malicious code on a target product by sending specially crafted packets. A system reset of the product is required for recovery from a denial of service (DoS) condition and malicious code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T12:26:49.000000Z"}, {"uuid": "b1a3b838-c154-4cf6-8cd6-304a0ff8e74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1413", "type": "seen", "source": "https://t.me/cibsecurity/62282", "content": "\u203c CVE-2023-1413 \u203c\n\nThe WP VR WordPress plugin before 8.2.9 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-17T16:41:57.000000Z"}, {"uuid": "68057601-cd1d-46ce-822d-dbdf1c351070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1427", "type": "seen", "source": "https://t.me/cibsecurity/62278", "content": "\u203c CVE-2023-1427 \u203c\n\n- The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege users to put images anywhere in the filesystem via a path traversal vector.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-17T16:41:51.000000Z"}, {"uuid": "d9cda822-4070-44e5-a13b-d20d92aa903b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1473", "type": "seen", "source": "https://t.me/cibsecurity/62277", "content": "\u203c CVE-2023-1473 \u203c\n\nThe Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-17T16:41:50.000000Z"}, {"uuid": "d89674b4-48d0-499d-a650-8e9f55a3dc4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1406", "type": "seen", "source": "https://t.me/cibsecurity/61761", "content": "\u203c CVE-2023-1406 \u203c\n\nThe JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:36:03.000000Z"}, {"uuid": "e2501a50-6e5b-40a6-bba6-f9a111f1ae6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1425", "type": "seen", "source": "https://t.me/cibsecurity/61767", "content": "\u203c CVE-2023-1425 \u203c\n\nThe WordPress CRM, Email & Marketing Automation for WordPress | Award Winner \u00e2\u20ac\u201d Groundhogg WordPress plugin before 2.7.9.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:38:57.000000Z"}, {"uuid": "22d532e1-104b-4d61-97c5-b8b8c47f0c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1426", "type": "seen", "source": "https://t.me/cibsecurity/61748", "content": "\u203c CVE-2023-1426 \u203c\n\nThe WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing any authenticated users, such as subscriber to retrieve the titles of draft and privates posts for example. AN attacker could also retrieve the title of any other type of post.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:32:50.000000Z"}, {"uuid": "f594fd0d-067c-4166-b526-4aadc1084297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1478", "type": "seen", "source": "https://t.me/cibsecurity/61755", "content": "\u203c CVE-2023-1478 \u203c\n\nThe Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal vulnerability in the page cache module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:35:54.000000Z"}, {"uuid": "6fadc8dc-5917-4aa8-8f1d-6b432999521e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1417", "type": "seen", "source": "https://t.me/cibsecurity/61520", "content": "\u203c CVE-2023-1417 \u203c\n\nAn issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible for an unauthorised user to add child epics linked to victim's epic in an unrelated group.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T00:26:52.000000Z"}, {"uuid": "82561546-ce44-4faa-a20e-0353afd974a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1400", "type": "seen", "source": "https://t.me/cibsecurity/60809", "content": "\u203c CVE-2023-1400 \u203c\n\nThe Modern Events Calendar Lite WordPress plugin through 5.16.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:10.000000Z"}, {"uuid": "638f14a7-6f16-4c73-aa72-165c6bed9733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1410", "type": "seen", "source": "https://t.me/cibsecurity/60547", "content": "\u203c CVE-2023-1410 \u203c\n\nGrafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. The stored XSS vulnerability was possible due the value of the Function Description was not properly sanitized. An attacker needs to have control over the Graphite data source in order to manipulate a function description and a Grafana admin needs to configure the data source, later a Grafana user needs to select a tampered function and hover over the description. Users may upgrade to version 8.5.22, 9.2.15 and 9.3.11 to receive a fix.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T11:36:38.000000Z"}, {"uuid": "235b8378-f064-4042-97dc-09649d9b3077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1439", "type": "seen", "source": "https://t.me/cibsecurity/60230", "content": "\u203c CVE-2023-1439 \u203c\n\nA vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/view_details.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223283.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:31.000000Z"}, {"uuid": "0a34615b-a693-4c71-8113-553303cc92ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1455", "type": "seen", "source": "https://t.me/cibsecurity/60231", "content": "\u203c CVE-2023-1455 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file admin/ajax.php?action=login2 of the component Login Page. The manipulation of the argument email with the input abc%40qq.com' AND (SELECT 9110 FROM (SELECT(SLEEP(5)))XSlc) AND 'jFNl'='jFNl leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223300.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:35.000000Z"}, {"uuid": "1eb2bb30-015c-4537-8bcf-0158bc520f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1453", "type": "seen", "source": "https://t.me/cibsecurity/60229", "content": "\u203c CVE-2023-1453 \u203c\n\nA vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223298 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:30.000000Z"}, {"uuid": "6d5f8fa6-8886-4151-bdad-5b22dda427b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1442", "type": "seen", "source": "https://t.me/cibsecurity/60227", "content": "\u203c CVE-2023-1442 \u203c\n\nA vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unknown part of the file /admin_system/api.php of the component Update Handler. The manipulation of the argument downurl leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223287.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:28.000000Z"}, {"uuid": "14c0381f-6dbe-4ea4-9c3b-87a69dfc41ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1496", "type": "seen", "source": "https://t.me/cibsecurity/60290", "content": "\u203c CVE-2023-1496 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-19T19:33:23.000000Z"}, {"uuid": "11029580-1d10-4ae0-90f6-935c69ac0373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1488", "type": "seen", "source": "https://t.me/cibsecurity/60287", "content": "\u203c CVE-2023-1488 \u203c\n\nA vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is an unknown function in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-223374 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-18T23:32:47.000000Z"}, {"uuid": "8f91e373-4b3f-4c62-854c-45739458d670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1460", "type": "seen", "source": "https://t.me/cibsecurity/60238", "content": "\u203c CVE-2023-1460 \u203c\n\nA vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:44.000000Z"}, {"uuid": "a3aff07e-432f-434c-83e0-46a2199644ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1451", "type": "seen", "source": "https://t.me/cibsecurity/60237", "content": "\u203c CVE-2023-1451 \u203c\n\nA vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the file mp4track.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223296.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:43.000000Z"}, {"uuid": "b77c172a-2b7b-4b0b-a9b9-2f155a5553fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/cibsecurity/60236", "content": "\u203c CVE-2023-1454 \u203c\n\nA vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223299.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:42.000000Z"}, {"uuid": "291b76e3-407b-442c-8bfe-0bf33d2e7d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1449", "type": "seen", "source": "https://t.me/cibsecurity/60235", "content": "\u203c CVE-2023-1449 \u203c\n\nA vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_state of the file media_tools/av_parsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223294 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:38.000000Z"}, {"uuid": "70b1b55b-a778-4232-809a-55a4a3d71405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1445", "type": "seen", "source": "https://t.me/cibsecurity/60222", "content": "\u203c CVE-2023-1445 \u203c\n\nA vulnerability classified as problematic has been found in Filseclab Twister Antivirus 8. Affected is an unknown function in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-223290 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:21.000000Z"}, {"uuid": "70a4795d-8957-46af-85f5-9a950269523f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1461", "type": "seen", "source": "https://t.me/cibsecurity/60221", "content": "\u203c CVE-2023-1461 \u203c\n\nA vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. The attack can be initiated remotely. VDB-223306 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:20.000000Z"}, {"uuid": "df70ad74-2369-47fd-b023-8b6338a4e7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1432", "type": "seen", "source": "https://t.me/cibsecurity/60135", "content": "\u203c CVE-2023-1432 \u203c\n\nA vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be launched remotely. VDB-223214 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T15:31:03.000000Z"}, {"uuid": "3048c859-2ffa-48b7-bda6-9154f632eab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1468", "type": "seen", "source": "https://t.me/cibsecurity/60246", "content": "\u203c CVE-2023-1468 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17 of the component Report Handler. The manipulation of the argument date_from/date_to leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-223327.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T15:45:45.000000Z"}, {"uuid": "0059832b-c374-4a0b-8a96-c6f99bbe502b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1466", "type": "seen", "source": "https://t.me/cibsecurity/60245", "content": "\u203c CVE-2023-1466 \u203c\n\nA vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function view_student of the file admin/?page=students/view_student. The manipulation of the argument id with the input 3' AND (SELECT 2100 FROM (SELECT(SLEEP(5)))FWlC) AND 'butz'='butz leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223325 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T15:42:43.000000Z"}, {"uuid": "17e4cf02-bbe4-487a-ad6f-144274a7ad37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1498", "type": "seen", "source": "https://t.me/cibsecurity/60293", "content": "\u203c CVE-2023-1498 \u203c\n\nA vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223398 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-19T23:33:36.000000Z"}, {"uuid": "f3365c5a-10f2-4f1d-b5e1-2d9cb6bb6c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1499", "type": "seen", "source": "https://t.me/cibsecurity/60292", "content": "\u203c CVE-2023-1499 \u203c\n\nA vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223399.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-19T23:33:35.000000Z"}, {"uuid": "b241757d-bdd6-4565-b47b-07ed595b668d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1497", "type": "seen", "source": "https://t.me/cibsecurity/60291", "content": "\u203c CVE-2023-1497 \u203c\n\nA vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223397 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-19T22:03:30.000000Z"}, {"uuid": "59d31211-e6d3-4552-beb1-09d7472826c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1485", "type": "seen", "source": "https://t.me/cibsecurity/60286", "content": "\u203c CVE-2023-1485 \u203c\n\nA vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input alert(222) leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223371.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-18T23:32:46.000000Z"}, {"uuid": "83e3e978-9bd3-4d91-8cdf-1235f32d3ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1487", "type": "seen", "source": "https://t.me/cibsecurity/60283", "content": "\u203c CVE-2023-1487 \u203c\n\nA vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects some unknown processing in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-19T14:49:25.000000Z"}, {"uuid": "3d251e51-25b8-4f42-889b-41f1c3dd9e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1482", "type": "seen", "source": "https://t.me/cibsecurity/60282", "content": "\u203c CVE-2023-1482 \u203c\n\nA vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-18T13:32:23.000000Z"}, {"uuid": "31a9c751-e3b6-4b7c-997a-cbb48f0a7363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1483", "type": "seen", "source": "https://t.me/cibsecurity/60281", "content": "\u203c CVE-2023-1483 \u203c\n\nA vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-18T13:32:22.000000Z"}, {"uuid": "7f4de9b8-d853-4980-96d5-10346350a134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1484", "type": "seen", "source": "https://t.me/cibsecurity/60280", "content": "\u203c CVE-2023-1484 \u203c\n\nA vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-223367.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-18T13:32:21.000000Z"}, {"uuid": "b64610a6-2aba-4e8f-b24f-0be667a80f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1471", "type": "seen", "source": "https://t.me/cibsecurity/60254", "content": "\u203c CVE-2023-1471 \u203c\n\nThe WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with minimal permissions, such as a subscrber, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T18:15:12.000000Z"}, {"uuid": "6f9c2c29-e6a8-492c-b870-cb878cb376da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1441", "type": "seen", "source": "https://t.me/cibsecurity/60233", "content": "\u203c CVE-2023-1441 \u203c\n\nA vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/view_course.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223285 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:36.000000Z"}, {"uuid": "dd51c751-325c-4eea-a859-540a19c63ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1444", "type": "seen", "source": "https://t.me/cibsecurity/60232", "content": "\u203c CVE-2023-1444 \u203c\n\nA vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects some unknown processing in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:35.000000Z"}, {"uuid": "51ecf638-8016-4d64-9a10-f172f19f106f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1475", "type": "seen", "source": "https://t.me/cibsecurity/60255", "content": "\u203c CVE-2023-1475 \u203c\n\nA vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0. This issue affects the function query of the file createuser.php. The manipulation of the argument uemail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223337 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T18:15:13.000000Z"}, {"uuid": "e2d61559-4c38-46a4-82dc-233b8f692c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1469", "type": "seen", "source": "https://t.me/cibsecurity/60249", "content": "\u203c CVE-2023-1469 \u203c\n\nThe WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u00e2\u20ac\u02dcpec_coupon[code]\u00e2\u20ac\u2122 parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: This can potentially be exploited by lower-privileged users if the `Admin Dashboard Access Permission` setting it set for those users to access the dashboard.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T15:45:47.000000Z"}, {"uuid": "c504c92d-2c68-4269-861f-0911de4ae6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1467", "type": "seen", "source": "https://t.me/cibsecurity/60248", "content": "\u203c CVE-2023-1467 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223326 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T15:45:46.000000Z"}, {"uuid": "a0b6b10e-bf31-48c0-aecb-e84ae3ba2be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1463", "type": "seen", "source": "https://t.me/cibsecurity/60247", "content": "\u203c CVE-2023-1463 \u203c\n\nImproper Authorization in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T15:45:46.000000Z"}, {"uuid": "8903029e-a8d1-4ce4-81d1-7f155580f3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1416", "type": "seen", "source": "https://t.me/cibsecurity/60070", "content": "\u203c CVE-2023-1416 \u203c\n\nA vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument social_facebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223128.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T19:29:59.000000Z"}, {"uuid": "1789b46b-7c18-4e6f-9ebe-b15295600b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1418", "type": "seen", "source": "https://t.me/cibsecurity/60067", "content": "\u203c CVE-2023-1418 \u203c\n\nA vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the argument transactioncode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223129 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T11:26:23.000000Z"}, {"uuid": "c78c4284-c8b4-4809-bcfe-65942d57bcd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1464", "type": "seen", "source": "https://t.me/cibsecurity/60244", "content": "\u203c CVE-2023-1464 \u203c\n\nA vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=save_user. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223311.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T15:42:42.000000Z"}, {"uuid": "b64c60a3-6e18-4b0d-9315-640338402245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1447", "type": "seen", "source": "https://t.me/cibsecurity/60240", "content": "\u203c CVE-2023-1447 \u203c\n\nA vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/manage_medicine.They. The manipulation of the argument name/description with the input alert('2') leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-223292.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:45.000000Z"}, {"uuid": "3c85d621-23db-4e6e-b6fe-2f427e908ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1446", "type": "seen", "source": "https://t.me/cibsecurity/60234", "content": "\u203c CVE-2023-1446 \u203c\n\nA vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is an unknown functionality in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:37.000000Z"}, {"uuid": "fed55b1c-15d5-4520-bde6-d5a57447a8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1459", "type": "seen", "source": "https://t.me/cibsecurity/60226", "content": "\u203c CVE-2023-1459 \u203c\n\nA vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file changeUsername.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223304.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:27.000000Z"}, {"uuid": "27a5f72c-7ba1-41dc-8634-dba6d4db321e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1452", "type": "seen", "source": "https://t.me/cibsecurity/60225", "content": "\u203c CVE-2023-1452 \u203c\n\nA vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/load_text.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223297 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:23.000000Z"}, {"uuid": "837380da-1ecc-4496-b54e-d0fed05adefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1443", "type": "seen", "source": "https://t.me/cibsecurity/60224", "content": "\u203c CVE-2023-1443 \u203c\n\nA vulnerability was found in Filseclab Twister Antivirus 8. It has been declared as problematic. This vulnerability affects unknown code in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223288.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:22.000000Z"}, {"uuid": "ace0a33e-7c14-44df-9370-f5106b389403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1440", "type": "seen", "source": "https://t.me/cibsecurity/60223", "content": "\u203c CVE-2023-1440 \u203c\n\nA vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manage_user.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223284.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T11:36:22.000000Z"}, {"uuid": "b91ad1c5-f831-4d61-884c-d3fae7831f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1407", "type": "seen", "source": "https://t.me/cibsecurity/60041", "content": "\u203c CVE-2023-1407 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223111.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T22:17:38.000000Z"}, {"uuid": "bfb87121-85b9-4bcb-956c-b0724472a478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1431", "type": "seen", "source": "https://t.me/cibsecurity/60131", "content": "\u203c CVE-2023-1431 \u203c\n\nThe WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location (/wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/). This makes it possible for unauthenticated attackers to view information that should be limited to administrators only and can include data like first name, last name, email, address, IP Address, and more.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T15:30:56.000000Z"}, {"uuid": "7d5a3db2-5c67-4d45-abce-b8da056604ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1429", "type": "seen", "source": "https://t.me/cibsecurity/60119", "content": "\u203c CVE-2023-1429 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T15:30:39.000000Z"}, {"uuid": "526b2540-e2ee-4072-9f15-70bcda7561f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1415", "type": "seen", "source": "https://t.me/cibsecurity/60071", "content": "\u203c CVE-2023-1415 \u203c\n\nA vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T19:55:35.000000Z"}, {"uuid": "a186e46c-853b-4465-9694-80d4fa442f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1412", "type": "seen", "source": "https://t.me/cibsecurity/61474", "content": "\u203c CVE-2023-1412 \u203c\n\nAn unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windows (<= 2022.12.582.0) to perform privileged operations with SYSTEM context by working with a combination of opportunistic locks (oplock) and symbolic links (which can both be created by an unprivileged user). After installing the Cloudflare WARP Client (admin privileges required), an MSI-Installer is placed under C:\\Windows\\Installer. The vulnerability lies in the repair function of this MSI. ImpactAn unprivileged (non-admin) user can exploit this vulnerability to perform privileged operations with SYSTEM context, including deleting arbitrary files and reading arbitrary file content. This can lead to a variety of attacks, including the manipulation of system files and privilege escalation. PatchesA new installer with a fix that addresses this vulnerability was released in version 2023.3.381.0. While the WARP Client itself is not vulnerable (only the installer), users are encouraged to upgrade to the latest version and delete any older installers present in their systems.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-05T20:26:24.000000Z"}, {"uuid": "4d9dbc84-f664-4fd7-92ca-f879ae8118f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1450", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1639", "content": "https://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc\nmp4v2_trackdump_poc\ncve-2023-1450\n#github", "creation_timestamp": "2023-12-03T07:45:17.000000Z"}, {"uuid": "8b5d9159-bdb3-4355-a79b-84c98a9e9e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1430", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14837", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1430*\nGithub: https://github.com/karlemilnikka/CVE-2023-1430", "creation_timestamp": "2026-07-31T00:00:29.295578Z"}, {"uuid": "54dd2659-e91b-4d7f-ab96-cfcd32d5412e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15432", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln*\nGithub: https://github.com/Sweelg/CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln", "creation_timestamp": "2026-07-31T00:00:33.475652Z"}, {"uuid": "7def5397-c078-4e87-a479-e473b1055e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/654", "content": "https://github.com/Sweelg/CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln\ncve 2023 1454\n#github", "creation_timestamp": "2023-06-23T06:24:20.000000Z"}, {"uuid": "39b350f2-9b90-425a-8821-eb31dbb53e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/523", "content": "https://github.com/padbergpete47/CVE-2023-1454\n-Jeecg-Boot \u524d\u53f0SQL\u6ce8\u5165\u6279\u91cf\u68c0\u6d4b\n#github", "creation_timestamp": "2023-04-24T04:25:30.000000Z"}, {"uuid": "c9f19231-b11c-4d61-aec7-cd3fcf6546c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1450", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9510", "content": "#exploit\n1. CVE-2023-1450:\nMP4v2 2.1.2 mp4trackdump.cpp DumpTrack DoS\nhttps://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc\n\n2. CVE-2023-47014:\nSticky Notes App Using PHP with Source Code v1.0 - CSRF to CORS\nhttps://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS\n\n3. PicoCTF WebExploits\nhttps://github.com/PlayExploits/PicoCTF-WebExploits-Challenges", "creation_timestamp": "2023-12-03T18:24:41.000000Z"}, {"uuid": "5fa5946c-060c-4e05-a854-0e2958ffd6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11246", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/padbergpete47/CVE-2023-1454", "creation_timestamp": "2026-07-31T04:00:03.554050Z"}, {"uuid": "a5d412e9-5a29-415a-8513-9c09b12bd31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8535", "content": "#exploit\n1. CVE-2023-30347:\nReflected Cross-Site-Scripting in Neox Contact Center\nhttps://github.com/huzefa2212/CVE-2023-30347\n\n2. CVE-2023-1454:\nJeecg Boot qurestSql SQL vuln\nhttps://github.com/Sweelg/CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln", "creation_timestamp": "2023-06-22T11:01:08.000000Z"}, {"uuid": "a2c6181d-9106-4fa3-8d8a-dca919eb7b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10596", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-1454-EXP*\nGithub: https://github.com/CKevens/CVE-2023-1454-EXP", "creation_timestamp": "2026-07-31T06:00:03.533184Z"}, {"uuid": "cac3e8ba-5c21-413d-ac6a-604b1561708b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10672", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454-POC*\nGithub: https://github.com/BugFor-Pings/CVE-2023-1454-POC", "creation_timestamp": "2026-07-31T06:00:03.915156Z"}, {"uuid": "970ba780-bbb9-4bb6-bff4-fcc49400b207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10678", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/BugFor-Pings/CVE-2023-1454", "creation_timestamp": "2026-07-31T06:00:04.075367Z"}, {"uuid": "e84a43e6-12e4-4d3d-aaec-6e118fff9baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1450", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2179", "content": "#exploit\n1. CVE-2023-1450:\nMP4v2 2.1.2 mp4trackdump.cpp DumpTrack DoS\nhttps://github.com/10cksYiqiyinHangzhouTechnology/mp4v2_trackdump_poc\n\n2. CVE-2023-47014:\nSticky Notes App Using PHP with Source Code v1.0 - CSRF to CORS\nhttps://github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS\n\n3. PicoCTF WebExploits\nhttps://github.com/PlayExploits/PicoCTF-WebExploits-Challenges", "creation_timestamp": "2024-08-16T08:55:31.000000Z"}, {"uuid": "2995d4ea-bc82-442f-8d8e-079b0d12be92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10134", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/MzzdToT/CVE-2023-1454", "creation_timestamp": "2026-07-31T08:00:04.552221Z"}, {"uuid": "26bf150b-85df-4d39-8489-5a0cd3e8b1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9029", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-1454*\nGithub: https://github.com/gobysec/CVE-2023-1454", "creation_timestamp": "2026-07-31T12:00:04.311445Z"}, {"uuid": "93e6673e-262e-4121-8c02-4f6e0494f679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9029", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-1454*\nGithub: https://github.com/gobysec/CVE-2023-1454", "creation_timestamp": "2026-08-01T00:00:32.841577Z"}, {"uuid": "224f3598-8662-45f4-abfa-5493ac9d38a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10672", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454-POC*\nGithub: https://github.com/BugFor-Pings/CVE-2023-1454-POC", "creation_timestamp": "2026-08-01T00:00:39.841162Z"}, {"uuid": "857c9688-c52c-4725-b145-0c11899c56af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10134", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/MzzdToT/CVE-2023-1454", "creation_timestamp": "2026-08-01T00:00:37.932041Z"}, {"uuid": "3f39298d-b7f6-457d-8728-409379fd6ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10596", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-1454-EXP*\nGithub: https://github.com/CKevens/CVE-2023-1454-EXP", "creation_timestamp": "2026-08-01T00:00:39.458172Z"}, {"uuid": "4df5803c-440a-4634-8dd1-103a66a1bd5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10678", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/BugFor-Pings/CVE-2023-1454", "creation_timestamp": "2026-08-01T00:00:39.989430Z"}, {"uuid": "7732e306-f41d-4ac6-9237-a5c50a489f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11246", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/padbergpete47/CVE-2023-1454", "creation_timestamp": "2026-08-01T00:00:42.243362Z"}, {"uuid": "4cb27755-b02a-4693-b4fd-e4a4c2147c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1434", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}, {"uuid": "0695a7fa-972e-4032-a075-e405a380ea0b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9066232-91ed-45b3-8fba-0f7761c7bdb5", "content": "", "creation_timestamp": "2026-06-19T12:46:02.713176Z"}, {"uuid": "fd42b8fb-7772-47bc-8206-15ca4f6c7496", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d1dcde0d-9897-481e-996a-a3a1e630a4b1", "content": "", "creation_timestamp": "2026-06-23T14:03:24.526718Z"}, {"uuid": "700958db-b0a3-4590-a6d4-c81438ce6f0f", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-1454", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/737c3f75-284e-4a13-912d-41a7f98cff89", "content": "", "creation_timestamp": "2026-06-30T09:23:14.235948Z"}, {"uuid": "46dc70b5-eca4-4e8e-b434-0043844d64c4", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-1434", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/afae8563-e8ca-4a90-8f17-7223716422c8", "content": "", "creation_timestamp": "2026-06-30T09:23:48.578372Z"}, {"uuid": "7fd22fa8-527a-403d-a6bd-063d512300a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-27T12:00:06.606215Z"}, {"uuid": "1283a68d-9390-44a8-87f6-57215b194d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-28T00:00:49.042433Z"}, {"uuid": "b283dd13-3dc0-4f25-8b01-4d08470f11bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "published-proof-of-concept", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-29T00:00:29.420692Z"}, {"uuid": "0a0fef45-af59-45d6-93d7-be6be80eb2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/15432", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln*\nGithub: https://github.com/Sweelg/CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln", "creation_timestamp": "2026-07-29T12:00:21.922503Z"}, {"uuid": "3d518212-6cf0-49c5-bfc1-f796577b7b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1430", "type": "seen", "source": "https://t.me/CVEhub/14837", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1430*\nGithub: https://github.com/karlemilnikka/CVE-2023-1430", "creation_timestamp": "2026-07-29T12:00:25.035856Z"}, {"uuid": "7b06b0e9-48ad-43b5-8e78-54099cec50e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/11246", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/padbergpete47/CVE-2023-1454", "creation_timestamp": "2026-07-29T12:00:37.609302Z"}, {"uuid": "85e939ff-a1a9-46a9-8eaf-6e933a2f8a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/10678", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/BugFor-Pings/CVE-2023-1454", "creation_timestamp": "2026-07-29T12:00:38.950182Z"}, {"uuid": "38902f62-1eb6-4466-952c-2788cadd5d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/10672", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454-POC*\nGithub: https://github.com/BugFor-Pings/CVE-2023-1454-POC", "creation_timestamp": "2026-07-29T12:00:39.075194Z"}, {"uuid": "24d0e80a-846a-4de8-88f5-1b60f2d671fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/10596", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-1454-EXP*\nGithub: https://github.com/CKevens/CVE-2023-1454-EXP", "creation_timestamp": "2026-07-29T12:00:39.363148Z"}, {"uuid": "3359fc3f-d961-4519-bdb1-dbc386b13cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/9029", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-1454*\nGithub: https://github.com/gobysec/CVE-2023-1454", "creation_timestamp": "2026-07-29T12:00:45.792460Z"}, {"uuid": "f03a934d-6004-41d8-aff3-ecbcd5ba1992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/10134", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/MzzdToT/CVE-2023-1454", "creation_timestamp": "2026-07-29T12:00:40.465213Z"}, {"uuid": "2c47f53a-316d-4f47-9386-c89fefa858f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/15432", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln*\nGithub: https://github.com/Sweelg/CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln", "creation_timestamp": "2026-07-30T00:00:42.967242Z"}, {"uuid": "419300c5-055d-46e0-8098-3b3e7fa2b8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1430", "type": "seen", "source": "https://t.me/CVEhub/14837", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1430*\nGithub: https://github.com/karlemilnikka/CVE-2023-1430", "creation_timestamp": "2026-07-30T00:00:45.902797Z"}, {"uuid": "46288f11-bd90-498d-8677-692350fdafe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/11246", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/padbergpete47/CVE-2023-1454", "creation_timestamp": "2026-07-30T00:01:03.367971Z"}, {"uuid": "8cb4ee44-6814-4a4d-ad63-bb8df0ec4416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/10678", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/BugFor-Pings/CVE-2023-1454", "creation_timestamp": "2026-07-30T00:01:07.000782Z"}, {"uuid": "23525144-2d42-4248-babe-92f78090ae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/10672", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454-POC*\nGithub: https://github.com/BugFor-Pings/CVE-2023-1454-POC", "creation_timestamp": "2026-07-30T00:01:07.188769Z"}, {"uuid": "c826e165-ccb5-4113-8e3c-3634c763450b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/10596", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-1454-EXP*\nGithub: https://github.com/CKevens/CVE-2023-1454-EXP", "creation_timestamp": "2026-07-30T00:01:07.568316Z"}, {"uuid": "f81be748-af62-4ea3-804b-b6fd829b919c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/10134", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-1454*\nGithub: https://github.com/MzzdToT/CVE-2023-1454", "creation_timestamp": "2026-07-30T00:01:09.880979Z"}, {"uuid": "28916a44-ad76-448f-922b-e6417ec73462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1454", "type": "seen", "source": "https://t.me/CVEhub/9029", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-1454*\nGithub: https://github.com/gobysec/CVE-2023-1454", "creation_timestamp": "2026-07-30T00:01:16.458531Z"}]}