{"vulnerability": "2023-30", "sightings": [{"uuid": "1ba91e15-8ffb-42ec-935c-f0ec6793279e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "8233bf6b-8466-43e9-b2ee-44e99d811c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51489", "content": "", "creation_timestamp": "2023-05-26T00:00:00.000000Z"}, {"uuid": "f1ec1475-9979-49ce-8d9e-76d5c7dd1b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30584", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "8efef499-58fb-41d5-9621-de1bedaf9457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30443", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676926122850340", "content": "", "creation_timestamp": "2024-12-19T01:37:17.566468Z"}, {"uuid": "7b2b706b-0e6b-4c92-91ad-68bf611c5da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30490", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646282925449850", "content": "", "creation_timestamp": "2024-12-13T15:44:20.659877Z"}, {"uuid": "b9602cfd-4eaa-4c00-b78e-6f94760baa60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971829", "content": "", "creation_timestamp": "2024-12-24T20:34:34.377767Z"}, {"uuid": "daab5f50-6754-4579-ae80-d51bac8ef46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lgazjvb7rm2p", "content": "", "creation_timestamp": "2025-01-21T14:05:49.213833Z"}, {"uuid": "d0d31a87-a1b1-44ae-b070-c2dbe46b4017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "e5846748-86b5-4740-aff3-2118e1c1b9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "1c8df4fc-db83-4f5a-a317-2d25751157d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30013", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "2539f744-cdb7-4a32-8c52-b47dd1e634d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "a24db562-b5e4-4cec-9f99-7ce561a75aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:53.000000Z"}, {"uuid": "9e467e80-b9a4-45b5-a314-d328a2f86974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30013", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:53.000000Z"}, {"uuid": "0616e241-081a-46f9-ac12-ca2fc6dab874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:53.000000Z"}, {"uuid": "d0250c36-74f9-4663-8d04-b3a15496b7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-25)", "content": "", "creation_timestamp": "2025-03-25T00:00:00.000000Z"}, {"uuid": "44092838-2106-4aaa-909e-1c2f487efadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "e35af457-b8e7-4d9b-a2d2-563b6d9f6476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-20)", "content": "", "creation_timestamp": "2025-03-20T00:00:00.000000Z"}, {"uuid": "10817743-31cb-446b-80ed-a8ceedcf1cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30891", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljnutm2rzz2t", "content": "", "creation_timestamp": "2025-03-05T21:01:57.604972Z"}, {"uuid": "9a884b16-0ac3-42e9-9aba-4d5590f00a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "https://gist.github.com/2h3ph3rd/af0fede4e08d06d73efa400b0f5b16bc", "content": "", "creation_timestamp": "2025-03-15T15:37:34.000000Z"}, {"uuid": "9ed275da-2afd-4fff-8a76-b2c259aed8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:42.000000Z"}, {"uuid": "1934c010-1339-43fd-b475-86c25f97a35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-06)", "content": "", "creation_timestamp": "2025-03-06T00:00:00.000000Z"}, {"uuid": "3374eb8f-8418-4107-bc55-f98a7169dd09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30192", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lreckkhkef24", "content": "", "creation_timestamp": "2025-06-11T21:02:25.135624Z"}, {"uuid": "1aae0f1b-82b7-40ef-a18c-c98f0913a2f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmngl37tcd2t", "content": "", "creation_timestamp": "2025-04-12T21:02:18.685548Z"}, {"uuid": "95be8e3e-3e2c-4d91-ac88-496cbb5e9c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30421", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln7gixokjv2g", "content": "", "creation_timestamp": "2025-04-20T00:48:58.810467Z"}, {"uuid": "ef5e1dea-0ed8-423a-98fe-5e5106c5cd3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3092", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnj4fc3zvb24", "content": "", "creation_timestamp": "2025-04-23T21:14:37.853915Z"}, {"uuid": "3ec222ed-7e52-484b-b3fa-80bc6eea3cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "622013fa-ef9f-49e1-8f4e-7fcef8aa6486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30192", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-30192.yaml", "content": "", "creation_timestamp": "2025-06-09T14:27:13.000000Z"}, {"uuid": "d7e43a25-9cb3-4c9b-ad90-2032d822271e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "9a96382e-1b9f-4539-8d2a-f0aa797e7005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30901", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-11", "content": "", "creation_timestamp": "2025-11-13T11:00:00.000000Z"}, {"uuid": "5da0e9df-1ef6-46c6-bbdf-81049bd06d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "content": "", "creation_timestamp": "2025-11-07T00:00:00.000000Z"}, {"uuid": "a6952a98-6a68-4cc5-aa10-47ee8cc54263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30869", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-30869.yaml", "content": "", "creation_timestamp": "2025-11-30T02:15:20.000000Z"}, {"uuid": "240dbd8c-7dfe-4b42-abb7-992262a4dad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30013", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "4457fa01-e30d-494f-b8d4-dfbfdee28c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "06c85a3b-ca32-4802-b8af-6d3741f1a85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "392957cd-78b6-468c-ae5d-5341b3f5c9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30194", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw556o6h23", "content": "", "creation_timestamp": "2025-07-23T21:02:23.589896Z"}, {"uuid": "06d5785a-d284-47b2-9b66-4430b99ddeec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "5f45f901-661c-44e6-84c1-043d06eff5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "ca3f4c78-4c21-42ff-9f66-67ef03b65714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly734pf7wk2k", "content": "", "creation_timestamp": "2025-09-06T21:02:24.621554Z"}, {"uuid": "ba25cb44-65e7-4a64-9349-f1e6277396f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30869", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6xda4zjrg2b", "content": "", "creation_timestamp": "2025-12-01T21:02:35.847275Z"}, {"uuid": "2932b641-a19a-49cb-84a1-09c50c45bcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30728", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f0bc59e87b0f256e3fe6bd76f97ae9a6", "content": "", "creation_timestamp": "2025-09-18T07:49:15.000000Z"}, {"uuid": "6764ec13-aeb3-4f32-a784-0f22d8401b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-17)", "content": "", "creation_timestamp": "2025-08-17T00:00:00.000000Z"}, {"uuid": "946129a0-9f34-4c1e-9944-3d8305eda457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-16)", "content": "", "creation_timestamp": "2025-10-16T00:00:00.000000Z"}, {"uuid": "3c37a5e3-bd9b-47c7-97e4-e906d0a2fa6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30194", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw2tbbs2q", "content": "", "creation_timestamp": "2025-10-12T21:02:34.022275Z"}, {"uuid": "8b196d60-22ab-4267-940d-ef2271c3171e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30194", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-30194.yaml", "content": "", "creation_timestamp": "2025-10-10T16:29:19.000000Z"}, {"uuid": "520698d9-9fcb-449e-b6ee-8cf11064629f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magnusbilling_unauth_rce_cve_2023_30258.rb", "content": "", "creation_timestamp": "2023-11-03T20:01:42.000000Z"}, {"uuid": "78a96623-4235-41fd-a896-717390a61e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "5c3142e6-fd5c-43f4-81bc-f96d56d0bcbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30967", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lxnbzzf6wjn2", "content": "", "creation_timestamp": "2025-08-30T19:18:33.116642Z"}, {"uuid": "7008a82c-857e-47d6-ba8f-4f28212c131c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:39.000000Z"}, {"uuid": "014c19bd-96c8-4684-831d-0eb302530180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:47.000000Z"}, {"uuid": "54092d27-3f12-4ec2-8ae3-6acc926acaef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30013", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/totolink_unauth_rce_cve_2023_30013.rb", "content": "", "creation_timestamp": "2023-09-21T09:45:44.000000Z"}, {"uuid": "71be2fc0-5105-45a7-abc6-1fabf8a5aa8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rudder_server_sqli_rce.rb", "content": "", "creation_timestamp": "2023-07-31T13:41:50.000000Z"}, {"uuid": "85ecba76-3b82-43d1-9ec1-5959cea933f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "seen", "source": "https://bsky.app/profile/silentsignal.bsky.social/post/3lxz373qngs2n", "content": "", "creation_timestamp": "2025-09-04T11:47:46.002489Z"}, {"uuid": "6d9d77da-6a1e-43ea-b7b2-4035546a9cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lxzjkb6esi2g", "content": "", "creation_timestamp": "2025-09-04T16:04:32.653579Z"}, {"uuid": "cffaff3a-34aa-4d97-bc18-739aab769a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mae6pemw7q2y", "content": "", "creation_timestamp": "2025-12-19T17:11:32.290751Z"}, {"uuid": "07bc07b5-1730-4913-974b-ec478926ac1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30207", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mb5ecmexhc2v", "content": "", "creation_timestamp": "2025-12-29T17:28:20.887171Z"}, {"uuid": "f4be5680-4588-4302-a179-d52654cf7fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "fe23a303-0fbb-4028-90c2-3893c5b75967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30578", "type": "seen", "source": "MISP/5a83e93a-f6bf-458b-86fc-c224f185e7d2", "content": "", "creation_timestamp": "2026-02-10T15:41:31.000000Z"}, {"uuid": "308eea1a-dc30-4f7c-8592-15120944f980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "92734ebd-7408-4246-95d0-baa68c041609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "77b8ed0f-ef65-48a8-8a19-9a70a32b2a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1034", "content": "", "creation_timestamp": "2023-06-06T04:00:00.000000Z"}, {"uuid": "427133b1-96b7-4d6f-8547-5a9f33295210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1035", "content": "", "creation_timestamp": "2023-06-07T04:00:00.000000Z"}, {"uuid": "f96173d3-90c6-4a8c-8387-116687323466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-30630", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "c872ed2f-d1ac-4ecd-8bac-c06ef52a7897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30848", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcfu73txx72m", "content": "", "creation_timestamp": "2026-01-14T19:59:07.501303Z"}, {"uuid": "5286bfb5-8a3e-4607-a10b-6d779d04a5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30848", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mcg4qu53wn2t", "content": "", "creation_timestamp": "2026-01-14T22:32:08.152059Z"}, {"uuid": "6be76840-95ac-42fc-9876-c9dca901bfd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30620", "type": "seen", "source": "https://bsky.app/profile/nerq-ai.bsky.social/post/3mhkj4ku3gn2q", "content": "", "creation_timestamp": "2026-03-21T07:30:04.354617Z"}, {"uuid": "67ba9b05-4d11-4f4c-a149-c2518cd92211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "content": "", "creation_timestamp": "2026-03-29T00:00:00.000000Z"}, {"uuid": "23092fa4-caf6-4d88-a8cf-c7e7db19e063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30848", "type": "seen", "source": "https://gist.github.com/alon710/642ee88b28bbc94528a7e7d1b9ae5448", "content": "", "creation_timestamp": "2026-01-24T21:24:59.000000Z"}, {"uuid": "40aee726-19b8-4287-8f40-ceaa83326280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30848", "type": "seen", "source": "https://gist.github.com/alon710/ef6eb854d2eb9ebb8845eef641b41150", "content": "", "creation_timestamp": "2026-01-24T22:34:02.000000Z"}, {"uuid": "c6c9189b-8f73-4ef9-ae05-b08ededed3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30848", "type": "seen", "source": "https://gist.github.com/alon710/6f56f13b46af65ce64dfac246686d5ac", "content": "", "creation_timestamp": "2026-01-24T22:33:59.000000Z"}, {"uuid": "c3821c60-60ea-4af4-99a9-f59947dcaaac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/418e040b-e593-47c7-9d0a-9595a5b0611e", "content": "", "creation_timestamp": "2026-02-02T12:26:57.758358Z"}, {"uuid": "8e423916-be24-4339-918c-2bc556acc9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-30)", "content": "", "creation_timestamp": "2026-03-30T00:00:00.000000Z"}, {"uuid": "b465415b-17bb-46f0-b9d7-e88fb7971655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30253", "type": "published-proof-of-concept", "source": "Telegram/1I4KxOPuoFNe84T_PVB6eD4yOCDupMzpyRvB9ORbuMVp36k", "content": "", "creation_timestamp": "2025-12-24T15:00:07.000000Z"}, {"uuid": "3967a3d5-5731-4316-9760-da8179dcf183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "published-proof-of-concept", "source": "Telegram/SMKYXiw5wY8oNgtGYQViKcUduDM9Fp0iSW-axRtzlO4bR5E", "content": "", "creation_timestamp": "2025-12-07T15:00:06.000000Z"}, {"uuid": "a9945092-53c0-435d-906c-5392b92c37be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7932", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aAn authenticated RCE exploit for Dolibarr ERP/CRM CVE-2023-30253.\nURL\uff1ahttps://github.com/andria-dev/DolibabyPhp\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-07-10T05:40:01.000000Z"}, {"uuid": "4f725bba-5d2e-470e-9348-5b2d12d8cc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-3006", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "fd74d6c9-4d8b-46d5-ae4a-409583f8724e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/mikrotik_rus/300", "content": "\ud83d\udea8 CVE-2023-30799", "creation_timestamp": "2023-07-20T11:10:28.000000Z"}, {"uuid": "fac01e13-f0fc-4b63-9e72-bf8d20d5e07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/cKure/11545", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 A Python-based tool to detect the CVE-2023-30943 vulnerability in Moodle, which allows unauthorized folder creation via specially crafted requests in TinyMCE loaders.\n\nhttps://github.com/Chocapikk/CVE-2023-30943", "creation_timestamp": "2023-09-10T07:20:51.000000Z"}, {"uuid": "d160cc88-a16b-4825-96e7-005644d07a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30459", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4146", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-30459\nURL\uff1ahttps://github.com/Toxich4/CVE-2023-30459\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-10T12:27:34.000000Z"}, {"uuid": "5a9e41d7-2e6e-40c9-8652-cb8ba658e13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30839", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4263", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPrestaShop <1.7.8.9 Fix for CVE-2023-30839\nURL\uff1ahttps://github.com/drkbcn/https-nvd.nist.gov-vuln-detail-CVE-2023-30839\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-27T12:01:17.000000Z"}, {"uuid": "8dd3dc76-17f8-4ffb-b968-7b687eb25246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4440", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aExploit-the-CVE-2023-30212-vulnerability\nURL\uff1ahttps://github.com/libasmon/Exploite-CVE-2023-30212-Vulnerability\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-27T11:21:03.000000Z"}, {"uuid": "4d3f1397-ba28-4467-a40c-9fd6591917e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4425", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aGitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.\nURL\uff1ahttps://github.com/Rishipatidar/CVE-2023-30212-POC-DOCKER-FILE\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-26T13:55:18.000000Z"}, {"uuid": "d1f0ccd8-dbef-410d-b750-b579601d325d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3076", "type": "published-proof-of-concept", "source": "https://t.me/cKure/14235", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 MSAPer is an automated bulk tool for checking and exploiting the vulnerability in CVE-2023-3076 - MStore API < 3.9.9 - Unauthenticated elevation of privilege.\n\n\ud83d\udd3b Installation:\n1 . apt-get install parallel -y\n\n\ud83d\udc31 Use:\n1. git clone https://github.com/im-hanzou/MSAPer.git\n2. cd MSAPer && chmod +x msaper.sh\n3. ./msaper.sh list.txt thread", "creation_timestamp": "2025-01-25T06:31:45.000000Z"}, {"uuid": "9544d8d0-e614-415a-aebb-7027201b36d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30839", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4266", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPrestaShop <1.7.8.9 Fix for CVE-2023-30839\nURL\uff1ahttps://github.com/drkbcn/lblfixer_cve_2023_30839\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-27T15:58:46.000000Z"}, {"uuid": "ba749163-baad-4efc-817e-eaf59c155e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4435", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aDocker environment and exploit the CVE-2023-30212 vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site Scripting (XSS) attacks\nURL\uff1ahttps://github.com/libasmon/create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-27T06:46:15.000000Z"}, {"uuid": "b72313f4-95e9-4407-a1f4-3ff1f3477b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4433", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aDocker environment and exploit the CVE-2023-30212 vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site Scripting (XSS) attacks\nURL\uff1ahttps://github.com/libasmon/Vulnerable-Docker-Environment-CVE-2023-30212\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-06-23T01:19:53.000000Z"}, {"uuid": "523602ae-e669-4dff-9346-fa490f1528b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4432", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aTOP All bugbounty pentesting CVE-2023- POC Exp  RCE example payload  Things\nURL\uff1ahttps://github.com/libas7994/CVE-2023-30212\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-06-23T01:19:44.000000Z"}, {"uuid": "379ee852-3627-4a69-9079-4ed2a4d26728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4768", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-30765 / ZDI-23-905 -  Delta Electronics Infrasuite Device Master Privilege Escalation\nURL\uff1ahttps://github.com/0xfml/CVE-2023-30765\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-07-19T14:24:49.000000Z"}, {"uuid": "3615c7c9-aa7f-4344-807d-27679868f67c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4438", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aExploit-the-CVE-2023-30212-vulnerability\nURL\uff1ahttps://github.com/libasv/Exploite-CVE-2023-30212-vulnerability\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-27T09:57:38.000000Z"}, {"uuid": "ba8f530f-eb6c-4bc1-abc1-0cb2e7f6a082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4437", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aVulnerable Docker Environment CVE-2023-30212\nURL\uff1ahttps://github.com/libas7994/Exploit-the-CVE-2023-30212-vulnerability\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-27T09:38:49.000000Z"}, {"uuid": "1f4fd0b0-8672-46e2-9441-0b4dd5ae40a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4436", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aDocker environment and exploit the CVE-2023-30212 vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site Scripting (XSS) attacks\nURL\uff1ahttps://github.com/libasmon/-CVE-2023-30212-Vulnerability\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-27T07:00:38.000000Z"}, {"uuid": "4bb9dbad-0c95-4d7e-a53f-6f28cd07e470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3009", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4465", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aStored XSS vulnerability in Teampass < 3.0.9 (Bypass of CVE-2023\u20132516) \u2014 M Nadeem Qazi\nURL\uff1ahttps://github.com/mnqazi/CVE-2023-3009\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-06-23T01:26:19.000000Z"}, {"uuid": "d009c54d-6d54-4902-8a6a-965096e26da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3076", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5159", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aAutomatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API < 3.9.9 - Unauthenticated Privilege Escalation\nURL\uff1ahttps://github.com/im-hanzou/MSAPer\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-19T05:03:49.000000Z"}, {"uuid": "6eb3bbf4-f6cc-4ce5-8122-f28f2c063ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4598", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aThis contains the necessary files and Docker to replicate A vulnerability in OURPHP that has a XSS Vulnerability (CVE-2023-30212)\nURL\uff1ahttps://github.com/VisDev23/Vulnerable-Docker--CVE-2023-30212-\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-06-20T09:18:31.000000Z"}, {"uuid": "ed48fb19-cb46-4f8c-a1c3-60e67f4c789e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30367", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4782", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aOriginal PoC for CVE-2023-30367\nURL\uff1ahttps://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-07-21T06:50:41.000000Z"}, {"uuid": "648b37f3-fac2-47d5-95d1-45a869081254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4887", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-30533\nURL\uff1ahttps://github.com/BenEdridge/CVE-2023-30533\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-17T12:00:28.000000Z"}, {"uuid": "fe37dadd-daff-437f-8708-2a79a0e0cd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5100", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA Python-based tool to detect the CVE-2023-30943 vulnerability in Moodle, which allows unauthorized folder creation via specially crafted requests in TinyMCE loaders.\nURL\uff1ahttps://github.com/Chocapikk/CVE-2023-30943\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-07T13:27:41.000000Z"}, {"uuid": "f0948260-d54d-47d1-b09a-d8415ca062cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5049", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-30943  RCE PoC\nURL\uff1ahttps://github.com/d0rb/CVE-2023-30943\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-08-31T08:22:19.000000Z"}, {"uuid": "100040ef-de8d-4a0c-b40e-13a5019b8194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30861", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5398", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aExplaining how to exploit CVE-2023-30861 \nURL\uff1ahttps://github.com/JawadPy/CVE-2023-30861-Exploit\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-10-13T08:31:59.000000Z"}, {"uuid": "b1d84824-6a1b-4472-b2e1-12d3c784e8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "published-proof-of-concept", "source": "Telegram/5CPDoGea4VxlGpUWdnippgkEikQaqjZZ0eR1kfQrZYnd55E", "content": "", "creation_timestamp": "2025-11-06T15:00:06.000000Z"}, {"uuid": "09af6eb0-6352-4157-8552-92e2352890b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/2489", "content": "\u200b\u2694\ufe0f \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 VM2 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b Java.\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u041f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b (Sandbox Escape), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 VM2.\n\nVM2 \u2014 \u044d\u0442\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430 JavaScript, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e\u0434\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0445\u043e\u0441\u0442\u0430 \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0432 VM2 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u2013 CVE-2023-30547 (CVSS: 9,8) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f (exception sanitization), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00abhandleException()\u00bb.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0447\u0442\u0438 4 \u043c\u043b\u043d. \u0440\u0430\u0437 \u0432 \u043d\u0435\u0434\u0435\u043b\u044e \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0431\u043e\u043b\u0435\u0435 700 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435, DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u044b\u043d \u0425\u0451\u043d \u041b\u0438 (SeungHyun Lee) \u0438\u0437 \u041a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u043d\u0430\u0443\u043a\u0438 \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (KAIST). \u041b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 3.9.16 \u0438 \u0440\u0430\u043d\u0435\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \u0444\u0430\u0439\u043b \u0441 \u0438\u043c\u0435\u043d\u0435\u043c \u00abpwned\u00bb.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u041f\u041e, \u0447\u044c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 VM2, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.9.17, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 VM2 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u0418\u0437-\u0437\u0430 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 PoC \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0442\u044c\u0441\u044f \u0440\u0438\u0441\u043a\u0443 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-04-19T08:03:44.000000Z"}, {"uuid": "0669df31-c0d1-4758-b890-1d7948bf6111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/itsec_news/2562", "content": "\u200b\u2694\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c \u0431\u043e\u043b\u0435\u0435 2 \u043c\u043b\u043d. \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Patchstack, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b WordPress, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Advanced Custom Fields (ACF) \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 XSS-\u0430\u0442\u0430\u043a\u0443.\n\nXSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-30777 , \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u043c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u043c \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u043e\u043c (Reflected XSS), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Patchstack, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 WordPress, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 URL-\u0430\u0434\u0440\u0435\u0441.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2023-30777 \u043c\u043e\u0436\u043d\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 Advanced Custom Fields, \u0445\u043e\u0442\u044f \u044d\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0443.\n\n\u041f\u043b\u0430\u0433\u0438\u043d Advanced Custom Fields \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0431\u043e\u043b\u0435\u0435 2 \u043c\u043b\u043d. \u0440\u0430\u0437 . \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0434\u043e \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0445 2 \u043c\u0430\u044f 2023 \u0433\u043e\u0434\u0430. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e 6.1.6.\n\n\u041e\u0442\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 XSS-\u0430\u0442\u0430\u043a\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u044f\u0442, \u043a\u043e\u0433\u0434\u0430 \u0436\u0435\u0440\u0442\u0432 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043f\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u0435 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442, \u0447\u0442\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443 \u043e\u0431\u0440\u0430\u0442\u043d\u043e \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-05-07T12:50:23.000000Z"}, {"uuid": "c25a6997-55db-43a5-8562-ce8d1d0c7913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://t.me/itsec_news/2654", "content": "\u200b\u26a1\ufe0fGoogle \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome.\n\n\ud83d\udcac \u0412\u0447\u0435\u0440\u0430 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-3079 , \u0431\u044b\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u00abType Confusion\u00bb (\u00ab\u041f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432\u00bb) \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8. \u0421\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google TAG \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 1 \u0438\u044e\u043d\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c NIST, \u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u0432\u043e\u0434\u0430 V8 \u0432 Google Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 114.0.5735.110 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u00abHeap Corruption\u00bb (\u00ab\u041f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438\u00bb) \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442, \u043a\u0430\u043a \u044d\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u043e \u0431\u044b\u0432\u0430\u0435\u0442, \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0435 \u0430\u0442\u0430\u043a, \u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0435\u043c\u0443 \u00ab\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2023-3079 \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 (ITW)\u00bb.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0442\u0440\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u041a \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e\u0439 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u0442\u044c \u043e \u0434\u0432\u0443\u0445 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445:\nCVE-2023-2033 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u2014 Type Confusion \u0432 V8;\nCVE-2023-2136 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,6) \u2014 Integer Overflow \u0432 Skia.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f, \u0435\u0441\u043b\u0438 \u044d\u0442\u043e\u0433\u043e \u0435\u0449\u0451 \u043d\u0435 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 114.0.5735.110 \u0434\u043b\u044f Windows \u0438 114.0.5735.106 \u0434\u043b\u044f macOS \u0438 Linux \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u0435\u0433\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-06-06T16:01:52.000000Z"}, {"uuid": "82902fb3-df76-41b8-b622-cc758e7e978a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://t.me/itsec_news/3741", "content": "\u200b\u26a1\ufe0f\u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0435\u0441\u0442\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 2023 \u0433\u043e\u0434\u0443\n\n\ud83d\udcac Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Chrome, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-6345, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0439 \u0431\u0430\u0433 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Skia, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D \u0433\u0440\u0430\u0444\u0438\u043a\u0438. \u0415\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0411\u0435\u043d\u0443\u0430 \u0421\u0435\u0432\u0435\u043d\u0441 \u0438 \u041a\u043b\u0435\u043c\u0430\u043d \u041b\u0435\u0441\u0438\u043d\u044c \u0438\u0437 \u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG) 24 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\nGoogle \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b, \u0447\u0442\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f CVE-2023-6345, \u043d\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043b\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430 Google \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 Skia (CVE-2023-2136), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e CVE-2023-6345 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u044d\u0442\u043e\u0442 \u043f\u0430\u0442\u0447.\n\nCVE-2023-2136 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f:\n\nCVE-2023-2033 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-2136 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.6) - \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 Skia,\nCVE-2023-3079 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-4762 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8,\nCVE-2023-4863 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP,\nCVE-2023-5217 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 vp8 \u0432 libvpx.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Chrome 119.0.6045.199/.200 \u0434\u043b\u044f Windows \u0438 119.0.6045.199 \u0434\u043b\u044f macOS \u0438 Linux, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u0422\u0430\u043a\u0436\u0435 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera \u0438 Vivaldi, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-11-30T11:12:53.000000Z"}, {"uuid": "098ecb58-7128-438b-9fec-16f753e34918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://t.me/itsec_news/3885", "content": "\u200b\u26a1\ufe0fCVE-2023-7024: \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 0-day \u0432 Chrome \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432\n\n\ud83d\udcac \u0412\u0447\u0435\u0440\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 CVE-2023-7024 , \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 WebRTC. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435. \u0412 Google \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2023-7024 \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0441\u044c\u043c\u043e\u0439 \u043f\u043e \u0441\u0447\u0451\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u00abzero-day\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u041a \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f:\n\nCVE-2023-2033 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-2136 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 9.6) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia;\n\nCVE-2023-3079 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-4762 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8;\n\nCVE-2023-4863 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 WebP;\n\nCVE-2023-5217 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 8.8) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 vp8 \u0432 libvpx;\n\nCVE-2023-6345 (CVSS \u043e\u0446\u0435\u043d\u043a\u0430: 9.6) \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432 Skia.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0441\u0430\u043c\u044b\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0442\u0438\u043f\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 2023 \u0433\u043e\u0434\u0443 \u0441\u0442\u0430\u043b\u0438: \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u043e\u043c, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432\u0432\u043e\u0434\u0430.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Chrome \u043d\u0430 \u043b\u044e\u0431\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0440\u0441\u0438\u044f 120.0.6099.129 \u0438 \u0441\u0432\u0435\u0436\u0435\u0435.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Microsoft Edge, Brave, Opera, Vivaldi \u0438 \u042f\u043d\u0434\u0435\u043a\u0441 \u0411\u0440\u0430\u0443\u0437\u0435\u0440, \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-12-21T10:17:35.000000Z"}, {"uuid": "a028b479-14cb-43cc-a934-515aaaa3b7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3026", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1209", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3026\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-10T18:55:55.645Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/9bbcc127-1e69-4c88-b318-d2afef48eff0\n2. https://github.com/jgraph/drawio/commit/c7ac634055c3edfabc7729fc4298a5ab7bfbf384", "creation_timestamp": "2025-01-10T19:06:15.000000Z"}, {"uuid": "46acf686-93d4-4be3-9c17-5ea25bba48cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30151", "type": "seen", "source": "https://t.me/kasraone_com/429", "content": "\ud83d\udd34 CVE\n      CVE-2023-37744\n\n\n\u0633\u06cc\u0633\u062a\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u062f\u0645\u062a\u06a9\u0627\u0631 \u062e\u0627\u0646\u0647 \u0628\u0647 \u0646\u0633\u062e\u0647 1.0 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f \u06a9\u0647 \u062d\u0627\u0648\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc cross-site scripting (XSS) \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u062e\u0634\n /admin/search-booking-request.php \n\u0627\u0633\u062a\n\n\n    CVE-2023-30151\n\n\u062b\u0628\u062a \u062a\u0632\u0631\u06cc\u0642 SQL \u062f\u0631 \u0645\u0627\u0698\u0648\u0644 Boxtal (envoimoinscher) \u0628\u0631\u0627\u06cc PrestaShop\u060c \u067e\u0633 \u0627\u0632 \u0646\u0633\u062e\u0647 3.1.10\u060c \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0648\u0627\u0631\u062f \u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u067e\u0627\u0631\u0627\u0645\u062a\u0631 GET \u06a9\u0644\u06cc\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062e\u0648\u062f \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.", "creation_timestamp": "2023-08-04T11:10:09.000000Z"}, {"uuid": "3b3638b1-67b7-492e-9440-5a87937a140c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30866", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/701", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30866\n\ud83d\udd39 Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-06-06T05:13:12.727Z\n\ud83d\udccf Modified: 2025-01-08T14:51:41.688Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-08T15:13:58.000000Z"}, {"uuid": "b03984f5-41c3-499a-8649-739e0163d1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3074", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/828", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3074\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:39:55.237Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/6132f557-3f0f-465d-990f-4329313349a4\n2. https://github.com/tsolucio/corebos/commit/659e328c06a127249e651100d2bc7ec1d2dd8533", "creation_timestamp": "2025-01-08T20:15:08.000000Z"}, {"uuid": "107006cb-f89f-4b0b-b2ab-a4e926d52b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1972", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30145\n\ud83d\udd39 Description: Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.\n\ud83d\udccf Published: 2023-05-26T00:00:00\n\ud83d\udccf Modified: 2025-01-16T16:18:14.452Z\n\ud83d\udd17 References:\n1. https://portswigger.net/research/server-side-template-injection\n2. https://book.hacktricks.xyz/pentesting-web/ssti-server-side-template-injection\n3. https://drive.google.com/file/d/11MsSYqUnDRFjcwbQKJeL9Q8nWpgVYf2r/view?usp=share_link\n4. https://github.com/paragbagul111/CVE-2023-30145\n5. http://packetstormsecurity.com/files/172593/Camaleon-CMS-2.7.0-Server-Side-Template-Injection.html", "creation_timestamp": "2025-01-16T16:55:31.000000Z"}, {"uuid": "af0cd555-9c62-4677-99fa-3a73f50e51ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3031", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/760", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3031\n\ud83d\udd39 Description: Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15.\n\n\n\ud83d\udccf Published: 2023-06-02T12:42:11.842Z\n\ud83d\udccf Modified: 2025-01-08T17:58:49.460Z\n\ud83d\udd17 References:\n1. https://borelenzo.github.io/stuff/2023/06/01/cve-2023-3031.html", "creation_timestamp": "2025-01-08T18:17:23.000000Z"}, {"uuid": "bda99994-d3ec-4825-92e6-31b0b3fd1878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3033", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/759", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3033\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22.\n\n\n\ud83d\udccf Published: 2023-06-02T12:28:54.133Z\n\ud83d\udccf Modified: 2025-01-08T17:59:27.935Z\n\ud83d\udd17 References:\n1. https://borelenzo.github.io/stuff/2023/06/01/cve-2023-3033.html", "creation_timestamp": "2025-01-08T18:17:03.000000Z"}, {"uuid": "a0ccd32f-daea-470c-b386-f84e4b08e4f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3032", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3032\n\ud83d\udd39 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application (Documentary proof upload modules) allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22.\n\n\n\ud83d\udccf Published: 2023-06-02T12:28:40.384Z\n\ud83d\udccf Modified: 2025-01-08T18:05:05.431Z\n\ud83d\udd17 References:\n1. https://borelenzo.github.io/stuff/2023/06/01/cve-2023-3032.html", "creation_timestamp": "2025-01-08T18:13:46.000000Z"}, {"uuid": "65316f84-1d84-4869-ade7-c7d5bcb711f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30948", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/512", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30948\n\ud83d\udd39 Description: A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.\n\nThis defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.\n\ud83d\udccf Published: 2023-06-06T14:12:59.240Z\n\ud83d\udccf Modified: 2025-01-07T18:15:43.559Z\n\ud83d\udd17 References:\n1. https://palantir.safebase.us/?tcuUid=101b083b-6389-4261-98f8-23448e133a62", "creation_timestamp": "2025-01-07T18:38:54.000000Z"}, {"uuid": "d14a7430-689c-4728-8102-6e55a6795a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3069", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3069\n\ud83d\udd39 Description: Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:45:21.161Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/00544982-365a-476b-b5fe-42f02f11d367\n2. https://github.com/tsolucio/corebos/commit/e3dabd74c68646bb54538d66411fc1e633ec454b", "creation_timestamp": "2025-01-08T20:14:40.000000Z"}, {"uuid": "9ca04638-25b2-405d-9000-945a0e2e628e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30914", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/703", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30914\n\ud83d\udd39 Description: In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-06-06T05:13:13.647Z\n\ud83d\udccf Modified: 2025-01-08T14:50:25.472Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-08T15:14:11.000000Z"}, {"uuid": "b68bb5b2-9c02-41a5-96e4-ebc475fa17dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30869", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/857", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30869\n\ud83d\udd39 Description: Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation.\u00a0This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1.\n\ud83d\udccf Published: 2023-05-02T09:46:36.439Z\n\ud83d\udccf Modified: 2025-01-08T22:08:16.581Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/easy-digital-downloads/wordpress-easy-digital-downloads-plugin-3-1-1-4-1-unauthenticated-privilege-escalation-vulnerability?_s_id=cve\n2. https://patchstack.com/articles/critical-easy-digital-downloads-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-08T23:15:45.000000Z"}, {"uuid": "9dea5357-1d09-4f4c-97b5-a392c086a07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3027", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/742", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3027\n\ud83d\udd39 Description: The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtained values (instead of the policy apply a static manifest on a managed cluster) of taking advantage of cluster scoped access in a created policy. This feature does not restrict properly to lookup content from the namespace where the policy was created.\n\ud83d\udccf Published: 2023-06-05T00:00:00\n\ud83d\udccf Modified: 2025-01-08T16:52:25.796Z\n\ud83d\udd17 References:\n1. https://bugzilla.redhat.com/show_bug.cgi?id=2211468#c0", "creation_timestamp": "2025-01-08T17:15:24.000000Z"}, {"uuid": "4bec40f5-b299-4345-a86b-d47c5d11a657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3056", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/753", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3056\n\ud83d\udd39 Description: A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230542 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2023-06-02T12:00:04.473Z\n\ud83d\udccf Modified: 2025-01-08T18:05:31.705Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.230542\n2. https://vuldb.com/?ctiid.230542\n3. https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%201.md", "creation_timestamp": "2025-01-08T18:13:05.000000Z"}, {"uuid": "04703428-2d43-4d2d-b374-250b63d20593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3073", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/825", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3073\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:43:15.218Z\n\ud83d\udd17 References:\n1. https://github.com/tsolucio/corebos/commit/e87f77c64061b43186c80ad1b50d313c67d7f6cf\n2. https://huntr.dev/bounties/a4d6a082-2ea8-49a5-8e48-6d39b5cc62e1", "creation_timestamp": "2025-01-08T20:14:49.000000Z"}, {"uuid": "0156118e-8a53-4dc4-876a-d474d5e7b031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3071", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3071\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:44:10.044Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/3e8d5166-9bc6-46e7-94a8-cad52434a39e\n2. https://github.com/tsolucio/corebos/commit/5e87fbc4292cf7a96fa5139ede88f4baefad104b", "creation_timestamp": "2025-01-08T20:14:47.000000Z"}, {"uuid": "5a71b106-2050-4759-8023-9046adaea527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3070", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3070\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:44:43.226Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/e193068e-0b95-403a-8453-e015241b8f1b\n2. https://github.com/tsolucio/corebos/commit/b3a7a26c60117d7859b8d77b57fd5771a038c93a", "creation_timestamp": "2025-01-08T20:14:45.000000Z"}, {"uuid": "e570a5f9-29cb-4007-bd94-04949a006286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3058", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/761", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3058\n\ud83d\udd39 Description: A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230560.\n\ud83d\udccf Published: 2023-06-02T13:00:04.613Z\n\ud83d\udccf Modified: 2025-01-08T17:57:52.617Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.230560\n2. https://vuldb.com/?ctiid.230560\n3. https://gitee.com/07fly/FLY-CRM/issues/I76K4N", "creation_timestamp": "2025-01-08T18:17:42.000000Z"}, {"uuid": "196ccea5-2f90-4041-82e8-d669be70ffb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3044", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/764", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3044\n\ud83d\udd39 Description: An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code.\n\n\n\n\nThis is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.\n\n\n\n\ud83d\udccf Published: 2023-06-02T22:32:31.677Z\n\ud83d\udccf Modified: 2025-01-08T17:53:11.882Z\n\ud83d\udd17 References:\n1. https://www.xpdfreader.com/security-bug/CVE-2023-3044.html\n2. https://github.com/baker221/poc-xpdf", "creation_timestamp": "2025-01-08T18:18:31.000000Z"}, {"uuid": "349b920d-a82c-4414-a326-b445946e3138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3067\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:46:14.208Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6\n2. https://github.com/zadam/trilium/commit/4c3fcc3ea6f37debcb87ac1a7f5698c27be0e67b", "creation_timestamp": "2025-01-08T20:14:34.000000Z"}, {"uuid": "9c5bfd1f-b005-4544-b400-600d7c1be888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30603", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30603\n\ud83d\udd39 Description: Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator\u2019s privilege, resulting in performing arbitrary system operation or disrupt service.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T20:00:45.438Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-7085-13321-1.html", "creation_timestamp": "2025-01-08T20:13:54.000000Z"}, {"uuid": "7326fa69-d6e6-41da-adc2-6269f5afac99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3095", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/816", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3095\n\ud83d\udd39 Description: Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9.\n\ud83d\udccf Published: 2023-06-04T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:54:09.449Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/35c899a9-40a0-4e17-bfb5-2a1430bc83c4\n2. https://github.com/nilsteampassnet/teampass/commit/774985f62f080715774604927fba2cb6ef701612", "creation_timestamp": "2025-01-08T20:14:13.000000Z"}, {"uuid": "3877eb88-254b-42cc-aefc-a6686584929e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3086", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/814", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3086\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.\n\ud83d\udccf Published: 2023-06-03T00:00:00\n\ud83d\udccf Modified: 2025-01-08T19:57:14.018Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/17be9e8a-abe8-41db-987f-1d5b0686ae20\n2. https://github.com/nilsteampassnet/teampass/commit/1c0825b67eb8f8b5ecc418ff7614423a275e6a79", "creation_timestamp": "2025-01-08T20:14:03.000000Z"}, {"uuid": "7f9306d6-b701-4603-b597-0f0194a3db21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30758", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/999", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30758\n\ud83d\udd39 Description: Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:53:24.139Z\n\ud83d\udd17 References:\n1. https://pleasanter.org/archives/vulnerability-update-202305\n2. https://github.com/Implem/Implem.Pleasanter/issues/474\n3. https://jvn.jp/en/jp/JVN62111727/", "creation_timestamp": "2025-01-09T18:17:14.000000Z"}, {"uuid": "f0d191e1-6f07-4aad-90fc-7aa4a31e3637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3013", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1057", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3013\n\ud83d\udd39 Description: Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2.\n\ud83d\udccf Published: 2023-05-31T00:00:00\n\ud83d\udccf Modified: 2025-01-09T19:42:27.634Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/52f95edc-cc03-4a9f-9bf8-74f641260073\n2. https://github.com/gpac/gpac/commit/78e539b43293829a14a32e821f5267e3b7417594", "creation_timestamp": "2025-01-09T20:17:22.000000Z"}, {"uuid": "bc060e57-2629-4446-959b-c4a53ec6208c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3008", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1048", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3008\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230355.\n\ud83d\udccf Published: 2023-05-31T11:31:03.993Z\n\ud83d\udccf Modified: 2025-01-09T19:51:17.088Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.230355\n2. https://vuldb.com/?ctiid.230355\n3. https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/student-management-system/sql_inject.md", "creation_timestamp": "2025-01-09T20:16:15.000000Z"}, {"uuid": "e023d325-bc49-446b-ad00-456767ed591f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3021", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1068", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3021\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4.\n\ud83d\udccf Published: 2023-05-31T00:00:00\n\ud83d\udccf Modified: 2025-01-09T21:04:58.188Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/9d289d3a-2931-4e94-b61c-449581736eff\n2. https://github.com/mkucej/i-librarian-free/commit/187e5ff4f413047fb522a9ab24c3c42555d7cfe7", "creation_timestamp": "2025-01-09T21:15:16.000000Z"}, {"uuid": "bb9f98c0-d052-4a0a-ab0f-55f8fe467de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3009", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3009\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.\n\ud83d\udccf Published: 2023-05-31T00:00:00\n\ud83d\udccf Modified: 2025-01-10T14:52:39.174Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/2929faca-5822-4636-8f04-ca5e0001361f\n2. https://github.com/nilsteampassnet/teampass/commit/6ba8cf1f4b89d62a08d122d533ccf4cb4e26a4ee", "creation_timestamp": "2025-01-10T15:03:31.000000Z"}, {"uuid": "0cab36b1-53e7-4d30-8e33-9e242d828eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30440", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30440\n\ud83d\udd39 Description: IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption.  IBM X-Force ID:  253175.\n\ud83d\udccf Published: 2023-05-23T13:20:41.163Z\n\ud83d\udccf Modified: 2025-01-17T17:46:27.182Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6997133\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/253175", "creation_timestamp": "2025-01-17T17:57:07.000000Z"}, {"uuid": "24f7387c-3497-4b4a-a335-4af8e94e9dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30469", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2156", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30469\n\ud83d\udd39 Description: Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00.\n\n\n\ud83d\udccf Published: 2023-05-23T01:02:58.540Z\n\ud83d\udccf Modified: 2025-01-17T16:32:42.936Z\n\ud83d\udd17 References:\n1. https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-115/index.html", "creation_timestamp": "2025-01-17T16:56:58.000000Z"}, {"uuid": "eb6c1409-6308-4b00-a5bf-30307e69768c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30382", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2190", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30382\n\ud83d\udd39 Description: A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T18:28:40.643Z\n\ud83d\udd17 References:\n1. https://labs.jumpsec.com/advisory-cve-2023-30382-half-life-local-privilege-escalation/", "creation_timestamp": "2025-01-17T18:57:02.000000Z"}, {"uuid": "aad202cd-8da1-4253-8af1-65025aba2aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30510", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2660", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30510\n\ud83d\udd39 Description: A vulnerability exists in the Aruba EdgeConnect Enterprise\u00a0web management interface that allows remote authenticated\u00a0users to issue arbitrary URL requests from the Aruba\u00a0EdgeConnect Enterprise instance. The impact of this\u00a0vulnerability is limited to a subset of URLs which can\u00a0result in the possible disclosure of data due to the network\u00a0position of the Aruba EdgeConnect Enterprise instance.\n\ud83d\udccf Published: 2023-05-16T18:56:20.679Z\n\ud83d\udccf Modified: 2025-01-22T20:15:47.705Z\n\ud83d\udd17 References:\n1. https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt", "creation_timestamp": "2025-01-22T21:02:25.000000Z"}, {"uuid": "e5f5c4bc-0982-4d2a-8910-3ad38bea0647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30509", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2659", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30509\n\ud83d\udd39 Description: Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface.\u00a0Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying\u00a0operating system, including sensitive system files.\n\ud83d\udccf Published: 2023-05-16T18:55:05.306Z\n\ud83d\udccf Modified: 2025-01-22T20:16:20.443Z\n\ud83d\udd17 References:\n1. https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt", "creation_timestamp": "2025-01-22T21:02:24.000000Z"}, {"uuid": "b480f4a0-2649-454b-ae00-5f105f2c07fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-32073\n\ud83d\udd39 Description: WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3.\n\ud83d\udccf Published: 2023-05-12T13:34:34.164Z\n\ud83d\udccf Modified: 2025-01-23T20:59:41.432Z\n\ud83d\udd17 References:\n1. https://github.com/WWBN/AVideo/security/advisories/GHSA-2mhh-27v7-3vcx\n2. https://github.com/WWBN/AVideo/commit/1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3", "creation_timestamp": "2025-01-23T21:03:27.000000Z"}, {"uuid": "b31ad99c-95f7-4195-9516-206fe538f001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30775", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2441", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30775\n\ud83d\udd39 Description: A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.\n\ud83d\udccf Published: 2023-05-19T00:00:00\n\ud83d\udccf Modified: 2025-01-21T17:30:59.637Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/464\n2. https://access.redhat.com/security/cve/CVE-2023-30775\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2187141\n4. https://security.netapp.com/advisory/ntap-20230703-0002/", "creation_timestamp": "2025-01-21T18:00:55.000000Z"}, {"uuid": "c2ff0bd8-ff0a-4257-b2c4-aeb587ec7005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30503", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2657", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30503\n\ud83d\udd39 Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise\u00a0command line interface that allow remote authenticated users\u00a0to run arbitrary commands on the underlying host. Successful\u00a0exploitation of these vulnerabilities result in the ability\u00a0to execute arbitrary commands as root on the underlying\u00a0operating system leading to complete system compromise.\n\ud83d\udccf Published: 2023-05-16T18:51:40.985Z\n\ud83d\udccf Modified: 2025-01-22T20:17:23.622Z\n\ud83d\udd17 References:\n1. https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt", "creation_timestamp": "2025-01-22T21:02:23.000000Z"}, {"uuid": "de44a2bb-29ef-41a3-889f-71415ccae9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30508", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2658", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30508\n\ud83d\udd39 Description: Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface.\u00a0Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying\u00a0operating system, including sensitive system files.\n\ud83d\udccf Published: 2023-05-16T18:55:01.993Z\n\ud83d\udccf Modified: 2025-01-22T20:16:57.185Z\n\ud83d\udd17 References:\n1. https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt", "creation_timestamp": "2025-01-22T21:02:23.000000Z"}, {"uuid": "fcef533d-88f0-46a6-964b-fe1aee37697c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30438", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2580", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30438\n\ud83d\udd39 Description: An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server.  IBM X-Force ID:  252706.\n\ud83d\udccf Published: 2023-05-17T12:48:37.240Z\n\ud83d\udccf Modified: 2025-01-22T16:48:02.322Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6993021\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/252706", "creation_timestamp": "2025-01-22T17:01:51.000000Z"}, {"uuid": "75800c2b-c656-4f7e-9e7a-918e7ef57602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30502", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2656", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30502\n\ud83d\udd39 Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise\u00a0command line interface that allow remote authenticated users\u00a0to run arbitrary commands on the underlying host. Successful\u00a0exploitation of these vulnerabilities result in the ability\u00a0to execute arbitrary commands as root on the underlying\u00a0operating system leading to complete system compromise.\n\ud83d\udccf Published: 2023-05-16T18:51:27.762Z\n\ud83d\udccf Modified: 2025-01-22T20:17:51.746Z\n\ud83d\udd17 References:\n1. https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt", "creation_timestamp": "2025-01-22T21:02:22.000000Z"}, {"uuid": "2d9bfc09-7f71-47db-aba7-d6fd5cc260b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30501", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2654", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30501\n\ud83d\udd39 Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise\u00a0command line interface that allow remote authenticated users\u00a0to run arbitrary commands on the underlying host. Successful\u00a0exploitation of these vulnerabilities result in the ability\u00a0to execute arbitrary commands as root on the underlying\u00a0operating system leading to complete system compromise.\n\ud83d\udccf Published: 2023-05-16T18:49:59.884Z\n\ud83d\udccf Modified: 2025-01-22T20:18:23.799Z\n\ud83d\udd17 References:\n1. https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt", "creation_timestamp": "2025-01-22T21:02:17.000000Z"}, {"uuid": "defd608f-9b44-4b71-b001-5aaded7fbd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30505", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2676", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30505\n\ud83d\udd39 Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise\u00a0command line interface that allow remote authenticated users\u00a0to run arbitrary commands on the underlying host. Successful\u00a0exploitation of these vulnerabilities result in the ability\u00a0to execute arbitrary commands as root on the underlying\u00a0operating system leading to complete system compromise.\n\ud83d\udccf Published: 2023-05-16T18:51:46.597Z\n\ud83d\udccf Modified: 2025-01-22T21:17:03.558Z\n\ud83d\udd17 References:\n1. https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt", "creation_timestamp": "2025-01-22T22:02:46.000000Z"}, {"uuid": "51f66c7f-ca10-4f80-9ca9-1a9b7c20016b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30504", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2675", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30504\n\ud83d\udd39 Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise\u00a0command line interface that allow remote authenticated users\u00a0to run arbitrary commands on the underlying host. Successful\u00a0exploitation of these vulnerabilities result in the ability\u00a0to execute arbitrary commands as root on the underlying\u00a0operating system leading to complete system compromise.\n\ud83d\udccf Published: 2023-05-16T18:51:43.801Z\n\ud83d\udccf Modified: 2025-01-22T21:17:29.095Z\n\ud83d\udd17 References:\n1. https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt", "creation_timestamp": "2025-01-22T22:02:42.000000Z"}, {"uuid": "ca02858c-9b7e-4b08-908e-9738dee5b45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30245", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2798", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30245\n\ud83d\udd39 Description: SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the crit_id parameter of the edit_criteria.php file.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T18:54:38.421Z\n\ud83d\udd17 References:\n1. https://www.github.com\n2. https://github.com/qingning988/cve_report/blob/main/judging-management-system/SQLi-1.md", "creation_timestamp": "2025-01-23T19:03:29.000000Z"}, {"uuid": "805e63dd-8ea4-4913-80f4-56c4b49ce6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30333", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2811", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30333\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.\n\ud83d\udccf Published: 2023-05-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:44:52.808Z\n\ud83d\udd17 References:\n1. https://github.com/j0k1rr/some-automated-script/issues/3", "creation_timestamp": "2025-01-23T20:03:32.000000Z"}, {"uuid": "688cbd19-e692-4f81-88a6-d1ce52cd9afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30124", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2810", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30124\n\ud83d\udd39 Description: LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).\n\ud83d\udccf Published: 2023-05-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:48:55.743Z\n\ud83d\udd17 References:\n1. https://github.com/LavaLite/cms/issues/389#issue-1636041104", "creation_timestamp": "2025-01-23T20:03:28.000000Z"}, {"uuid": "af6dcd2b-f248-4666-b38c-7ec4c295ea89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/I0hAgnRYYTC1y9bgXOtEEdG8u60nbzDCQqcUKiA5izDmWJ90", "content": "", "creation_timestamp": "2023-07-19T22:24:29.000000Z"}, {"uuid": "7951e9fe-68c6-439f-89de-65915243ae05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30330", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3013", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30330\n\ud83d\udd39 Description: SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.\n\ud83d\udccf Published: 2023-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T19:29:18.699Z\n\ud83d\udd17 References:\n1. https://github.com/Filiplain/LFI-to-RCE-SE-Suite-2.0\n2. https://www.exploit-db.com/exploits/51404", "creation_timestamp": "2025-01-24T20:04:58.000000Z"}, {"uuid": "1cfdd520-7442-4330-b2cf-4b269091d61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30247", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3012", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30247\n\ud83d\udd39 Description: File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the update_settings parameter.\n\ud83d\udccf Published: 2023-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T19:37:49.979Z\n\ud83d\udd17 References:\n1. https://www.github.com\n2. https://github.com/qingning988/cve_report/blob/main/storage-unit-rental-management-system/RCE-1.md", "creation_timestamp": "2025-01-24T20:04:58.000000Z"}, {"uuid": "08ab1204-a84e-48a6-88b6-8dd28ac8e388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30768", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2946", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30768\n\ud83d\udd39 Description: Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2023-05-12T14:01:48.723Z\n\ud83d\udccf Modified: 2025-01-24T16:44:07.029Z\n\ud83d\udd17 References:\n1. https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00056.html", "creation_timestamp": "2025-01-24T17:05:02.000000Z"}, {"uuid": "a421847a-2ac9-40d0-bb06-2b9defa8bbeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3022", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7143", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3022\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6_info and other times fib6_info. This was not accounted for in other parts of the code where rt6_info was expected unconditionally, potentially leading to a kernel panic in fib6_rule_suppress.\n\ud83d\udccf Published: 2023-06-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T14:28:54.072Z\n\ud83d\udd17 References:\n1. https://bugzilla.redhat.com/show_bug.cgi?id=2211440\n2. https://github.com/torvalds/linux/commit/a65120bae4b7", "creation_timestamp": "2025-03-11T14:39:36.000000Z"}, {"uuid": "62cb6333-1787-4a5a-9237-57b53377dadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30540", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6258", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30540\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later to a conversation can use this information to get access to data that was deleted before they were added to the conversation. This issue has been patched in version 15.0.5 and it is recommended that users upgrad to 15.0.5. There are no known workarounds for this issue.\n\ud83d\udccf Published: 2023-04-17T21:32:29.470Z\n\ud83d\udccf Modified: 2025-03-03T19:18:53.256Z\n\ud83d\udd17 References:\n1. https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c9hr-cq65-9mjw\n2. https://github.com/nextcloud/spreed/pull/8985\n3. https://hackerone.com/reports/1894676", "creation_timestamp": "2025-03-03T19:30:50.000000Z"}, {"uuid": "b9ff7b01-9030-43de-afaf-4c488f0d2451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30630", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6439", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30630\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).\n\ud83d\udccf Published: 2023-04-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T21:16:05.020Z\n\ud83d\udd17 References:\n1. https://github.com/adamreiser/dmiwrite\n2. https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html\n3. https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206\n4. https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2", "creation_timestamp": "2025-03-04T21:35:48.000000Z"}, {"uuid": "fc4aa1fd-1936-4465-bb02-290277834bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30421", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12599", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30421\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114.\n\ud83d\udccf Published: 2025-04-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-19T21:42:33.498Z\n\ud83d\udd17 References:\n1. https://github.com/boofish/json_bugs/blob/main/mjson\n2. https://github.com/cesanta/mjson/releases", "creation_timestamp": "2025-04-19T22:00:00.000000Z"}, {"uuid": "a1d0e08a-8d00-42e2-9f7e-0861da5263a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30586", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15551", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-30586\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permission model. The attack complexity is high. However, the crypto.setEngine() API can be used to bypass the permission model when called with a compatible OpenSSL engine. The OpenSSL engine can, for example, disable the permission model in the host process by manipulating the process's stack memory to locate the permission model Permission::enabled_ in the host process's heap memory. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.\n\ud83d\udccf Published: 2023-06-30T23:40:08.238Z\n\ud83d\udccf Modified: 2025-05-08T16:14:11.957Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/1954535\n2. https://security.netapp.com/advisory/ntap-20230803-0008/", "creation_timestamp": "2025-05-08T16:23:50.000000Z"}, {"uuid": "7197dc78-7486-4ab8-b0d7-de657b51e1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3042", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3042\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access controls. An example affected URL is  https://demo.dotcms.com//html/portlet/ext/files/edit_text_inc.jsp , which should return a 404 response but didn't. \n\nThe oversight in the default invalid URL character list can be viewed at the provided  GitHub link https://github.com/dotCMS/core/blob/master/dotCMS/src/main/java/com/dotcms/filters/NormalizationFilter.java#L37 .\u00a0\n\nTo mitigate, users can block URLs with double slashes at firewalls or utilize dotCMS config variables.\n\nSpecifically, they can use the DOT_URI_NORMALIZATION_FORBIDDEN_STRINGS environmental variable to add // to the list of invalid strings. \n\nAdditionally, the DOT_URI_NORMALIZATION_FORBIDDEN_REGEX variable offers more detailed control, for instance, to block //html.* URLs.\n\nFix Version:23.06+, LTS 22.03.7+, LTS 23.01.4+\n\ud83d\udccf Published: 2023-10-17T22:52:05.453Z\n\ud83d\udccf Modified: 2025-06-12T15:05:44.260Z\n\ud83d\udd17 References:\n1. https://www.dotcms.com/security/SI-68", "creation_timestamp": "2025-06-12T15:34:11.000000Z"}, {"uuid": "af217f95-d2e3-4fcf-a420-216c5919e900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30190", "type": "seen", "source": "https://t.me/cKure/11940", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 CVE-2023-30190 (Folina) demo on windows office.\n\nhttps://www.facebook.com/share/r/1sTsufbUiqV8Arvc/", "creation_timestamp": "2023-11-07T02:10:27.000000Z"}, {"uuid": "f77cfc34-485e-4789-a4c3-c14a83300261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/24489", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPOC for CVE-2023-30258-RCE by n0o0b\nURL\uff1ahttps://github.com/n00o00b/CVE-2023-30258-RCE-POC\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-03-25T16:01:38.000000Z"}, {"uuid": "260082cd-9136-4c76-8827-a98aa8f085c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30800", "type": "seen", "source": "https://t.me/mtikpro/292", "content": "MikroTik: CVE-2023-30800\n\n\u0412\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 MikroTik RouterOS version 6, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \"heap memory\" (heap memory corruption issue). \u0423\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0439 HTTP \u043f\u0430\u043a\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0451\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 (can corrupt the server's heap memory).\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0435\u0431 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u043a\u0440\u0430\u0448\u0438\u0442\u0441\u044f \u0438 \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0441\u044f.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 RouterOS 6.49.10 stable.\nRouterOS version 7 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430.\n\n----\n\u0412\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f!", "creation_timestamp": "2023-09-07T18:45:20.000000Z"}, {"uuid": "10fbdf7b-a5e1-4ce9-89cb-dcc9cf23f7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "published-proof-of-concept", "source": "Telegram/7px8nwiUF2niCK-6XyElezcyM_S8qjdPiX_ftxJxxgkttsM", "content": "", "creation_timestamp": "2025-09-18T21:00:04.000000Z"}, {"uuid": "82e84dbf-f498-4472-9d20-b3fe415bf7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30873", "type": "seen", "source": "Telegram/JXGKS5SxLjuKE8EStBZlth90fPE7c1D9G4wyesMaQ6rVgyQN", "content": "", "creation_timestamp": "2025-03-02T11:44:19.000000Z"}, {"uuid": "a93b27b6-9e5c-4dfa-91da-8628e63998e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/habr_com_news/19909", "content": "\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0437 VulnCheck \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-30799) \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u00ab\u0421\u0443\u043f\u0435\u0440\u0430\u0434\u043c\u0438\u043d\u0430\u00bb (Super Admin) \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 926 \u0442\u044b\u0441. \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 MikroTik \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0442\u0435\u0445\u043d\u0438\u043a\u0430", "creation_timestamp": "2023-07-27T07:01:38.000000Z"}, {"uuid": "74049b94-883e-4c61-8fa4-fc4b148a4e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/YrKlEtmqZ5dizKgm6CMZIS4BN_YtiV82x3-igcBpPL-XNqk5", "content": "", "creation_timestamp": "2025-05-05T00:13:37.000000Z"}, {"uuid": "d56ff1d1-8605-4a2c-8e30-6f4f4d729423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/OD0yNlme-8efGxd5jmPzuvO9mTtKhRFaBfS7YTBiC8nHvE1e", "content": "", "creation_timestamp": "2023-07-19T19:15:21.000000Z"}, {"uuid": "6764b247-35cf-4fbe-b57f-e560bda97a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/RoFsdx_vYq372Swfks-cvrvAknaBTT04-fcH0qeCogBlCl2Y", "content": "", "creation_timestamp": "2025-02-19T08:07:04.000000Z"}, {"uuid": "9c68b592-3a5a-4794-a8c9-f798570d3925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://t.me/poxek/2965", "content": "\ud83d\udd25CVE-2023-3079(bug id: 1450481) -  Type Confusion in V8\n( 0-day, may have been actively exploited/ITW )\nReviewed here: 4584248 \"[ic] Fix store handler selection for arguments objects\"", "creation_timestamp": "2023-06-07T07:02:55.000000Z"}, {"uuid": "1f6426de-cff3-47f1-b2d2-2f545e0ebe13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "https://t.me/road_to_oscp/244", "content": "\u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u0440\u044e, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 MikroTik RouterOS 6.x.\n\nhttps://github.com/j-baines/even-you-brutus\n\n\u0421\u043a\u0440\u0438\u043f\u0442, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0438\u0442\u044c \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 MikroTik RouterOS, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0445\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Winbox. \u0414\u043b\u044f \u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0440\u0442 8291 \u0431\u044b\u043b \u043e\u0442\u043a\u0440\u044b\u0442.\n\nhttps://gist.github.com/j-baines/c484fc2988123bc4626efea74c316615\n\n\u0412\u0437\u044f\u0442\u043e \u0438\u0437 \u0441\u0442\u0430\u0442\u044c\u0438: \"Exploiting MikroTik RouterOS Hardware with CVE-2023-30799\"", "creation_timestamp": "2023-07-27T15:17:40.000000Z"}, {"uuid": "6ce8df7d-37fd-40ce-8874-2fd2c1aaeb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "https://t.me/sanspie_notes/343", "content": "#mikrotik #cve\n\nRemote and authenticated attackers can use the vulnerability to get a root shell on the router. (CVE-2023-30799)\n\nhttps://vulncheck.com/blog/mikrotik-foisted-revisited", "creation_timestamp": "2023-08-03T14:13:44.000000Z"}, {"uuid": "eb9b7967-9c74-4bed-84b0-020cb8fd9135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "published-proof-of-concept", "source": "Telegram/5XGpncEfRIuewYJEc34aWTFVRwMO65Yc4SMMQva9F06aJhs", "content": "", "creation_timestamp": "2025-07-13T21:00:04.000000Z"}, {"uuid": "3401a223-8dec-4dda-a289-236635c07671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4434", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aDocker environment and exploit the CVE-2023-30212 vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site Scripting (XSS) attacks\nURL\uff1ahttps://github.com/libasmon/-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-27T05:13:27.000000Z"}, {"uuid": "3ea1ac05-e922-4a25-b6c2-67286c128293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "published-proof-of-concept", "source": "Telegram/5SbEAny07-s81Hr8Ynz8Csexb-qwAT2DAub5b_MriADo8ww", "content": "", "creation_timestamp": "2025-06-28T09:00:04.000000Z"}, {"uuid": "5aa99b7d-355a-4515-8f02-c64fd418dda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/kasperskyb2b/694", "content": "\ud83d\udee1 \u0418\u044e\u043d\u044c\u0441\u043a\u0438\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043f\u0430\u0442\u0447\u0435\u0439, \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u043f\u0440\u043e\u0448\u0451\u043b \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e\n\n\u0412\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043f\u0430\u043a\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 78 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 32 RCE. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u044d\u0442\u0438 \u0433\u0440\u043e\u0437\u043d\u044b\u0435 \u0446\u0438\u0444\u0440\u044b, \u0442\u043e\u043b\u044c\u043a\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b  \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u0438 \u043d\u0438 \u043e\u0434\u043d\u0430, \u043f\u043e\u0445\u043e\u0436\u0435, \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 (\u043f\u043e \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0438 \u043d\u0435 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u043c \u0430\u043f\u0434\u0435\u0439\u0442\u044b Edge/Chromium, \u0442\u0430\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 CVE-2023-3079). \n\u0418\u0437 6 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0440\u0438 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c\u0443 Pragmatic General Multicast (PGM). \n\n\u0412\u0441\u0435\u0433\u043e  \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 18 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439,  10 \u2014 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, 32 \u2014 \u043a \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 2 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043d\u0440\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c, \u043e\u0442\u043c\u0435\u0442\u0438\u043c:\n\ud83d\udfe0\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 SharePoint (CVE-2023-29357, CVSS 9.8);\n\ud83d\udfe0RCE \u0432 Exchange Server \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 (CVE-2023-32031, CVSS 8.8);\n\ud83d\udfe0RCE \u0432 Outlook \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f (CVE-2023-33131, CVSS 8.8) \u0438 \u043f\u043e\u0445\u043e\u0436\u0438\u0435 RCE \u0432 Excel ( -33133 \u0438 -33137);\n\ud83d\udfe0Spoofing \u0432 OneNote (CVE-2023-33140, CVSS 6.5).\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-06-14T10:24:46.000000Z"}, {"uuid": "6027df63-ed5c-40ea-ad11-eed3f1c6d300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "exploited", "source": "https://t.me/kasperskyb2b/769", "content": "\ud83d\udcf6 \u0421 \u043c\u0435\u0441\u0442 \u0440\u0430\u043f\u043e\u0440\u0442\u0443\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439-\u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 MikroTik. CVE-2023-30799 (CVSS 9.2) \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0432\u0441\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0441 RouterOS \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 6.49.6.  \u041f\u0430\u0442\u0447 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 RouterOS stable 6.49.7, \u0430 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0434\u043b\u044f RouterOS Long-term 6.49.8.  \n\n\u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0441\u0443\u043f\u0435\u0440\u0430\u0434\u043c\u0438\u043d\u0430.  \u042d\u0442\u0438 \u043f\u0440\u0430\u0432\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441\u043f\u0440\u0430\u0432\u0435\u0434\u043b\u0438\u0432\u043e \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0439 PoC remote jailbreak.  \u0412\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0442\u0430\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0430 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u0442 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u044d\u0442\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0441\u0435\u0442\u044c \u0438\u0437 SOCKS proxy  \u0434\u043b\u044f \u0441\u0434\u0430\u0447\u0438 \u0432 \u0430\u0440\u0435\u043d\u0434\u0443), \u0442\u0430\u043a \u0438 APT (\u0437\u0430\u043c\u0435\u0442\u0430\u0442\u044c \u0441\u043b\u0435\u0434\u044b).\n\n\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043d\u0435 \u043c\u0430\u043b\u0430, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0447\u0442\u043e \u0440\u043e\u0443\u0442\u0435\u0440\u044b MikroTik \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u043c admin, \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0430\u044e\u0442 \u043e\u0442 \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0442 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0430 \u0434\u043e 2021 \u0433\u043e\u0434\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u044b\u043b \u0432\u043e\u043e\u0431\u0449\u0435 \u043f\u0443\u0441\u0442\u044b\u043c. \u0421\u0442\u043e\u0438\u0442 \u0443\u0447\u0435\u0441\u0442\u044c, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043a\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u0442\u0430\u043a \u0438 \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043c\u0435\u043d\u0435\u0434\u0436\u043c\u0435\u043d\u0442\u0430 Winbox. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442 \u0447\u0438\u0441\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0432 900 000.\n\n\u0412\u044b\u0432\u043e\u0434\u044b \u0434\u043b\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u043f\u0440\u043e\u0441\u0442\u044b: \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0439\u0442\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c, \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 admin \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0439\u0442\u0435.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-07-26T11:46:30.000000Z"}, {"uuid": "bc284792-e979-4e34-bc41-71605ec229c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30421", "type": "seen", "source": "https://t.me/cvedetector/23397", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-30421 - Mjson strtod Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2023-30421 \nPublished : April 19, 2025, 10:15 p.m. | 48\u00a0minutes ago \nDescription : mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-20T01:10:35.000000Z"}, {"uuid": "48a3caa6-252e-4e92-82e6-63edb2329f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30872", "type": "seen", "source": "https://t.me/ctinow/157207", "content": "https://ift.tt/sWgz21K\nCVE-2023-30872", "creation_timestamp": "2023-12-20T18:21:52.000000Z"}, {"uuid": "ebe2e23f-bf36-424c-8c3d-326c39230769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30750", "type": "seen", "source": "https://t.me/ctinow/157206", "content": "https://ift.tt/3gBAaxi\nCVE-2023-30750", "creation_timestamp": "2023-12-20T18:21:51.000000Z"}, {"uuid": "1265b363-a8c6-49f2-b806-1dc2e46b8ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30495", "type": "seen", "source": "https://t.me/ctinow/157205", "content": "https://ift.tt/Wh5EJrl\nCVE-2023-30495", "creation_timestamp": "2023-12-20T18:21:50.000000Z"}, {"uuid": "d1026590-c09a-48c6-b7c7-0aab9d144c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30496", "type": "seen", "source": "https://t.me/ctinow/156971", "content": "https://ift.tt/56aAWD0\nCVE-2023-30496", "creation_timestamp": "2023-12-20T13:48:48.000000Z"}, {"uuid": "b4891eb1-19f9-4e3e-886d-d41222496e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30443", "type": "seen", "source": "https://t.me/cvedetector/13300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-30443 - IBM Db2 Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-30443 \nPublished : Dec. 19, 2024, 2:15 a.m. | 40\u00a0minutes ago \nDescription : IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T03:55:46.000000Z"}, {"uuid": "bf2bc771-a339-4e01-9153-91f13fdc2947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/ctinow/126385", "content": "https://ift.tt/4DuXcQe\nMikroTik vulnerability could be used to hijack 900,000 routers (CVE-2023-30799)", "creation_timestamp": "2023-07-26T16:18:28.000000Z"}, {"uuid": "fd1a597c-5c8c-45dc-8dc6-896f5aec6cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3076", "type": "published-proof-of-concept", "source": "Telegram/mqEn0jyqTlu9BcPpt39lTqg96B76psRbRKpwEgkf9-pC", "content": "", "creation_timestamp": "2023-10-22T18:16:57.000000Z"}, {"uuid": "d428fc6e-b490-4ad6-90ef-804f54ec7d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30845", "type": "seen", "source": "https://t.me/ctinow/119046", "content": "https://ift.tt/ckzX7Bn\nGCP ESPv2 Hit with Critical API Authorization Bypass CVE-2023-30845", "creation_timestamp": "2023-06-20T05:41:47.000000Z"}, {"uuid": "a8d56a0f-24b3-4b17-9d2d-ca5ef15daa0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/ctinow/116546", "content": "https://ift.tt/5PtC9Tr\nExploited zero-day patched in Chrome (CVE-2023-3079)", "creation_timestamp": "2023-06-07T12:56:54.000000Z"}, {"uuid": "09fd25fc-b36a-4f02-8654-bdec2bbbaac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "published-proof-of-concept", "source": "Telegram/kju8yq44__8EVeXaV4nw-IA8W0PG5tz3Mk5v9ANhhSaXjw", "content": "", "creation_timestamp": "2023-10-24T19:46:01.000000Z"}, {"uuid": "401de402-198f-4612-bbec-504af3904c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30464", "type": "seen", "source": "https://t.me/cvedetector/6022", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-30464 - CoreDNS DNS Cache Poisoning Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-30464 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:48.000000Z"}, {"uuid": "2a48a68d-d7e1-4c83-8b7e-1e6f397d3d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30906", "type": "seen", "source": "https://t.me/cibsecurity/66920", "content": "\u203c CVE-2023-30906 \u203c\n\nThe vulnerability could be locally exploited to allow escalation of privilege.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T18:32:59.000000Z"}, {"uuid": "7b698196-192f-46d6-a3cf-6d7cdcf532bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30582", "type": "seen", "source": "https://t.me/cvedetector/5035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-30582 - \"Node.js File Watching Permission Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2023-30582 \nPublished : Sept. 7, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non-* argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a result, malicious actors can monitor files that they do not have explicit read access to.  \n  \nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T19:20:39.000000Z"}, {"uuid": "7826a169-c394-49ae-acca-d7f221aa45da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30583", "type": "seen", "source": "https://t.me/cvedetector/5034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-30583 - Node.js FS OpenAsBlob Experimental Permission Bypass\", \n  \"Content\": \"CVE ID : CVE-2023-30583 \nPublished : Sept. 7, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : fs.openAsBlob() can bypass the experimental permission model when using the file system read restriction with the `--allow-fs-read` flag in Node.js 20. This flaw arises from a missing check in the `fs.openAsBlob()` API.  \n  \nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T19:20:38.000000Z"}, {"uuid": "5a45b704-3283-4b36-af87-96b373c87507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30584", "type": "seen", "source": "https://t.me/cvedetector/5033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-30584 - Node.js Path Traversal Bypass in Experimental Permission Model\", \n  \"Content\": \"CVE ID : CVE-2023-30584 \nPublished : Sept. 7, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of path traversal bypass when verifying file permissions.  \n  \nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T19:20:37.000000Z"}, {"uuid": "9560b33a-7625-40a5-afd4-9282af49ff54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30587", "type": "seen", "source": "https://t.me/cvedetector/5030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-30587 - Node.js Inspector Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-30587 \nPublished : Sept. 7, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using the built-in inspector module (node:inspector).  \n  \nBy exploiting the Worker class's ability to create an \"internal worker\" with the kIsInternal Symbol, attackers can modify the isInternal value when an inspector is attached within the Worker constructor before initializing a new WorkerImpl. This vulnerability exclusively affects Node.js users employing the permission model mechanism.  \n  \nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T19:20:31.000000Z"}, {"uuid": "0ffb5cc7-ce5d-4ebb-ab40-f40669908c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30617", "type": "seen", "source": "https://t.me/cibsecurity/74322", "content": "\u203c\ufe0fCVE-2023-30617\u203c\ufe0f\n\nKruise provides automated management of largescale applications on Kubernetes. Starting in version 0.8.0 and prior to versions 1.3.1, 1.4.1, and 1.5.2, an attacker who has gained root privilege of the node that kruisedaemon run can leverage the kruisedaemon pod to list all secrets in the entire cluster. After that, the attacker can leverage the \"captured\" secrets e.g. the kruisemanager service account token to gain extra privileges such as pod modification. Versions 1.3.1, 1.4.1, and 1.5.2 fix this issue. A workaround is available. For users that do not require imagepulljob functions, they can modify kruisedaemonrole to drop the cluster level secret getlist privilege.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-04T01:36:04.000000Z"}, {"uuid": "ab00ee12-4057-4170-9d19-2990730f9c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30639", "type": "seen", "source": "https://t.me/cvedetector/1619", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-41705 - Archer Platform Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-41705 \nPublished : July 25, 2024, 8:15 a.m. | 38\u00a0minutes ago \nDescription : A stored XSS issue was discovered in Archer Platform 6.8 before 2024.06. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. 6.14.P4 (6.14.0.4) and 6.13 P4 (6.13.0.4) are also fixed releases. This vulnerability is similar to, but not identical to, CVE-2023-30639. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-25T11:03:37.000000Z"}, {"uuid": "5b5a93a8-394b-46cd-9d4f-cbf876463898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30806", "type": "seen", "source": "https://t.me/cibsecurity/71951", "content": "\u203c CVE-2023-30806 \u203c\n\nThe Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/login.cgi endpoint. This is due to mishandling of shell meta-characters in the PHPSESSID cookie.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T18:16:52.000000Z"}, {"uuid": "c78949d7-6914-4753-b596-f5f726e62ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "Telegram/y3fbNErbYarTP6Z34xtGNYscxfofgzSFBrcdEurtrNBIVA", "content": "", "creation_timestamp": "2024-03-07T16:51:53.000000Z"}, {"uuid": "b5d8457d-aa93-4950-8019-d25a6e3b954a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30804", "type": "seen", "source": "https://t.me/cibsecurity/71946", "content": "\u203c CVE-2023-30804 \u203c\n\nThe Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpn_html/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated attacker when paired with CVE-2023-30803.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T18:16:46.000000Z"}, {"uuid": "e950d0c0-659f-428c-a339-dc1370891515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30790", "type": "seen", "source": "Telegram/hbhkVLHn8Z2v4uRfOTwrOteRDb0ln3EG8HnnnnxvE5H3hCTq", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "8c9a0c39-d180-4358-b093-0807c4e2bb68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30789", "type": "seen", "source": "Telegram/iOf1uBHdGjKRe0ts-6xpGDe4s7IKRbq92LJP7VvGncZJ2yPo", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "76a8cd97-7991-47e6-bb29-1ae3d687a721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30363", "type": "seen", "source": "Telegram/YWvZfehcBf_FSvk5PGKuna3IseJt2Xp2J2G6aeYrzR1d-WfO", "content": "", "creation_timestamp": "2025-02-06T02:39:19.000000Z"}, {"uuid": "9865380e-1089-42e5-bf97-7b91b42b71b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30802", "type": "seen", "source": "https://t.me/cibsecurity/71945", "content": "\u203c CVE-2023-30802 \u203c\n\nThe Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid Content-Length field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T18:16:45.000000Z"}, {"uuid": "1afb9e18-15b3-4650-ac57-17c8bdbea942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30633", "type": "seen", "source": "https://t.me/cibsecurity/72631", "content": "\u203c CVE-2023-30633 \u203c\n\nAn issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It can report false TPM PCR values, and thus mask malware activity. Devices use Platform Configuration Registers (PCRs) to record information about device and software configuration to ensure that the boot process is secure. (For example, Windows uses these PCR measurements to determine device health.) A vulnerable device can masquerade as a healthy device by extending arbitrary values into Platform Configuration Register (PCR) banks. This requires physical access to a target victim's device, or compromise of user credentials for a device. This issue is similar to CVE-2021-42299 (on Surface Pro devices).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T00:34:52.000000Z"}, {"uuid": "4c8ecb2b-0027-4238-874f-d1e6e9718ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30506", "type": "seen", "source": "Telegram/4MmOGIQC7htztUbmfOLC_UVyOmWYR8fwtnHBAe5oBdgxnbal", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "b501a35e-160d-4614-a69c-ae64c3611b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30507", "type": "seen", "source": "Telegram/aG_S-9nks0MSE8FYk4zbT04cnGwi7qZIm6bbqFSj9AFidOFE", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "47940b44-30d7-40d3-a8cd-b8fb4ef7d485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30610", "type": "seen", "source": "Telegram/_QjLVcu-WqgjAE7odPYeG3ITIVOyHAbZfXok_zVYSRTpFnRR", "content": "", "creation_timestamp": "2025-02-06T02:43:29.000000Z"}, {"uuid": "0536d0ac-89c0-4259-82b5-130ea845c60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30024", "type": "seen", "source": "Telegram/vN7PkHO0niPpMIZUO7o_p0AjGHYX2YkUebpJ-g2st5H5rr5O", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "fdc7c2a4-4414-4fdf-9206-922471762826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30125", "type": "seen", "source": "Telegram/XuYy_YNpv7DujUfW7R10WtfIaAOwbPcYfFtMzT-SV-6EGfTZ", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "d5b8e034-a562-4ead-b20f-0a561ab80f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30300", "type": "seen", "source": "Telegram/miuyLnA9NOkG5ZBa-G0DCO7UlUoGNqGLtbPUTa4ZM10HRDF9", "content": "", "creation_timestamp": "2025-01-30T23:28:04.000000Z"}, {"uuid": "0edd1bed-9efc-4371-bf44-d5452dbba6ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30405", "type": "seen", "source": "Telegram/bCuDX7l_niPCgjVS77mxWuQl_gVD6eaMXgXlLcIFVaMdVYs3", "content": "", "creation_timestamp": "2025-01-30T23:28:04.000000Z"}, {"uuid": "2732444b-9fcb-4b54-8e0c-2f9abac48b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30454", "type": "seen", "source": "Telegram/_4CwZP0_k3GIEjoASCdFVsvihjdroOFcGw_mMXKMhnW_kfYE", "content": "", "creation_timestamp": "2025-01-30T23:28:04.000000Z"}, {"uuid": "1681f5b9-b659-430d-a4f9-b088ed607c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30455", "type": "seen", "source": "Telegram/ef6Yr2afArT7EnU_i1uve3EZR5UK83oX_eeVTWyvs4JQl13D", "content": "", "creation_timestamp": "2025-01-30T23:28:04.000000Z"}, {"uuid": "e0be31d3-ebca-499e-a032-8cc34ecab388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "Telegram/J5e0ymwMuElFk6tzqcIsxZ9vMNLR3XO22TaPZ7Iucboy", "content": "", "creation_timestamp": "2023-10-24T13:30:49.000000Z"}, {"uuid": "d41f33e0-b2a9-4048-9d3c-8de132529b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30748", "type": "seen", "source": "Telegram/Xa9bPt6NDkarRahCBXheq6JXPcDTB0LCaRHbquMaEM5cAvkM", "content": "", "creation_timestamp": "2025-02-06T02:44:20.000000Z"}, {"uuid": "41a88081-a5d5-489c-b930-ca772102fe69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30205", "type": "seen", "source": "Telegram/uDuJ92KkyWc7gNVhnCa-l7QU9NM2JMslbdiElxnwPXHZZK0L", "content": "", "creation_timestamp": "2025-01-30T23:28:04.000000Z"}, {"uuid": "17ba69b4-3b00-415e-ae9f-5321db800cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30204", "type": "seen", "source": "Telegram/SWplER3zojeEQWjsW2N3B5hB98ZVx6Hej9hIx4x2i086wmsY", "content": "", "creation_timestamp": "2025-01-30T23:28:04.000000Z"}, {"uuid": "86bcfaa8-28e8-4b78-94fa-9a8ea84e569b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30148", "type": "seen", "source": "https://t.me/cibsecurity/72276", "content": "\u203c CVE-2023-30148 \u203c\n\nMultiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart multihtmlblock* version 1.0.0, allows remote authenticated users to inject arbitrary web script or HTML via the body_text or body_text_rude field in /sourcefiles/BlockhtmlClass.php and /sourcefiles/blockhtml.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-14T07:29:27.000000Z"}, {"uuid": "6cc3bb90-5e5f-4be0-80f4-4bd5cd059803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30801", "type": "exploited", "source": "https://t.me/cibsecurity/71941", "content": "\u203c CVE-2023-30801 \u203c\n\nAll versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and execute arbitrary operating system commands using the \"external program\" feature in the web user interface. This was reportedly exploited in the wild in March 2023.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T18:16:40.000000Z"}, {"uuid": "d5b589bf-d0e7-40ec-b910-af404ef1a33c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "Telegram/qToAS4YEOS1iBIZgbHN8NlAVkce_RQNjVb47UoaEUJiuqvw", "content": "", "creation_timestamp": "2023-06-07T14:23:11.000000Z"}, {"uuid": "a842c1bb-1a8e-489e-848d-fb921076fa2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "Telegram/JjtTWPiWWiM54f76TC6itB0IIg6sRGB4Pcu226OO1yPzT10", "content": "", "creation_timestamp": "2023-06-14T19:45:13.000000Z"}, {"uuid": "7d12bf98-2204-4c6d-99a7-9becd52cadf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/YourAnonTl3x/3967", "content": "PoC How to exploit CVE-2023-3047 \n\nDetails > https://github.com/Phamchie/CVE-2023-3047", "creation_timestamp": "2024-03-07T16:50:16.000000Z"}, {"uuid": "ca5c6ef1-a776-43ed-83e3-053ebdb89307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/YourAnonTl3x/6363", "content": "https://github.com/Phamchie/CVE-2023-3047", "creation_timestamp": "2024-08-05T11:41:22.000000Z"}, {"uuid": "ccea04b9-8162-4133-a560-06c2a944cc73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/-Vw6YO9mtulx_zggb-I5Df5J_Tz-2D6t4AOBAu49ATGU", "content": "", "creation_timestamp": "2024-12-08T19:26:54.000000Z"}, {"uuid": "b2b700ce-d246-4c27-8997-ae8e57d82629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30900", "type": "seen", "source": "https://t.me/cibsecurity/71913", "content": "\u203c CVE-2023-30900 \u203c\n\nA vulnerability has been identified in Xpedition Layout Browser (All versions < VX.2.14). Affected application contains a stack overflow vulnerability when parsing a PCB file. An attacker can leverage this vulnerability to execute code in the context of the current process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T14:30:18.000000Z"}, {"uuid": "c3f4a59f-e814-4b6e-a48e-dad0044535f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30617", "type": "seen", "source": "https://t.me/arpsyndicate/2496", "content": "#ExploitObserverAlert\n\nCVE-2023-30617\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-30617. Kruise provides automated management of large-scale applications on Kubernetes. Starting in version 0.8.0 and prior to versions 1.3.1, 1.4.1, and 1.5.2, an attacker who has gained root privilege of the node that kruise-daemon run can leverage the kruise-daemon pod to list all secrets in the entire cluster. After that, the attacker can leverage the \"captured\" secrets (e.g. the kruise-manager service account token) to gain extra privileges such as pod modification. Versions 1.3.1, 1.4.1, and 1.5.2 fix this issue. A workaround is available. For users that do not require imagepulljob functions, they can modify kruise-daemon-role to drop the cluster level secret get/list privilege.", "creation_timestamp": "2024-01-05T16:46:11.000000Z"}, {"uuid": "4501b629-dfac-4233-b552-26be2bba14c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30440", "type": "seen", "source": "https://t.me/arpsyndicate/2396", "content": "#ExploitObserverAlert\n\nCVE-2023-30440\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-30440. IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption.  IBM X-Force ID:  253175.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 4.7\nNVD-ES: 2.5", "creation_timestamp": "2024-01-04T01:13:56.000000Z"}, {"uuid": "f248a45f-b800-4645-b7b4-23c998709d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3078", "type": "seen", "source": "https://t.me/arpsyndicate/2413", "content": "#ExploitObserverAlert\n\nCVE-2023-3078\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-3078. An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-01-04T02:56:46.000000Z"}, {"uuid": "3f338e46-0105-46d6-82ab-801001276082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30431", "type": "seen", "source": "https://t.me/arpsyndicate/2356", "content": "#ExploitObserverAlert\n\nCVE-2023-30431\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-30431. IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking.  An attacker could overflow the buffer and execute arbitrary code.  IBM X-Force ID:  252184.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-01-03T20:37:36.000000Z"}, {"uuid": "6eb0f92f-cb3f-4883-985f-a6dd9d3b7b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30517", "type": "seen", "source": "https://t.me/arpsyndicate/2330", "content": "#ExploitObserverAlert\n\nCVE-2023-30517\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-30517. Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2024-01-03T16:48:12.000000Z"}, {"uuid": "fb1c0e0f-55b0-4974-be40-1f9a2b604d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3028", "type": "seen", "source": "https://t.me/arpsyndicate/2299", "content": "#ExploitObserverAlert\n\nCVE-2023-3028\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2023-3028. Insufficient authentication in the MQTT backend (broker) allows an attacker to access and even manipulate the telemetry data of the entire fleet of vehicles using the HopeChart HQT-401 telematics unit. Other models are possibly affected too.         Multiple vulnerabilities were identified:    - The MQTT backend does not require authentication, allowing unauthorized connections from an attacker.    - The vehicles publish their telemetry data (e.g. GPS Location, speed, odometer, fuel, etc) as messages in public topics. The backend also sends commands to the vehicles as MQTT posts in public topics. As a result, an attacker can access the confidential data of the entire fleet that is managed by the backend.    - The MQTT messages sent by the vehicles or the backend are not encrypted or authenticated. An attacker can create and post messages to impersonate a vehicle or the backend. The attacker could then, for example, send incorrect information to the backend about the vehicle's location.    - The backend can inject data into a vehicle\u00b4s CAN bus by sending a specific MQTT message on a public topic. Because these messages are not authenticated or encrypted, an attacker could impersonate the backend, create a fake message and inject CAN data in any vehicle managed by the backend.   The confirmed version is\u00a0201808021036, however further versions have been also identified as potentially impacted.\n\nFIRST-EPSS: 0.000910000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-01T05:43:24.000000Z"}, {"uuid": "1d0a10db-e034-4dbb-9169-03223013c2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30131", "type": "seen", "source": "https://t.me/cibsecurity/72625", "content": "\u203c CVE-2023-30131 \u203c\n\nAn issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other unspecified impacts via unauthenticated API calls.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T00:34:45.000000Z"}, {"uuid": "8aaf101c-0183-418a-9867-37ded4cfc360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30132", "type": "seen", "source": "https://t.me/cibsecurity/72623", "content": "\u203c CVE-2023-30132 \u203c\n\nAn issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T00:34:43.000000Z"}, {"uuid": "36678a55-099c-4b50-9f8f-25629fad3353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30399", "type": "seen", "source": "https://t.me/arpsyndicate/541", "content": "#ExploitObserverAlert\n\nCVE-2023-30399\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-30399. Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.\n\nFIRST-EPSS: 0.000620000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-11-24T20:05:40.000000Z"}, {"uuid": "f60cd396-b963-4a94-9b90-178013b4c0a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30584", "type": "seen", "source": "https://t.me/cibsecurity/72477", "content": "\u203c CVE-2023-39332 \u203c\n\nVarious `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects. In Node.js environments, the `Buffer` class extends the `Uint8Array` class. Node.js prevents path traversal through strings (see CVE-2023-30584) and `Buffer` objects (see CVE-2023-32004), but not through non-`Buffer` `Uint8Array` objects.This is distinct from CVE-2023-32004 ([report 2038134](https://hackerone.com/reports/2038134)), which only referred to `Buffer` objects. However, the vulnerability follows the same pattern using `Uint8Array` instead of `Buffer`.Impacts:This vulnerability affects all users using the experimental permission model in Node.js 20.Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-18T07:33:24.000000Z"}, {"uuid": "5de0e8a9-ee13-45ee-80aa-51edc9e16f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30588", "type": "seen", "source": "https://t.me/arpsyndicate/783", "content": "#ExploitObserverAlert\n\nCVE-2023-30588\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-30588.", "creation_timestamp": "2023-11-29T17:49:25.000000Z"}, {"uuid": "5dc6072f-a275-4efe-a2f3-34da7ba2ccff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30729", "type": "seen", "source": "https://t.me/cibsecurity/69961", "content": "\u203c CVE-2023-30729 \u203c\n\nImproper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:33:53.000000Z"}, {"uuid": "603f1a64-4e16-459d-8ce3-0620dc9aa6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30728", "type": "seen", "source": "https://t.me/cibsecurity/69960", "content": "\u203c CVE-2023-30728 \u203c\n\nIntent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerability requires user interaction.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:33:49.000000Z"}, {"uuid": "a2ea8801-fc48-4fa9-894d-aba69dadcbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "seen", "source": "https://t.me/arpsyndicate/2871", "content": "#ExploitObserverAlert\n\nCVE-2023-30145\n\nDESCRIPTION: Exploit Observer has 11 entries in 3 file formats related to CVE-2023-30145. Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.\n\nFIRST-EPSS: 0.015460000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-16T18:44:46.000000Z"}, {"uuid": "bdf3b0e1-6980-4e67-bdbc-4a11e4696c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30585", "type": "seen", "source": "https://t.me/arpsyndicate/687", "content": "#ExploitObserverAlert\n\nCVE-2023-30585\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-30585.", "creation_timestamp": "2023-11-29T06:52:42.000000Z"}, {"uuid": "571d25cd-5cc0-473b-9cab-ef8cad278c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30581", "type": "seen", "source": "https://t.me/arpsyndicate/545", "content": "#ExploitObserverAlert\n\nCVE-2023-30581\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-30581. The use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outside of the policy.json definition. This vulnerability affects all users using the experimental policy mechanism in all active release lines: v16, v18 and, v20.  Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2023-11-24T21:28:16.000000Z"}, {"uuid": "e852f255-a976-4106-bd13-1d49c8f64ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3028", "type": "seen", "source": "https://t.me/arpsyndicate/557", "content": "#ExploitObserverAlert\n\nCVE-2023-3028\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-3028. Insufficient authentication in the MQTT backend (broker) allows an attacker to access and even manipulate the telemetry data of the entire fleet of vehicles using the HopeChart HQT-401 telematics unit. Other models are possibly affected too.         Multiple vulnerabilities were identified:    - The MQTT backend does not require authentication, allowing unauthorized connections from an attacker.    - The vehicles publish their telemetry data (e.g. GPS Location, speed, odometer, fuel, etc) as messages in public topics. The backend also sends commands to the vehicles as MQTT posts in public topics. As a result, an attacker can access the confidential data of the entire fleet that is managed by the backend.    - The MQTT messages sent by the vehicles or the backend are not encrypted or authenticated. An attacker can create and post messages to impersonate a vehicle or the backend. The attacker could then, for example, send incorrect information to the backend about the vehicle's location.    - The backend can inject data into a vehicle\u00b4s CAN bus by sending a specific MQTT message on a public topic. Because these messages are not authenticated or encrypted, an attacker could impersonate the backend, create a fake message and inject CAN data in any vehicle managed by the backend.   The confirmed version is\u00a0201808021036, however further versions have been also identified as potentially impacted.\n\nFIRST-EPSS: 0.000910000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-25T01:06:08.000000Z"}, {"uuid": "9b223b3b-c5b0-4b18-bddf-c9906dc2fb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30781", "type": "seen", "source": "https://t.me/cibsecurity/72527", "content": "\u203c CVE-2023-30781 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Theme Blvd Tweeple plugin <=\u00c2\u00a00.9.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-18T18:33:47.000000Z"}, {"uuid": "13d014a1-48c6-4deb-9b50-08a8c04806a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30399", "type": "seen", "source": "https://t.me/arpsyndicate/1622", "content": "#ExploitObserverAlert\n\nCVE-2023-30399\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-30399. Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.\n\nFIRST-EPSS: 0.000620000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-10T12:53:04.000000Z"}, {"uuid": "a70f2062-add0-4053-bbc1-e13ab527cf0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://t.me/arpsyndicate/24", "content": "#ExploitObserverAlert\n\nCVE-2023-30547\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2023-30547. vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside `handleException()` which can be used to escape the sandbox and run arbitrary code in host context. This vulnerability was patched in the release of version `3.9.17` of `vm2`. There are no known workarounds for this vulnerability. Users are advised to upgrade.\n\nFIRST-EPSS: 0.001020000\nNVD-IS: 6.0\nNVD-ES: 3.9", "creation_timestamp": "2023-11-09T12:12:50.000000Z"}, {"uuid": "ef469594-1e6b-49bb-b112-68fabea0308c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://t.me/arpsyndicate/1698", "content": "#ExploitObserverAlert\n\nCVE-2023-30547\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2023-30547. vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside `handleException()` which can be used to escape the sandbox and run arbitrary code in host context. This vulnerability was patched in the release of version `3.9.17` of `vm2`. There are no known workarounds for this vulnerability. Users are advised to upgrade.\n\nFIRST-EPSS: 0.001020000\nNVD-IS: 6.0\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T04:27:56.000000Z"}, {"uuid": "26aa2682-fb99-44f2-99fd-38d36bde6a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30584", "type": "seen", "source": "https://t.me/cibsecurity/72478", "content": "\u203c CVE-2023-39331 \u203c\n\nA previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations.Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-18T07:33:25.000000Z"}, {"uuid": "9e4b9f19-9c97-458f-a4f8-0965c4fd6d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3028", "type": "seen", "source": "https://t.me/arpsyndicate/1605", "content": "#ExploitObserverAlert\n\nCVE-2023-3028\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-3028. Insufficient authentication in the MQTT backend (broker) allows an attacker to access and even manipulate the telemetry data of the entire fleet of vehicles using the HopeChart HQT-401 telematics unit. Other models are possibly affected too.         Multiple vulnerabilities were identified:    - The MQTT backend does not require authentication, allowing unauthorized connections from an attacker.    - The vehicles publish their telemetry data (e.g. GPS Location, speed, odometer, fuel, etc) as messages in public topics. The backend also sends commands to the vehicles as MQTT posts in public topics. As a result, an attacker can access the confidential data of the entire fleet that is managed by the backend.    - The MQTT messages sent by the vehicles or the backend are not encrypted or authenticated. An attacker can create and post messages to impersonate a vehicle or the backend. The attacker could then, for example, send incorrect information to the backend about the vehicle's location.    - The backend can inject data into a vehicle\u00b4s CAN bus by sending a specific MQTT message on a public topic. Because these messages are not authenticated or encrypted, an attacker could impersonate the backend, create a fake message and inject CAN data in any vehicle managed by the backend.   The confirmed version is\u00a0201808021036, however further versions have been also identified as potentially impacted.\n\nFIRST-EPSS: 0.000910000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-10T11:23:23.000000Z"}, {"uuid": "bee2bb54-f9c6-45af-a423-7c6e8c44da7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30719", "type": "seen", "source": "https://t.me/cibsecurity/69957", "content": "\u203c CVE-2023-30719 \u203c\n\nExposure of Sensitive Information vulnerability in InboundSmsHandler prior to SMR Sep-2023 Release 1 allows local attackers to access certain message data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:33:46.000000Z"}, {"uuid": "0296096d-394d-4a16-9740-4f11dbaaf71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30590", "type": "seen", "source": "https://t.me/arpsyndicate/770", "content": "#ExploitObserverAlert\n\nCVE-2023-30590\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-30590.", "creation_timestamp": "2023-11-29T16:38:42.000000Z"}, {"uuid": "38d4de4d-03c1-47ec-a86f-542073dfa86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/anonymous_secures/612", "content": "PoC How to exploit CVE-2023-3047 \n\nDetails > https://github.com/Phamchie/CVE-2023-3047", "creation_timestamp": "2024-03-07T16:49:13.000000Z"}, {"uuid": "ec75ef10-89fe-4479-b98d-d22474dcde19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/anonymous_secures/842", "content": "https://github.com/Phamchie/CVE-2023-3047", "creation_timestamp": "2024-08-05T11:41:13.000000Z"}, {"uuid": "794e06f3-6c52-4e79-9a95-4e16772c54a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/anonymous_secures/613", "content": "https://ghostmanews.blogspot.com/2024/03/how-to-exploit-cve-2023-3047.html?m=1", "creation_timestamp": "2024-03-07T17:02:22.000000Z"}, {"uuid": "11808221-3f1a-40c5-b49e-6b7bc68df7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "Telegram/lVInuV1J34_1YwD69mHjJnlTrHyUsxo_GgjOPmkgKEZnug", "content": "", "creation_timestamp": "2023-06-06T12:57:36.000000Z"}, {"uuid": "61ae7313-ff40-4e4d-9a6b-a1446cceb2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/mPDS4HnOSLOxKMX1Qzp_m8dfcOJ3JdLDxYcV7g3s6jQaNg", "content": "", "creation_timestamp": "2023-07-26T08:44:24.000000Z"}, {"uuid": "d2871f1a-a673-4c12-ba93-5cd360341d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "published-proof-of-concept", "source": "Telegram/5J0K3ktTRnE5OXtm_HSZQB0ByP_7s3NltK4ljZroPrT30A", "content": "", "creation_timestamp": "2023-05-06T09:17:35.000000Z"}, {"uuid": "0b27b04d-1227-466b-ab95-6b88ae050dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/Shade_Black_Hacker/688", "content": "\ud83d\udc7eHookBot Android Malware Leak : https://system32.ink/hookbot-android-malware-leak/\n\n\ud83d\udd30CVE-2023-3079 Exploit : https://system32.ink/cve-2023-3079-exploit/\n\n\ud83d\udca5Smoothie King Data Leak : https://system32.ink/smoothie-king-data-leak/\n\n\u26a1Padna Compressor Company Data Leak : https://system32.ink/padna-compressor-company-data-leak/", "creation_timestamp": "2023-09-30T20:01:41.000000Z"}, {"uuid": "8be89773-7879-4476-ac2a-82a74a4e9a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30991", "type": "seen", "source": "https://t.me/cibsecurity/72385", "content": "\u203c CVE-2023-30991 \u203c\n\nIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 254037.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T02:37:08.000000Z"}, {"uuid": "8b4f16ec-7648-47e8-9cc3-11709f9bf40a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "https://t.me/Shade_Black_Hacker/469", "content": "Exploiting MikroTik RouterOS Hardware with CVE-2023-30799 - Blog - VulnCheck\nhttps://vulncheck.com/blog/mikrotik-foisted-revisited", "creation_timestamp": "2023-08-05T07:42:12.000000Z"}, {"uuid": "10977df4-1333-4927-8e70-9847512e1132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/YourAnonTl3x/912", "content": "https://github.com/Phamchie/CVE-2023-3047", "creation_timestamp": "2024-08-05T11:41:22.000000Z"}, {"uuid": "ca687434-2e37-43be-aa7c-b669e46b11e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/YourAnonTl3x/532", "content": "PoC How to exploit CVE-2023-3047 \n\nDetails > https://github.com/Phamchie/CVE-2023-3047", "creation_timestamp": "2024-03-07T16:50:16.000000Z"}, {"uuid": "5b2e0c24-e663-434f-9c16-43c76d1b9b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30726", "type": "seen", "source": "https://t.me/cibsecurity/69956", "content": "\u203c CVE-2023-30726 \u203c\n\nPendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:33:45.000000Z"}, {"uuid": "f9e01961-3446-402f-934b-ef16c227eaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30154", "type": "seen", "source": "https://t.me/cibsecurity/72278", "content": "\u203c CVE-2023-30154 \u203c\n\nMultiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version 2.2.1, allows remote attackers to perform SQL injection attacks via `id_customer`, `id_conf`, `id_product` and `token` parameters in `aftermailajax.php via the 'id_product' parameter in hooks DisplayRightColumnProduct and DisplayProductButtons.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-14T07:29:30.000000Z"}, {"uuid": "fb3ad8f3-98f0-449b-9348-091259fb0b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/anonymous_secures/1666", "content": "https://ghostmanews.blogspot.com/2024/03/how-to-exploit-cve-2023-3047.html?m=1", "creation_timestamp": "2024-03-07T17:02:22.000000Z"}, {"uuid": "4e3688ad-1bcf-483b-8065-6823042b921e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/anonymous_secures/1664", "content": "PoC How to exploit CVE-2023-3047 \n\nDetails > https://github.com/Phamchie/CVE-2023-3047", "creation_timestamp": "2024-03-07T16:49:13.000000Z"}, {"uuid": "591e4693-0623-4492-98de-195de076bcf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3047", "type": "published-proof-of-concept", "source": "https://t.me/anonymous_secures/2714", "content": "https://github.com/Phamchie/CVE-2023-3047", "creation_timestamp": "2024-08-05T11:41:13.000000Z"}, {"uuid": "3e8dbb63-487c-47f9-8082-ce252c36f575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3076", "type": "published-proof-of-concept", "source": "https://t.me/killnet_reservs/8659", "content": "\u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CVE-2023-3076 - MStore API < 3.9.9 - \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n\ud83d\ude34: https://github.com/im-hanzou/MSAPer\n#PentestGithub", "creation_timestamp": "2024-08-18T01:23:13.000000Z"}, {"uuid": "16b2cb69-7952-4ae5-a31f-0a9873d83df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/KomunitiSiber/547", "content": "Critical MikroTik RouterOS Vulnerability Exposes Over Half a Million Devices to Hacking\nhttps://thehackernews.com/2023/07/critical-mikrotik-routeros.html\n\nA severe privilege escalation issue impacting MikroTik RouterOS could be weaponized by remote malicious actors to execute arbitrary code and seize full control of vulnerable devices.\nCataloged as\u00a0CVE-2023-30799\u00a0(CVSS score: 9.1), the shortcoming is expected to put approximately 500,000 and 900,000 RouterOS systems at risk of exploitation via their web and/or Winbox interfaces, respectively,", "creation_timestamp": "2023-07-26T07:52:41.000000Z"}, {"uuid": "de3212b4-18bc-44bf-9201-380fa7b57591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://t.me/KomunitiSiber/317", "content": "Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability - Update Now!\nhttps://thehackernews.com/2023/06/zero-day-alert-google-issues-patch-for.html\n\nGoogle on Monday released security updates to patch a high-severity flaw in its Chrome web browser that it said is being actively exploited in the wild.\nTracked as\u00a0CVE-2023-3079, the vulnerability has been described as a type confusion bug in the V8 JavaScript engine. Clement Lecigne of Google's Threat Analysis Group (TAG) has been credited with reporting the issue on June 1, 2023.\n\"Type", "creation_timestamp": "2023-06-06T13:17:20.000000Z"}, {"uuid": "eed669de-e678-46a4-a740-6816563a0335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/KomunitiSiber/162", "content": "New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks\nhttps://thehackernews.com/2023/05/new-vulnerability-in-popular-wordpress.html\n\nUsers of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw.\nThe issue, assigned the identifier CVE-2023-30777, relates to a case of reflected cross-site scripting (XSS) that could be abused to inject arbitrary executable scripts into otherwise benign websites.\nThe plugin, which is available both as a free and pro", "creation_timestamp": "2023-05-06T09:27:42.000000Z"}, {"uuid": "cca6559b-09e3-452b-ba20-3350e6d0db0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30861", "type": "published-proof-of-concept", "source": "Telegram/m4Is75xhrn4Y1biWlK6_QixQuJbhQSfww9UvIBkfxSY20xM", "content": "", "creation_timestamp": "2025-04-25T17:00:08.000000Z"}, {"uuid": "469fb333-29a1-4aaf-bee1-7f7f22c42e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30711", "type": "seen", "source": "https://t.me/cibsecurity/69953", "content": "\u203c CVE-2023-30711 \u203c\n\nImproper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:33:39.000000Z"}, {"uuid": "55d31e9e-4802-4c26-a55d-521f9aa46ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "published-proof-of-concept", "source": "Telegram/cPkmEu8TE17XiLQ4S6BD8IiobSSbP9Wem4YikT30L125N8I", "content": "", "creation_timestamp": "2025-03-17T04:00:07.000000Z"}, {"uuid": "70ab7dfa-fead-4e33-9684-25890e5aa469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3009", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3073", "content": "Tools - Hackers Factory \n\nCVE-2023-3009\n\nStored #XSS on item name - Bypassing CVE-2023-2516 in TeamPass < 3.0.9 - by M Nadeem Qazi.\n\nhttps://github.com/mnqazi/CVE-2023-3009\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bApplywdac \n\nPowerShell script for applying WDAC policies.\n\nhttps://github.com/vu-ls/applywdac\n\n#cybersecurity #infosec\n\n\u200b\u200bfake-useragent\n\nUp-to-date simple useragent faker with real world database.\n\nhttps://github.com/fake-useragent/fake-useragent\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bProxiFyre \n\nAdvanced SOCKS5 Routing Solution for Windows.\n\nhttps://github.com/wiresock/socksify\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bThe DEF CON CTF 2023 Qualifier\n\nThis repository contains the open source release for Nautilus Institute's 2023 DEF CON CTF qualifier.\n\nhttps://github.com/Nautilus-Institute/quals-2023\n\n#cybersecurity #infosec\n\n\u200b\u200bWordlists\n\nReal-world infosec wordlists, updated regularly! These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include:\n\n\u2022 Wordpress\n\u2022 Joomla\n\u2022 Drupal\n\u2022 Magento\n\u2022 Ghost\n\u2022 Tomcat\n\nhttps://github.com/trickest/wordlists\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bNanorobeus\n\nCOFF file (BOF) for managing #Kerberos tickets.\n\nhttps://github.com/wavvs/nanorobeus\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCVE-2023-23638\n\nApache Dubbo Vulnerability Exploitation Engineering Practice, covering Dubbo 3.x from service discovery to vulnerability exploitation and reverse display. \n\nhttps://github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp\n\n#cve #poc #cybersecurity #infosec\n\n\u200b\u200bEPI\n\nProcess injection through entry points hijacking.\n\nhttps://github.com/Kudaes/EPI\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCRTER\n\nA command-line tool for fetching subdomains using the CRT.SH certificate search engine. It allows you to provide a list of domain names or fully-qualified domain names (FQDNs) and retrieve the associated subdomains. The tool fetches the subdomains from CRT.SH and saves them to an output file.\n\nhttps://github.com/Micro0x00/CRTER\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bHALA\n\nHALA offers a powerful capability that enables you to identify reflected parameters within the response, providing valuable assistance in your testing and hacking endeavors.\n\nhttps://github.com/whalebone7/Hala\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-06-02T09:34:10.000000Z"}, {"uuid": "5b9df8e9-5245-4fbf-ae94-a81c0a8dc2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3076", "type": "published-proof-of-concept", "source": "https://t.me/killmilk_rus/1903", "content": "\u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CVE-2023-3076 - MStore API < 3.9.9 - \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n\ud83d\ude34: https://github.com/im-hanzou/MSAPer\n#PentestGithub", "creation_timestamp": "2024-08-18T01:21:53.000000Z"}, {"uuid": "e9feec82-282f-4299-b05d-a3301c244af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/2436", "content": "CVE-2023-3079(bug id: 1450481) -  Type Confusion in V8\n( 0-day, may have been actively exploited/ITW )\nReviewed here: 4584248 \"[ic] Fix store handler selection for arguments objects\"", "creation_timestamp": "2023-06-07T07:20:45.000000Z"}, {"uuid": "3dfb976f-2ba8-46b7-8175-7b66b42f88ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3437", "content": "Rudder Server < 1.3.0-rc.1  - SQL Injection\n\ncve-2023-30625\n\nPOST /v1/warehouse/pending-events HTTP/1.1\nHost: {{Hostname}}\n\n{\"source_id\": \"test'; copy (SELECT '') to program 'id'-- - \"}", "creation_timestamp": "2023-10-14T17:08:53.000000Z"}, {"uuid": "7c8003b2-83a2-4146-b9df-dd3c5e821fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3668", "content": "CVE-2023-30547 - PoC Exploit for VM2 Sandbox Escape Vulnerability\n\nhttps://github.com/rvizx/CVE-2023-30547", "creation_timestamp": "2023-12-13T08:31:36.000000Z"}, {"uuid": "31fbf870-9b10-4f61-a6c2-f300698d6d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30347", "type": "published-proof-of-concept", "source": "Telegram/oHP8R6rQpO8E4nEBBBMmcV3PiuGU9AfrSsjxuqFDC6WptA", "content": "", "creation_timestamp": "2023-06-22T10:11:29.000000Z"}, {"uuid": "c6610a55-9a77-48e9-aced-49af875c8217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30718", "type": "seen", "source": "https://t.me/cibsecurity/69947", "content": "\u203c CVE-2023-30718 \u203c\n\nImproper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local attacker to change a Auto Hotspot setting.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:31:00.000000Z"}, {"uuid": "cd68372c-2da7-4072-a8ac-ef4ea53dd4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "https://t.me/hunter4good/226", "content": "https://twitter.com/HunterMapping/status/1684141511565516800\n\ud83d\udea8Alert\ud83d\udea8 CVE-2023-30799 #MikroTik #RouterOS privilege escalation\n\ud83e\uddf7https://hunter.how/list?searchValue=product.name%3D%22MikroTik%20RouterOS%22\n\n\ud83d\udc47\ud83c\udffb Other Dorks \ud83d\udc47\ud83c\udffb\nFOFA app=\"MIKROTIK-Router\"\nShodan os:\"MikroTik RouterOS\"\n\nRefer to \ud83d\udcbb:\nhttps://thehackernews.com/2023/07/critical-mikrotik-routeros.html\n#EXP \ud83d\udd27: https://github.com/MarginResearch/FOISted\n#Infosys #infosec #informationsecurity", "creation_timestamp": "2023-07-26T12:47:24.000000Z"}, {"uuid": "c418b02c-19ac-4f48-9281-e4c82c1be23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30710", "type": "seen", "source": "https://t.me/cibsecurity/69944", "content": "\u203c CVE-2023-30710 \u203c\n\nImproper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:30:54.000000Z"}, {"uuid": "1c5b0ce5-e0e9-4990-84ae-926eb891b649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "published-proof-of-concept", "source": "Telegram/Z42dUL5SlpUKhzaB8z2JtVDGF4e8DZjU4NsnyrTR2CVbxw", "content": "", "creation_timestamp": "2023-06-27T08:09:48.000000Z"}, {"uuid": "ad917c92-226c-4d8a-afee-fde4fc7fb0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "Telegram/E5rIyo4yL4A8Cl6ljSa_CCU0uFuGXhuvUe-Dy3r702CaxA", "content": "", "creation_timestamp": "2023-09-02T04:07:54.000000Z"}, {"uuid": "46092214-1b4d-4d17-974e-a0b918cb5108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "Telegram/3WYRH0bo2MNDLrhSCITnoWDcs0p_0YvqrjhvEwMZJoDzpA", "content": "", "creation_timestamp": "2023-08-20T18:48:05.000000Z"}, {"uuid": "1052c5a1-67c7-4d5a-a28c-be8e16cfc81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30730", "type": "seen", "source": "https://t.me/cibsecurity/69936", "content": "\u203c CVE-2023-30730 \u203c\n\nImplicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:30:44.000000Z"}, {"uuid": "1a3b2453-6040-453a-a423-1edb183eec39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30724", "type": "seen", "source": "https://t.me/cibsecurity/69935", "content": "\u203c CVE-2023-30724 \u203c\n\nImproper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T22:39:37.000000Z"}, {"uuid": "d4e043f2-d2b1-4dbe-84e3-73dc0344a0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30347", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3090", "content": "25 Tools \ud83d\udd27 \ud83d\udd28\ud83d\udd27\ud83d\udd28-  Hackers Factory \n\n\u200b\u200bCVE-2023-27997u\n\nSafely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing.\n\nhttps://github.com/BishopFox/CVE-2023-27997-check\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bServer-Side Prototype Pollution\n\nThis repository contains a collection of Server-Side Prototype Pollution gadgets in Node.js core code and 3rd party NPM packages.\n\nhttps://github.com/yuske/server-side-prototype-pollution\n\n#cybersecurity #infosec\n\n\u200b\u200bRIDS - Remote ID Spoofer\n\nAn ESP8266/NodeMCU Drone RemoteID Spoofer. This spawns 16 different fake drones broadcasting RemoteID, with them all flying in random directions around a particular GPS location. \n\nhttps://github.com/jjshoots/RemoteIDSpoofer\n\n#cybersecurity #infosec\n\n\u200b\u200bSteganim\n\nNim implementation of storing a payload into the least significant bit of each byte of an image. Using this technique to remotely fetch shellcode or other secrets at runtime can help into removing some IOCs like payload entropy.\n\nhttps://github.com/OffenseTeacher/Steganim\n\n#infosec #pentesting #redteam\n\n\u200b\u200bqualcomm_baseband_scripts\n\nCollection of scripts for reversing Qualcomm Hexagon baseband / modem firmware.\n\nhttps://github.com/mzakocs/qualcomm_baseband_scripts\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-1454\n\nJeecg Boot qurestSql SQL vuln\n\nhttps://github.com/Sweelg/CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bSilent Spring\n\nPrototype Pollution Leads to Remote Code Execution in Node.js\n\nhttps://github.com/yuske/silent-spring\n\n#cybersecurity #infosec\n\n\u200b\u200bSemgrep Rules for Android Application Security\n\nA collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.\n\nhttps://github.com/mindedsecurity/semgrep-rules-android-security\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-30347\n\nReflected Cross-Site-Scripting in Neox Contact Center\n\nhttps://github.com/huzefa2212/CVE-2023-30347\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bEFI Resolver\n\nA Binary Ninja plugin that automatically resolves type information for EFI protocol usage.\n\nhttps://github.com/Vector35/efi-resolver\n\n#cybersecurity #infosec\n\n\u200b\u200bGhostFart\n\nUnhooking is performed via indirect syscalls Leveraging NTAPI to grab NTDLL for unhooking without triggering \"PspCreateProcessNotifyRoutine\"\n\nhttps://github.com/mansk1es/GhostFart\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-27372\n\nSPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.\n\nhttps://github.com/nuts7/CVE-2023-27372\n\ncve #cybersecurity #infosec\n\n\u200b\u200bkbtls\n\nKey-Based TLS - Mutually Trusted TLS Connections Based on a Pre-Shared Connection Key.\n\nhttps://github.com/RedTeamPentesting/kbtls\n\n#infosec #pentesting #redteam\n\n\u200b\u200bArtemis\n\nA modular web reconnaissance tool and vulnerability scanner based on Karton.\n\nhttps://github.com/CERT-Polska/Artemis\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bRS-Shell\n\nA dirty PoC for a reverse shell with cool features in Rust.\n\nhttps://github.com/BlWasp/rs-shell\n\n#infosec #pentesting #redteam\n\n\u200b\u200bInvoke-PowerExtract\n\nThis tool is able to parse memory dumps of the LSASS process without any additional tools (e.g. Debuggers) or additional sideloading of mimikatz. It is a pure PowerShell implementation for parsing and extracting secrets (LSA / MSV and Kerberos) of the LSASS process.\n\nhttps://github.com/powerseb/PowerExtract\n\n#infosec #pentesting #redteam\n\nRPC Firewall\n\nCheck out our RPC Firewall blog post or our BlackHat talk to gain better understanding of RPC, RPC attacks and the solution: the RPC Firewall.\n\nhttps://github.com/zeronetworks/rpcfirewall\n\n#cybersecurity #infosec\n\n\u200b\u200bGooFuzz \n\nA tool to perform fuzzing with an #OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200b1/2", "creation_timestamp": "2023-06-24T16:00:44.000000Z"}, {"uuid": "a32e2531-89dc-4fde-b4a8-a1b61167f171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3068", "content": "Tools - Hackers Factory \n\nChameleon\n\nChameleon provides better content discovery by using wappalyzer's set of technology fingerprints alongside custom wordlists tailored to each detected technologies. The tool is highly customizable and allows users to add in their own custom wordlists, extensions or fingerprints.\n\nhttps://github.com/iustin24/chameleon\n\n#infosec #pentesting #bugbounty\n\ngoogle-dorks\n\nhttps://github.com/CorrieOnly/google-dorks\n\n#infosec #pentesting #bugbounty\n\nPresentation Slides\n\nCollections of Dhiyaneshwaran public presentation slides.\n\nhttps://github.com/DhiyaneshGeek/My-Presentation-Slides\n\n#cybersecurity #infosec #pentesting\n\nwebsurfx\n\nAn open source alternative to searx which provides a modern-looking, lightning-fast, privacy respecting, secure, self-hostable meta search engine with ad free clean results, high level of customizability and many other features while keeping privacy and security in mind.\n\nhttps://github.com/neon-mmd/websurfx\n\n#cybersecurity #infosec #privacy\n\nCheekyBlinder\n\nEnumerating/removing kernel callbacks using signed vulnerable drivers.\n\nhttps://github.com/br-sn/CheekyBlinder\n\n#cybersecurity #infosec\n\nCVE-2023-30212\n\nDocker environment and exploit the vulnerability CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site Scripting (XSS) attacks.\n\nhttps://github.com/libasmon/Exploite-CVE-2023-30212-Vulnerability\n\n#cve #infosec #exploit\n\nssh-key-backdoor\n\nThis program generates a backdoor to hide inside an SSH public key (e.g. id_rsa.pub or authorized_keys). The backdoor will execute once when the user next logs in.\n\nhttps://github.com/hackerschoice/ssh-key-backdoor\n\n#infosec #pentesting #redteam\n\nrathole\n\nA lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.\n\nhttps://github.com/rapiz1/rathole\n\n#cybersecurity #infosec #privacy\n\n433Screen-SignalHacker\n\nFull duplex 433 MHz Signal jammer, recorder, decoder and hacking multitool device based on ESP32 microcontroller and RFM69HW radios. This version of the device provides an OLED screen and simple UI to navigate menus and different hacks/modes/settings.\n\nhttps://github.com/luispl77/433Screen-SignalHacker\n\n#cybersecurity #infosec #pentesting\n\nCyberSec Conferences\n\nList of some #cybersecurity conferences.\n\nhttps://github.com/MrM8BRH/CyberSecurity_Conferences\n\n#infosec\n\nSQLiDetector\n\nSimple python script supported with BurpBouty profile that helps you to detect SQL injection \"Error based\" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.\n\nhttps://github.com/eslam3kl/SQLiDetector\n\n#infosec #pentesting #bugbounty\n\nrebindMultiA\n\nA tool to perform a Multiple A Record rebind attack.\n\nhttps://github.com/Rhynorater/rebindMultiA\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-07-04T17:35:37.000000Z"}, {"uuid": "9aba932c-2670-4cf9-ac1b-b92440183157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3064", "content": "Tools - Hackers Factory \n\nJira-Scan\n\nProvide a list of websites to test with out the http or https and this will test each one for the SSRF vun.\n\nhttps://github.com/random-robbie/Jira-Scan\n\n#infosec #pentesting #bugbounty\n\ns3reverse\n\nThe format of various s3 buckets is convert in one format. for #bugbounty and security testing.\n\nhttps://github.com/hahwul/s3reverse\n\n#cybersecurity #infosec\n\nLogger++ \n\nA multithreaded logging extension for #BurpSuite. In addition to logging requests and responses from all Burp Suite tools, the extension allows advanced filters to be defined to highlight interesting entries or filter logs to only those which match the filter.\n\nhttps://github.com/nccgroup/LoggerPlusPlus\n\n#infosec #pentesting #bugbounty\n\nTop25 Parameter \n\nFor basic researches, top 25 vulnerability parameters that can be used in automation tools or manual #recon.\n\nhttps://github.com/lutfumertceylan/top25-parameter\n\n#infosec #pentesting #bugbounty\n\nLOOBins\n\nLiving Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in \"living off the land\" macOS binaries and how they can be used by threat actors for malicious purposes.\n\nhttps://github.com/infosecB/LOOBins\n\nWeb:\nhttps://www.loobins.io/\n\n#infosec #blueteam\n\ncodeexplain.nvim\n\nA nvim plugin Powered by GPT4ALL for Real-time Code Explanation and Vulnerability Detection (no internet necessary).\n\nhttps://github.com/mthbernardes/codeexplain.nvim\n\n#cybersecurity #infosec\n\nCVE-2020-0683\n\nOriginal Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege.\n\nhttps://github.com/padovah4ck/CVE-2020-0683\n\n#cve #cybersecurity #infosec\n\nCVE-2023-2825\n\nOn May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition (EE) version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It was discovered by pwnie on HackerOne through the bug bounty program.\n\nhttps://github.com/Occamsec/CVE-2023-2825\n\n#cve #cybersecurity #infosec\n\n\ud83d\ude80 AllForOne\n\nThis repository contains a Python script that allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories, helping to streamline the process of downloading multiple templates using just a single repository.\n\nhttps://github.com/AggressiveUser/AllForOne\n\n#infosec #pentesting #bugbounty\n\nCVE-2023-2732\n\nMStore API <= 3.9.2 - Authentication Bypass\n\nhttps://github.com/RandomRobbieBF/CVE-2023-2732\n\n#cve #cybersecurity #infosec\n\nCVE-2023-30145\n\nCamaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.\n\nhttps://github.com/paragbagul111/CVE-2023-30145\n\n#cve #cybersecurity #infosec\n\nWhatMail\n\nA command-line tool that analyzes the header of an email and provides detailed information about various fields.\n\nhttps://github.com/z0m31en7/WhatMail\n\n#OSINT #cybersecurity #infosec\n\nlibslub\n\nlibslub is a python library to examine the SLUB managements structures and object allocations (the Linux kernel heap implementation). It is currently designed for use with GDB but could easily be adapted to work with other debuggers.\n\nIt helps understanding SLUB internals and developing Linux kernel exploits.\n\nhttps://github.com/nccgroup/libslub\n\n#cybersecurity #infosec\n\nHidden Desktop BOF\n\nHidden Desktop (often referred to as HVNC) is a tool that allows operators to interact with a remote desktop session without the user knowing.\u00a0 The VNC protocol is not involved, but the result is a similar experience. This Cobalt Strike BOF implementation was created as an alternative to TinyNuke/forks that are written in C++.\n\nhttps://github.com/WKL-Sec/HiddenDesktop\n\n#infosec #pentesting #redteam\n\nBlackout \n\nKill anti-malware protected processes using BYOVD. leveraging gmer driver to effectively disabling or killing EDRs and AVs.\n\nhttps://github.com/ZeroMemoryEx/Blackout\n\n#infosec \n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-26T17:58:27.000000Z"}, {"uuid": "b8a93caa-b55c-4713-ae15-c66beb5e0dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3187", "content": "Hackers Factory \n\nA fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests\n\nhttps://github.com/projectdiscovery/naabu\n\nA collection of phishing samples for researchers and detection developers.\n\nhttps://github.com/rf-peixoto/phishing_pot\n\nPassive subdomain continous monitoring tool.\n\nhttps://github.com/e1abrador/sub.Monitor\n\nSecurity scanner for your Terraform code\n\nhttps://github.com/aquasecurity/tfsec\n\nDetect and remediate misconfigurations and security risks across all your GitHub and GitLab assets\n\nhttps://github.com/Legit-Labs/legitify\n\nStreamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools.\n\nhttps://github.com/thecyberneh/scriptkiddi3\n\nUseful resources for SOC Analyst and SOC Analyst candidates.\n\nhttps://github.com/LetsDefend/awesome-soc-analyst\n\nXML-RPC Vulnerability Checker and Directory Fuzzer\n\nhttps://github.com/MINAD0/XML-RPC-Check\n\nA Python-based tool to detect the CVE-2023-30943 vulnerability in Moodle, which allows unauthorized folder creation via specially crafted requests in TinyMCE loaders.\n\nhttps://github.com/Chocapikk/CVE-2023-30943\n\nAn exploit for OpenTSDB <= 2.4.1 cmd injection (CVE-2023-36812/CVE-2023-25826) written in Fortran\n\nhttps://github.com/ErikWynter/opentsdb_key_cmd_injection\n\nNotepad++ heap buffer overflow vulnerability CVE-2023-40031 analysis and reproduction\n\nhttps://github.com/webraybtl/CVE-2023-40031\n\nPMP-Decrypter. This is a tool to decrypt the encrypted password strings in \"Patch My PC\"\n\nhttps://github.com/LuemmelSec/PMP-Decrypter\n\n#infosec #cybersecurity #hackersfactory \n\nhttps://t.me/dilagrafie", "creation_timestamp": "2023-09-10T12:01:22.000000Z"}, {"uuid": "5ca50bb4-9b5d-40d0-b43a-1e6bdfed6a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "Telegram/md5Pwtve7jVTx3xy8D8J1lcevEgfzLM_a_lPeb-uR2QiMQ", "content": "", "creation_timestamp": "2023-09-04T06:54:35.000000Z"}, {"uuid": "9b3cee77-90f5-45f8-b060-c4c8e75bf39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "Telegram/5y_JnMS3EjNnSkOxeqFuAT49dxAZP02DAynaZHhPQlGz2g", "content": "", "creation_timestamp": "2023-08-18T18:47:42.000000Z"}, {"uuid": "ebb6dcfe-ee5b-4fe2-bc1e-8a0c9a3f16a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "Telegram/oCXtildE2yTi9IxdSuzh8AMqV0fg_39dXN2lm3qeaYClxQ", "content": "", "creation_timestamp": "2023-08-11T04:00:05.000000Z"}, {"uuid": "a6a72a25-70d8-4353-9d2b-6b2d9d1126d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/JerusalemElectronicArmy/633", "content": "#\u0623\u062e\u0628\u0627\u0631_\u0627\u0644\u0633\u0627\u064a\u0628\u0631\n\u062a\u062d\u062f\u064a\u062b \u0623\u0645\u0646\u064a \u0639\u0627\u062c\u0644 \u0644\u0645\u062a\u0635\u0641\u062d  Google Chrome \u064a\u0648\u0645 \u0627\u0644\u0623\u0631\u0628\u0639\u0627\u0621 \u064a\u0647\u062f\u0641 \u0627\u0644\u062a\u062d\u062f\u064a\u062b  \u0644\u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u062b\u063a\u0631\u0627\u062a \u062e\u0637\u064a\u0631\u0629  \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d.\n\u062a\u0645 \u0623\u0636\u0627\u0641\u0629 \u0631\u0642\u0645 \u062a\u062a\u0628\u0639 \u0644\u0644\u062b\u063a\u0631\u0629 : \"CVE-2023-5217-heap-based buffer overflow\" \n\u0627\u0631\u062a\u0641\u0639 \u0639\u062f\u062f \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0648\u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645 \u0625\u0644\u0649 5 \u062b\u063a\u0631\u0627\u062a \u0647\u0630\u0627 \u0627\u0644\u0639\u0627\u0645. \nCVE-2023-2033 (CVSS score: 8.8) - Type confusion in V8\nCVE-2023-2136 (CVSS score: 9.6) - Integer overflow in Skia\nCVE-2023-3079 (CVSS score: 8.8) - Type confusion in V8\nCVE-2023-4863 (CVSS score: 8.8) - Heap buffer overflow in WebP\n\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644: \u0623\u0646\u0642\u0631 \u0647\u0646\u0627 \n#\u062c\u064a\u0634_\u0627\u0644\u0642\u062f\u0633_\u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a", "creation_timestamp": "2023-09-28T11:50:41.000000Z"}, {"uuid": "b8808967-7a99-4b2e-9e99-dc2b47bb6395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3076", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/282", "content": "WordPress mass add admin.\n\nMSAPer : Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API < 3.9.9 - Unauthenticated Privilege Escalation (Mass Add Admin)\n\nRepo link: https://github.com/im-hanzou/MSAPer", "creation_timestamp": "2023-09-19T23:27:23.000000Z"}, {"uuid": "5031e82a-ddaf-4a6e-8fbf-7d799c306259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/proxy_bar/1684", "content": "CVE-2023-3079 google chrome\n*\nexploit", "creation_timestamp": "2023-08-23T14:13:57.000000Z"}, {"uuid": "4fde6daf-234f-4a52-8062-cbf445fb134a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/breachdetector/321273", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"CVE-2023-3079 le Taray\u0131c\u0131 A\u00e7\u0131\u011f\u0131 Nedir ?\", \n  \"author\": \" (SerasZen)\",\n  \"Detection Date\": \"21 Aug 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2023-08-21T21:17:37.000000Z"}, {"uuid": "b4c732f6-dfb0-4177-811a-626fb4f1104a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "Telegram/AAYJThObwzx3ltMwj4pSUFMVRbjEiDNB-rsDZFFJVxXSPhM", "content": "", "creation_timestamp": "2023-08-18T10:29:41.000000Z"}, {"uuid": "6f47edf9-b18d-41c1-92a2-cadb066211b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3024", "type": "seen", "source": "https://t.me/cibsecurity/71320", "content": "\u203c CVE-2023-3024 \u203c\n\nForcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T20:37:57.000000Z"}, {"uuid": "9fd267ce-3747-4653-80b8-66e7c05583b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1207", "content": "", "creation_timestamp": "2023-10-04T00:55:17.000000Z"}, {"uuid": "66a84996-2b58-4871-be5e-b9e2038646f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30013", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1235", "content": "", "creation_timestamp": "2023-10-11T03:26:05.000000Z"}, {"uuid": "83436795-d6e2-4aff-b51d-9a5334b52b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1233", "content": "", "creation_timestamp": "2023-10-11T03:23:45.000000Z"}, {"uuid": "f1e4db25-3a73-4f40-8013-d1c6f49e3f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/842", "content": "CVE-2023-30765 : \u200bDelta Electronics InfraSuite Device Master <= 1.0.7 - Privilege Escalation\nPOC : https://github.com/0xfml/CVE-2023-30765", "creation_timestamp": "2023-08-20T10:30:36.000000Z"}, {"uuid": "9e14b7fe-8050-46dc-851b-5238082453a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/1001", "content": "\u0633\u0631\u062f\u0631\u06af\u0645\u06cc \u062a\u0627\u06cc\u067e \u062f\u0631 V8 \u062f\u0631 Google Chrome \u0642\u0628\u0644 \u0627\u0632 114.0.5735.110 \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0627\u062f \u062a\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06cc\u06a9 \u0635\u0641\u062d\u0647 HTML \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0634\u062f\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0628\u0627\u0644\u0642\u0648\u0647 \u0627\u0632 \u062e\u0631\u0627\u0628\u06cc \u067e\u0634\u062a\u0647 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.  (\u0634\u062f\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0631\u0648\u0645: \u0628\u0627\u0644\u0627)\n\nCVE-2023-3079 :\u00a0 Type confusion in V8 in Google Chrome <= 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \nPOC : https://github.com/mistymntncop/CVE-2023-3079\nseverity: High", "creation_timestamp": "2024-02-01T11:43:01.000000Z"}, {"uuid": "83200bfb-7dc5-4463-97c2-03f54b949f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/1103", "content": "CVE-2023-30943: Moodle <= 4.2.0 - \u0627\u06cc\u062c\u0627\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u067e\u0648\u0634\u0647 (Stored-XSS) \u0628\u0647 RCE\n\u0644\u06cc\u0646\u06a9: https://www.sonarsource.com/blog/playing-dominos-with-moodles-security-1/\n\nCVE-2023-30943 : Moodle <= 4.2.0 - Arbitrary folder creation (Stored-XSS) to RCE \nLink : https://www.sonarsource.com/blog/playing-dominos-with-moodles-security-1/", "creation_timestamp": "2024-05-12T05:59:09.000000Z"}, {"uuid": "694a7ff9-0833-41e6-a3f2-c0260a9b3fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "Telegram/XULQ1z3mVPfXxGp-jl7OkKzevhkAnDt89Vg70kUreoH08wg", "content": "", "creation_timestamp": "2024-08-28T18:13:43.000000Z"}, {"uuid": "deca0459-61da-4c98-9999-4ef0ebabe6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/CyberSecurityIL/23959", "content": "\u05e9\u05d1\u05d5\u05e2 \u05d0\u05d7\u05e8\u05d9 \u05d4\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e7\u05d5\u05d3\u05dd \u05d2\u05d5\u05d2\u05dc \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e0\u05d5\u05e1\u05e3 \u05dc\u05db\u05e8\u05d5\u05dd \u05dc\u05e1\u05d2\u05d5\u05e8 \u05d7\u05d5\u05dc\u05e9\u05ea Zero Day \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\"\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d4\u05d7\u05d3\u05e9\u05d4- CVE-2023-3079 \u05de\u05d5\u05d2\u05d3\u05e8\u05ea \u05d1\u05e8\u05de\u05ea \u05e1\u05d9\u05db\u05d5\u05df \u05d2\u05d1\u05d5\u05d4\u05d4 \u05d0\u05da \u05d1\u05e9\u05dc\u05d1 \u05d6\u05d4 \u05dc\u05d0 \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e4\u05e8\u05d8\u05d9\u05dd \u05d8\u05db\u05e0\u05d9\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd.\n\n\u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05d7\u05d5\u05dc\u05e9\u05ea Zero-Day \u05d4\u05e9\u05dc\u05d9\u05e9\u05d9\u05ea \u05d0\u05d5\u05ea\u05d4 \u05de\u05ea\u05e7\u05e0\u05ea \u05d2\u05d5\u05d2\u05dc \u05de\u05ea\u05d7\u05d9\u05dc\u05ea \u05d4\u05e9\u05e0\u05d4.\n\n\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea:\n114.0.5735.106 (Mac, Linux)\n114.0.5735.110 (Windows)\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e4\u05d5\u05e8\u05e1\u05de\u05d4 \u05d1\u05e4\u05d9\u05d3 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05d6\u05de\u05d9\u05df \u05dc\u05d0\u05dc\u05d5 \u05d4\u05ea\u05d5\u05de\u05db\u05d9\u05dd \u05d1\u05e2\u05e8\u05d5\u05e5 \u05d0\u05ea\u05de\u05d5\u05dc \u05d1\u05dc\u05d9\u05dc\u05d4.\n\nhttps://t.me/CyberSecurityIL/3219\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2023-06-06T16:13:56.000000Z"}, {"uuid": "5958d557-1332-403a-b5bb-79bc8efa7e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3038", "type": "seen", "source": "https://t.me/cibsecurity/71575", "content": "\u203c CVE-2023-3038 \u203c\n\nSQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-04T16:12:06.000000Z"}, {"uuid": "9d291dde-888f-43dc-b006-fca79bd21280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3037", "type": "seen", "source": "https://t.me/cibsecurity/71574", "content": "\u203c CVE-2023-3037 \u203c\n\nImproper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to access the platform without authentication and retrieve personal data via the jsonGrid parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-04T16:12:05.000000Z"}, {"uuid": "a22373b5-10b1-4155-baf6-7c085444286e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30492", "type": "seen", "source": "https://t.me/cibsecurity/72944", "content": "\u203c CVE-2023-30492 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vark Minimum Purchase for WooCommerce plugin <=\u00c2\u00a02.0.0.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-31T06:24:17.000000Z"}, {"uuid": "9d73943d-00c4-4b2e-b95e-c50f29e03e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30535", "type": "seen", "source": "https://t.me/true_secator/4331", "content": "\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Prestashop, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043b\u044e\u0431\u043e\u043c\u0443 \u0431\u044d\u043a\u044d\u043d\u0434-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u044e \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Check Point Research, \u043e \u0447\u0435\u043c Prestashop \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 28 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-30839 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.9 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u0435\u0440\u0435\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430 \u0438 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0443\u0449\u0435\u0440\u0431 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PrestaShop \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.3 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0430\u0439\u0442\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u043c\u044f\u0433\u0447\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u043d\u0438\u043c\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043a\u0430\u0437\u043e\u0432, \u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0435\u0441\u043b\u0438 \u0432\u0434\u0440\u0443\u0433 \u0438\u0445 \u0445\u043e\u0441\u0442\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043b\u0438 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0443\u0449\u0435\u0440\u0431 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0434\u043e\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u043f\u043e\u043b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n\u0411\u044d\u043a\u0434\u043e\u0440-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043d\u043e\u0443-\u0445\u0430\u0443 \u0438 \u0442\u0430\u043a\u0442\u0438\u043a\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Sucuri, \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u0445\u043e\u0442\u044c \u043f\u043e\u043a\u0430 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043d\u0430 \u0441\u0430\u0439\u0442\u044b WordPress.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-30535 (CVSS: 7.7) \u0438 CVE-2023-30838 (CVSS: 8.0), \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.4 \u0438 1.7.8.9, \u0434\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0441\u0435\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 PrestaShop \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.", "creation_timestamp": "2023-04-27T19:58:34.000000Z"}, {"uuid": "b0605fca-e0cb-462d-9a4f-40e911953a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/true_secator/4657", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 900 000 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 MikroTik RouterOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 VulnCheck, CVE-2023-30799\u00a0\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0441\u0443\u043f\u0435\u0440-\u0430\u0434\u043c\u0438\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Winbox \u0438\u043b\u0438 HTTP.\n\n\u042d\u0441\u043a\u0430\u043b\u0438\u0440\u0443\u044f \u0434\u043e \u0441\u0443\u043f\u0435\u0440\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouteOS.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u043d\u0435 \u0442\u0430\u043a \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430, \u0432 \u0432\u0438\u0434\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u043e, \u0432\u0435\u0434\u044c Mikrotik RouterOS \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0431\u0440\u0443\u0442\u0430 \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c admin.\n\nCVE-2023-30799 \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0431\u0435\u0437 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0432 \u0438\u044e\u043d\u0435 2022 \u0433\u043e\u0434\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u0442\u043e\u0433\u043e \u0436\u0435 \u0433\u043e\u0434\u0430 \u0432 RouterOS v6.49.7 \u0438 v6.49.8 (\u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u0430\u044f \u0432\u0435\u043a\u0430).\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 VulnCheck \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 MikroTik.\n\n\u0417\u0430 \u043e\u0441\u043d\u043e\u0432\u0443 \u0431\u044b\u043b \u0432\u0437\u044f\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 FOISted RouterOS \u043e\u0442 Margin Research.\n\n\u041d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0442 VulnCheck \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 FTP, \u0438 \u043d\u0430 \u043d\u0435\u0433\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u043b\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0431\u0438\u043d\u0434\u0448\u0435\u043b\u043b\u043e\u0432, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 RouterOS \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u0432\u0441\u0435\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0439 \u0441 ROP \u0438 \u0432\u044b\u0437\u043e\u0432\u043e\u043c dlopen, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 OS.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e Shodan \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 474 000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (\u0430 \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0435\u0440\u0435\u0437 Winbox - \u043e\u043a\u043e\u043b\u043e 926 000), \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 VulnCheck \u0440\u0435\u0448\u0438\u043b\u0438 \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c PoC, \u043f\u043e\u043b\u0430\u0433\u0430\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u0440\u0438\u0441\u043a\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u0412\u0435\u0434\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 MikroTik \u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0437 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c \u0438 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0432\u043d\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 DDoS-\u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a M\u0113ris.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f RouterOS, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432\u043e\u0437\u0440\u0430\u0441\u0442\u0435\u0442.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c Winbox \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 SSH.", "creation_timestamp": "2023-07-26T11:07:06.000000Z"}, {"uuid": "b0eb9eee-31b6-4e10-a973-828b209717d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "exploited", "source": "https://t.me/true_secator/4378", "content": "\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 \u0441\u0443\u0442\u043e\u043a \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress Advanced Custom Fields, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 \u0441\u0430\u0439\u0442\u044b WordPress.\n\nCVE-2023-30777 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445 WordPress.\n\n\u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Patchstack 2 \u043c\u0430\u044f 2023 \u0433\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 PoC \u0443\u0436\u0435\u00a05 \u043c\u0430\u044f, \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 6.1.6.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai Security Intelligence Group (SIG) \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0431\u0430\u0433\u0438, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 6 \u043c\u0430\u044f 2023 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u043a\u043e\u0434\u0430 Patchstack \u043f\u0440\u044f\u043c\u043e \u0438\u0437 \u0441\u0442\u0430\u0442\u044c\u0438. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0447\u0442\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0448\u0430\u043d\u0441\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0430 \u0443\u0441\u043f\u0435\u0445 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439.\n\n\u041d\u043e \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u0442\u043e, \u0447\u0442\u043e \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u0431\u043e\u043b\u0435\u0435 1,4 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d WordPress, \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432  \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u043c\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0430\u0447\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a.", "creation_timestamp": "2023-05-15T12:50:58.000000Z"}, {"uuid": "9bc414fb-8c46-4c90-918a-88504c744bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30839", "type": "seen", "source": "https://t.me/true_secator/4331", "content": "\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Prestashop, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043b\u044e\u0431\u043e\u043c\u0443 \u0431\u044d\u043a\u044d\u043d\u0434-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u044e \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Check Point Research, \u043e \u0447\u0435\u043c Prestashop \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 28 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-30839 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.9 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u0435\u0440\u0435\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430 \u0438 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0443\u0449\u0435\u0440\u0431 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PrestaShop \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.3 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0430\u0439\u0442\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u043c\u044f\u0433\u0447\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u043d\u0438\u043c\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043a\u0430\u0437\u043e\u0432, \u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0435\u0441\u043b\u0438 \u0432\u0434\u0440\u0443\u0433 \u0438\u0445 \u0445\u043e\u0441\u0442\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043b\u0438 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0443\u0449\u0435\u0440\u0431 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0434\u043e\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u043f\u043e\u043b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n\u0411\u044d\u043a\u0434\u043e\u0440-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043d\u043e\u0443-\u0445\u0430\u0443 \u0438 \u0442\u0430\u043a\u0442\u0438\u043a\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Sucuri, \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u0445\u043e\u0442\u044c \u043f\u043e\u043a\u0430 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043d\u0430 \u0441\u0430\u0439\u0442\u044b WordPress.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-30535 (CVSS: 7.7) \u0438 CVE-2023-30838 (CVSS: 8.0), \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.4 \u0438 1.7.8.9, \u0434\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0441\u0435\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 PrestaShop \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.", "creation_timestamp": "2023-04-27T19:58:34.000000Z"}, {"uuid": "e847fb61-fd7a-4fe2-ab1f-e38d176de6ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30838", "type": "seen", "source": "https://t.me/true_secator/4331", "content": "\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Prestashop, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043b\u044e\u0431\u043e\u043c\u0443 \u0431\u044d\u043a\u044d\u043d\u0434-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u044e \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Check Point Research, \u043e \u0447\u0435\u043c Prestashop \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 28 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-30839 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.9 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u0435\u0440\u0435\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430 \u0438 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0443\u0449\u0435\u0440\u0431 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PrestaShop \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.3 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0430\u0439\u0442\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u043c\u044f\u0433\u0447\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u043d\u0438\u043c\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043a\u0430\u0437\u043e\u0432, \u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0435\u0441\u043b\u0438 \u0432\u0434\u0440\u0443\u0433 \u0438\u0445 \u0445\u043e\u0441\u0442\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043b\u0438 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0443\u0449\u0435\u0440\u0431 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0434\u043e\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u043f\u043e\u043b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n\u0411\u044d\u043a\u0434\u043e\u0440-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043d\u043e\u0443-\u0445\u0430\u0443 \u0438 \u0442\u0430\u043a\u0442\u0438\u043a\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Sucuri, \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u0445\u043e\u0442\u044c \u043f\u043e\u043a\u0430 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043d\u0430 \u0441\u0430\u0439\u0442\u044b WordPress.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-30535 (CVSS: 7.7) \u0438 CVE-2023-30838 (CVSS: 8.0), \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.4 \u0438 1.7.8.9, \u0434\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0441\u0435\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 PrestaShop \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.", "creation_timestamp": "2023-04-27T19:58:34.000000Z"}, {"uuid": "52549f2f-420c-4320-a949-88aea8474ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/4299", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \u0441 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435\u0439 VM2.\n\nVM2 \u2014 \u044d\u0442\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430 JavaScript, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 (IDE), \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430\u0445 \u043a\u043e\u0434\u0430, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043d\u0433\u0430 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0432 VM2 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-29017 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Seongil Wi \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434, \u0430 \u0434\u0432\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 (CVE-2023-29199\u00a0\u00a0\u0438 CVE-2023-30547) - SeungHyun Lee, \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u043c \u0438\u0437 KAIST.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 9,8 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 3.9.16 \u0438 \u0440\u0430\u043d\u0435\u0435. \u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435\u044f\u0441\u043d\u043e, \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u043e\u0432\u044b\u043c\u0438 \u0438\u043b\u0438 \u043e\u043d\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043a\u0440\u0438\u0432\u044b\u043c\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439 CVE-2023-29017, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 Wi.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u041f\u041e, \u0447\u044c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 VM2, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.9.17 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430, PoC\u00a0\u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c\u044e PoC, \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u0440\u0438\u0441\u043a\u0438 \u0430\u0442\u0430\u043a \u0431\u0443\u0434\u0443\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0435\u0449\u0435 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438.", "creation_timestamp": "2023-04-18T18:14:21.000000Z"}, {"uuid": "654a4081-1a9d-4f4f-8323-53fc44ab32d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30743", "type": "seen", "source": "https://t.me/true_secator/4505", "content": "SAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 8 \u043d\u043e\u0432\u044b\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0438 5 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043a \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c. \n\nSAP\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0433\u043e \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f (XSS) \u0432 UI5 Variant Management. \n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2023-33991 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,2), \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043a \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 \u044d\u0442\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Plant Connectivity and Production Connector \u0434\u043b\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-2827 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 7,9).\n\n\u041e\u0448\u0438\u0431\u043a\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u0431-\u0442\u043e\u043a\u0435\u043d\u0430 JSON (JWT).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Onapsis, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u0430 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b, \u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 JWT \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 Cloud Connector.\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 SAP \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u0437\u0430\u043c\u0435\u0442\u043a\u0438 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0437\u043d\u0430\u043d\u0438\u0439 (CVE-2021-42063) \u0438 SAPUI5 (CVE-2023-30743).\n\n\u0418\u0437 \u0432\u043e\u0441\u044c\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0448\u0435\u0441\u0442\u044c \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 XSS \u0432 NetWeaver, CRM ABAP (Grantor Management), CRM (\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WebClient) \u0438 BusinessObjects.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0437\u0430\u043c\u0435\u0442\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 S/4HANA \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f SQL \u0432 Master Data Synchronization.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u0435 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0438\u0437\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0432 NetWeaver (Change and Transport System).", "creation_timestamp": "2023-06-15T16:30:05.000000Z"}, {"uuid": "b0c5fa0c-65c4-4167-929d-53c93d8f1341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://t.me/true_secator/4470", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0442\u0440\u0435\u0442\u0438\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0437\u0430 \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 0-day, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome 114.\n\n\u041f\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435\u00a0CVE-2023-3079, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0433\u0438\u0433\u0430\u043d\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u043b, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 1 \u0438\u044e\u043d\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0431\u0430\u0433\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u041a\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u043c \u041b\u0435\u0441\u0438\u043d\u0435\u043c \u0438\u0437 Google TAG, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e CVE-2023-3079, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\nGoogle \u0443\u0436\u0435 \u043d\u0435 \u0440\u0430\u0437 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430, \u043a\u0430\u043a \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445\u00a0\u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 spyware\u00a0\u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Chrome \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Android.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0441\u043e\u0432\u043f\u0430\u043b\u043e \u0441 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 Google \u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u0430\u0439\u0441\u0430 \u0434\u043e 180 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0432\u043e\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439\u00a0\u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043f\u043e\u043b\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 Chrome.\n\n\u041a\u0441\u0442\u0430\u0442\u0438, \u0432 2022 \u0433\u043e\u0434\u0443 Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0435\u0432\u044f\u0442\u044c 0-day \u0432 Chrome, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u044f\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u0430\u0434\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0445\u043e\u0440\u043e\u0448\u0438\u043c \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430, \u043e\u0434\u043d\u0430\u043a\u043e, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u0434\u0430\u043b\u0435\u043a\u043e \u043e\u0442 \u043f\u0440\u0430\u0432\u0434\u044b.\n\n\u0413\u043b\u044f\u0434\u0438\u0448\u044c, \u043a \u043a\u043e\u043d\u0446\u0443 \u0433\u043e\u0434\u0430 \u0434\u043e\u0431\u0435\u0440\u0443\u0442 \u0447\u0438\u0441\u043b\u043e. \u0415\u0441\u043b\u0438 \u043d\u0435\u0442, \u0442\u043e \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 \u0410\u0420\u0422 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u043c\u043e\u0433\u0443\u0442.", "creation_timestamp": "2023-06-06T17:05:05.000000Z"}, {"uuid": "5a459bab-8764-4c36-91c9-524f7dde9841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://t.me/true_secator/4836", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 0-day \u0432 Chrome 116.\n\nCVE-2023-4863, \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebP, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0441\u0431\u043e\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nWebP - \u044d\u0442\u043e \u0444\u043e\u0440\u043c\u0430\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u043e\u0435 \u0441\u0436\u0430\u0442\u0438\u0435 \u0438 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u0430\u043c\u0438 JPEG \u0438 PNG \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u043c\u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Chrome, Firefox, Safari, Edge \u0438 Opera.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f\u043c Google, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2023-4863 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e 6 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f Apple Security Engineering and Architecture (SEAR) \u0438 Citizen Lab, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 spyware.\n\n\u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, Google \u0432\u043e\u0437\u0434\u0435\u0440\u0436\u0430\u043b\u0430\u0441\u044c \u043e\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0437\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0441\u0442\u043e\u044f\u043b\u0438 SEAR \u0438 Citizen Lab, \u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u0430\u0442\u0447 Google Chrome \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Apple \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438\u00a00-day \u0432 iOS \u0438 macOS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 Citizen Lab \u0432 \u0445\u043e\u0434\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c \u041f\u041e Pegasus \u043e\u0442 NSO Group.\n\nCVE-2023-4863\u00a0- \u044d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f 0-day, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f Google \u0432 Chrome \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2023-3079\u00a0(\u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8) \u0432 \u0438\u044e\u043d\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 CVE-2023-2033\u00a0(\u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8) \u0438\u00a0CVE-2023-2136 (\u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432 Skia) \u0432 \u0430\u043f\u0440\u0435\u043b\u0435.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a 116.0.5845.187 \u0434\u043b\u044f macOS \u0438 Linux \u0438 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u0438 116.0.5845.187/.188 \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-09-12T14:01:05.000000Z"}, {"uuid": "616f6231-2df0-464a-a1e3-c503ec1769ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4258", "content": "\ud83d\udd78Department of Defence South African (DARPA) Data Leak : Download\n\n\ud83c\udfe5Canadian Nurses Association Data Leak : Download\n\n\ud83d\udc7eHackBot \u2013 AI Cybersecurity Chatbot : Download\n\n\ud83e\uddeeCVE-2023-30943 Moodle Exploit : Download\n\n\ud83d\udc32CVE-2023-41717 Zscaler Proxy Exploit : Download\n\n\ud83d\udcdfB(l)utter \u2013 Flutter Mobile Application Reverse Engineering Tool : Download\n\n\ud83e\udeacGreenBot : Download", "creation_timestamp": "2023-09-04T07:05:29.000000Z"}, {"uuid": "88f85c96-80a4-481f-852f-3bf8de91f29a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4162", "content": "\ud83d\udc7eHookBot Android Malware Leak : https://system32.ink/hookbot-android-malware-leak/\n\n\ud83d\udd30CVE-2023-3079 Exploit : https://system32.ink/cve-2023-3079-exploit/\n\n\ud83d\udca5Smoothie King Data Leak : https://system32.ink/smoothie-king-data-leak/\n\n\u26a1Padna Compressor Company Data Leak : https://system32.ink/padna-compressor-company-data-leak/", "creation_timestamp": "2023-08-20T18:46:58.000000Z"}, {"uuid": "a7e81d4e-4bd4-497a-be87-ab7d6702b568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4148", "content": "\ud83d\udc7eHookBot Android Malware Leak : https://system32.ink/hookbot-android-malware-leak/\n\n\ud83d\udd30CVE-2023-3079 Exploit : https://system32.ink/cve-2023-3079-exploit/\n\n\ud83d\udca5Smoothie King Data Leak : https://system32.ink/smoothie-king-data-leak/\n\n\u26a1Padna Compressor Company Data Leak : https://system32.ink/padna-compressor-company-data-leak/", "creation_timestamp": "2023-08-18T18:46:30.000000Z"}, {"uuid": "38a2abcf-7100-42d4-bea1-81333247031c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4190", "content": "\ud83d\udc7eHookBot Android Malware Leak : https://system32.ink/hookbot-android-malware-leak/\n\n\ud83d\udd30CVE-2023-3079 Exploit : https://system32.ink/cve-2023-3079-exploit/\n\n\ud83d\udca5Smoothie King Data Leak : https://system32.ink/smoothie-king-data-leak/\n\n\u26a1Padna Compressor Company Data Leak : https://system32.ink/padna-compressor-company-data-leak/", "creation_timestamp": "2023-08-25T05:33:28.000000Z"}, {"uuid": "c82ec7b7-9dbb-4cc0-a680-5a1ed2c3c1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4014", "content": "\ud83d\udccc\ud83d\udccdJonas Photo Indonesia Leak : https://system32.ink/jonas-photo-indonesia-leak/\n\n\ud83d\udcdfAngkasa MALAYSIAN Data Leak : https://system32.ink/angkasa-malaysian-data-leak/\n\n\ud83d\udc7e\ud83d\udc7eTitan Stealer Source Code : https://system32.ink/titan-stealer-source-code/\n\n\ud83d\udda8Sudomy \u2013 Subdomain Enumeration & Analysis Tool : https://system32.ink/sudomy-subdomain-enumeration-analysis-tool/\n  \n\ud83d\udc7e\ud83d\udda8Scan4All \u2013 Vuls Scanner 15000+PoCs : https://system32.ink/scan4all-vuls-scanner-15000pocs/\n\n\ud83e\ude85NgelistMoment \u2013 Domain Grabber : https://system32.ink/ngelistmoment-domain-grabber/\n\n\ud83e\uddeeCVE-2023-30533 POC : https://system32.ink/cve-2023-30533-poc/\n\n@Crackcodes | System32.ink | Crackcodes.in", "creation_timestamp": "2023-08-11T03:59:21.000000Z"}, {"uuid": "739dcd8b-c86b-4926-9f83-daf84f527587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4240", "content": "\ud83d\udd78Department of Defence South African (DARPA) Data Leak : Download\n\n\ud83c\udfe5Canadian Nurses Association Data Leak : Download\n\n\ud83d\udc7eHackBot \u2013 AI Cybersecurity Chatbot : Download\n\n\ud83e\uddeeCVE-2023-30943 Moodle Exploit : Download\n\n\ud83d\udc32CVE-2023-41717 Zscaler Proxy Exploit : Download\n\n\ud83d\udcdfB(l)utter \u2013 Flutter Mobile Application Reverse Engineering Tool : Download\n\n\ud83e\udeacGreenBot : Download", "creation_timestamp": "2023-09-02T04:30:46.000000Z"}, {"uuid": "8181746c-a97a-4a44-81af-23300f42d857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30347", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/3716", "content": "\ud83d\udda5Data Leaks :\n\n\ud83d\udd31Bombardier Recreational Products (brp.com) Leak : https://www.system32.ink/2023/06/bombardier-recreational-products-brpcom.html\n\nf\ud83d\udd31nde_gov_br Database leak :  https://www.system32.ink/2023/06/fndegovbr-database-leak-national-fund.html\n\n\ud83d\udd31Leak Sim\u00f3n Bol\u00edvar Adventist School (casb.edu.co) Database : https://www.system32.ink/2023/06/leak-simon-bolivar-adventist-school.html\n\n\ud83d\udda5Tools: \n\n\ud83d\udd31HCL AppScan Standard v10.2.1  : https://www.system32.ink/2023/06/hcl-appscan-standard-v1021.html\n\n\ud83d\udd31Qualcomm baseband scripts (reverse Engineering) : https://www.system32.ink/2023/06/qualcomm-baseband-scripts.html\n\n\ud83d\udd31The Deepfake Offensive Toolkit : https://www.system32.ink/2023/06/the-deepfake-offensive-toolkit.html\n\n\ud83d\udda5Exploits:\n\n\ud83d\udd31CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln Exploit : https://www.system32.ink/2023/06/cve-2023-1454-jeecg-boot-qurestsql.html\n\n\ud83d\udd31CVE-2023-30347 Exploit : Reflected Cross-Site-Scripting in Neox Contact Center : https://www.system32.ink/2023/06/cve-2023-30347-exploit-reflected-cross.html\n\n\ud83d\udda5ScamPages:\n\nJ\ud83d\udd31PMorgan Chase Bank Phishing Page : https://www.system32.ink/2023/06/jpmorgan-chase-bank-phishing-page.html\n\n@crackcodes | crackcodes.in | system32.ink", "creation_timestamp": "2023-06-22T09:44:11.000000Z"}, {"uuid": "c8893954-9125-4f66-8b44-68a4f5e237ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/3710", "content": "\ud83d\udda5Dataleak:\n\n\ud83d\udd31DataLeak uprint_id : https://www.system32.ink/2023/06/DataLeak-uprint.id.html\n\n\ud83d\udd31Leak RaidForums  : https://www.system32.ink/2023/06/leak-raidforums-database-by-exposedvc.html\n\n\ud83d\udd31Leak Santander bank Mexico : https://www.system32.ink/2023/06/leak-santander-bank-mexico.html\n\n\ud83d\udd31Leak Tour Partner Group (tourpartnergroup.com) : https://www.system32.ink/2023/06/leak-tour-partner-group.html\n\n\ud83d\udda5Exploits:\n\n\ud83d\udd31MiniDLNA <=1.3.2 (CVE-2023-33476) Exploits : https://www.system32.ink/2023/06/minidlna-132-cve-2023-33476-exploits.html\n\n\ud83d\udd31CVE-2023-20178 PoC for Arbitrary File Delete vulnerability in Cisco Secure Client : https://www.system32.ink/2023/06/cve-2023-20178-poc-for-arbitrary-file.html\n\n\ud83d\udd31CVE-2023-25610  RCE vulnerability in FortiOS : https://www.system32.ink/2023/06/cve-2023-25610-rce-vulnerability-in.html\n\n\ud83d\udd31CVE-2023-30777 Exploit Reflected XSS vulnerability in the Advanced Custom Fields WordPress plugin : https://www.system32.ink/2023/06/cve-2023-30777-exploit-reflected-xss.html\n\n\ud83d\udda5Rat:\n\n\ud83d\udd31GCR-Google-Calendar-RAT : https://www.system32.ink/2023/06/gcr-google-calendar-rat.html\n\n\ud83d\udda5Tools:\n\n\ud83d\udd31Mantra - A tool used to hunt down API key leaks in JS files and pages : https://www.system32.ink/2023/06/mantra-tool-used-to-hunt-down-api-key.html\n\n\ud83d\udd31IIS Short Name Scanner - 2012-2023 : https://www.system32.ink/2023/06/iis-short-name-scanner-2012-2023.html\n\n@crackcodes | crackcodes.in | system32.ink", "creation_timestamp": "2023-06-21T14:59:33.000000Z"}, {"uuid": "40108068-5d33-42d4-8372-7b6926e479cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30968", "type": "seen", "source": "https://t.me/ctinow/206160", "content": "https://ift.tt/lgdAUFQ\nCVE-2023-30968", "creation_timestamp": "2024-03-12T21:22:06.000000Z"}, {"uuid": "0103b4aa-c7c7-45ae-8fe7-050da5ed9e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30591", "type": "seen", "source": "https://t.me/cibsecurity/71267", "content": "\u203c CVE-2023-30591 \u203c\n\nDenial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type for the event name respectively.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T12:42:26.000000Z"}, {"uuid": "748480fb-017b-4dc4-be52-8ec4a2979eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30996", "type": "seen", "source": "https://t.me/ctinow/207415", "content": "https://ift.tt/Vdz3QH8\nCVE-2023-30996 | IBM Cognos Analytics 11.1.7/11.2.4/12.0.0 Message origin validation (XFDB-254290)", "creation_timestamp": "2024-03-14T04:16:58.000000Z"}, {"uuid": "70b97052-376b-4ada-930e-91d2f560fd0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30415", "type": "seen", "source": "https://t.me/cibsecurity/71219", "content": "\u203c CVE-2023-30415 \u203c\n\nSourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/view_inquiry.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-28T20:36:49.000000Z"}, {"uuid": "39fbf34c-b023-40a2-ae23-2fd939676970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30968", "type": "seen", "source": "https://t.me/ctinow/206172", "content": "https://ift.tt/lgdAUFQ\nCVE-2023-30968", "creation_timestamp": "2024-03-12T21:26:35.000000Z"}, {"uuid": "bb1ed297-6ef1-4cb5-ad78-c2073366f2f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30959", "type": "seen", "source": "https://t.me/cibsecurity/71063", "content": "\u203c CVE-2023-30959 \u203c\n\nIn Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-27T18:36:03.000000Z"}, {"uuid": "e7c640be-5ca2-47bb-8afa-99740df7c8a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30494", "type": "seen", "source": "https://t.me/cibsecurity/69769", "content": "\u203c CVE-2023-30494 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <=\u00c2\u00a03.1.10 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T14:16:27.000000Z"}, {"uuid": "ab8cb154-c307-41f8-94e0-bc88aadc40ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30767", "type": "seen", "source": "https://t.me/ctinow/201223", "content": "https://ift.tt/kNPOgtd\nCVE-2023-30767 | Intel Optimization for TensorFlow prior 2.13.0 unknown vulnerability (intel-sa-00903)", "creation_timestamp": "2024-03-06T11:41:16.000000Z"}, {"uuid": "e1c92319-5eda-4c9c-8068-90429794b346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30967", "type": "seen", "source": "https://t.me/cibsecurity/72933", "content": "\u203c CVE-2023-30967 \u203c\n\nGotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T07:44:29.000000Z"}, {"uuid": "10855c00-057c-4dc4-ae4a-f7247a37897f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30969", "type": "seen", "source": "https://t.me/cibsecurity/72932", "content": "\u203c CVE-2023-30969 \u203c\n\nThe Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorization on all the endpoints.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T07:44:28.000000Z"}, {"uuid": "04e2e170-8dc6-4b1f-95ef-4752e6f0aa6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3010", "type": "seen", "source": "https://t.me/cibsecurity/72824", "content": "\u203c CVE-2023-3010 \u203c\n\nGrafana is an open-source platform for monitoring and observability. The WorldMap panel plugin, versions before 1.0.4 contains a DOM XSS vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-25T22:39:09.000000Z"}, {"uuid": "93706211-a353-40c6-ad7b-79ce56154133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30962", "type": "seen", "source": "https://t.me/cibsecurity/70339", "content": "\u203c CVE-2023-30962 \u203c\n\nThe Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T22:23:06.000000Z"}, {"uuid": "a19df852-d7f5-46ef-bffa-72ef3d74ff1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30861", "type": "seen", "source": "https://t.me/ctinow/180851", "content": "https://ift.tt/2a07Abv\nCVE-2023-30861 | Oracle Communications Cloud Native Core Network Function Cloud Native Environment Configuration information disclosure", "creation_timestamp": "2024-02-07T17:42:00.000000Z"}, {"uuid": "567f6083-2f85-4971-be21-6dcb6cd976d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30016", "type": "seen", "source": "https://t.me/ctinow/177995", "content": "https://ift.tt/9MxI1Am\nCVE-2023-30016 | SourceCodester Judging Management System 1.0 sub_event_details_edit.php sub_event_details_edit sub_event_id sql injection", "creation_timestamp": "2024-02-02T09:06:52.000000Z"}, {"uuid": "f5b0554b-9ddc-4549-b361-b657abbbf6af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30015", "type": "seen", "source": "https://t.me/ctinow/177994", "content": "https://ift.tt/K1ugiEt\nCVE-2023-30015 | SourceCodester Judging Management System 1.0 review_search.php review_search txtsearch sql injection", "creation_timestamp": "2024-02-02T09:06:51.000000Z"}, {"uuid": "5313372d-e907-4075-808f-3b0b20301bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30999", "type": "seen", "source": "https://t.me/ctinow/178350", "content": "https://ift.tt/4sPqwCL\nCVE-2023-30999", "creation_timestamp": "2024-02-03T02:26:44.000000Z"}, {"uuid": "b3f772fd-8d78-4fab-8837-1d39a9866ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30909", "type": "seen", "source": "https://t.me/cibsecurity/70447", "content": "\u203c CVE-2023-30909 \u203c\n\nA remote authentication bypass issue exists in someOneView APIs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-14T18:24:31.000000Z"}, {"uuid": "982a147e-1195-4d8c-9af3-7d752a2b4f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30014", "type": "seen", "source": "https://t.me/ctinow/177993", "content": "https://ift.tt/0EGtXvJ\nCVE-2023-30014 | SourceCodester Judging Management System 1.0 sub_event_stat_update.php sub_event_stat_update sub_event_id sql injection", "creation_timestamp": "2024-02-02T09:06:49.000000Z"}, {"uuid": "1777347c-be40-458d-8128-07312d6f6935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30970", "type": "seen", "source": "https://t.me/ctinow/175514", "content": "https://ift.tt/MK729x6\nCVE-2023-30970", "creation_timestamp": "2024-01-29T20:26:10.000000Z"}, {"uuid": "54db73b3-58f0-4166-ad06-125b03949bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30058", "type": "seen", "source": "https://t.me/cibsecurity/70209", "content": "\u203c CVE-2023-30058 \u203c\n\nnovel-plus 3.6.2 is vulnerable to SQL Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T20:27:57.000000Z"}, {"uuid": "f162b955-fcf7-4a2a-b0c6-63394636435e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30995", "type": "seen", "source": "https://t.me/cibsecurity/70169", "content": "\u203c CVE-2023-30995 \u203c\n\nIBM Aspera Faspex 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-09T00:20:43.000000Z"}, {"uuid": "a8f040d3-e6e3-4a4a-b9d0-193682af2285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30016", "type": "seen", "source": "https://t.me/ctinow/170724", "content": "https://ift.tt/SvteCxR\nCVE-2023-30016 Exploit", "creation_timestamp": "2024-01-20T21:16:23.000000Z"}, {"uuid": "f492fe36-f63f-49f5-bb00-5e802b845db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3043", "type": "seen", "source": "https://t.me/ctinow/174843", "content": "https://ift.tt/EBnVGD8\nCVE-2023-3043 | AMI MegaRAC_SPx prior 12.7/13.6 BMC stack-based overflow", "creation_timestamp": "2024-01-28T06:51:27.000000Z"}, {"uuid": "33e652c1-b84a-4d9b-88bd-659a8d3246c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30564", "type": "seen", "source": "https://t.me/cibsecurity/66708", "content": "\u203c CVE-2023-30564 \u203c\n\nAlaris Systems Manager does not perform input validation during the Device Import Function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-14T00:11:51.000000Z"}, {"uuid": "5971e233-6952-482b-8be2-12736b34fa91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30014", "type": "seen", "source": "https://t.me/ctinow/169983", "content": "https://ift.tt/1NCR6t8\nCVE-2023-30014 Exploit", "creation_timestamp": "2024-01-18T23:16:57.000000Z"}, {"uuid": "ac5ab497-de95-4343-af45-971710ec51e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30015", "type": "seen", "source": "https://t.me/ctinow/169982", "content": "https://ift.tt/Z5kp3Yd\nCVE-2023-30015 Exploit", "creation_timestamp": "2024-01-18T23:16:56.000000Z"}, {"uuid": "27a9e2e9-ec3f-4bbe-8b42-9afdbc994388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30016", "type": "seen", "source": "https://t.me/ctinow/167181", "content": "https://ift.tt/uiBzV6s\nCVE-2023-30016", "creation_timestamp": "2024-01-12T10:31:16.000000Z"}, {"uuid": "2d677394-368c-4d2a-be7a-90b74d41b37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30495", "type": "seen", "source": "https://t.me/ctinow/167883", "content": "https://ift.tt/PWaFbwV\nCVE-2023-30495 | Themefic Ultimate Addons for Contact Form 7 Plugin up to 3.1.23 on WordPress sql injection", "creation_timestamp": "2024-01-13T17:52:12.000000Z"}, {"uuid": "947b3c1e-f79e-494a-a311-522e3c0beae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30750", "type": "seen", "source": "https://t.me/ctinow/167881", "content": "https://ift.tt/mfrNvcA\nCVE-2023-30750 | CreativeMindsSolutions CM Popup Plugin up to 1.5.10 on WordPress sql injection", "creation_timestamp": "2024-01-13T17:52:07.000000Z"}, {"uuid": "05815247-fadb-4f77-a716-cf566a23024f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30451", "type": "seen", "source": "https://t.me/ctinow/169924", "content": "https://ift.tt/wNZnf4x\nCVE-2023-30451 | TYPO3 11.5.24 /typo3/record/edit path traversal (ID 176274)", "creation_timestamp": "2024-01-18T20:51:16.000000Z"}, {"uuid": "e87dfa89-8dbd-40c0-b563-d0480ead69c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30617", "type": "seen", "source": "https://t.me/ctinow/162473", "content": "https://ift.tt/n4mLBOq\nCVE-2023-30617", "creation_timestamp": "2024-01-03T17:26:50.000000Z"}, {"uuid": "e9c7791a-93de-40f4-85ca-096e38ea81f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30014", "type": "seen", "source": "https://t.me/ctinow/167179", "content": "https://ift.tt/wJ2a9O5\nCVE-2023-30014", "creation_timestamp": "2024-01-12T10:31:14.000000Z"}, {"uuid": "99830c77-7037-4fa2-84e9-e97ab8d5e4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30617", "type": "seen", "source": "https://t.me/ctinow/172118", "content": "https://ift.tt/Y540nqU\nCVE-2023-30617 | openkruise Kruise up to 1.3.0/1.4.0/1.5.1 kruise-daemon pod unnecessary privileges (GHSA-437m-7hj5-9mpw)", "creation_timestamp": "2024-01-23T16:56:40.000000Z"}, {"uuid": "d9424b1e-4423-484b-933c-fccd51126a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3043", "type": "seen", "source": "https://t.me/ctinow/165462", "content": "https://ift.tt/JTPZI2A\nCVE-2023-3043", "creation_timestamp": "2024-01-10T00:26:40.000000Z"}, {"uuid": "7a61d6fa-deb0-4c60-ab47-e578c282bc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30015", "type": "seen", "source": "https://t.me/ctinow/167180", "content": "https://ift.tt/aBxDqw1\nCVE-2023-30015", "creation_timestamp": "2024-01-12T10:31:15.000000Z"}, {"uuid": "c51e5cba-ea82-4662-adc9-1ebfd6391d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3039", "type": "seen", "source": "https://t.me/cibsecurity/70248", "content": "\u203c CVE-2023-3039 \u203c\n\nSD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T12:22:47.000000Z"}, {"uuid": "ac414bb9-cb4e-4edf-8b47-6cfa3c4ef586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30563", "type": "seen", "source": "https://t.me/cibsecurity/66706", "content": "\u203c CVE-2023-30563 \u203c\n\nA malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-14T00:11:49.000000Z"}, {"uuid": "159495bf-ca3e-4c6a-ab54-315af29908fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30800", "type": "seen", "source": "https://t.me/cibsecurity/70100", "content": "\u203c CVE-2023-30800 \u203c\n\nThe web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-07T20:18:48.000000Z"}, {"uuid": "30953d09-ab6c-476a-95ee-40c9dc361de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30451", "type": "seen", "source": "https://t.me/ctinow/159133", "content": "https://ift.tt/Co3lBPI\nCVE-2023-30451", "creation_timestamp": "2023-12-25T06:26:53.000000Z"}, {"uuid": "b7c8eeab-4955-4101-80e0-9b243e90c3a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30908", "type": "seen", "source": "https://t.me/cibsecurity/70119", "content": "\u203c CVE-2023-30908 \u203c\n\nPotential security vulnerabilities have been identified in Hewlett Packard Enterprise OneView Software. These vulnerabilities could be remotely exploited to allow authentication bypass, disclosure of sensitive information, and denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-08T02:19:35.000000Z"}, {"uuid": "e1f92361-c60d-405b-875d-bfeb53203f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30712", "type": "seen", "source": "https://t.me/cibsecurity/69939", "content": "\u203c CVE-2023-30712 \u203c\n\nImproper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:30:46.000000Z"}, {"uuid": "8365930d-6d2d-4241-9b5f-057ded545bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30715", "type": "seen", "source": "https://t.me/cibsecurity/69933", "content": "\u203c CVE-2023-30715 \u203c\n\nImproper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:30:38.000000Z"}, {"uuid": "da031fea-3664-405c-a211-2b8b6dd9d282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30709", "type": "seen", "source": "https://t.me/cibsecurity/69943", "content": "\u203c CVE-2023-30709 \u203c\n\nImproper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:30:53.000000Z"}, {"uuid": "1ad2a089-89c4-4771-9e90-a1a76f850953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30534", "type": "seen", "source": "https://t.me/cibsecurity/69916", "content": "\u203c CVE-2023-30534 \u203c\n\nCacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti\u00e2\u20ac\u2122s vendor directory (phpseclib), the necessary gadgets are not included, making them inaccessible and the insecure deserializations not exploitable. Each instance of insecure deserialization is due to using the unserialize function without sanitizing the user input. Cacti has a \u00e2\u20ac\u0153safe\u00e2\u20ac\ufffd deserialization that attempts to sanitize the content and check for specific values before calling unserialize, but it isn\u00e2\u20ac\u2122t used in these instances. The vulnerable code lies in graphs_new.php, specifically within the host_new_graphs_save function. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:23.000000Z"}, {"uuid": "88a032b5-93e2-4f6b-bac7-1e806b855833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30803", "type": "seen", "source": "https://t.me/cibsecurity/71946", "content": "\u203c CVE-2023-30804 \u203c\n\nThe Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpn_html/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated attacker when paired with CVE-2023-30803.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T18:16:46.000000Z"}, {"uuid": "788bdeb3-ea2e-4c48-949f-c16ec1d94df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30803", "type": "seen", "source": "https://t.me/cibsecurity/71953", "content": "\u203c CVE-2023-30803 \u203c\n\nThe Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T18:16:54.000000Z"}, {"uuid": "dad0010c-5061-4766-af26-a955d34be0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30708", "type": "seen", "source": "https://t.me/cibsecurity/69952", "content": "\u203c CVE-2023-30708 \u203c\n\nImproper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:33:38.000000Z"}, {"uuid": "f6b72d07-1eb8-4057-bc74-5cf6aa83ca40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30717", "type": "seen", "source": "https://t.me/cibsecurity/69951", "content": "\u203c CVE-2023-30717 \u203c\n\nSensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to get unresettable identifiers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:33:37.000000Z"}, {"uuid": "7f063b55-b21b-4c8a-b119-9b69ef8f2be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30713", "type": "seen", "source": "https://t.me/cibsecurity/69950", "content": "\u203c CVE-2023-30713 \u203c\n\nImproper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:31:03.000000Z"}, {"uuid": "1b5c1f31-acd5-4aef-ad16-27eeeab76b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30720", "type": "seen", "source": "https://t.me/cibsecurity/69949", "content": "\u203c CVE-2023-30720 \u203c\n\nPendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T07:31:02.000000Z"}, {"uuid": "e9a02379-0a65-4e36-b77d-ab80a1fc1b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30497", "type": "seen", "source": "https://t.me/cibsecurity/69978", "content": "\u203c CVE-2023-30497 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Simon Chuang WP LINE Notify plugin <=\u00c2\u00a01.4.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T12:18:04.000000Z"}, {"uuid": "ee3c02bf-3e5c-4b58-a309-b30b0ec34419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30805", "type": "seen", "source": "https://t.me/cibsecurity/71958", "content": "\u203c CVE-2023-30805 \u203c\n\nThe Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php endpoint. This is due to mishandling of shell meta-characters in the \"un\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T18:17:00.000000Z"}, {"uuid": "b9091483-3202-479a-baed-87bd154e104c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30485", "type": "seen", "source": "https://t.me/cibsecurity/69777", "content": "\u203c CVE-2023-30485 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Solwin Infotech Responsive WordPress Slider \u00e2\u20ac\u201c Avartan Slider Lite plugin <=\u00c2\u00a01.5.3 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T16:16:16.000000Z"}, {"uuid": "c025086f-ebcc-4450-9902-96faec02f8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30435", "type": "seen", "source": "https://t.me/cibsecurity/69250", "content": "\u203c CVE-2023-30435 \u203c\n\nIBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252291.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-28T02:21:13.000000Z"}, {"uuid": "79dfac20-723a-4e8a-9bb2-edd3f0aaa879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30079", "type": "seen", "source": "https://t.me/cibsecurity/68984", "content": "\u203c CVE-2023-30079 \u203c\n\nA stack overflow vulnerability exists in function read_file in atlibeconf/lib/getfilecontents.c in libeconf 0.5.1 allows attackers to cause a Denial of service or execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:22:05.000000Z"}, {"uuid": "17d74344-84e1-4ea6-8516-25a710bc2f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30437", "type": "seen", "source": "https://t.me/cibsecurity/69252", "content": "\u203c CVE-2023-30437 \u203c\n\nIBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-28T02:21:18.000000Z"}, {"uuid": "248a6fd4-68d0-4550-a28c-6f7313b74967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30436", "type": "seen", "source": "https://t.me/cibsecurity/69245", "content": "\u203c CVE-2023-30436 \u203c\n\nIBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252292.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-28T02:16:08.000000Z"}, {"uuid": "fd82f2c2-93ea-41b6-a060-59ed34e1aeb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30200", "type": "seen", "source": "https://t.me/cibsecurity/67062", "content": "\u203c CVE-2023-30200 \u203c\n\nIn the module \u00e2\u20ac\u0153Image: WebP, Compress, Zoom, Lazy load, Alt & More\u00e2\u20ac\ufffd (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-21T00:33:07.000000Z"}, {"uuid": "70e73c9b-23a3-4760-9b50-daf5f86cb83c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30323", "type": "seen", "source": "https://t.me/cibsecurity/66122", "content": "\u203c CVE-2023-30323 \u203c\n\nSQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T18:33:45.000000Z"}, {"uuid": "fc06e2fd-0211-43eb-b12f-f3308fc282c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/cibsecurity/67006", "content": "\u203c CVE-2023-30799 \u203c\n\nMikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-19T18:21:48.000000Z"}, {"uuid": "b031e74e-68a5-454c-a58c-b646392febbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30433", "type": "seen", "source": "https://t.me/cibsecurity/66988", "content": "\u203c CVE-2023-30433 \u203c\n\nIBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 252186.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-19T07:24:59.000000Z"}, {"uuid": "7d9daf32-db86-4846-9594-2e3c7b9f0553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30383", "type": "seen", "source": "https://t.me/cibsecurity/66935", "content": "\u203c CVE-2023-30383 \u203c\n\nTP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T22:31:09.000000Z"}, {"uuid": "84d1d32a-1c91-4652-9aee-09bb4d0045f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3041", "type": "seen", "source": "https://t.me/cibsecurity/66822", "content": "\u203c CVE-2023-3041 \u203c\n\nThe Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T18:40:20.000000Z"}, {"uuid": "8422670a-82b0-4e88-a32e-55055158812f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30477", "type": "seen", "source": "https://t.me/cibsecurity/68447", "content": "\u203c CVE-2023-30477 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Essitco AFFILIATE Solution plugin <=\u00c2\u00a01.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:31.000000Z"}, {"uuid": "bf667a13-201b-4758-8f9e-9ae32653e88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30752", "type": "seen", "source": "https://t.me/cibsecurity/68446", "content": "\u203c CVE-2023-30752 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin <=\u00c2\u00a02.0.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:30.000000Z"}, {"uuid": "d7c705e1-3504-4711-94e4-c863e6c5de6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30751", "type": "seen", "source": "https://t.me/cibsecurity/68445", "content": "\u203c CVE-2023-30751 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in iControlWP Article Directory Redux plugin <=\u00c2\u00a01.0.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:29.000000Z"}, {"uuid": "9ba72876-94e5-478e-a23e-d77f61c2d41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30754", "type": "seen", "source": "https://t.me/cibsecurity/68444", "content": "\u203c CVE-2023-30754 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in AdFoxly AdFoxly \u00e2\u20ac\u201c Ad Manager, AdSense Ads & Ads.Txt plugin <=\u00c2\u00a01.8.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:28.000000Z"}, {"uuid": "458298e6-1660-4308-88c5-43b29dd3022c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30875", "type": "seen", "source": "https://t.me/cibsecurity/68810", "content": "\u203c CVE-2023-30875 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in All My Web Needs Logo Scheduler plugin <=\u00c2\u00a01.2.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T12:38:01.000000Z"}, {"uuid": "ea045c6a-77fc-4664-b646-e59ad1a0874e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3078", "type": "seen", "source": "https://t.me/cibsecurity/68766", "content": "\u203c CVE-2023-3078 \u203c\n\nAn uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T20:37:28.000000Z"}, {"uuid": "3bb70cee-3d28-481e-a38b-b98854e1f3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30877", "type": "seen", "source": "https://t.me/cibsecurity/68728", "content": "\u203c CVE-2023-30877 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov XML for Google Merchant Center plugin <=\u00c2\u00a03.0.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T12:37:14.000000Z"}, {"uuid": "4a777a05-2aba-433c-82aa-f96b8713b772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30876", "type": "seen", "source": "https://t.me/cibsecurity/68726", "content": "\u203c CVE-2023-30876 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dave Ross Dave's WordPress Live Search plugin <=\u00c2\u00a04.8.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T12:37:12.000000Z"}, {"uuid": "d6d0c51e-08cb-4e3b-b313-5a51d21c62cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30874", "type": "seen", "source": "https://t.me/cibsecurity/68724", "content": "\u203c CVE-2023-30874 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin <=\u00c2\u00a05.1.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T12:37:10.000000Z"}, {"uuid": "4a56cbbc-d56b-47c2-83fc-c63749175cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30786", "type": "seen", "source": "https://t.me/cibsecurity/68630", "content": "\u203c CVE-2023-30786 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Benjamin Guy Captcha Them All plugin <=\u00c2\u00a01.3.3 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T14:50:19.000000Z"}, {"uuid": "e1825327-96ac-4c1a-9982-030c74b54b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30784", "type": "seen", "source": "https://t.me/cibsecurity/68623", "content": "\u203c CVE-2023-30784 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kaya Studio Kaya QR Code Generator plugin <=\u00c2\u00a01.5.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T14:41:15.000000Z"}, {"uuid": "6bdc39d4-150d-4dee-8764-5bcfe370cfdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30473", "type": "seen", "source": "https://t.me/cibsecurity/68622", "content": "\u203c CVE-2023-30473 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov YML for Yandex Market plugin <=\u00c2\u00a03.10.7 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T14:41:14.000000Z"}, {"uuid": "620e3e4f-f124-42a9-a4c6-9cf9b081c962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30747", "type": "seen", "source": "https://t.me/cibsecurity/68535", "content": "\u203c CVE-2023-30747 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPGem WooCommerce Easy Duplicate Product plugin <=\u00c2\u00a00.3.0.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-15T16:30:32.000000Z"}, {"uuid": "c2c7a779-03b4-4a21-989f-dedace53672f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30778", "type": "seen", "source": "https://t.me/cibsecurity/68534", "content": "\u203c CVE-2023-30778 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry plugin <=\u00c2\u00a010.0.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-15T16:30:31.000000Z"}, {"uuid": "3211ca21-8640-4439-ba31-2c357bc07fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30785", "type": "seen", "source": "https://t.me/cibsecurity/68628", "content": "\u203c CVE-2023-30785 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Grid plugin <=\u00c2\u00a01.21 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T14:47:18.000000Z"}, {"uuid": "258aa960-2490-4dc9-b0e0-874e57ee6e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30779", "type": "seen", "source": "https://t.me/cibsecurity/68627", "content": "\u203c CVE-2023-30779 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jonathan Daggerhart Query Wrangler plugin <=\u00c2\u00a01.5.51 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T14:47:17.000000Z"}, {"uuid": "9b9d2602-8822-4cf7-88b8-071aa3db0ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30871", "type": "seen", "source": "https://t.me/cibsecurity/68625", "content": "\u203c CVE-2023-30871 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in PT Woo Plugins (by Webdados) Stock Exporter for WooCommerce plugin <=\u00c2\u00a01.1.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T14:41:17.000000Z"}, {"uuid": "06e1c8b3-0473-4679-9df6-ac43b4a67dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30782", "type": "seen", "source": "https://t.me/cibsecurity/68624", "content": "\u203c CVE-2023-30782 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <=\u00c2\u00a03.7.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T14:41:16.000000Z"}, {"uuid": "1a712f8c-ea4e-4fa0-8a05-d5c815c8402a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30489", "type": "seen", "source": "https://t.me/cibsecurity/68449", "content": "\u203c CVE-2023-30489 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <=\u00c2\u00a01.2.16 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:36.000000Z"}, {"uuid": "2dca6d35-4624-4033-8ced-4deed6539a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30498", "type": "seen", "source": "https://t.me/cibsecurity/68536", "content": "\u203c CVE-2023-30498 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodeFlavors Vimeotheque: Vimeo WordPress Plugin <=\u00c2\u00a02.2.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-15T16:30:33.000000Z"}, {"uuid": "c396c3db-1108-41a1-bac7-be50e6dd5134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30188", "type": "seen", "source": "https://t.me/cibsecurity/68433", "content": "\u203c CVE-2023-30188 \u203c\n\nMemory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T16:19:19.000000Z"}, {"uuid": "58b3647c-9782-4f6d-9664-d741d1d70cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30187", "type": "seen", "source": "https://t.me/cibsecurity/68432", "content": "\u203c CVE-2023-30187 \u203c\n\nAn out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T16:19:18.000000Z"}, {"uuid": "60c427e0-ad77-4a3d-b113-dc82f0f6a21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30186", "type": "seen", "source": "https://t.me/cibsecurity/68431", "content": "\u203c CVE-2023-30186 \u203c\n\nA use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T16:19:17.000000Z"}, {"uuid": "0984086c-3eb6-4d50-b1fd-22634b7bd0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30475", "type": "seen", "source": "https://t.me/cibsecurity/68442", "content": "\u203c CVE-2023-30475 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin \u00e2\u20ac\u201c Coupon Affiliates plugin <=\u00c2\u00a05.4.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:26.000000Z"}, {"uuid": "558208b2-68e1-4647-bcd7-5c01549da53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30483", "type": "seen", "source": "https://t.me/cibsecurity/68440", "content": "\u203c CVE-2023-30483 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <=\u00c2\u00a03.3.9.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:24.000000Z"}, {"uuid": "42d54601-2648-4957-ab54-4c09ce852372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30749", "type": "seen", "source": "https://t.me/cibsecurity/68439", "content": "\u203c CVE-2023-30749 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin <=\u00c2\u00a07.3.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:23.000000Z"}, {"uuid": "6cf8cfd0-8b52-4515-8597-12f3c4dbd59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30677", "type": "seen", "source": "https://t.me/cibsecurity/66050", "content": "\u203c CVE-2023-30677 \u203c\n\nImproper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of an unlocked device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:38:28.000000Z"}, {"uuid": "f586a19f-4b21-40df-aa58-94841c70afb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30642", "type": "seen", "source": "https://t.me/cibsecurity/66049", "content": "\u203c CVE-2023-30642 \u203c\n\nImproper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:50.000000Z"}, {"uuid": "633199b3-f032-494c-a8d5-db1681166915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30660", "type": "seen", "source": "https://t.me/cibsecurity/66048", "content": "\u203c CVE-2023-30660 \u203c\n\nExposure of Sensitive Information vulnerability in getDefaultChipId in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:49.000000Z"}, {"uuid": "0ca4aeac-700f-4e12-a23e-744a104592c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30640", "type": "seen", "source": "https://t.me/cibsecurity/66047", "content": "\u203c CVE-2023-30640 \u203c\n\nImproper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to change confiugration.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:48.000000Z"}, {"uuid": "988953e3-c2bc-4f98-83e4-7e5d469059e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30667", "type": "seen", "source": "https://t.me/cibsecurity/66046", "content": "\u203c CVE-2023-30667 \u203c\n\nImproper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:47.000000Z"}, {"uuid": "e6bb9030-4bc1-4196-914e-9b8b1ea8896d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30662", "type": "seen", "source": "https://t.me/cibsecurity/66045", "content": "\u203c CVE-2023-30662 \u203c\n\nExposure of Sensitive Information vulnerability in getChipIds in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:46.000000Z"}, {"uuid": "0d603a32-0fca-4b29-b95f-6df33f289bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30665", "type": "seen", "source": "https://t.me/cibsecurity/66044", "content": "\u203c CVE-2023-30665 \u203c\n\nImproper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:42.000000Z"}, {"uuid": "efe00426-8968-468b-9bc1-3131ace0580c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30651", "type": "seen", "source": "https://t.me/cibsecurity/66043", "content": "\u203c CVE-2023-30651 \u203c\n\nOut of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:41.000000Z"}, {"uuid": "a0a36c89-7500-4acb-b752-3221b037579f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30644", "type": "seen", "source": "https://t.me/cibsecurity/66042", "content": "\u203c CVE-2023-30644 \u203c\n\nStack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:40.000000Z"}, {"uuid": "37dc963e-0ba1-430c-85ee-3b61a99bcb3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30669", "type": "seen", "source": "https://t.me/cibsecurity/66041", "content": "\u203c CVE-2023-30669 \u203c\n\nOut-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:39.000000Z"}, {"uuid": "1dfa986f-dc26-4d91-b5f3-5b494a394d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30607", "type": "seen", "source": "https://t.me/cibsecurity/66008", "content": "\u203c CVE-2023-30607 \u203c\n\nicingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field configuration forms perform the deletion action before user input is validated, including the cross site request forgery token. This issue is fixed in version 1.3.2. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-05T22:22:16.000000Z"}, {"uuid": "c137d04c-c495-499c-a42a-03e9520b224e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30689", "type": "seen", "source": "https://t.me/cibsecurity/68153", "content": "\u203c CVE-2023-30689 \u203c\n\nOut-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:36.000000Z"}, {"uuid": "bac443a3-5415-4725-8e22-dcf5dcb0658b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30682", "type": "seen", "source": "https://t.me/cibsecurity/68154", "content": "\u203c CVE-2023-30682 \u203c\n\nImproper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:37.000000Z"}, {"uuid": "1eddaa4a-9779-45f7-8219-12cc83d7cd59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30795", "type": "seen", "source": "https://t.me/cibsecurity/67954", "content": "\u203c CVE-2023-30795 \u203c\n\nA vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasolid V34.1 (All versions < V34.1.243), Parasolid V35.0 (All versions < V35.0.177), Parasolid V35.1 (All versions < V35.1.073). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-08T14:14:31.000000Z"}, {"uuid": "737c93df-b682-4b63-b1b9-eced554a3d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30688", "type": "seen", "source": "https://t.me/cibsecurity/68170", "content": "\u203c CVE-2023-30688 \u203c\n\nOut-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:31:38.000000Z"}, {"uuid": "c4859466-ade7-4228-abf9-85a3b5ebec71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30663", "type": "seen", "source": "https://t.me/cibsecurity/66037", "content": "\u203c CVE-2023-30663 \u203c\n\nImproper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:32.000000Z"}, {"uuid": "cb067369-42f4-4163-bfcf-f02382432d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30760", "type": "seen", "source": "https://t.me/cibsecurity/68297", "content": "\u203c CVE-2023-30760 \u203c\n\nOut-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable information disclosure via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-11T07:29:36.000000Z"}, {"uuid": "288d6935-634b-4006-9a14-6d252314a0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30694", "type": "seen", "source": "https://t.me/cibsecurity/68151", "content": "\u203c CVE-2023-30694 \u203c\n\nOut-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:25:39.000000Z"}, {"uuid": "338ed8d4-3cd3-4b2a-b842-fb25c39a3397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30679", "type": "seen", "source": "https://t.me/cibsecurity/68150", "content": "\u203c CVE-2023-30679 \u203c\n\nImproper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T22:02:49.000000Z"}, {"uuid": "9906436e-c83f-4dad-8649-84b713743730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30695", "type": "seen", "source": "https://t.me/cibsecurity/68149", "content": "\u203c CVE-2023-30695 \u203c\n\nOut-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:25:38.000000Z"}, {"uuid": "7c042ba0-6a58-4979-91ef-3ad010312758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30654", "type": "seen", "source": "https://t.me/cibsecurity/68148", "content": "\u203c CVE-2023-30654 \u203c\n\nImproper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:25:37.000000Z"}, {"uuid": "2aaf1beb-84ed-4c6d-b725-f844f3d5f558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30796", "type": "seen", "source": "https://t.me/cibsecurity/67956", "content": "\u203c CVE-2023-30796 \u203c\n\nA vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-08T14:14:38.000000Z"}, {"uuid": "69b07bbb-c45c-447b-b6b7-341754349f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30700", "type": "seen", "source": "https://t.me/cibsecurity/68169", "content": "\u203c CVE-2023-30700 \u203c\n\nPendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:31:37.000000Z"}, {"uuid": "143ead22-1f7a-4a4e-b1b2-96179cda2924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30691", "type": "seen", "source": "https://t.me/cibsecurity/68168", "content": "\u203c CVE-2023-30691 \u203c\n\nParcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:31:36.000000Z"}, {"uuid": "06926299-0d68-4c6b-b51a-ae08935f0859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30687", "type": "seen", "source": "https://t.me/cibsecurity/68166", "content": "\u203c CVE-2023-30687 \u203c\n\nOut-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:55.000000Z"}, {"uuid": "3d5d6595-f363-4278-892c-0aa09472ffc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30321", "type": "seen", "source": "https://t.me/cibsecurity/66145", "content": "\u203c CVE-2023-30321 \u203c\n\nCross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T20:20:34.000000Z"}, {"uuid": "c551434f-c992-48a2-849c-77b1e9369050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30481", "type": "seen", "source": "https://t.me/cibsecurity/68191", "content": "\u203c CVE-2023-30481 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin <=\u00c2\u00a03.2.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T16:15:43.000000Z"}, {"uuid": "460d59fe-5cae-4ddd-b2e9-20ae48483b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30681", "type": "seen", "source": "https://t.me/cibsecurity/68167", "content": "\u203c CVE-2023-30681 \u203c\n\nAn improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:31:35.000000Z"}, {"uuid": "1390c505-541b-48ba-aa67-23b1917a9c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30703", "type": "seen", "source": "https://t.me/cibsecurity/68165", "content": "\u203c CVE-2023-30703 \u203c\n\nImproper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:54.000000Z"}, {"uuid": "91c1109d-316b-4f99-b005-2b3ab5349cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30686", "type": "seen", "source": "https://t.me/cibsecurity/68164", "content": "\u203c CVE-2023-30686 \u203c\n\nOut-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:53.000000Z"}, {"uuid": "a9b2516d-542b-4766-8943-3c9443aa83da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30696", "type": "seen", "source": "https://t.me/cibsecurity/68163", "content": "\u203c CVE-2023-30696 \u203c\n\nAn improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:52.000000Z"}, {"uuid": "93b4ef1f-b714-46c5-8e6d-8a87e076cdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30702", "type": "seen", "source": "https://t.me/cibsecurity/68162", "content": "\u203c CVE-2023-30702 \u203c\n\nStack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:51.000000Z"}, {"uuid": "23aad81c-740c-4668-9226-c8ffcad4553f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30705", "type": "seen", "source": "https://t.me/cibsecurity/68161", "content": "\u203c CVE-2023-30705 \u203c\n\nImproper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:47.000000Z"}, {"uuid": "415238b4-4e63-4eb6-93b3-6d46257a5114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30693", "type": "seen", "source": "https://t.me/cibsecurity/68160", "content": "\u203c CVE-2023-30693 \u203c\n\nOut-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:46.000000Z"}, {"uuid": "fba6059d-39f6-406b-a4b5-c9e1fc96a8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30678", "type": "seen", "source": "https://t.me/cibsecurity/66053", "content": "\u203c CVE-2023-30678 \u203c\n\nPotential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitrary file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:38:30.000000Z"}, {"uuid": "d35e38be-4715-44bf-9cab-9a432cb8d138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30684", "type": "seen", "source": "https://t.me/cibsecurity/68159", "content": "\u203c CVE-2023-30684 \u203c\n\nImproper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRingingCall API without permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:45.000000Z"}, {"uuid": "9b2d7463-4204-46d2-8aff-b54e9c2f63f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30701", "type": "seen", "source": "https://t.me/cibsecurity/68158", "content": "\u203c CVE-2023-30701 \u203c\n\nPendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:44.000000Z"}, {"uuid": "31eef108-baa0-47e7-8fb3-3d8699a650b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30683", "type": "seen", "source": "https://t.me/cibsecurity/68157", "content": "\u203c CVE-2023-30683 \u203c\n\nImproper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:43.000000Z"}, {"uuid": "8388b0d3-3183-48dc-8f0d-6efb88591d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30699", "type": "seen", "source": "https://t.me/cibsecurity/68156", "content": "\u203c CVE-2023-30699 \u203c\n\nOut-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:39.000000Z"}, {"uuid": "cc28eb12-2f76-4d01-a2fb-961ef44c718e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30685", "type": "seen", "source": "https://t.me/cibsecurity/68155", "content": "\u203c CVE-2023-30685 \u203c\n\nImproper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:38.000000Z"}, {"uuid": "741256f7-fa92-44e7-9f7b-035bb1894733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30697", "type": "seen", "source": "https://t.me/cibsecurity/68152", "content": "\u203c CVE-2023-30697 \u203c\n\nAn improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:28:35.000000Z"}, {"uuid": "7a699cee-bb69-4bca-bad7-3fc3b22105a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30698", "type": "seen", "source": "https://t.me/cibsecurity/68147", "content": "\u203c CVE-2023-30698 \u203c\n\nImproper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:25:36.000000Z"}, {"uuid": "7c52b415-7af5-460c-bf9f-fc9c4534dade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30704", "type": "seen", "source": "https://t.me/cibsecurity/68146", "content": "\u203c CVE-2023-30704 \u203c\n\nImproper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:25:35.000000Z"}, {"uuid": "e11569db-8300-44fd-8991-d96f138ea431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30680", "type": "seen", "source": "https://t.me/cibsecurity/68145", "content": "\u203c CVE-2023-30680 \u203c\n\nImproper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T07:25:33.000000Z"}, {"uuid": "1abb56fa-f380-40a7-9e67-f683591fdefe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30319", "type": "seen", "source": "https://t.me/cibsecurity/66139", "content": "\u203c CVE-2023-30319 \u203c\n\nCross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T20:20:28.000000Z"}, {"uuid": "9143fe06-a4ce-4307-9087-e79fad5bab8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30320", "type": "seen", "source": "https://t.me/cibsecurity/66138", "content": "\u203c CVE-2023-30320 \u203c\n\nCross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T20:20:27.000000Z"}, {"uuid": "9560d8aa-3ccc-473f-9f45-1226274eaca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30645", "type": "seen", "source": "https://t.me/cibsecurity/66032", "content": "\u203c CVE-2023-30645 \u203c\n\nHeap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:24.000000Z"}, {"uuid": "e7b5859b-c783-4e9e-9de2-5bc14e219e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30670", "type": "seen", "source": "https://t.me/cibsecurity/66030", "content": "\u203c CVE-2023-30670 \u203c\n\nOut-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:23.000000Z"}, {"uuid": "fb822b69-a813-46f5-9f64-a96c403b9371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30482", "type": "seen", "source": "https://t.me/cibsecurity/67985", "content": "\u203c CVE-2023-30482 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in VillaTheme WPBulky plugin <=\u00c2\u00a01.0.10 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-08T16:14:19.000000Z"}, {"uuid": "607c4fce-eb5e-42a3-8ac3-c847703929aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30207", "type": "seen", "source": "https://t.me/cibsecurity/66023", "content": "\u203c CVE-2023-30207 \u203c\n\nA divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T00:27:25.000000Z"}, {"uuid": "20150833-d0bc-462d-9e85-cf7a91d5040b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30195", "type": "seen", "source": "https://t.me/cibsecurity/66162", "content": "\u203c CVE-2023-30195 \u203c\n\nIn the module \"Detailed Order\" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal informations without restriction formatted in json.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T00:20:36.000000Z"}, {"uuid": "ecda2161-c3f7-44e0-b2d6-09c5dc53d2d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30673", "type": "seen", "source": "https://t.me/cibsecurity/66039", "content": "\u203c CVE-2023-30673 \u203c\n\nImproper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attackers to delete arbitrary directory using directory junction.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:34.000000Z"}, {"uuid": "63ef2904-2e2b-4b80-af5a-5b77ba1d2b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30652", "type": "seen", "source": "https://t.me/cibsecurity/66038", "content": "\u203c CVE-2023-30652 \u203c\n\nOut of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:33.000000Z"}, {"uuid": "caa93615-1a67-478d-afc6-4e8e8b759814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30666", "type": "seen", "source": "https://t.me/cibsecurity/66036", "content": "\u203c CVE-2023-30666 \u203c\n\nImproper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:31.000000Z"}, {"uuid": "6504d6da-e030-4fc7-a32f-cdad2aa3a5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30641", "type": "seen", "source": "https://t.me/cibsecurity/66035", "content": "\u203c CVE-2023-30641 \u203c\n\nImproper access control vulnerability in Settings prior to SMR Jul-2023 Release 1 allows physical attacker to use restricted user profile to access device owner's google account data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:30.000000Z"}, {"uuid": "12970124-c6e4-4003-866c-095cf6d7e4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30659", "type": "seen", "source": "https://t.me/cibsecurity/66033", "content": "\u203c CVE-2023-30659 \u203c\n\nImproper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:32:25.000000Z"}, {"uuid": "b9a9f276-e218-4252-8804-88c2c6e28eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30326", "type": "seen", "source": "https://t.me/cibsecurity/66103", "content": "\u203c CVE-2023-30326 \u203c\n\nCross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T18:30:25.000000Z"}, {"uuid": "69dfd99b-a5f9-43dc-86a7-ba37606b9bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30322", "type": "seen", "source": "https://t.me/cibsecurity/66114", "content": "\u203c CVE-2023-30322 \u203c\n\nCross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T18:33:31.000000Z"}, {"uuid": "addf3c57-50f1-458c-97ad-d5e43dcfca96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "seen", "source": "https://t.me/cibsecurity/65916", "content": "\u203c CVE-2023-30990 \u203c\n\nIBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-04T07:28:25.000000Z"}, {"uuid": "6ba0a4f3-67cd-433c-8cf3-c0cc0f8de651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30658", "type": "seen", "source": "https://t.me/cibsecurity/66052", "content": "\u203c CVE-2023-30658 \u203c\n\nImproper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:38:29.000000Z"}, {"uuid": "6748de82-bf17-48ea-be4b-34a545fed8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30674", "type": "seen", "source": "https://t.me/cibsecurity/66051", "content": "\u203c CVE-2023-30674 \u203c\n\nImproper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T07:38:29.000000Z"}, {"uuid": "16389bbb-0f8b-4787-ad5e-660998169973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3089", "type": "seen", "source": "https://t.me/cibsecurity/65965", "content": "\u203c CVE-2023-3089 \u203c\n\nA compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-05T16:11:48.000000Z"}, {"uuid": "382d3d95-c5ee-4666-83b6-f3686fe06535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30589", "type": "seen", "source": "https://t.me/cibsecurity/65833", "content": "\u203c CVE-2023-30589 \u203c\n\nThe llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS).The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-01T07:15:35.000000Z"}, {"uuid": "2b4b0da8-6a92-4787-94a0-78a83ebb110f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30586", "type": "seen", "source": "https://t.me/cibsecurity/65839", "content": "\u203c CVE-2023-30586 \u203c\n\nA privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permission model. The attack complexity is high. However, the crypto.setEngine() API can be used to bypass the permission model when called with a compatible OpenSSL engine. The OpenSSL engine can, for example, disable the permission model in the host process by manipulating the process's stack memory to locate the permission model Permission::enabled_ in the host process's heap memory. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-01T07:15:44.000000Z"}, {"uuid": "0c250efd-1b2c-4f90-a7f6-0e6b7e0d141a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/cisoclub/2538", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (1-7 \u0438\u044e\u043d\u044f)\n\n1\ufe0f\u20e3 \u0412 Google Chrome \u0431\u044b\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0442\u0440\u0435\u0442\u044c\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 2023 \u0433\u043e\u0434\u0443. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-3079.\n\n2\ufe0f\u20e3 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Gmail, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044b\u0448\u0435 1,8 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u0440\u0438\u0441 \u041f\u043b\u0430\u043c\u043c\u0435\u0440 \u0432\u044b\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00ab\u0413\u043e\u043b\u0443\u0431\u044b\u0435 \u0433\u0430\u043b\u043e\u0447\u043a\u0438\u00bb, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0438\u0445 \u043d\u0430 \u0432\u0441\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \ud83d\udce8email-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 0d \u0438\u0437 dWallet Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0441\u0435\u0442\u0438 Tron \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043c\u0443\u043b\u044c\u0442\u0438\u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \ud83d\udcb0$500 \u043c\u043b\u043d. \n\n4\ufe0f\u20e3 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0444\u0438\u0440\u043c\u0430 Eclysium \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \ud83c\uddf9\ud83c\uddfcGigabyte UEFI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442.\n\n5\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438 Microsoft \ud83d\udd0e\u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Migraine (CVE-2023-32369) \u0432 macOS. \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \ud83c\udf4fApple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0441 root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 System Integrity Protection (SIP).\n\n6\ufe0f\u20e3 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 KeePass \ud83e\ude9b\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0443\u044e \u0443\u0437\u043d\u0430\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u044c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435. \u041c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.54, \u0437\u0430 \u0441\u0447\u0435\u0442 \u0447\u0435\u0433\u043e \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-32784, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \ud83d\udcdd\u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zyxel \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \ud83d\udcbe\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b ATP, USG Flex, VPN \u0438 ZyWALL/USG, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.", "creation_timestamp": "2026-07-30T00:02:57.495780Z"}, {"uuid": "2086d2a3-7e33-4718-a1b4-4f103b600ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/cisoclub/2475", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (10-16 \u043c\u0430\u044f)\n\n1\ufe0f\u20e3 \u0412 \ud83d\udcf2Telegram \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \ud83c\udf4fMacBook.\n\n2\ufe0f\u20e3 \ud83e\uddb9\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \ud83d\udcf0WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 Advanced Custom Fields (CVE-2023-30777) \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043b\u044f \u043d\u0435\u0451 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\n\n3\ufe0f\u20e3 \u0421\u0435\u0442\u044c \u0431\u043b\u043e\u043a\u0447\u0435\u0439\u043d\u0430 Sui \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0442\u0438\u0445\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \ud83d\udcb0\u00ab\u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\u00bb.\n\n4\ufe0f\u20e3 \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u00ab\u043c\u0430\u0439\u0441\u043a\u0438\u0445\u00bb \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e\u0431 \ud83d\udee0\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 38 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \ud83d\udcbb\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \n\n5\ufe0f\u20e3 \ud83c\uddfa\ud83c\uddf8\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 Linux, \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n6\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 WordPress \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \ud83c\uddee\ud83c\uddf9Ferrari \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Ferrari, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Claroty, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 IoT, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \ud83d\udcdd\u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Netgear.\n\n8\ufe0f\u20e3 \ud83c\udde9\ud83c\uddea\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SAP \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 18 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438.", "creation_timestamp": "2026-07-30T00:02:57.582510Z"}, {"uuid": "a772babf-43e8-460c-b934-5baa291d33da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30491", "type": "seen", "source": "https://t.me/cibsecurity/67821", "content": "\u203c CVE-2023-30491 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <=\u00c2\u00a02.1.8 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-06T02:11:59.000000Z"}, {"uuid": "45babf0c-1479-4de9-a727-d70f85626aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30297", "type": "seen", "source": "https://t.me/cibsecurity/67749", "content": "\u203c CVE-2023-30297 \u203c\n\nAn issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:52.000000Z"}, {"uuid": "9c714777-86cc-4e7e-9a88-f03effc11f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30146", "type": "seen", "source": "https://t.me/cibsecurity/67746", "content": "\u203c CVE-2023-30146 \u203c\n\nAssmann Digitus Plug&View IP Camera family allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T22:42:29.000000Z"}, {"uuid": "ef4efb83-897a-478a-b973-c935d63c2de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30949", "type": "seen", "source": "https://t.me/cibsecurity/67308", "content": "\u203c CVE-2023-30949 \u203c\n\nA missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T22:27:51.000000Z"}, {"uuid": "ed369cf4-bc82-4750-817b-f5e058eb1de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30577", "type": "seen", "source": "https://t.me/cibsecurity/67307", "content": "\u203c CVE-2023-30577 \u203c\n\nAMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T20:27:47.000000Z"}, {"uuid": "677a5bdf-1722-424f-822a-44ec7804df42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3019", "type": "seen", "source": "https://t.me/cibsecurity/67163", "content": "\u203c CVE-2023-3019 \u203c\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-24T20:26:19.000000Z"}, {"uuid": "4f374189-3e40-4697-bfcf-567a1e023f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3050", "type": "seen", "source": "https://t.me/cibsecurity/65158", "content": "\u203c CVE-2023-3050 \u203c\n\nReliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass.This issue affects Lockcell: before 15.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-13T16:16:04.000000Z"}, {"uuid": "49d95697-af03-4ae8-ab0e-fd1e981a38a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30453", "type": "seen", "source": "https://t.me/cibsecurity/65307", "content": "\u203c CVE-2023-30453 \u203c\n\nThe Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-16T20:22:50.000000Z"}, {"uuid": "1c374825-6131-4730-82ed-fa35c047ae4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30576", "type": "seen", "source": "https://t.me/cibsecurity/65029", "content": "\u203c CVE-2023-30576 \u203c\n\nApache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T12:29:56.000000Z"}, {"uuid": "45b18115-d94c-4320-a706-cdd41ba4db97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3046", "type": "seen", "source": "https://t.me/cibsecurity/67214", "content": "\u203c CVE-2023-3046 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Scienta allows SQL Injection.This issue affects Scienta: before 20230630.1953.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-25T12:28:07.000000Z"}, {"uuid": "370a0932-0b17-4dbf-8a33-d7ce41dca4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30565", "type": "seen", "source": "https://t.me/cibsecurity/66707", "content": "\u203c CVE-2023-30565 \u203c\n\nAn insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-14T00:11:50.000000Z"}, {"uuid": "ca586835-2b9e-430c-8ea6-06381d39a871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3022", "type": "seen", "source": "https://t.me/cibsecurity/65351", "content": "\u203c CVE-2023-3022 \u203c\n\nA flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6_info and other times fib6_info. This was not accounted for in other parts of the code where rt6_info was expected unconditionally, potentially leading to a kernel panic in fib6_rule_suppress.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-15T16:16:50.000000Z"}, {"uuid": "4792b441-4052-4afe-b062-bacfcb4f57b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://t.me/cibsecurity/64917", "content": "\u203c CVE-2023-3067 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository zadam/trilium prior to 0.59.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T20:39:31.000000Z"}, {"uuid": "814fbbbc-131c-446b-b875-a6849dde9b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30766", "type": "seen", "source": "https://t.me/cibsecurity/65155", "content": "\u203c CVE-2023-30766 \u203c\n\nHidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-13T14:14:54.000000Z"}, {"uuid": "cefbedeb-33c8-4da1-a44c-a40e5cc4af90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30863", "type": "seen", "source": "https://t.me/cibsecurity/65000", "content": "\u203c CVE-2023-30863 \u203c\n\nIn Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-06T12:35:11.000000Z"}, {"uuid": "14688d46-1c73-423d-bc50-4d2320368137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30935", "type": "seen", "source": "https://t.me/cibsecurity/66506", "content": "\u203c CVE-2023-30935 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:28.000000Z"}, {"uuid": "d4695cda-7df9-4d8d-9d9e-8ad1fd6100d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30561", "type": "seen", "source": "https://t.me/cibsecurity/66710", "content": "\u203c CVE-2023-30561 \u203c\n\nThe data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-14T00:11:53.000000Z"}, {"uuid": "3ffb0921-b605-4853-8abf-104c8ebb4129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30562", "type": "seen", "source": "https://t.me/cibsecurity/66709", "content": "\u203c CVE-2023-30562 \u203c\n\nA GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-14T00:11:52.000000Z"}, {"uuid": "8880d2c3-6940-4024-8a3c-9a46664241ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30948", "type": "seen", "source": "https://t.me/cibsecurity/65011", "content": "\u203c CVE-2023-30948 \u203c\n\nA security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content.This defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-06T18:29:21.000000Z"}, {"uuid": "e01a839b-9082-473f-a4d2-38aaae8362e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3095", "type": "seen", "source": "https://t.me/cibsecurity/64966", "content": "\u203c CVE-2023-3095 \u203c\n\nImproper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-04T14:27:39.000000Z"}, {"uuid": "5078f505-e789-4308-84cb-f36840813b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3066", "type": "seen", "source": "https://t.me/cibsecurity/64972", "content": "\u203c CVE-2023-3066 \u203c\n\nIncorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administratorsThis issue affects Mobatime mobile application AMXGT100: through 1.3.20.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-05T12:28:24.000000Z"}, {"uuid": "81dcc64a-8846-4db4-b3ff-dc0ab5923952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3021", "type": "seen", "source": "https://t.me/cibsecurity/64829", "content": "\u203c CVE-2023-3021 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T20:24:35.000000Z"}, {"uuid": "c8c66127-a625-4cfd-b1f7-b2e2c67d2411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3094", "type": "seen", "source": "https://t.me/cibsecurity/64965", "content": "\u203c CVE-2023-3094 \u203c\n\nA vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is the function doUpdateQuestion of the file btn_functions.php. The manipulation of the argument question_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230670 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-04T12:27:34.000000Z"}, {"uuid": "2ec07b1c-589f-4241-88de-ab8d83d47ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3091", "type": "seen", "source": "https://t.me/cibsecurity/64964", "content": "\u203c CVE-2023-3091 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This vulnerability affects unknown code in the library CRYPTBASE.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation appears to be difficult. The identifier of this vulnerability is VDB-230668. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-04T07:27:25.000000Z"}, {"uuid": "c78ef96e-0c53-4ac5-9e0a-2ccc9e9d0564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3085", "type": "seen", "source": "https://t.me/cibsecurity/64962", "content": "\u203c CVE-2023-3085 \u203c\n\nA vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10_b202303061504. This issue affects the function run_action of the file modules/luci-base/ucode/dispatcher.uc of the component 404 Error Template Handler. The manipulation of the argument request_path leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 22.10_b202303121313 is able to address this issue. The name of the patch is 24d7da2416b9ab246825c33c213fe939a89b369c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230663.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-03T20:09:25.000000Z"}, {"uuid": "ee922999-d194-475a-9084-9a681e642b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3055", "type": "seen", "source": "https://t.me/cibsecurity/64957", "content": "\u203c CVE-2023-3055 \u203c\n\nThe Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This is due to missing or incorrect nonce validation on the 'azh_save' function. This makes it possible for unauthenticated attackers to update the post content and inject malicious JavaScript via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-03T07:26:36.000000Z"}, {"uuid": "2e00bc99-5ba6-4eb2-afad-2235d5c6caf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3074", "type": "seen", "source": "https://t.me/cibsecurity/64950", "content": "\u203c CVE-2023-3074 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T22:37:38.000000Z"}, {"uuid": "efa36495-2573-4b7f-9ef5-3570fedd8d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3075", "type": "seen", "source": "https://t.me/cibsecurity/64949", "content": "\u203c CVE-2023-3075 \u203c\n\nCross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T22:26:19.000000Z"}, {"uuid": "5af4f204-71b2-45b7-9625-09373a8312b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3069", "type": "seen", "source": "https://t.me/cibsecurity/64928", "content": "\u203c CVE-2023-3069 \u203c\n\nUnverified Password Change in GitHub repository tsolucio/corebos prior to 8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T20:39:43.000000Z"}, {"uuid": "5c59bc29-4951-4bbc-8be2-7390f991bbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3070", "type": "seen", "source": "https://t.me/cibsecurity/64927", "content": "\u203c CVE-2023-3070 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T20:39:42.000000Z"}, {"uuid": "9a756354-924b-4e15-ac52-a64f4de11725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30988", "type": "seen", "source": "https://t.me/cibsecurity/66798", "content": "\u203c CVE-2023-30988 \u203c\n\nThe IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 254016.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T02:34:33.000000Z"}, {"uuid": "3f7d3c84-3480-4fd2-ae9f-f1f5495b3167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30989", "type": "seen", "source": "https://t.me/cibsecurity/66797", "content": "\u203c CVE-2023-30989 \u203c\n\nIBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T02:34:33.000000Z"}, {"uuid": "c1fa9933-353a-4942-9ee4-4ff78c322630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3068", "type": "seen", "source": "https://t.me/cibsecurity/64910", "content": "\u203c CVE-2023-3068 \u203c\n\nA vulnerability classified as critical has been found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/modal_add_product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230580.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T20:39:23.000000Z"}, {"uuid": "e0f72c51-a96f-4a29-a9b8-15743775ce18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30927", "type": "seen", "source": "https://t.me/cibsecurity/66504", "content": "\u203c CVE-2023-30927 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:26.000000Z"}, {"uuid": "189bf588-8f2b-4f21-b0d7-655dd8dba038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3062", "type": "seen", "source": "https://t.me/cibsecurity/64893", "content": "\u203c CVE-2023-3062 \u203c\n\nA vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-230568.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T18:40:27.000000Z"}, {"uuid": "b8459d1c-dfa4-4d1e-99a9-ae4b4107b5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3060", "type": "seen", "source": "https://t.me/cibsecurity/64892", "content": "\u203c CVE-2023-3060 \u203c\n\nA vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as problematic. This vulnerability affects the function doAddQuestion of the file btn_functions.php. The manipulation of the argument Question leads to cross site scripting. The attack can be initiated remotely. VDB-230566 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T18:40:26.000000Z"}, {"uuid": "e7f77034-0fbf-4982-a666-119ff2ae2df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3061", "type": "seen", "source": "https://t.me/cibsecurity/64890", "content": "\u203c CVE-2023-3061 \u203c\n\nA vulnerability was found in code-projects Agro-School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file btn_functions.php of the component Attachment Image Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-230567.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T18:37:27.000000Z"}, {"uuid": "5a2a54b6-0006-4a0d-bf27-9a064ee71061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3056", "type": "seen", "source": "https://t.me/cibsecurity/64883", "content": "\u203c CVE-2023-3056 \u203c\n\nA vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230542 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T16:26:06.000000Z"}, {"uuid": "5db4a826-4d06-4878-ac1b-e2a78f06bce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3003", "type": "seen", "source": "https://t.me/cibsecurity/64807", "content": "\u203c CVE-2023-3003 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_prices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230347.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T12:24:21.000000Z"}, {"uuid": "4441da79-dd18-4faa-8ae6-5915bd07b6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3004", "type": "seen", "source": "https://t.me/cibsecurity/64805", "content": "\u203c CVE-2023-3004 \u203c\n\nA vulnerability, which was classified as critical, has been found in SourceCodester Simple Chat System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=read_msg of the component POST Parameter Handler. The manipulation of the argument convo_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230348.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T12:24:19.000000Z"}, {"uuid": "8d39650c-ecb9-422b-b77b-2d5011066e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30571", "type": "seen", "source": "https://t.me/cibsecurity/64773", "content": "\u203c CVE-2023-30571 \u203c\n\nLibarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-privileged local user can delete and rename files inside those directories.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-30T00:41:24.000000Z"}, {"uuid": "07cd158c-ecd0-4fe5-b017-8f33a22cbebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3007", "type": "seen", "source": "https://t.me/cibsecurity/64817", "content": "\u203c CVE-2023-3007 \u203c\n\nA vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-230354 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T16:36:50.000000Z"}, {"uuid": "9deb295a-f585-43d7-a4cd-d7c38659abbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3009", "type": "seen", "source": "https://t.me/cibsecurity/64815", "content": "\u203c CVE-2023-3009 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T16:36:48.000000Z"}, {"uuid": "50b8b9e0-1348-40b5-95bf-d128824f3bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3014", "type": "seen", "source": "https://t.me/cibsecurity/64824", "content": "\u203c CVE-2023-3014 \u203c\n\nA vulnerability, which was classified as problematic, was found in BeipyVideoResolution up to 2.6. Affected is an unknown function of the file admin/admincore.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230358 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T18:24:33.000000Z"}, {"uuid": "29e07630-31e6-471c-b80e-fd34d96effc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30285", "type": "seen", "source": "https://t.me/cibsecurity/64821", "content": "\u203c CVE-2023-30285 \u203c\n\nAn issue in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain the login credentials of a user via a crafted request sent to /rest/synchronizer/1.0/technicalUser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T16:39:50.000000Z"}, {"uuid": "8f969c95-5920-405b-b493-a7f52455d8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3008", "type": "seen", "source": "https://t.me/cibsecurity/64819", "content": "\u203c CVE-2023-3008 \u203c\n\nA vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230355.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T16:39:48.000000Z"}, {"uuid": "f5554aef-ff91-4e8b-8b37-81198f85ba67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30196", "type": "seen", "source": "https://t.me/cibsecurity/64783", "content": "\u203c CVE-2023-30196 \u203c\n\nPrestashop salesbooster <= 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-30T16:18:40.000000Z"}, {"uuid": "448c809e-265e-4aa1-bed5-c389e02b6063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30937", "type": "seen", "source": "https://t.me/cibsecurity/66517", "content": "\u203c CVE-2023-30937 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:45.000000Z"}, {"uuid": "532e45b3-a284-4c76-b10e-38ebaac9b0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30917", "type": "seen", "source": "https://t.me/cibsecurity/66516", "content": "\u203c CVE-2023-30917 \u203c\n\nIn DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:44.000000Z"}, {"uuid": "b7e37a7d-7001-4ffe-b0f8-aa9ca9138438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30922", "type": "seen", "source": "https://t.me/cibsecurity/66472", "content": "\u203c CVE-2023-30922 \u203c\n\nIn messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:35:37.000000Z"}, {"uuid": "ef160b03-46ec-4114-8c04-b47ff8be432f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30560", "type": "seen", "source": "https://t.me/cibsecurity/66690", "content": "\u203c CVE-2023-30560 \u203c\n\nThe configuration from the PCU can be modified without authentication using physical connection to the PCU.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T22:11:43.000000Z"}, {"uuid": "66aec33b-f079-4ee9-9340-496dc2f371a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30559", "type": "seen", "source": "https://t.me/cibsecurity/66689", "content": "\u203c CVE-2023-30559 \u203c\n\nThe configuration from the PCU can be modified without authentication using physical connection to the PCU.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T22:11:42.000000Z"}, {"uuid": "0ef6cc04-3b7f-4a65-9f29-e6098f0c475b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30791", "type": "seen", "source": "https://t.me/cibsecurity/66774", "content": "\u203c CVE-2023-30791 \u203c\n\nPlane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interprets both HTML and JavaScript.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-15T22:13:23.000000Z"}, {"uuid": "a3fbd8f6-b73c-4df1-80cd-df11453b37fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30926", "type": "seen", "source": "https://t.me/cibsecurity/66485", "content": "\u203c CVE-2023-30926 \u203c\n\nIn opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:41:28.000000Z"}, {"uuid": "cc7726e6-3d2a-4fba-9038-ffd716cf086c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3011", "type": "seen", "source": "https://t.me/cibsecurity/66498", "content": "\u203c CVE-2023-3011 \u203c\n\nThe ARMember plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.5. This is due to missing or incorrect nonce validation on the arm_check_user_cap function. This makes it possible for unauthenticated attackers to perform multiple unauthorized actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:41:47.000000Z"}, {"uuid": "f657f8e1-c127-491b-8f4a-675144d76edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30940", "type": "seen", "source": "https://t.me/cibsecurity/66493", "content": "\u203c CVE-2023-30940 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:41:40.000000Z"}, {"uuid": "d4d1ce3f-641e-45b3-bde0-ef058b6aead8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30928", "type": "seen", "source": "https://t.me/cibsecurity/66487", "content": "\u203c CVE-2023-30928 \u203c\n\nIn telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:41:33.000000Z"}, {"uuid": "86ee2ac7-9c97-4a49-8233-13682e761343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30932", "type": "seen", "source": "https://t.me/cibsecurity/66484", "content": "\u203c CVE-2023-30932 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:41:27.000000Z"}, {"uuid": "cd73126d-f66c-475d-86e9-e4c35c0fd805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3092", "type": "seen", "source": "https://t.me/cibsecurity/66483", "content": "\u203c CVE-2023-3092 \u203c\n\nThe SMTP Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.2.16 due to insufficient input sanitization and output escaping when the 'Save Data SendMail' feature is enabled. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:41:26.000000Z"}, {"uuid": "1a352291-970c-459e-840d-e45b017c78dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3080", "type": "seen", "source": "https://t.me/cibsecurity/66464", "content": "\u203c CVE-2023-3080 \u203c\n\nThe WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:35:23.000000Z"}, {"uuid": "430008d5-504c-42f2-8c82-0de2e23a7a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30942", "type": "seen", "source": "https://t.me/cibsecurity/66463", "content": "\u203c CVE-2023-30942 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:35:23.000000Z"}, {"uuid": "bd4f4434-16bf-4016-9f3b-9775180a2dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30921", "type": "seen", "source": "https://t.me/cibsecurity/66521", "content": "\u203c CVE-2023-30921 \u203c\n\nIn messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:51:28.000000Z"}, {"uuid": "fe75c36e-adf3-4496-bafb-7b0db2ef1e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "seen", "source": "https://t.me/cibsecurity/66306", "content": "\u203c CVE-2023-30765 \u203c\n\n?Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T00:24:04.000000Z"}, {"uuid": "8665ac4d-0810-48fb-9077-1f3bf22c5856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30428", "type": "seen", "source": "https://t.me/cibsecurity/66534", "content": "\u203c CVE-2023-30428 \u203c\n\nIncorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Broker's Rest Producer allows authenticated user with a custom HTTP header to produce a message to any topic using the broker's admin role.This issue affects Apache Pulsar Brokers: from 2.9.0 through 2.9.5, from 2.10.0 before 2.10.4, 2.11.0.The vulnerability is exploitable when an attacker can connect directly to the Pulsar Broker. If an attacker is connecting through the Pulsar Proxy, there is no known way to exploit this authorization vulnerability.There are two known risks for affected users. First, an attacker could produce garbage messages to any topic in the cluster. Second, an attacker could produce messages to the topic level policies topic for other tenants and influence topic settings that could lead to exfiltration and/or deletion of messages for other tenants.2.8 Pulsar Broker users and earlier are unaffected.2.9 Pulsar Broker users should upgrade to one of the patched versions.2.10 Pulsar Broker users should upgrade to at least 2.10.4.2.11 Pulsar Broker users should upgrade to at least 2.11.1.3.0 Pulsar Broker users are unaffected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T14:45:43.000000Z"}, {"uuid": "e70f2d71-4653-4892-a8d4-2844e530971a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3023", "type": "seen", "source": "https://t.me/cibsecurity/66508", "content": "\u203c CVE-2023-3023 \u203c\n\nThe WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the \u00e2\u20ac\u02dcorderby\u00e2\u20ac\u2122 parameter in versions up to, and including, 5.4.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level or above permissions, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:33.000000Z"}, {"uuid": "fcc57e3b-a3a8-4e19-a7bc-82aade57148a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30442", "type": "seen", "source": "https://t.me/cibsecurity/66285", "content": "\u203c CVE-2023-30442 \u203c\n\nIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. IBM X-Force ID: 253202.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-10T20:30:12.000000Z"}, {"uuid": "4a85529a-b120-45ef-b11f-5188d92396ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30429", "type": "seen", "source": "https://t.me/cibsecurity/66524", "content": "\u203c CVE-2023-30429 \u203c\n\nIncorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar.This issue affects Apache Pulsar: before 2.10.4, and 2.11.0.When a client connects to the Pulsar Function Worker via the Pulsar Proxy where the Pulsar Proxy uses mTLS authentication to authenticate with the Pulsar Function Worker, the Pulsar Function Worker incorrectly performs authorization by using the Proxy's role for authorization instead of the client's role, which can lead to privilege escalation, especially if the proxy is configured with a superuser role.The recommended mitigation for impacted users is to upgrade the Pulsar Function Worker to a patched version.2.10 Pulsar Function Worker users should upgrade to at least 2.10.4.2.11 Pulsar Function Worker users should upgrade to at least 2.11.1.3.0 Pulsar Function Worker users are unaffected.Any users running the Pulsar Function Worker for 2.9.* and earlier should upgrade to one of the above patched versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T14:45:27.000000Z"}, {"uuid": "33981eba-eda1-42b8-bf96-305ff283e553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30938", "type": "seen", "source": "https://t.me/cibsecurity/66475", "content": "\u203c CVE-2023-30938 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:35:40.000000Z"}, {"uuid": "0f950ee1-efa5-4829-a4d9-55b9baf8dd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30929", "type": "seen", "source": "https://t.me/cibsecurity/66513", "content": "\u203c CVE-2023-30929 \u203c\n\nIn telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:41.000000Z"}, {"uuid": "d0ed02b6-d788-4747-9d58-2cd3ebf4e3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3082", "type": "seen", "source": "https://t.me/cibsecurity/66503", "content": "\u203c CVE-2023-3082 \u203c\n\nThe Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.5.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:25.000000Z"}, {"uuid": "f22b67a8-e042-47ad-ad10-431ebf2d1ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30172", "type": "seen", "source": "https://t.me/cibsecurity/63857", "content": "\u203c CVE-2023-30172 \u203c\n\nA directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T07:14:59.000000Z"}, {"uuid": "6d91c2ba-f777-42c1-8aeb-8670cdfe37f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30963", "type": "seen", "source": "https://t.me/cibsecurity/66321", "content": "\u203c CVE-2023-30963 \u203c\n\nA security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further intervention is required.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T02:24:10.000000Z"}, {"uuid": "698863cf-a208-48e8-978c-9ffc9471a5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30956", "type": "seen", "source": "https://t.me/cibsecurity/66319", "content": "\u203c CVE-2023-30956 \u203c\n\nA security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T02:24:05.000000Z"}, {"uuid": "2272f660-3447-457e-a46a-183e2f180b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30960", "type": "seen", "source": "https://t.me/cibsecurity/66317", "content": "\u203c CVE-2023-30960 \u203c\n\nA security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T02:24:03.000000Z"}, {"uuid": "d593df4f-c39a-4527-a63b-0fc63d7fb958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3045", "type": "seen", "source": "https://t.me/cibsecurity/66251", "content": "\u203c CVE-2023-3045 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tise Technology Parking Web Report allows SQL Injection.This issue affects Parking Web Report: before 2.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-10T20:23:54.000000Z"}, {"uuid": "f6373a5f-4da7-43f4-8f1d-a2e6806edfad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30448", "type": "seen", "source": "https://t.me/cibsecurity/66262", "content": "\u203c CVE-2023-30448 \u203c\n\nIBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-10T20:24:05.000000Z"}, {"uuid": "e6bb5793-eb4c-413f-b6c3-e9f20c5c7fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30449", "type": "seen", "source": "https://t.me/cibsecurity/66260", "content": "\u203c CVE-2023-30449 \u203c\n\nIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-10T20:24:03.000000Z"}, {"uuid": "befa9498-b721-4568-8510-7e8965f09a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30470", "type": "seen", "source": "https://t.me/cibsecurity/64436", "content": "\u203c CVE-2023-30470 \u203c\n\nA use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990f737ebb9d9810633502f65ed462b819c09 could have been used by an attacker to achieve remote code execution. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T02:32:31.000000Z"}, {"uuid": "a6a56095-2453-4baa-be76-970f837bbdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30191", "type": "seen", "source": "https://t.me/cibsecurity/64353", "content": "\u203c CVE-2023-30191 \u203c\n\nPrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent().\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T00:36:35.000000Z"}, {"uuid": "b7850f6c-a995-4028-8495-edab2c85aba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30333", "type": "seen", "source": "https://t.me/cibsecurity/64423", "content": "\u203c CVE-2023-30333 \u203c\n\nAn arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T22:32:34.000000Z"}, {"uuid": "85196cd1-ebcf-499e-9205-7c442ef52007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30780", "type": "seen", "source": "https://t.me/cibsecurity/64391", "content": "\u203c CVE-2023-30780 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TheGuideX User IP and Location plugin <=\u00c2\u00a02.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T14:32:19.000000Z"}, {"uuid": "fd8f8315-fe86-4be7-916c-ab7c04adb21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30281", "type": "seen", "source": "https://t.me/cibsecurity/64270", "content": "\u203c CVE-2023-30281 \u203c\n\nInsecure permissions in the ps_customer table of Prestashop scquickaccounting before v3.7.3 allows attackers to access sensitive information stored in the component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T00:32:37.000000Z"}, {"uuid": "1e402290-b15e-4377-acfe-577e9e5291d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30124", "type": "seen", "source": "https://t.me/cibsecurity/64368", "content": "\u203c CVE-2023-30124 \u203c\n\nLavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T07:32:07.000000Z"}, {"uuid": "2b03aa1d-4f7a-4fa6-9348-70958318a9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30452", "type": "seen", "source": "https://t.me/cibsecurity/64294", "content": "\u203c CVE-2023-30452 \u203c\n\nThe MoroSystems EasyMind - Mind Maps plugin before 2.15.0 for Confluence allows persistent XSS when saving a Mind Map with the hyperlink parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T07:31:05.000000Z"}, {"uuid": "c513792d-19a8-4c06-bff2-560b0df0c7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30510", "type": "seen", "source": "https://t.me/cibsecurity/64253", "content": "\u203c CVE-2023-30510 \u203c\n\nA vulnerability exists in the Aruba EdgeConnect Enterprise\u00c2\u00a0web management interface that allows remote authenticated\u00c2\u00a0users to issue arbitrary URL requests from the Aruba\u00c2\u00a0EdgeConnect Enterprise instance. The impact of this\u00c2\u00a0vulnerability is limited to a subset of URLs which can\u00c2\u00a0result in the possible disclosure of data due to the network\u00c2\u00a0position of the Aruba EdgeConnect Enterprise instance.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:46.000000Z"}, {"uuid": "949d1408-6efc-415d-a0f8-676b25ac034e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30508", "type": "seen", "source": "https://t.me/cibsecurity/64255", "content": "\u203c CVE-2023-30508 \u203c\n\nMultiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface.\u00c2\u00a0Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying\u00c2\u00a0operating system, including sensitive system files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:48.000000Z"}, {"uuid": "d6120beb-36af-41e5-bc3a-8983a335f16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30438", "type": "seen", "source": "https://t.me/cibsecurity/64315", "content": "\u203c CVE-2023-30438 \u203c\n\nAn internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T16:31:16.000000Z"}, {"uuid": "6b075e33-57c5-4e0f-b2be-5e2fae0b4d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30504", "type": "seen", "source": "https://t.me/cibsecurity/64245", "content": "\u203c CVE-2023-30504 \u203c\n\nVulnerabilities exist in the Aruba EdgeConnect Enterprise\u00c2\u00a0command line interface that allow remote authenticated users\u00c2\u00a0to run arbitrary commands on the underlying host. Successful\u00c2\u00a0exploitation of these vulnerabilities result in the ability\u00c2\u00a0to execute arbitrary commands as root on the underlying\u00c2\u00a0operating system leading to complete system compromise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:36.000000Z"}, {"uuid": "f5591bce-100d-45c4-9d12-40b254335e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30506", "type": "seen", "source": "https://t.me/cibsecurity/64243", "content": "\u203c CVE-2023-30506 \u203c\n\nVulnerabilities exist in the Aruba EdgeConnect Enterprise\u00c2\u00a0command line interface that allow remote authenticated users\u00c2\u00a0to run arbitrary commands on the underlying host. Successful\u00c2\u00a0exploitation of these vulnerabilities result in the ability\u00c2\u00a0to execute arbitrary commands as root on the underlying\u00c2\u00a0operating system leading to complete system compromise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:34.000000Z"}, {"uuid": "5578b449-524c-469b-a4fd-4f6fde58cc71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30189", "type": "seen", "source": "https://t.me/cibsecurity/64266", "content": "\u203c CVE-2023-30189 \u203c\n\nPrestashop posstaticblocks <= 1.0.0 is vulnerable to SQL Injection via posstaticblocks::getPosCurrentHook().\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T00:32:33.000000Z"}, {"uuid": "0deea24e-1bea-4fa2-a26a-88d714457219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30505", "type": "seen", "source": "https://t.me/cibsecurity/64262", "content": "\u203c CVE-2023-30505 \u203c\n\nVulnerabilities exist in the Aruba EdgeConnect Enterprise\u00c2\u00a0command line interface that allow remote authenticated users\u00c2\u00a0to run arbitrary commands on the underlying host. Successful\u00c2\u00a0exploitation of these vulnerabilities result in the ability\u00c2\u00a0to execute arbitrary commands as root on the underlying\u00c2\u00a0operating system leading to complete system compromise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:55.000000Z"}, {"uuid": "95168d96-91f8-48d4-b3ba-87d456a9ef08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30509", "type": "seen", "source": "https://t.me/cibsecurity/64259", "content": "\u203c CVE-2023-30509 \u203c\n\nMultiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface.\u00c2\u00a0Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying\u00c2\u00a0operating system, including sensitive system files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:52.000000Z"}, {"uuid": "91e7034f-14d4-4259-8d9b-1535b66ebf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30502", "type": "seen", "source": "https://t.me/cibsecurity/64251", "content": "\u203c CVE-2023-30502 \u203c\n\nVulnerabilities exist in the Aruba EdgeConnect Enterprise\u00c2\u00a0command line interface that allow remote authenticated users\u00c2\u00a0to run arbitrary commands on the underlying host. Successful\u00c2\u00a0exploitation of these vulnerabilities result in the ability\u00c2\u00a0to execute arbitrary commands as root on the underlying\u00c2\u00a0operating system leading to complete system compromise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:43.000000Z"}, {"uuid": "e2b33834-3505-4ad0-8aa8-633dc57f3c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30501", "type": "seen", "source": "https://t.me/cibsecurity/64250", "content": "\u203c CVE-2023-30501 \u203c\n\nVulnerabilities exist in the Aruba EdgeConnect Enterprise\u00c2\u00a0command line interface that allow remote authenticated users\u00c2\u00a0to run arbitrary commands on the underlying host. Successful\u00c2\u00a0exploitation of these vulnerabilities result in the ability\u00c2\u00a0to execute arbitrary commands as root on the underlying\u00c2\u00a0operating system leading to complete system compromise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:42.000000Z"}, {"uuid": "57b96312-a1db-4bc8-9798-4c5db641be4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30507", "type": "seen", "source": "https://t.me/cibsecurity/64247", "content": "\u203c CVE-2023-30507 \u203c\n\nMultiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface.\u00c2\u00a0Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying\u00c2\u00a0operating system, including sensitive system files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T22:30:39.000000Z"}, {"uuid": "6367e344-92d8-49e1-a01c-90b5dc1d7d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30845", "type": "seen", "source": "https://t.me/cibsecurity/62949", "content": "\u203c CVE-2023-30845 \u203c\n\nESPv2 is a service proxy that provides API management capabilities using Google Service Infrastructure. ESPv2 2.20.0 through 2.42.0 contains an authentication bypass vulnerability. API clients can craft a malicious `X-HTTP-Method-Override` header value to bypass JWT authentication in specific cases.ESPv2 allows malicious requests to bypass authentication if both the conditions are true: The requested HTTP method is **not** in the API service definition (OpenAPI spec or gRPC `google.api.http` proto annotations, and the specified `X-HTTP-Method-Override` is a valid HTTP method in the API service definition. ESPv2 will forward the request to your backend without checking the JWT. Attackers can craft requests with a malicious `X-HTTP-Method-Override` value that allows them to bypass specifying JWTs. Restricting API access with API keys works as intended and is not affected by this vulnerability.Upgrade deployments to release v2.43.0 or higher to receive a patch. This release ensures that JWT authentication occurs, even when the caller specifies `x-http-method-override`. `x-http-method-override` is still supported by v2.43.0+. API clients can continue sending this header to ESPv2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T00:25:23.000000Z"}, {"uuid": "09983a42-3343-4639-a397-91ecacb5962a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30247", "type": "seen", "source": "https://t.me/cibsecurity/64052", "content": "\u203c CVE-2023-30247 \u203c\n\nFile Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the update_settings parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T22:27:05.000000Z"}, {"uuid": "1c4fc320-fd97-4b84-ac53-15a7a8391fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/cibsecurity/64034", "content": "\u203c CVE-2023-32073 \u203c\n\nWWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:23.000000Z"}, {"uuid": "279f514d-560d-4f29-a497-37165771dd96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30763", "type": "seen", "source": "https://t.me/cibsecurity/64024", "content": "\u203c CVE-2023-30763 \u203c\n\nHeap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:10.000000Z"}, {"uuid": "8b4d657d-5ab1-4da6-8346-71db2f99103b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30768", "type": "seen", "source": "https://t.me/cibsecurity/64016", "content": "\u203c CVE-2023-30768 \u203c\n\nImproper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:26:59.000000Z"}, {"uuid": "d1c2b9b1-e002-475f-b529-76235f9e537c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30130", "type": "seen", "source": "https://t.me/cibsecurity/64005", "content": "\u203c CVE-2023-30130 \u203c\n\nAn issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Section parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T14:27:03.000000Z"}, {"uuid": "f790bf9b-acea-4799-b98c-afad56f81a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30246", "type": "seen", "source": "https://t.me/cibsecurity/64000", "content": "\u203c CVE-2023-30246 \u203c\n\nSQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the contestant_id parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T14:26:56.000000Z"}, {"uuid": "c4d5b94a-a9f6-4fb4-a2ba-ef80930fd4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/cibsecurity/63720", "content": "\u203c CVE-2023-30777 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <=\u00c2\u00a06.1.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T12:20:18.000000Z"}, {"uuid": "55dade5a-4f60-4307-8a8a-59560ee85958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30084", "type": "seen", "source": "https://t.me/cibsecurity/63648", "content": "\u203c CVE-2023-30084 \u203c\n\nAn issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:39:09.000000Z"}, {"uuid": "659f41be-f2ca-4610-acce-4c85a0e4293e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30394", "type": "seen", "source": "https://t.me/cibsecurity/63905", "content": "\u203c CVE-2023-30394 \u203c\n\nMoveIT v1.1.11 was discovered to contain a cross-site scripting (XSS) vulenrability via the API authentication function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T22:15:35.000000Z"}, {"uuid": "3b334eb2-349f-4230-b4cf-e0c2d9288dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30353", "type": "seen", "source": "https://t.me/cibsecurity/63815", "content": "\u203c CVE-2023-30353 \u203c\n\nShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:52.000000Z"}, {"uuid": "883a07c4-88c8-4eb2-b216-dcb923f6c6d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30056", "type": "seen", "source": "https://t.me/cibsecurity/63700", "content": "\u203c CVE-2023-30056 \u203c\n\nA session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T00:38:57.000000Z"}, {"uuid": "3244e8f8-484f-48c5-b8cf-8e5730191beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30356", "type": "seen", "source": "https://t.me/cibsecurity/63804", "content": "\u203c CVE-2023-30356 \u203c\n\nMissing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:36.000000Z"}, {"uuid": "0735d54d-6fcf-4967-9c1a-9cfa1bd7379e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30354", "type": "seen", "source": "https://t.me/cibsecurity/63814", "content": "\u203c CVE-2023-30354 \u203c\n\nShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:51.000000Z"}, {"uuid": "749617d8-f62e-48b9-9e22-19eb5e89c168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30352", "type": "seen", "source": "https://t.me/cibsecurity/63807", "content": "\u203c CVE-2023-30352 \u203c\n\nShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:52:07.000000Z"}, {"uuid": "69172d59-1736-484e-8f72-d225d36593ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30351", "type": "seen", "source": "https://t.me/cibsecurity/63805", "content": "\u203c CVE-2023-30351 \u203c\n\nShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption. This vulnerability allows attackers to connect to the TELNET service (or UART) by using the exposed credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:37.000000Z"}, {"uuid": "e391b4d9-03bf-41c3-afec-92ccef97430a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30085", "type": "seen", "source": "https://t.me/cibsecurity/63634", "content": "\u203c CVE-2023-30085 \u203c\n\nBuffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws function in util/decompile.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:38:46.000000Z"}, {"uuid": "b51e1287-408d-4944-9503-1c030a26921b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30840", "type": "seen", "source": "https://t.me/cibsecurity/63457", "content": "\u203c CVE-2023-30840 \u203c\n\nFluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0 and prior to version 0.8.6, if a malicious user gains control of a Kubernetes node running fluid csi pod (controlled by the `csi-nodeplugin-fluid` node-daemonset), they can leverage the fluid-csi service account to modify specs of all the nodes in the cluster. However, since this service account lacks `list node` permissions, the attacker may need to use other techniques to identify vulnerable nodes.Once the attacker identifies and modifies the node specs, they can manipulate system-level-privileged components to access all secrets in the cluster or execute pods on other nodes. This allows them to elevate privileges beyond the compromised node and potentially gain full privileged access to the whole cluster.To exploit this vulnerability, the attacker can make all other nodes unschedulable (for example, patch node with taints) and wait for system-critical components with high privilege to appear on the compromised node. However, this attack requires two prerequisites: a compromised node and identifying all vulnerable nodes through other means.Version 0.8.6 contains a patch for this issue. As a workaround, delete the `csi-nodeplugin-fluid` daemonset in `fluid-system` namespace and avoid using CSI mode to mount FUSE file systems. Alternatively, using sidecar mode to mount FUSE file systems is recommended.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T22:37:45.000000Z"}, {"uuid": "202ff875-cbb6-4406-b5fd-59b2cb7577bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30057", "type": "seen", "source": "https://t.me/cibsecurity/63699", "content": "\u203c CVE-2023-30057 \u203c\n\nMultiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T00:38:56.000000Z"}, {"uuid": "59ec7100-11b6-4338-b41c-cdf8f808ab6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30837", "type": "seen", "source": "https://t.me/cibsecurity/63451", "content": "\u203c CVE-2023-30837 \u203c\n\nVyper is a pythonic smart contract language for the EVM. The storage allocator does not guard against allocation overflows in versions prior to 0.3.8. An attacker can overwrite the owner variable. This issue was fixed in version 0.3.8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T20:37:47.000000Z"}, {"uuid": "20d7086b-97ac-434e-807f-b36ccf3ff78b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30086", "type": "seen", "source": "https://t.me/cibsecurity/63649", "content": "\u203c CVE-2023-30086 \u203c\n\nBuffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:39:10.000000Z"}, {"uuid": "b1c38f95-17f9-49c1-b1c9-10aa52ba21f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30216", "type": "seen", "source": "https://t.me/cibsecurity/63324", "content": "\u203c CVE-2023-30216 \u203c\n\nInsecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:13.000000Z"}, {"uuid": "ae94f8f4-d605-4c98-b959-febba86d488a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30083", "type": "seen", "source": "https://t.me/cibsecurity/63646", "content": "\u203c CVE-2023-30083 \u203c\n\nBuffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in util/decompile.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:39:07.000000Z"}, {"uuid": "e484c710-c746-4c51-a212-e8fbd81f2adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30087", "type": "seen", "source": "https://t.me/cibsecurity/63642", "content": "\u203c CVE-2023-30087 \u203c\n\nBuffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:39:00.000000Z"}, {"uuid": "d62c370d-7ce7-4b1e-b971-1ed7242dba20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30088", "type": "seen", "source": "https://t.me/cibsecurity/63640", "content": "\u203c CVE-2023-30088 \u203c\n\nAn issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:38:55.000000Z"}, {"uuid": "ccc5a54b-f26f-463d-9506-793d0d4140b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30844", "type": "seen", "source": "https://t.me/cibsecurity/63454", "content": "\u203c CVE-2023-30844 \u203c\n\nMutagen provides real-time file synchronization and flexible network forwarding for developers. Prior to versions 0.16.6 and 0.17.1 in `mutagen` and prior to version 0.17.1 in `mutagen-compose`, Mutagen `list` and `monitor` commands are susceptible to control characters that could be provided by remote endpoints. This could cause terminal corruption, either intentional or unintentional, if these characters were present in error messages or file paths/names. This could be used as an attack vector if synchronizing with an untrusted remote endpoint, synchronizing files not under control of the user, or forwarding to/from an untrusted remote endpoint. On very old systems with terminals susceptible to issues such as CVE-2003-0069, the issue could theoretically cause code execution. The problem has been patched in Mutagen v0.16.6 and v0.17.1. Earlier versions of Mutagen are no longer supported and will not be patched. Versions of Mutagen after v0.18.0 will also have the patch merged. As a workaround, avoiding synchronization of untrusted files or interaction with untrusted remote endpoints should mitigate any risk.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T22:37:42.000000Z"}, {"uuid": "85b70266-a367-4a9b-8d06-a5f130204308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30257", "type": "seen", "source": "https://t.me/cibsecurity/63411", "content": "\u203c CVE-2023-30257 \u203c\n\nA buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T07:37:17.000000Z"}, {"uuid": "eb98a42e-2055-4c25-be28-30f638d5fa80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30018", "type": "seen", "source": "https://t.me/cibsecurity/63410", "content": "\u203c CVE-2023-30018 \u203c\n\nJudging Management System v1.0 is vulnerable to SQL Injection. via /php-jms/review_se_result.php?mainevent_id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T07:37:16.000000Z"}, {"uuid": "a84e5c12-7a1d-44e8-a8e4-6b5b50de4e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30185", "type": "seen", "source": "https://t.me/cibsecurity/63409", "content": "\u203c CVE-2023-30185 \u203c\n\nCRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \\attachment\\SystemAttachmentServices.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-26T18:57:36.000000Z"}, {"uuid": "d2cf7751-0d4c-4c87-ac88-beb8f2c35bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30054", "type": "seen", "source": "https://t.me/cibsecurity/63378", "content": "\u203c CVE-2023-30054 \u203c\n\nTOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T18:25:19.000000Z"}, {"uuid": "24a58164-e1d2-4e7d-9e76-dc04bd65c6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30013", "type": "seen", "source": "https://t.me/cibsecurity/63377", "content": "\u203c CVE-2023-30013 \u203c\n\nTOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the \"command\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T18:25:18.000000Z"}, {"uuid": "11fab63d-cd82-4dbd-93c5-6ac5b72acc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30372", "type": "seen", "source": "https://t.me/cibsecurity/62715", "content": "\u203c CVE-2023-30372 \u203c\n\nIn Tenda AC15 V15.03.05.19, The function \"xkjs_ver32\" contains a stack-based buffer overflow vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:42.000000Z"}, {"uuid": "5850a13f-9270-422a-8ca4-a14f75a0750a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30404", "type": "seen", "source": "https://t.me/cibsecurity/62879", "content": "\u203c CVE-2023-30404 \u203c\n\nAigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability via the sysCmd parameter in the formSysCmd function. This vulnerability is exploited via a crafted HTTP request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-22T00:56:38.000000Z"}, {"uuid": "7ad08396-2f43-40d4-a37e-aea1384c2165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30842", "type": "seen", "source": "https://t.me/cibsecurity/62873", "content": "\u203c CVE-2023-30842 \u203c\n\nAVideo is an open-source video platform. Prior to version 12.4, AVideo is vulnerable to remote code execution when an attacker embeds a malicious video link. This issue is fixed in version 12.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T02:25:14.000000Z"}, {"uuid": "9e1243e0-6c5e-49e7-a875-5fc330e153ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30259", "type": "seen", "source": "https://t.me/cibsecurity/65622", "content": "\u203c CVE-2023-30259 \u203c\n\nA Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-28T18:13:17.000000Z"}, {"uuid": "fe62ce33-9767-40e6-bf7b-feb440b5b9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30260", "type": "seen", "source": "https://t.me/cibsecurity/65458", "content": "\u203c CVE-2023-30260 \u203c\n\nCommand injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-23T16:46:50.000000Z"}, {"uuid": "12608236-a674-457a-97ba-d8a2489234cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30362", "type": "seen", "source": "https://t.me/cibsecurity/65456", "content": "\u203c CVE-2023-30362 \u203c\n\nBuffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-23T16:46:49.000000Z"}, {"uuid": "a83b5042-efb0-48fc-9364-c113534f8280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30242", "type": "seen", "source": "https://t.me/cibsecurity/63363", "content": "\u203c CVE-2023-30242 \u203c\n\nNS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T16:24:56.000000Z"}, {"uuid": "2aa62ef0-6bc7-477f-9898-d815e087be2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30945", "type": "seen", "source": "https://t.me/cibsecurity/65551", "content": "\u203c CVE-2023-30945 \u203c\n\nMultiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-27T02:24:59.000000Z"}, {"uuid": "cf6050e2-801d-4d38-8ed4-fad130816b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3034", "type": "seen", "source": "https://t.me/cibsecurity/65605", "content": "\u203c CVE-2023-3034 \u203c\n\nReflected XSS affects the \u00e2\u20ac\u02dcmode\u00e2\u20ac\u2122 parameter in the /admin functionality of the web application in versions <=2.0.44\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-28T12:12:44.000000Z"}, {"uuid": "6aa68947-b9d3-4548-93d2-fff2e28e753e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30855", "type": "seen", "source": "https://t.me/cibsecurity/63456", "content": "\u203c CVE-2023-30855 \u203c\n\nPimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable to path traversal. The impact of this path traversal and arbitrary extension is limited to creation of arbitrary files and appending data to existing files. When combined with the SQL Injection, the exported data `RESTRICTED DIFFUSION 9 / 9` can be controlled and a webshell can be uploaded. Attackers can use that to execute arbitrary PHP code on the server with the permissions of the webserver. Users may upgrade to version 10.5.18 to receive a patch or, as a workaround, apply the patch manually.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T22:37:44.000000Z"}, {"uuid": "51698ac4-8ecc-4993-bf87-4035550568e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30860", "type": "seen", "source": "https://t.me/cibsecurity/63455", "content": "\u203c CVE-2023-30860 \u203c\n\nWWBN AVideo is an open source video platform. In AVideo prior to version 12.4, a normal user can make a Meeting Schedule where the user can invite another user in that Meeting, but it does not properly sanitize the malicious characters when creating a Meeting Room. This allows attacker to insert malicious scripts. Since any USER including the ADMIN can see the meeting room that was created by the attacker this can lead to cookie hijacking and takeover of any accounts. Version 12.4 contains a patch for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T22:37:43.000000Z"}, {"uuid": "67c762b8-de90-4a13-a5b4-089942055cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30551", "type": "seen", "source": "https://t.me/cibsecurity/63452", "content": "\u203c CVE-2023-30551 \u203c\n\nRekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory (OOM) conditions caused by reading archive metadata files into memory without checking their sizes first. Verification of a JAR file submitted to Rekor can cause an out of memory crash if files within the META-INF directory of the JAR are sufficiently large. Parsing of an APK file submitted to Rekor can cause an out of memory crash if the .SIGN or .PKGINFO files within the APK are sufficiently large. The OOM crash has been patched in Rekor version 1.1.1. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T20:37:48.000000Z"}, {"uuid": "bf84937d-0533-4d40-9d58-58a3626de9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30092", "type": "seen", "source": "https://t.me/cibsecurity/63435", "content": "\u203c CVE-2023-30092 \u203c\n\nSourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T18:37:46.000000Z"}, {"uuid": "7658d4ab-ace5-4afc-a8bb-2878ec147823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30378", "type": "seen", "source": "https://t.me/cibsecurity/62713", "content": "\u203c CVE-2023-30378 \u203c\n\nIn Tenda AC15 V15.03.05.19, the function \"sub_8EE8\" contains a stack-based buffer overflow vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:40.000000Z"}, {"uuid": "19ae639c-b4de-471a-9611-8cf5d093f741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30550", "type": "seen", "source": "https://t.me/cibsecurity/63310", "content": "\u203c CVE-2023-30550 \u203c\n\nMeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some operating permissions. The issue has been fixed in version 2.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T22:37:13.000000Z"}, {"uuid": "c42e617a-fea7-483a-a5b0-6d85c53fd1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30203", "type": "seen", "source": "https://t.me/cibsecurity/63308", "content": "\u203c CVE-2023-30203 \u203c\n\nJudging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event_id parameter at /php-jms/result_sheet.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T20:32:03.000000Z"}, {"uuid": "53f3d7d8-0fb5-4536-a99e-cf62276e415e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30184", "type": "seen", "source": "https://t.me/cibsecurity/63305", "content": "\u203c CVE-2023-30184 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T20:31:57.000000Z"}, {"uuid": "7eca1032-78c4-47f1-93c8-343d3ea6329c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30282", "type": "seen", "source": "https://t.me/cibsecurity/63342", "content": "\u203c CVE-2023-30282 \u203c\n\nPrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control. Due to a lack of permissions' control, a guest can access exports from the module which can lead to leak of personal information from customer table.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T02:23:36.000000Z"}, {"uuid": "593e2ab9-c3d9-4376-8672-6df4f1ab2993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30093", "type": "seen", "source": "https://t.me/cibsecurity/63341", "content": "\u203c CVE-2023-30093 \u203c\n\nAn arbitrary file upload vulnerability in Open Networking Foundation ONOS from version 1.9.0 until 2.7.0 allows attackers to execute arbitrary code via uploading a crafted YAML file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T02:23:35.000000Z"}, {"uuid": "66302300-8e57-4140-9393-e3d8b964ab8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30268", "type": "seen", "source": "https://t.me/cibsecurity/63336", "content": "\u203c CVE-2023-30268 \u203c\n\nCLTPHP <=6.0 is vulnerable to Improper Input Validation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:28.000000Z"}, {"uuid": "2c593403-029c-4284-a44e-0cebe039be31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30857", "type": "seen", "source": "https://t.me/cibsecurity/63093", "content": "\u203c CVE-2023-30857 \u203c\n\n@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version `0.6.1`, there is a possible prototype pollution issue for the `MetadataRecord`, when merged with a base class' metadata object, in `meta` decorator from the `@aedart/support` package. The likelihood of exploitation is questionable, given that a class's metadata can only be set or altered when the class is decorated via `meta()`. Furthermore, object(s) of sensitive nature would have to be stored as metadata, before this can lead to a security impact. The issue has been patched in version `0.6.1`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T00:27:33.000000Z"}, {"uuid": "979a9c48-2b73-4d44-b4c9-a6ccc84f7e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30848", "type": "seen", "source": "https://t.me/cibsecurity/62992", "content": "\u203c CVE-2023-30848 \u203c\n\nPimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerability. Users should upgrade to version 10.5.21 to receive a patch or, as a workaround, apply the patch manually.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T20:26:38.000000Z"}, {"uuid": "50f54f6d-6b9d-4ff8-837c-c85b92d1f364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30434", "type": "seen", "source": "https://t.me/cibsecurity/63375", "content": "\u203c CVE-2023-30434 \u203c\n\nIBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T18:25:16.000000Z"}, {"uuid": "4fca6f42-a1fe-4e6e-a405-24af6f152057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30243", "type": "seen", "source": "https://t.me/cibsecurity/63374", "content": "\u203c CVE-2023-30243 \u203c\n\nBeijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T18:25:12.000000Z"}, {"uuid": "6a431ee7-f38e-4af1-bc9a-c45981b18cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30135", "type": "seen", "source": "https://t.me/cibsecurity/63345", "content": "\u203c CVE-2023-30135 \u203c\n\nTenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T07:24:34.000000Z"}, {"uuid": "1d8d1ee8-bd9b-4edc-a37b-e9ef3f281fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30264", "type": "seen", "source": "https://t.me/cibsecurity/63334", "content": "\u203c CVE-2023-30264 \u203c\n\nCLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:26.000000Z"}, {"uuid": "f2b53d26-8bb2-4d02-a166-115215b8bc7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30094", "type": "seen", "source": "https://t.me/cibsecurity/63332", "content": "\u203c CVE-2023-30094 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:21.000000Z"}, {"uuid": "61e745cc-5d7b-4612-9fed-e0ad6cf98354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30399", "type": "seen", "source": "https://t.me/cibsecurity/63330", "content": "\u203c CVE-2023-30399 \u203c\n\nInsecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:19.000000Z"}, {"uuid": "8f5b4e68-8902-4f38-9bef-ade3eddaf098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30097", "type": "seen", "source": "https://t.me/cibsecurity/63329", "content": "\u203c CVE-2023-30097 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:18.000000Z"}, {"uuid": "10fc6c15-bacc-45e7-8c0e-7a600104819b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30619", "type": "seen", "source": "https://t.me/cibsecurity/63296", "content": "\u203c CVE-2023-30619 \u203c\n\nTuleap Open ALM is a Libre and Open Source tool for end to end traceability of application and system developments. The title of an artifact is not properly escaped in the tooltip. A malicious user with the capability to create an artifact or to edit a field title could force victim to execute uncontrolled code. This issue has been patched in version 14.7.99.143.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T18:33:15.000000Z"}, {"uuid": "5cc71ba4-ba6d-4592-a6a8-65fc0697be82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30125", "type": "seen", "source": "https://t.me/cibsecurity/63072", "content": "\u203c CVE-2023-30125 \u203c\n\nEyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T18:38:26.000000Z"}, {"uuid": "c62f0cad-c146-427d-ab6f-5312ccf48ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30024", "type": "seen", "source": "https://t.me/cibsecurity/63047", "content": "\u203c CVE-2023-30024 \u203c\n\nInsecure Permissions vulnerability found in MagicJack A921 USB Phone Jack Rev 3.0 v.1.4 allows a physically proximate attacker to escalate privileges and gain access to sensitive information via the NAND flash memory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T16:27:23.000000Z"}, {"uuid": "641a7af4-fbb1-43e9-9ec3-6cca6e734f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30466", "type": "seen", "source": "https://t.me/cibsecurity/63033", "content": "\u203c CVE-2023-30466 \u203c\n\nThis vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T14:27:09.000000Z"}, {"uuid": "ca76d590-eda6-4155-a3d7-a719b3f01ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30122", "type": "seen", "source": "https://t.me/cibsecurity/63347", "content": "\u203c CVE-2023-30122 \u203c\n\nAn arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T07:24:35.000000Z"}, {"uuid": "9081298a-97b1-4284-8b46-cce086fd7c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30090", "type": "seen", "source": "https://t.me/cibsecurity/63346", "content": "\u203c CVE-2023-30090 \u203c\n\nSemcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T07:24:34.000000Z"}, {"uuid": "7d5224f5-1e31-4d58-8b23-e07e267ba46e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30849", "type": "seen", "source": "https://t.me/cibsecurity/62994", "content": "\u203c CVE-2023-30849 \u203c\n\nPimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T20:26:40.000000Z"}, {"uuid": "e5c0a295-3d80-4140-a26e-b14f168eed22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30204", "type": "seen", "source": "https://t.me/cibsecurity/63259", "content": "\u203c CVE-2023-30204 \u203c\n\nJudging Management System v1.0 was discovered to contain a SQL injection vulnerability via the judge_id parameter at /php-jms/edit_judge.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T00:32:21.000000Z"}, {"uuid": "b189ba56-34ff-4544-a137-823aea46ea6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30300", "type": "seen", "source": "https://t.me/cibsecurity/63248", "content": "\u203c CVE-2023-30300 \u203c\n\nAn issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T00:32:09.000000Z"}, {"uuid": "98dc57fe-d9a9-474a-9f43-689936ff0c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30205", "type": "seen", "source": "https://t.me/cibsecurity/63246", "content": "\u203c CVE-2023-30205 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the unique_id parameter in /admin/article.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T00:32:07.000000Z"}, {"uuid": "acce8e4d-8299-4624-aa7b-c7e86b8ed9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30869", "type": "seen", "source": "https://t.me/cibsecurity/63149", "content": "\u203c CVE-2023-30869 \u203c\n\nImproper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation.\u00c2\u00a0This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-02T14:30:06.000000Z"}, {"uuid": "36a2e481-bb45-498c-9fae-d7132a5b2e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30077", "type": "seen", "source": "https://t.me/cibsecurity/63275", "content": "\u203c CVE-2023-30077 \u203c\n\nJudging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via /php-jms/review_result.php?mainevent_id=, mainevent_id.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T07:44:59.000000Z"}, {"uuid": "621b7e3b-02b5-428f-bf01-e40d22412da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30331", "type": "seen", "source": "https://t.me/cibsecurity/63274", "content": "\u203c CVE-2023-30331 \u203c\n\nAn issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T07:44:58.000000Z"}, {"uuid": "6d128862-089a-45ec-8102-a64b763c08b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30944", "type": "seen", "source": "https://t.me/cibsecurity/63189", "content": "\u203c CVE-2023-30944 \u203c\n\nThe vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:41.000000Z"}, {"uuid": "01a95b4e-2e67-408a-878a-382f35a4ef24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30403", "type": "seen", "source": "https://t.me/cibsecurity/63185", "content": "\u203c CVE-2023-30403 \u203c\n\nAn issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to bypass login by connecting to the web app after a successful attempt by a legitimate user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:37.000000Z"}, {"uuid": "b27141ee-8795-4065-822b-af18af5a9d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/cibsecurity/63082", "content": "\u203c CVE-2023-30854 \u203c\n\nAVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T20:27:33.000000Z"}, {"uuid": "b7a91fa4-faf8-4cd5-bb8f-57fa7b8b3129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "seen", "source": "https://t.me/cibsecurity/63177", "content": "\u203c CVE-2023-30943 \u203c\n\nThe vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:27.000000Z"}, {"uuid": "a2060d20-1248-4a8e-a919-4e3070ef3f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30183", "type": "seen", "source": "https://t.me/cibsecurity/63055", "content": "\u203c CVE-2023-30183 \u203c\n\nWangmarket CMS v4.10 was discovered to contain a SQL injection vulnerability via the component /plugin/dataDictionary/tableView.do?tableName=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T18:27:20.000000Z"}, {"uuid": "067d7efb-bd1c-4d66-b8f8-cd176b3c7f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30847", "type": "seen", "source": "https://t.me/cibsecurity/62977", "content": "\u203c CVE-2023-30847 \u203c\n\nH2O is an HTTP server. In versions 2.3.0-beta2 and prior, when the reverse proxy handler tries to processes a certain type of invalid HTTP request, it tries to build an upstream URL by reading from uninitialized pointer. This behavior can lead to crashes or leak of information to back end HTTP servers. Pull request number 3229 fixes the issue. The pull request has been merged to the `master` branch in commit f010336. Users should upgrade to commit f010336 or later.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T18:37:03.000000Z"}, {"uuid": "a7a35a1c-98dd-4e00-b796-da82d82392aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30861", "type": "seen", "source": "https://t.me/cibsecurity/63170", "content": "\u203c CVE-2023-30861 \u203c\n\nFlask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` headers, it may send one client's `session` cookie to other clients. The severity depends on the application's use of the session and the proxy's behavior regarding cookies. The risk depends on all these conditions being met.1. The application must be hosted behind a caching proxy that does not strip cookies or ignore responses with cookies.2. The application sets `session.permanent = True`3. The application does not access or modify the session at any point during a request.4. `SESSION_REFRESH_EACH_REQUEST` enabled (the default).5. The application does not set a `Cache-Control` header to indicate that a page is private or should not be cached.This happens because vulnerable versions of Flask only set the `Vary: Cookie` header when the session is accessed or modified, not when it is refreshed (re-sent to update the expiration) without being accessed or modified. This issue has been fixed in versions 2.3.2 and 2.2.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-02T22:30:23.000000Z"}, {"uuid": "aa16defb-cde7-434f-b36c-92d6c1ac3d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30441", "type": "seen", "source": "https://t.me/cibsecurity/63113", "content": "\u203c CVE-2023-30441 \u203c\n\nIBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T23:18:19.000000Z"}, {"uuid": "ed6e77a9-0295-469a-b45b-5da8e9509fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30405", "type": "seen", "source": "https://t.me/cibsecurity/63107", "content": "\u203c CVE-2023-30405 \u203c\n\nA cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the wl_ssid parameter at /boafrm/formHomeWlanSetup.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T00:27:50.000000Z"}, {"uuid": "1cecebf5-72be-40ae-9308-a0718e0f0b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30858", "type": "seen", "source": "https://t.me/cibsecurity/63104", "content": "\u203c CVE-2023-30858 \u203c\n\nThe Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leading to a delayed response given a big payload. The issue has been patched in 0.3.0. As a workaround, avoid using the `replace`, `unemojify`, or `strip` functions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T00:27:47.000000Z"}, {"uuid": "f5d2828d-d02a-4038-846d-33d00c07329b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30852", "type": "seen", "source": "https://t.me/cibsecurity/62998", "content": "\u203c CVE-2023-30852 \u203c\n\nPimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-proxy` API endpoint that is accessible by an authenticated administrator user is vulnerable to arbitrary JavaScript and CSS file read via the `scriptPath` and `scripts` parameters. The `scriptPath` parameter is not sanitized properly and is vulnerable to path traversal attack. Any JavaScript/CSS file from the application server can be read by specifying sufficient number of `../` patterns to go out from the application webroot followed by path of the folder where the file is located in the \"scriptPath\" parameter and the file name in the \"scripts\" parameter. The JavaScript file is successfully read only if the web application has read access to it. Users should update to version 10.5.21 to receive a patch or, as a workaround, apply the patch manual.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T20:26:47.000000Z"}, {"uuid": "cd107c46-07fe-42d7-b6a7-1e5a04e16452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30624", "type": "seen", "source": "https://t.me/cibsecurity/62997", "content": "\u203c CVE-2023-30624 \u203c\n\nWasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled with LLVM 16 which causes some writes, which are critical for correctness, to be optimized away. Vulnerable versions of Wasmtime compiled with Rust 1.70, which is currently in beta, or later are known to have incorrectly compiled functions. Versions of Wasmtime compiled with the current Rust stable release, 1.69, and prior are not known at this time to have any issues, but can theoretically exhibit potential issues.The underlying problem is that Wasmtime's runtime state for an instance involves a Rust-defined structure called `Instance` which has a trailing `VMContext` structure after it. This `VMContext` structure has a runtime-defined layout that is unique per-module. This representation cannot be expressed with safe code in Rust so `unsafe` code is required to maintain this state. The code doing this, however, has methods which take `&self` as an argument but modify data in the `VMContext` part of the allocation. This means that pointers derived from `&self` are mutated. This is typically not allowed, except in the presence of `UnsafeCell`, in Rust. When compiled to LLVM these functions have `noalias readonly` parameters which means it's UB to write through the pointers.Wasmtime's internal representation and management of `VMContext` has been updated to use `&mut self` methods where appropriate. Additionally verification tools for `unsafe` code in Rust, such as `cargo miri`, are planned to be executed on the `main` branch soon to fix any Rust-level issues that may be exploited in future compiler versions.Precomplied binaries available for Wasmtime from GitHub releases have been compiled with at most LLVM 15 so are not known to be vulnerable. As mentioned above, however, it's still recommended to update.Wasmtime version 6.0.2, 7.0.1, and 8.0.1 have been issued which contain the patch necessary to work correctly on LLVM 16 and have no known UB on LLVM 15 and earlier. If Wasmtime is compiled with Rust 1.69 and prior, which use LLVM 15, then there are no known issues. There is a theoretical possibility for undefined behavior to exploited, however, so it's recommended that users upgrade to a patched version of Wasmtime. Users using beta Rust (1.70 at this time) or nightly Rust (1.71 at this time) must update to a patched version to work correctly.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T20:26:46.000000Z"}, {"uuid": "fb576acc-e995-405d-a898-0c03f8a83f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30850", "type": "seen", "source": "https://t.me/cibsecurity/62996", "content": "\u203c CVE-2023-30850 \u203c\n\nPimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin translations API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T20:26:42.000000Z"}, {"uuid": "6ccb074c-afcf-41b0-b84c-36cbe43d5613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/cibsecurity/62915", "content": "\u203c CVE-2023-30212 \u203c\n\nOURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T20:25:59.000000Z"}, {"uuid": "61d013bc-1091-4af4-9fe5-05a6994db2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30211", "type": "seen", "source": "https://t.me/cibsecurity/62914", "content": "\u203c CVE-2023-30211 \u203c\n\nOURPHP <= 7.2.0 is vulnerable to SQL Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T20:25:58.000000Z"}, {"uuid": "392617ad-a6cb-44f9-a0d5-92612667400a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30853", "type": "seen", "source": "https://t.me/cibsecurity/63089", "content": "\u203c CVE-2023-30853 \u203c\n\nGradle Build Action allows users to execute a Gradle Build in their GitHub Actions workflow. A vulnerability impacts GitHub workflows using the Gradle Build Action prior to version 2.4.2 that have executed the Gradle Build Tool with the configuration cache enabled, potentially exposing secrets configured for the repository.Secrets configured for GitHub Actions are normally passed to the Gradle Build Tool via environment variables. Due to the way that the Gradle Build Tool records these environment variables, they may be persisted into an entry in the GitHub Actions cache. This data stored in the GitHub Actions cache can be read by a GitHub Actions workflow running in an untrusted context, such as that running for a Pull Request submitted by a developer via a repository fork.This vulnerability was discovered internally through code review, and we have not seen any evidence of it being exploited in the wild. However, in addition to upgrading the Gradle Build Action, affected users should delete any potentially vulnerable cache entries and may choose to rotate any potentially affected secrets.Gradle Build Action v2.4.2 and newer no longer saves this sensitive data for later use, preventing ongoing leakage of secrets via the GitHub Actions Cache.While upgrading to the latest version of the Gradle Build Action will prevent leakage of secrets going forward, additional actions may be required due to current or previous GitHub Actions Cache entries containing this information.Current cache entries will remain vulnerable until they are forcibly deleted or they expire naturally after 7 days of not being used. Potentially vulnerable entries can be easily identified in the GitHub UI by searching for a cache entry with key matching `configuration-cache-*`. The maintainers recommend that users of the Gradle Build Action inspect their list of cache entries and manually delete any that match this pattern.While maintainers have not seen any evidence of this vulnerability being exploited, they recommend cycling any repository secrets if you cannot be certain that these have not been compromised. Compromise could occur if a user runs a GitHub Actions workflow for a pull request attempting to exploit this data. Warning signs to look for in a pull request include:- Making changes to GitHub Actions workflow files in a way that may attempt to read/extract data from the Gradle User Home or `/.gradle` directories.- Making changes to Gradle build files or other executable files that may be invoked by a GitHub Actions workflow, in a way that may attempt to read/extract information from these locations.Some workarounds to limit the impact of this vulnerability are available:- If the Gradle project does not opt-in to using the configuration cache, then it is not vulnerable. - If the Gradle project does opt-in to using the configuration-cache by default, then the `--no-configuration-cache` command-line argument can be used to disable this feature in a GitHub Actions workflow.In any case, we recommend that users carefully inspect any pull request before approving the execution of GitHub Actions workflows. It may be prudent to require approval for all PRs from external contributors.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T20:27:40.000000Z"}, {"uuid": "bdfe405a-f1ef-4271-85fe-05408bf43ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30856", "type": "seen", "source": "https://t.me/cibsecurity/63077", "content": "\u203c CVE-2023-30856 \u203c\n\neDEX-UI is a science fiction terminal emulator. Versions 2.2.8 and prior are vulnerable to cross-site websocket hijacking. When running eDEX-UI and browsing the web, a malicious website can connect to eDEX's internal terminal control websocket, and send arbitrary commands to the shell. The project has been archived since 2021, and as of time of publication there are no plans to patch this issue and release a new version. Some workarounds are available, including shutting down eDEX-UI when browsing the web and ensuring the eDEX terminal runs with lowest possible privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T20:27:25.000000Z"}, {"uuid": "44352366-21d9-4df9-9d4d-dad4af7bbe71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30402", "type": "seen", "source": "https://t.me/cibsecurity/62819", "content": "\u203c CVE-2023-30402 \u203c\n\nYASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T20:24:57.000000Z"}, {"uuid": "082c54a6-f711-4cac-83ee-17cc63d21673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30123", "type": "seen", "source": "https://t.me/cibsecurity/63060", "content": "\u203c CVE-2023-30123 \u203c\n\nwuzhicms v4.1.0 is vulnerable to Cross Site Scripting (XSS) in the Member Center, Account Settings.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T18:27:25.000000Z"}, {"uuid": "be938bea-4c00-4747-a78c-c23244e05785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30267", "type": "seen", "source": "https://t.me/cibsecurity/62900", "content": "\u203c CVE-2023-30267 \u203c\n\nCLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T18:25:57.000000Z"}, {"uuid": "1c49956b-0341-47f4-89f6-88a0f0e8a458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30467", "type": "seen", "source": "https://t.me/cibsecurity/63036", "content": "\u203c CVE-2023-30467 \u203c\n\nThis vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device.Successful exploitation of this vulnerability could allow remote attacker to perform unauthorized activities on the targeted device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T14:27:12.000000Z"}, {"uuid": "d1d3da88-557e-47cf-b685-fa4ffc8351fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30349", "type": "seen", "source": "https://t.me/cibsecurity/62984", "content": "\u203c CVE-2023-30349 \u203c\n\nJFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T18:40:11.000000Z"}, {"uuid": "18eeff83-ae01-40d8-916d-1af96f377efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30338", "type": "seen", "source": "https://t.me/cibsecurity/62981", "content": "\u203c CVE-2023-30338 \u203c\n\nMultiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T18:49:42.000000Z"}, {"uuid": "d02b1055-fd22-4c73-b7d7-6227d56bced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30843", "type": "seen", "source": "https://t.me/cibsecurity/62935", "content": "\u203c CVE-2023-30843 \u203c\n\nPayload is a free and open source headless content management system. In versions prior to 1.7.0, if a user has access to documents that contain hidden fields or fields they do not have access to, the user could reverse-engineer those values via brute force. Version 1.7.0 contains a patch. As a workaround, write a `beforeOperation` hook to remove `where` queries that attempt to access hidden field data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T00:25:06.000000Z"}, {"uuid": "48361bae-aa5e-4f6b-afab-5793ed27e449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30280", "type": "seen", "source": "https://t.me/cibsecurity/62933", "content": "\u203c CVE-2023-30280 \u203c\n\nBuffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the fwSchedule.cgi page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T00:25:04.000000Z"}, {"uuid": "2b964ce3-8173-419c-90dc-c20bf5067ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30546", "type": "seen", "source": "https://t.me/cibsecurity/62928", "content": "\u203c CVE-2023-30546 \u203c\n\nContiki-NG is an operating system for Internet of Things devices. An off-by-one error can be triggered in the Antelope database management system in the Contiki-NG operating system in versions 4.8 and prior. The problem exists in the Contiki File System (CFS) backend for the storage of data (file os/storage/antelope/storage-cfs.c). In the functions `storage_get_index` and `storage_put_index`, a buffer for merging two strings is allocated with one byte less than the maximum size of the merged strings, causing subsequent function calls to the cfs_open function to read from memory beyond the buffer size. The vulnerability has been patched in the \"develop\" branch of Contiki-NG, and is expected to be included in the next release. As a workaround, the problem can be fixed by applying the patch in Contiki-NG pull request #2425.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T22:25:43.000000Z"}, {"uuid": "5d4871c6-eb29-48e2-b300-16d383a6186b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30846", "type": "seen", "source": "https://t.me/cibsecurity/62948", "content": "\u203c CVE-2023-30846 \u203c\n\ntyped-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties. The flow of the vulnerability is as follows: First, send any request with `BasicCredentialHandler`, `BearerCredentialHandler` or `PersonalAccessTokenCredentialHandler`. Second, the target host may return a redirection (3xx), with a link to a second host. Third, the next request will use the credentials to authenticate with the second host, by setting the `Authorization` header. The expected behavior is that the next request will *NOT* set the `Authorization` header. The problem was fixed in version 1.8.0. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T00:25:22.000000Z"}, {"uuid": "a0849510-9056-4284-9852-963f694b4af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30363", "type": "seen", "source": "https://t.me/cibsecurity/62945", "content": "\u203c CVE-2023-30363 \u203c\n\nvConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T00:25:19.000000Z"}, {"uuid": "3a4db35e-d563-44c1-9836-433fd7bb83ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30111", "type": "seen", "source": "https://t.me/cibsecurity/62888", "content": "\u203c CVE-2023-30111 \u203c\n\nMedicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T07:30:41.000000Z"}, {"uuid": "c9e75eee-d1ec-46af-9714-44362bc475f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30106", "type": "seen", "source": "https://t.me/cibsecurity/62887", "content": "\u203c CVE-2023-30106 \u203c\n\nSourcecodester Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS) via page=about.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T07:30:40.000000Z"}, {"uuid": "9ac6fab2-bae9-4436-8cad-b855f2445bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30210", "type": "seen", "source": "https://t.me/cibsecurity/62910", "content": "\u203c CVE-2023-30210 \u203c\n\nOURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T20:25:53.000000Z"}, {"uuid": "639118dc-54b8-47d1-a7b0-1dda820f054e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30269", "type": "seen", "source": "https://t.me/cibsecurity/62908", "content": "\u203c CVE-2023-30269 \u203c\n\nCLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T18:26:08.000000Z"}, {"uuid": "610b99ce-f00f-4223-b812-54290d6c92b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30266", "type": "seen", "source": "https://t.me/cibsecurity/62905", "content": "\u203c CVE-2023-30266 \u203c\n\nCLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T18:26:05.000000Z"}, {"uuid": "a854f5fa-63e5-4e51-b570-3b03e58afff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30112", "type": "seen", "source": "https://t.me/cibsecurity/62904", "content": "\u203c CVE-2023-30112 \u203c\n\nMedicine Tracker System in PHP 1.0.0 is vulnerable to SQL Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T18:26:04.000000Z"}, {"uuid": "f0eae273-16e9-4509-a0dc-f7d720e2d7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30265", "type": "seen", "source": "https://t.me/cibsecurity/62903", "content": "\u203c CVE-2023-30265 \u203c\n\nCLTPHP <=6.0 is vulnerable to Directory Traversal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T18:26:00.000000Z"}, {"uuid": "356a99fb-1475-4461-a2d7-b6b6fa8db6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30406", "type": "seen", "source": "https://t.me/cibsecurity/62784", "content": "\u203c CVE-2023-30406 \u203c\n\nJerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecma_find_named_property at /base/ecma-helpers.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T02:35:47.000000Z"}, {"uuid": "45365825-2d76-43e5-b8cc-77df7dc82c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30629", "type": "seen", "source": "https://t.me/cibsecurity/62783", "content": "\u203c CVE-2023-30629 \u203c\n\nVyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.1 through 0.3.7, the Vyper compiler generates the wrong bytecode. Any contract that uses the `raw_call` with `revert_on_failure=False` and `max_outsize=0` receives the wrong response from `raw_call`. Depending on the memory garbage, the result can be either `True` or `False`. A patch is available and, as of time of publication, anticipated to be part of Vyper 0.3.8. As a workaround, one may always put `max_outsize>0`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T02:35:46.000000Z"}, {"uuid": "bfbde62c-ae0e-439e-afa7-06ffc3e1a382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30623", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/62782", "content": "\u203c CVE-2023-30623 \u203c\n\n`embano1/wip` is a GitHub Action written in Bash. Prior to version 2, the `embano1/wip` action uses the `github.event.pull_request.title` parameter in an insecure way. The title parameter is used in a run statement - resulting in a command injection vulnerability due to string interpolation. This vulnerability can be triggered by any user on GitHub. They just need to create a pull request with a commit message containing an exploit. (Note that first-time PR requests will not be run - but the attacker can submit a valid PR before submitting an invalid PR). The commit can be genuine, but the commit message can be malicious. This can be used to execute code on the GitHub runners and can be used to exfiltrate any secrets used in the CI pipeline, including repository tokens. Version 2 has a fix for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T02:35:45.000000Z"}, {"uuid": "12798e7c-14a2-49e8-807a-d0712b8544ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30414", "type": "seen", "source": "https://t.me/cibsecurity/62781", "content": "\u203c CVE-2023-30414 \u203c\n\nJerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm_loop at /jerry-core/vm/vm.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T02:35:45.000000Z"}, {"uuid": "3ae759e7-7e52-487b-9eac-03863a68cc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30626", "type": "seen", "source": "https://t.me/cibsecurity/62771", "content": "\u203c CVE-2023-30627 \u203c\n\njellyfin-web is the web client for Jellyfin, a free-software media system. Starting in version 10.1.0 and prior to version 10.8.10, a stored cross-site scripting vulnerability in device.js can be used to make arbitrary calls to the `REST` endpoints with admin privileges. When combined with CVE-2023-30626, this results in remote code execution on the Jellyfin instance in the context of the user who's running it. This issue is patched in version 10.8.10. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T00:19:37.000000Z"}, {"uuid": "aa3d4889-f7ca-4156-8d0e-ec82d895d2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30549", "type": "seen", "source": "https://t.me/cibsecurity/62859", "content": "\u203c CVE-2023-30549 \u203c\n\nApptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1.0, installations that include apptainer-suid < 1.1.8, and all versions of Singularity in their default configurations on older operating systems where that CVE has not been patched. That includes Red Hat Enterprise Linux 7, Debian 10 buster (unless the linux-5.10 package is installed), Ubuntu 18.04 bionic and Ubuntu 20.04 focal. Use-after-free flaws in the kernel can be used to attack the kernel for denial of service and potentially for privilege escalation.Apptainer 1.1.8 includes a patch that by default disables mounting of extfs filesystem types in setuid-root mode, while continuing to allow mounting of extfs filesystems in non-setuid \"rootless\" mode using fuse2fs.Some workarounds are possible. Either do not install apptainer-suid (for versions 1.1.0 through 1.1.7) or set `allow setuid = no` in apptainer.conf (or singularity.conf for singularity versions). This requires having unprivileged user namespaces enabled and except for apptainer 1.1.x versions will disallow mounting of sif files, extfs files, and squashfs files in addition to other, less significant impacts. (Encrypted sif files are also not supported unprivileged in apptainer 1.1.x.). Alternatively, use the `limit containers` options in apptainer.conf/singularity.conf to limit sif files to trusted users, groups, and/or paths, and set `allow container extfs = no` to disallow mounting of extfs overlay files. The latter option by itself does not disallow mounting of extfs overlay partitions inside SIF files, so that's why the former options are also needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T00:25:21.000000Z"}, {"uuid": "b6441a06-b84b-40f2-badc-75a3c46e74dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30609", "type": "seen", "source": "https://t.me/cibsecurity/62855", "content": "\u203c CVE-2023-30609 \u203c\n\nmatrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0, plain text messages containing HTML tags are rendered as HTML in the search results. To exploit this, an attacker needs to trick a user into searching for a specific message containing an HTML injection payload. No cross-site scripting attack is possible due to the hardcoded content security policy. Version 3.71.0 of the SDK patches over the issue. As a workaround, restarting the client will clear the HTML injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T00:25:16.000000Z"}, {"uuid": "b6921454-c3b2-4b24-a0c3-4d6a39fccd4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30627", "type": "seen", "source": "https://t.me/cibsecurity/62768", "content": "\u203c CVE-2023-30626 \u203c\n\nJellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory traversal vulnerability inside the `ClientLogController`, specifically `/ClientLog/Document`. When combined with a cross-site scripting vulnerability (CVE-2023-30627), this can result in file write and arbitrary code execution. Version 10.8.10 has a patch for this issue. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T00:19:33.000000Z"}, {"uuid": "93fd6fec-c6c0-493b-91ca-ef335b0cbcd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30626", "type": "seen", "source": "https://t.me/cibsecurity/62768", "content": "\u203c CVE-2023-30626 \u203c\n\nJellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory traversal vulnerability inside the `ClientLogController`, specifically `/ClientLog/Document`. When combined with a cross-site scripting vulnerability (CVE-2023-30627), this can result in file write and arbitrary code execution. Version 10.8.10 has a patch for this issue. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T00:19:33.000000Z"}, {"uuid": "b7eb8d2a-c2d8-4cd2-8a6d-620f9a910dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30838", "type": "seen", "source": "https://t.me/cibsecurity/62840", "content": "\u203c CVE-2023-30838 \u203c\n\nPrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, the `ValidateCore::isCleanHTML()` method of Prestashop misses hijackable events which can lead to cross-site scripting (XSS) injection, allowed by the presence of pre-setup `@keyframes` methods. This XSS, which hijacks HTML attributes, can be triggered without any interaction by the visitor/administrator, which makes it as dangerous as a trivial XSS attack. Contrary to other attacks which target HTML attributes and are triggered without user interaction (such as onload / onerror which suffer from a very limited scope), this one can hijack every HTML element, which increases the danger due to a complete HTML elements scope. Versions 8.0.4 and 1.7.8.9 contain a fix for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T22:25:27.000000Z"}, {"uuid": "7e093726-b55b-4c57-8e75-d0cc9387079d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30839", "type": "seen", "source": "https://t.me/cibsecurity/62833", "content": "\u203c CVE-2023-30839 \u203c\n\nPrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T22:25:17.000000Z"}, {"uuid": "99c415b8-3fbe-4715-8d12-b266da451e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30545", "type": "seen", "source": "https://t.me/cibsecurity/62831", "content": "\u203c CVE-2023-30545 \u203c\n\nPrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, it is possible for a user with access to the SQL Manager (Advanced Options -> Database) to arbitrarily read any file on the operating system when using SQL function `LOAD_FILE` in a `SELECT` request. This gives the user access to critical information. A patch is available in PrestaShop 8.0.4 and PS 1.7.8.9\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T22:25:15.000000Z"}, {"uuid": "14cde3d6-367b-4d46-9a3a-ded74df6f3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30177", "type": "seen", "source": "https://t.me/cibsecurity/62824", "content": "\u203c CVE-2023-30177 \u203c\n\nCraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). An attacker can inject javascript code into Volume Name.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T22:25:07.000000Z"}, {"uuid": "51cc3053-8201-4f85-8ca4-bddd2b161ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30417", "type": "seen", "source": "https://t.me/cibsecurity/62789", "content": "\u203c CVE-2023-30417 \u203c\n\nA cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T16:25:03.000000Z"}, {"uuid": "5384886e-deca-4071-baf7-49663eb9140f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30410", "type": "seen", "source": "https://t.me/cibsecurity/62786", "content": "\u203c CVE-2023-30410 \u203c\n\nJerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T02:39:40.000000Z"}, {"uuid": "fa7504fd-ed4f-4698-9f1c-f07fcfc5aed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30408", "type": "seen", "source": "https://t.me/cibsecurity/62785", "content": "\u203c CVE-2023-30408 \u203c\n\nJerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T02:36:37.000000Z"}, {"uuid": "7a09517a-e0a6-4fb0-a362-e0b34f5af672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30371", "type": "seen", "source": "https://t.me/cibsecurity/62707", "content": "\u203c CVE-2023-30371 \u203c\n\nIn Tenda AC15 V15.03.05.19, the function \"sub_ED14\" contains a stack-based buffer overflow vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:31.000000Z"}, {"uuid": "fa6675f7-a62f-4c65-ac59-a0e663cdae79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30376", "type": "seen", "source": "https://t.me/cibsecurity/62705", "content": "\u203c CVE-2023-30376 \u203c\n\nIn Tenda AC15 V15.03.05.19, the function \"henan_pppoe_user\" contains a stack-based buffer overflow vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:29.000000Z"}, {"uuid": "e4f4d3c4-ebdd-48c0-bf85-a9b28fd1b0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30368", "type": "seen", "source": "https://t.me/cibsecurity/62704", "content": "\u203c CVE-2023-30368 \u203c\n\nTenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:28.000000Z"}, {"uuid": "ce3e0f2e-755c-4bde-9402-0b06d8309a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30370", "type": "seen", "source": "https://t.me/cibsecurity/62702", "content": "\u203c CVE-2023-30370 \u203c\n\nIn Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:26.000000Z"}, {"uuid": "15d0a236-6142-428a-bf93-52395624720f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30627", "type": "seen", "source": "https://t.me/cibsecurity/62771", "content": "\u203c CVE-2023-30627 \u203c\n\njellyfin-web is the web client for Jellyfin, a free-software media system. Starting in version 10.1.0 and prior to version 10.8.10, a stored cross-site scripting vulnerability in device.js can be used to make arbitrary calls to the `REST` endpoints with admin privileges. When combined with CVE-2023-30626, this results in remote code execution on the Jellyfin instance in the context of the user who's running it. This issue is patched in version 10.8.10. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T00:19:37.000000Z"}, {"uuid": "ea6ed732-85ae-40ee-9b16-4303486a025c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30622", "type": "seen", "source": "https://t.me/cibsecurity/62726", "content": "\u203c CVE-2023-30622 \u203c\n\nClusternet is a general-purpose system for controlling Kubernetes clusters across different environments. An issue in clusternet prior to version 0.15.2 can be leveraged to lead to a cluster-level privilege escalation. The clusternet has a deployment called `cluster-hub` inside the `clusternet-system` Kubernetes namespace, which runs on worker nodes randomly. The deployment has a service account called `clusternet-hub`, which has a cluster role called `clusternet:hub` via cluster role binding. The `clusternet:hub` cluster role has `\"*\" verbs of \"*.*\"` resources. Thus, if a malicious user can access the worker node which runs the clusternet, they can leverage the service account to do malicious actions to critical system resources. For example, the malicious user can leverage the service account to get ALL secrets in the entire cluster, resulting in cluster-level privilege escalation. Version 0.15.2 contains a fix for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T20:19:26.000000Z"}, {"uuid": "c29440f8-ad14-45c5-ac6f-cc3ba4308951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30613", "type": "seen", "source": "https://t.me/cibsecurity/62723", "content": "\u203c CVE-2023-30613 \u203c\n\nKiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In versions of Kiwi TCMS prior to 12.2, there is no control over what kinds of files can be uploaded. Thus, a malicious actor may upload an `.exe` file or a file containing embedded JavaScript and trick others into clicking on these files, causing vulnerable browsers to execute malicious code on another computer. Kiwi TCMS v12.2 comes with functionality that allows administrators to configure additional upload validator functions which give them more control over what file types are accepted for upload. By default `.exe` are denied. Other files containing the `` tag, regardless of their type are also denied b/c they are a path to XSS attacks. There are no known workarounds aside from upgrading.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T20:19:23.000000Z"}, {"uuid": "8a4e2455-9e05-4857-810e-1bdab78df703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30776", "type": "seen", "source": "https://t.me/cibsecurity/62734", "content": "\u203c CVE-2023-30776 \u203c\n\nAn authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API.\u00c2\u00a0This issue affects Apache Superset version 1.3.0 up to 2.0.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T20:19:35.000000Z"}, {"uuid": "e724537e-2f09-4df7-b038-d7f028e83211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30544", "type": "seen", "source": "https://t.me/cibsecurity/62736", "content": "\u203c CVE-2023-30544 \u203c\n\nKiwi TCMS is an open source test management system. In versions of Kiwi TCMS prior to 12.2, users were able to update their email addresses via the `My profile` admin page. This page allowed them to change the email address registered with their account without the ownership verification performed during account registration. Operators of Kiwi TCMS should upgrade to v12.2 or later to receive a patch. No known workarounds exist.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T20:19:37.000000Z"}, {"uuid": "1c889be4-36f7-4f29-9872-bedcc794d747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30373", "type": "seen", "source": "https://t.me/cibsecurity/62711", "content": "\u203c CVE-2023-30373 \u203c\n\nIn Tenda AC15 V15.03.05.19, the function \"xian_pppoe_user\" contains a stack-based buffer overflow vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:38.000000Z"}, {"uuid": "4c50a813-1596-4986-891d-09cadaf7dd8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30369", "type": "seen", "source": "https://t.me/cibsecurity/62708", "content": "\u203c CVE-2023-30369 \u203c\n\nTenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:32.000000Z"}, {"uuid": "8577fae9-7306-45b3-96f0-1926b195ed16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30621", "type": "seen", "source": "https://t.me/cibsecurity/62638", "content": "\u203c CVE-2023-30621 \u203c\n\nGipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 users can run command on the host machine with sudoer permission. The `!ping` command when provided with an IP or hostname used to run a bash `ping ` without verification that the IP or hostname was legitimate. This command was executed with root permissions and may lead to arbitrary command injection on the host server. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-22T00:32:06.000000Z"}, {"uuid": "74977b13-ddd5-430a-85a1-df5697adceec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30618", "type": "seen", "source": "https://t.me/cibsecurity/62636", "content": "\u203c CVE-2023-30618 \u203c\n\nKitchen-Terraform provides a set of Test Kitchen plugins which enable the use of Test Kitchen to converge a Terraform configuration and verify the resulting infrastructure systems with InSpec controls. Kitchen-Terraform v7.0.0 introduced a regression which caused all Terraform output values, including sensitive values, to be printed at the `info` logging level during the `kitchen converge` action. Prior to v7.0.0, the output values were printed at the `debug` level to avoid writing sensitive values to the terminal by default. An attacker would need access to the local machine in order to gain access to these logs during an operation. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-22T00:32:01.000000Z"}, {"uuid": "d90213db-62df-4fa2-8deb-19f4870b3dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30620", "type": "seen", "source": "https://t.me/cibsecurity/62634", "content": "\u203c CVE-2023-30620 \u203c\n\nmindsdb is a Machine Learning platform to help developers build AI solutions. In affected versions an unsafe extraction is being performed using `tarfile.extractall()` from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. Sometimes, the vulnerability is called a TarSlip or a ZipSlip variant. An attacker may leverage this vulnerability to overwrite any local file which the server process has access to. There is no risk of file exposure with this vulnerability. This issue has been addressed in release `23.2.1.0 `. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-22T00:31:59.000000Z"}, {"uuid": "474a07ab-4413-4c04-a5a7-fe694df2593b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30798", "type": "seen", "source": "https://t.me/cibsecurity/62623", "content": "\u203c CVE-2023-30798 \u203c\n\nThere MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause excessive memory usage resulting in denial of service of the HTTP service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-21T20:38:33.000000Z"}, {"uuid": "99b3530f-1992-4602-a5a2-119539c92e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30382", "type": "seen", "source": "https://t.me/cibsecurity/64661", "content": "\u203c CVE-2023-30382 \u203c\n\nA buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T00:40:39.000000Z"}, {"uuid": "98c2f9af-0509-4bbf-bf4e-83a7415893f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30789", "type": "seen", "source": "https://t.me/cibsecurity/63527", "content": "\u203c CVE-2023-30789 \u203c\n\nMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/work` endpoint and job and company parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:54:03.000000Z"}, {"uuid": "a97080c0-3a09-4a97-8434-4cc279ef1f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30440", "type": "seen", "source": "https://t.me/cibsecurity/64626", "content": "\u203c CVE-2023-30440 \u203c\n\nIBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption. IBM X-Force ID: 253175.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T23:41:03.000000Z"}, {"uuid": "15c238a9-5abe-4ce8-84fe-0fb687d39e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30771", "type": "seen", "source": "https://t.me/cibsecurity/62265", "content": "\u203c CVE-2023-30771 \u203c\n\nIncorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-17T12:28:13.000000Z"}, {"uuid": "f2b45414-d281-4328-a99e-7140ecfd2747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30536", "type": "seen", "source": "https://t.me/cibsecurity/62316", "content": "\u203c CVE-2023-30536 \u203c\n\nslim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline (\\n) into both the header names and values. While the specification states that \\r\\n\\r\\n is used to terminate the header list, many servers in the wild will also accept \\n\\n. An attacker that is able to control the header names that are passed to Slilm-Psr7 would be able to intentionally craft invalid messages, possibly causing application errors or invalid HTTP requests being sent out with an PSR-18 HTTP client. The latter might present a denial of service vector if a remote service\u00e2\u20ac\u2122s web application firewall bans the application due to the receipt of malformed requests. The issue has been patched in version 1.6.1. There are no known workarounds to this issue. Users are advised to upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-18T02:28:41.000000Z"}, {"uuid": "58fa150e-aa57-4cf5-81bb-c6484bf0100c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30769", "type": "seen", "source": "https://t.me/cibsecurity/62309", "content": "\u203c CVE-2023-30769 \u203c\n\nVulnerability discovered is related to the peer-to-peer (p2p) communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-18T00:28:42.000000Z"}, {"uuid": "17c49827-335b-44c2-8811-552200b41ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30548", "type": "seen", "source": "https://t.me/cibsecurity/62308", "content": "\u203c CVE-2023-30548 \u203c\n\ngatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server (`gatsby develop`). It should be noted that by default gatsby develop is only accessible via the localhost 127.0.0.1, and one would need to intentionally expose the server to other interfaces to exploit this vulnerability by using server options such as --host 0.0.0.0, -H 0.0.0.0, or the GATSBY_HOST=0.0.0.0 environment variable. Attackers exploiting this vulnerability will have read access to all files within the scope of the server process. A patch has been introduced in gatsby-plugin-sharp@5.8.1 and gatsby-plugin-sharp@4.25.1 which mitigates the issue by ensuring that included paths remain within the project directory. As stated above, by default gatsby develop is only exposed to the localhost 127.0.0.1. For those using the develop server in the default configuration no risk is posed. If other ranges are required, preventing the develop server from being exposed to untrusted interfaces or IP address ranges would mitigate the risk from this vulnerability. Users are non the less encouraged to upgrade to a safe version.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-18T00:28:41.000000Z"}, {"uuid": "3795edb7-2a92-4040-8a38-6b7afcfd0d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30770", "type": "seen", "source": "https://t.me/cibsecurity/62266", "content": "\u203c CVE-2023-30770 \u203c\n\nA stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-17T12:28:14.000000Z"}, {"uuid": "fe33ac45-b5df-45a7-bf8e-853113e5e651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30772", "type": "seen", "source": "https://t.me/cibsecurity/62257", "content": "\u203c CVE-2023-30772 \u203c\n\nThe Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-16T07:27:26.000000Z"}, {"uuid": "88f38b15-fcc1-4ac7-9f4c-8dcb20203886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30535", "type": "seen", "source": "https://t.me/cibsecurity/62201", "content": "\u203c CVE-2023-30535 \u203c\n\nSnowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user\u00e2\u20ac\u2122s local machine would render the malicious payload, leading to a remote code execution. The vulnerability was patched on March 17, 2023 as part of Snowflake JDBC driver Version 3.13.29. All users should immediately upgrade the Snowflake JDBC driver to the latest version: 3.13.29.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T00:26:27.000000Z"}, {"uuid": "58f23333-9f0d-4d4f-bb02-ad15ddfd30a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30459", "type": "seen", "source": "https://t.me/cibsecurity/62157", "content": "\u203c CVE-2023-30459 \u203c\n\nSmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and executing it on the server (via server settings in the administrator control panel on port 8101, by default).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-14T18:26:05.000000Z"}, {"uuid": "a8f6a23f-8d47-47be-987c-b149d53e653c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30638", "type": "seen", "source": "https://t.me/cibsecurity/62110", "content": "\u203c CVE-2023-30638 \u203c\n\nAtos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-14T07:30:50.000000Z"}, {"uuid": "7fc8dd61-f5f7-4eaa-86b5-6a48c7b996a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30518", "type": "seen", "source": "https://t.me/cibsecurity/61993", "content": "\u203c CVE-2023-30518 \u203c\n\nA missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:22.000000Z"}, {"uuid": "6169938c-78fc-4861-ac6f-38c4a542043c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30528", "type": "seen", "source": "https://t.me/cibsecurity/61992", "content": "\u203c CVE-2023-30528 \u203c\n\nJenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:21.000000Z"}, {"uuid": "babf5d33-020a-455f-814b-c21dd0e07ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30526", "type": "seen", "source": "https://t.me/cibsecurity/61991", "content": "\u203c CVE-2023-30526 \u203c\n\nA missing permission check in Jenkins Report Portal Plugin 0.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified bearer token authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:20.000000Z"}, {"uuid": "328a18a7-3ed9-4027-8aa0-e5d4959b9f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30529", "type": "seen", "source": "https://t.me/cibsecurity/61990", "content": "\u203c CVE-2023-30529 \u203c\n\nJenkins Lucene-Search Plugin 387.v938a_ecb_f7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:19.000000Z"}, {"uuid": "4b58a077-068a-4f5a-a46c-1e31b8401acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30630", "type": "seen", "source": "https://t.me/cibsecurity/62074", "content": "\u203c CVE-2023-30630 \u203c\n\nDmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-13T20:25:20.000000Z"}, {"uuid": "9985f9bd-581f-4aa4-bbb9-c1e9fe30231a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30523", "type": "seen", "source": "https://t.me/cibsecurity/61988", "content": "\u203c CVE-2023-30523 \u203c\n\nJenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:14.000000Z"}, {"uuid": "2b9015ce-b71b-4971-a296-f320858da975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30520", "type": "seen", "source": "https://t.me/cibsecurity/61987", "content": "\u203c CVE-2023-30520 \u203c\n\nJenkins Quay.io trigger Plugin 0.1 and earlier does not limit URL schemes for repository homepage URLs submitted via Quay.io trigger webhooks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Quay.io trigger webhook payloads.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:13.000000Z"}, {"uuid": "4497a817-31dc-4bbb-9701-24052ab384f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30525", "type": "seen", "source": "https://t.me/cibsecurity/61986", "content": "\u203c CVE-2023-30525 \u203c\n\nA cross-site request forgery (CSRF) vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified bearer token authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:12.000000Z"}, {"uuid": "06d6f423-2a09-45ef-ac07-5a6591c8e66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30514", "type": "seen", "source": "https://t.me/cibsecurity/61985", "content": "\u203c CVE-2023-30514 \u203c\n\nJenkins Azure Key Vault Plugin 187.va_cd5fecd198a_ and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:11.000000Z"}, {"uuid": "64972036-d27c-494e-a1d9-6164a2fb9707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30530", "type": "seen", "source": "https://t.me/cibsecurity/61984", "content": "\u203c CVE-2023-30530 \u203c\n\nJenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:10.000000Z"}, {"uuid": "26a3ef0c-c86a-4191-901f-63c1ece9ae3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30512", "type": "seen", "source": "https://t.me/cibsecurity/61962", "content": "\u203c CVE-2023-30512 \u203c\n\nCubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T12:24:00.000000Z"}, {"uuid": "07ea1e9f-521f-4f10-99e0-6283d201aecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30513", "type": "seen", "source": "https://t.me/cibsecurity/62003", "content": "\u203c CVE-2023-30513 \u203c\n\nJenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:37.000000Z"}, {"uuid": "a976d1f5-996d-43b8-bfc9-de9d9279959c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30532", "type": "seen", "source": "https://t.me/cibsecurity/62002", "content": "\u203c CVE-2023-30532 \u203c\n\nA missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:36.000000Z"}, {"uuid": "34f3039d-9c49-4874-bd7c-b630676d1dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30522", "type": "seen", "source": "https://t.me/cibsecurity/62001", "content": "\u203c CVE-2023-30522 \u203c\n\nA missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:35.000000Z"}, {"uuid": "9fc96f5a-d39d-41a9-bcd1-f510275b6964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30521", "type": "seen", "source": "https://t.me/cibsecurity/62000", "content": "\u203c CVE-2023-30521 \u203c\n\nA missing permission check in Jenkins Assembla merge request builder Plugin 1.1.13 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:34.000000Z"}, {"uuid": "72df8d29-debc-4b04-ba2d-86e6dcb5376f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30515", "type": "seen", "source": "https://t.me/cibsecurity/61997", "content": "\u203c CVE-2023-30515 \u203c\n\nJenkins Thycotic DevOps Secrets Vault Plugin 1.0.0 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:28.000000Z"}, {"uuid": "595b4306-1555-4f90-80ff-452751ca624c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30519", "type": "seen", "source": "https://t.me/cibsecurity/61996", "content": "\u203c CVE-2023-30519 \u203c\n\nA missing permission check in Jenkins Quay.io trigger Plugin 0.1 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:27.000000Z"}, {"uuid": "9bcbf16e-7de5-4888-8982-cba251e299c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30531", "type": "seen", "source": "https://t.me/cibsecurity/61995", "content": "\u203c CVE-2023-30531 \u203c\n\nJenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:27.000000Z"}, {"uuid": "f615e37c-0f3b-4841-9da8-5cf7b67ee163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30527", "type": "seen", "source": "https://t.me/cibsecurity/61994", "content": "\u203c CVE-2023-30527 \u203c\n\nJenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:26.000000Z"}, {"uuid": "30f546cb-d99b-47db-a4fd-9b5f0861a5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30517", "type": "seen", "source": "https://t.me/cibsecurity/61999", "content": "\u203c CVE-2023-30517 \u203c\n\nJenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:33.000000Z"}, {"uuid": "a99f74cd-c930-493c-a752-cc138484638b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30524", "type": "seen", "source": "https://t.me/cibsecurity/61998", "content": "\u203c CVE-2023-30524 \u203c\n\nJenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:29.000000Z"}, {"uuid": "c8b058c4-63eb-4523-91f1-b9409f76b918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30516", "type": "seen", "source": "https://t.me/cibsecurity/61989", "content": "\u203c CVE-2023-30516 \u203c\n\nJenkins Image Tag Parameter Plugin 2.0 improperly introduces an option to opt out of SSL/TLS certificate validation when connecting to Docker registries, resulting in job configurations using Image Tag Parameters that were created before 2.0 having SSL/TLS certificate validation disabled by default.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:18.000000Z"}, {"uuid": "7fa7c135-ea46-4944-9a3f-b39c2b53b538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30465", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/61874", "content": "\u203c CVE-2023-30465 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0.\u00c2\u00a0By manipulating the \"orderType\" parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the\u00c2\u00a0\u00c2\u00a0 user with ID 1 from the \"user\" table, one character at a time.\u00c2\u00a0 Users are advised to upgrade to Apache InLong's 1.6.0 or cherry-pick [1] to solve it. https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html [1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T18:23:27.000000Z"}, {"uuid": "8b4056c5-6cf5-4f11-a427-0e396e5eae46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30790", "type": "seen", "source": "https://t.me/cibsecurity/63502", "content": "\u203c CVE-2023-30790 \u203c\n\nMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/relationships` endpoint and first_name and last_name parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:47:59.000000Z"}, {"uuid": "5ece7555-498d-4603-909a-bbdd69a1a5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30450", "type": "seen", "source": "https://t.me/cibsecurity/61713", "content": "\u203c CVE-2023-30450 \u203c\n\nrpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure (while a cluster is turned off) in order to have TLS on broker RPC ports. NOTE: the fix was also backported to the 22.2 and 22.3 branches.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-09T02:29:03.000000Z"}, {"uuid": "a2089781-d9eb-4503-ab93-49b416bddc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30985", "type": "seen", "source": "https://t.me/cibsecurity/63594", "content": "\u203c CVE-2023-30985 \u203c\n\nA vulnerability has been identified in Solid Edge SE2023 (All versions < VX.223.0 Update 3), Solid Edge SE2023 (All versions < VX.223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:28.000000Z"}, {"uuid": "f236b241-a8e8-417a-8f56-fac3ca540675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30986", "type": "seen", "source": "https://t.me/cibsecurity/63598", "content": "\u203c CVE-2023-30986 \u203c\n\nA vulnerability has been identified in Solid Edge SE2023 (All versions < VX.223.0 Update 3), Solid Edge SE2023 (All versions < VX.223.0 Update 2). Affected applications contain a memory corruption vulnerability while parsing specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19561)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:35.000000Z"}, {"uuid": "8f12cbd0-aa0f-4f11-873d-d3559d5d3be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30899", "type": "seen", "source": "https://t.me/cibsecurity/63607", "content": "\u203c CVE-2023-30899 \u203c\n\nA vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 HotfixRev5), Siveillance Video 2022 R3 (All versions < V22.3 HotfixRev2), Siveillance Video 2023 R1 (All versions < V23.1 HotfixRev1). The Management Server component of affected applications deserializes data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:49.000000Z"}, {"uuid": "6b9d279d-e207-419d-9ce1-bd819a129928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30743", "type": "seen", "source": "https://t.me/cibsecurity/63565", "content": "\u203c CVE-2023-30743 \u203c\n\nDue to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user\u00e2\u20ac\u2122s interaction with the application. Further, in the absence of URL validation by the application, the vulnerability could lead to the attacker reading or modifying user\u00e2\u20ac\u2122s information through phishing attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:23.000000Z"}, {"uuid": "d558b94b-65e9-4cf4-8ce7-aaac0d21b2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30741", "type": "seen", "source": "https://t.me/cibsecurity/63564", "content": "\u203c CVE-2023-30741 \u203c\n\nDue to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:22.000000Z"}, {"uuid": "b8da8718-06cd-495b-b126-d6a45750597b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30787", "type": "seen", "source": "https://t.me/cibsecurity/63494", "content": "\u203c CVE-2023-30787 \u203c\n\nMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/introductions` endpoint and first_met_additional_info parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:43:08.000000Z"}, {"uuid": "a61078c3-0e55-4821-8b71-ba4af15f53d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30334", "type": "seen", "source": "https://t.me/cibsecurity/63481", "content": "\u203c CVE-2023-30334 \u203c\n\nAsmBB v2.9.1 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the MiniMag.asm and bbcode.asm libraries.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:42:51.000000Z"}, {"uuid": "674660da-0d89-4427-af7f-e112f5ac3ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30076", "type": "seen", "source": "https://t.me/cibsecurity/62545", "content": "\u203c CVE-2023-30076 \u203c\n\nSourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/print_judges.php?print_judges.php=&se_name=&sub_event_id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-20T22:30:59.000000Z"}, {"uuid": "734a89b0-db65-4f6f-acda-f1ad2da3ec76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30555", "type": "seen", "source": "https://t.me/cibsecurity/62448", "content": "\u203c CVE-2023-30555 \u203c\n\nArchery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases.Affected versions are subject to SQL injection in the `explain` method in `sql_optimize.py`. User input coming from the `db_name` parameter value in the `explain` endpoint is passed to the following `query` methods of each database engine for execution. `query` in `sql/engines/mssql.py`, and `query` in `sql/engines/oracle.py`. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-108`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T07:43:39.000000Z"}, {"uuid": "f94ab498-7e51-46a0-bfe0-2b6541ce20b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30616", "type": "seen", "source": "https://t.me/cibsecurity/62546", "content": "\u203c CVE-2023-30616 \u203c\n\nForm block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing nonce check. There is potential for a Cross Site Request Forgery for all form blocks, since it allows to send requests to the forms from any website without a user noticing. Users are advised to upgrade to version 1.0.2. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-20T22:31:00.000000Z"}, {"uuid": "0d8350bf-5322-4d19-a244-6eae63ac50ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30610", "type": "seen", "source": "https://t.me/cibsecurity/62478", "content": "\u203c CVE-2023-30610 \u203c\n\naws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T22:30:22.000000Z"}, {"uuid": "6fd31d30-76e2-4d43-afab-8a4fff84b22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30463", "type": "seen", "source": "https://t.me/cibsecurity/62457", "content": "\u203c CVE-2023-30463 \u203c\n\nAltran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T16:29:54.000000Z"}, {"uuid": "b6aa3d1d-572a-4236-ac14-5220fc6ead1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30611", "type": "seen", "source": "https://t.me/cibsecurity/62476", "content": "\u203c CVE-2023-30611 \u203c\n\nDiscourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform. In affected versions data about what reactions were performed on a post in a private topic could be leaked. This issue has been addressed in version 0.3. Users are advised to upgrade. Users unable to upgrade should disable the discourse-reactions plugin to fully mitigate the issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T22:30:20.000000Z"}, {"uuid": "7b798958-5829-4541-b482-c4ac884a45ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30614", "type": "seen", "source": "https://t.me/cibsecurity/62474", "content": "\u203c CVE-2023-30614 \u203c\n\nPay is a payments engine for Ruby on Rails 6.0 and higher. In versions prior to 6.3.2 a payments info page of Pay is susceptible to reflected Cross-site scripting. An attacker could create a working URL that renders a javascript link to a user on a Rails application that integrates Pay. This URL could be distributed via email to specifically target certain individuals. If the targeted application contains a functionality to submit user-generated content (such as comments) the attacker could even distribute the URL using that functionality. This has been patched in version 6.3.2 and above. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T22:30:18.000000Z"}, {"uuid": "ed6f6d5e-efc7-40d0-a18e-5b90d1b2b582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30612", "type": "seen", "source": "https://t.me/cibsecurity/62472", "content": "\u203c CVE-2023-30612 \u203c\n\nCloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary open file descriptors in the Cloud Hypervisor process via sending malicious HTTP request through the HTTP API socket. As a result, the Cloud Hypervisor process can be easily crashed, causing Deny-of-Service (DoS). This can also be a potential Use-After-Free (UAF) vulnerability. Users require to have the write access to the API socket file to trigger this vulnerability. Impacted versions of Cloud Hypervisor include upstream main branch, v31.0, and v30.0. The vulnerability was initially detected by our `http_api_fuzzer` via oss-fuzz. This issue has been addressed in versions 30.1 and 31.1. Users unable to upgrade may mitigate this issue by ensuring the write access to the API socket file is granted to trusted users only.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T22:30:16.000000Z"}, {"uuid": "a100e562-f95a-425c-a0f6-9741b01b4531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30605", "type": "seen", "source": "https://t.me/cibsecurity/62444", "content": "\u203c CVE-2023-30605 \u203c\n\nArchery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the `variable_name` and `variable_value` parameter value in the `sql/instance.py` `param_edit` endpoint is passed to a set of methods in given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution. The affected methods are: `set_variable` in `sql/engines/goinception.py` which concatenates input which is passed to execution on the database in the `sql/engines/goinception.py`, `get_variables` in `sql/engines/goinception.py` which concatenates input which is passed to execution on the database in the `sql/engines/goinception.py`, `set_variable` in `sql/engines/mysql.py` which concatenates input which is passed to execution on the database in the `sql/engines/mysql.py` `query`, and `get_variables` in `sql/engines/mysql.py`which concatenates input which is passed to execution on the database in the `sql/engines/mysql.py` `query`. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This advisory is also indexed as `GHSL-2022-104`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T07:43:35.000000Z"}, {"uuid": "addd2926-0a1f-4720-b964-90f70f57b5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30558", "type": "seen", "source": "https://t.me/cibsecurity/62441", "content": "\u203c CVE-2023-30558 \u203c\n\nArchery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the `db_name` in the `sql/data_dictionary.py` `table_list` endpoint is passed to the methods that follow in a given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution. The affected methods are `get_group_tables_by_db` in `sql/engines/mssql.py`which passes unsafe user input to `sql/engines/mssql.py`, and `get_group_tables_by_db` in `sql/engines/oracle.py`which concatenates input which is passed to execution on the database in the `sql/engines/oracle.py` `query` method. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-105`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T07:43:29.000000Z"}, {"uuid": "1352fc76-2407-48ff-b6dd-23cfb9df82df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30554", "type": "seen", "source": "https://t.me/cibsecurity/62440", "content": "\u203c CVE-2023-30554 \u203c\n\nArchery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `sql_api/api_workflow.py` endpoint `ExecuteCheck` which passes unfiltered input to the `explain_check` method in `sql/engines/oracle.py`. User input coming from the `db_name` parameter value in the `api_workflow.py` `ExecuteCheck` endpoint is passed through the `oracle.py` `execute_check` method and to the `explain_check` method for execution. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-103`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T07:43:28.000000Z"}, {"uuid": "0f03dbf2-206d-4ec5-bb1c-95cbc05d2800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30553", "type": "seen", "source": "https://t.me/cibsecurity/62439", "content": "\u203c CVE-2023-30553 \u203c\n\nArchery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to multiple SQL injections in the `sql_api/api_workflow.py` endpoint `ExecuteCheck`. User input coming from the `db_name` parameter value and the `full_sql` parameter value in the `api_workflow.py` `ExecuteCheck` endpoint is passed to the methods that follow in given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution. The affected methods are `execute_check` in `sql/engines/clickhouse.py` which concatenates input which is passed to execution on the database in the `sql/engines/clickhouse.py` `query` method, `execute_check` in `sql/engines/goinception.py`which concatenates input which is passed to execution on the database in the `sql/engines/goinception.py` `query` method, `execute_check` in `sql/engines/oracle.py`which passes unsafe user input into the `object_name_check` method in `sql/engines/oracle.py` which in turn is passed to execution on the database in the `sql/engines/oracle.py` `query` method. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-102`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2024-05-15T14:56:19.000000Z"}, {"uuid": "bc634365-a93c-4811-8088-547502518005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30552", "type": "seen", "source": "https://t.me/cibsecurity/62436", "content": "\u203c CVE-2023-30552 \u203c\n\nArchery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `sql/instance.py` endpoint's `describe` method. In several cases, user input coming from the `tb_name` parameter value, the `db_name` parameter value or the `schema_name` value in the `sql/instance.py` `describe` endpoint is passed to the `describe_table` methods in given SQL engine implementations, which concatenate user input unsafely into a SQL query and afterwards pass it to the `query` method of each database engine for execution. Please take into account that in some cases all three parameter values are concatenated, in other only one or two of them. The affected methods are: `describe_table` in `sql/engines/clickhouse.py`which concatenates input which is passed to execution on the database in the `query` method in `sql/engines/clickhouse.py`, `describe_table` in `sql/engines/mssql.py` which concatenates input which is passed to execution on the database in the `query` methods in `sql/engines/mssql.py`, `describe_table` in `sql/engines/mysql.py`which concatenates input which is passed to execution on the database in the `query` method in `sql/engines/mysql.py`, `describe_table` in `sql/engines/oracle.py` which concatenates input which is passed to execution on the database in the `query` methods in `sql/engines/oracle.py`, `describe_table` in `sql/engines/pgsql.py`which concatenates input which is passed to execution on the database in the `query` methods in `sql/engines/pgsql.py`, `describe_table` in `sql/engines/phoenix.py` which concatenates input which is passed to execution on the database in the `query` method in `sql/engines/phoenix.py`. Each of these issues may be mitigated by escaping user input or by using prepared statements when executing SQL queries. This issue is also indexed as `GHSL-2022-101`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T07:43:22.000000Z"}, {"uuid": "b843e28e-de71-4243-bb00-e52d763d7910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30606", "type": "seen", "source": "https://t.me/cibsecurity/62425", "content": "\u203c CVE-2023-30606 \u203c\n\nDiscourse is an open source platform for community discussion. In affected versions a user logged as an administrator can call arbitrary methods on the `SiteSetting` class, notably `#clear_cache!` and `#notify_changed!`, which when done on a multisite instance, can affect the entire cluster resulting in a denial of service. Users not running in multisite environments are not affected. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T02:40:47.000000Z"}, {"uuid": "5cb03add-6288-4cdb-ad73-e68cdebb7a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "bcebaa5e-7c4d-4cfb-990b-f5c5145aff7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "seen", "source": "https://t.me/reverseame/3567", "content": "Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service https://blog.silentsignal.eu/2023/07/03/ibm-i-dde-vulnerability-cve-2023-30990/", "creation_timestamp": "2026-07-30T01:01:48.444164Z"}, {"uuid": "bbdb1e07-5885-40ed-8ca0-4d2441491e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3567", "content": "Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service https://blog.silentsignal.eu/2023/07/03/ibm-i-dde-vulnerability-cve-2023-30990/", "creation_timestamp": "2026-08-03T01:57:08.889773Z"}, {"uuid": "75947c86-80f2-447d-b25e-de82d27c129f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30256", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12539", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30256*\nGithub: https://github.com/ahrixia/CVE-2023-30256", "creation_timestamp": "2026-07-31T00:00:08.056637Z"}, {"uuid": "49a4d623-9324-4338-8b3e-8051d932a7b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30092", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12439", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30092*\nGithub: https://github.com/nawed20002/CVE-2023-30092", "creation_timestamp": "2026-07-31T00:00:06.044371Z"}, {"uuid": "87fd47f6-43be-4dc3-94b7-bde3cc44372b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13719", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-POC-DOCKER-FILE*\nGithub: https://github.com/Rishipatidar/CVE-2023-30212-POC-DOCKER-FILE", "creation_timestamp": "2026-07-31T00:00:23.406390Z"}, {"uuid": "3076727f-9b60-4943-a83e-ce0ab7a9c04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13728", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30145*\nGithub: https://github.com/paragbagul111/CVE-2023-30145", "creation_timestamp": "2026-07-31T00:00:23.534679Z"}, {"uuid": "d27c9c14-adf2-47f0-a519-c4bb1296a69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13812", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *r-CVE-2023-30212--lab*\nGithub: https://github.com/Anandhu990/r-CVE-2023-30212--lab", "creation_timestamp": "2026-07-31T00:00:24.079855Z"}, {"uuid": "5d1a94af-6024-493f-aa01-9acd773628e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13829", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-30212*\nGithub: https://github.com/libas7994/CVE-2023-30212", "creation_timestamp": "2026-07-31T00:00:24.164494Z"}, {"uuid": "ad72a03f-ff84-471d-bd8e-c921600ae138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13817", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212_lab*\nGithub: https://github.com/Anandhu990/CVE-2023-30212_lab", "creation_timestamp": "2026-07-31T00:00:24.207443Z"}, {"uuid": "9436953a-0060-4654-b282-8f374211f88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13815", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-iab*\nGithub: https://github.com/Anandhu990/CVE-2023-30212-iab", "creation_timestamp": "2026-07-31T00:00:24.250421Z"}, {"uuid": "3d62e595-257a-4bb1-a173-4e3821ef0803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15441", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Vulnerable-Docker--CVE-2023-30212-*\nGithub: https://github.com/VisDev23/Vulnerable-Docker--CVE-2023-30212-", "creation_timestamp": "2026-07-31T00:00:33.581611Z"}, {"uuid": "2290659c-24f6-4faf-8f27-8c32077768e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15434", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Vulnerable-Docker-CVE-2023-30212*\nGithub: https://github.com/VisDev23/Vulnerable-Docker-CVE-2023-30212", "creation_timestamp": "2026-07-31T00:00:33.621235Z"}, {"uuid": "7bd9870e-0980-422d-99b8-1131ccc69329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15449", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-*\nGithub: https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-", "creation_timestamp": "2026-07-31T00:00:33.706939Z"}, {"uuid": "df8fd058-b698-4e2a-93f9-1200caeccca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15446", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212*\nGithub: https://github.com/AAsh035/CVE-2023-30212", "creation_timestamp": "2026-07-31T00:00:33.748204Z"}, {"uuid": "c049cdc5-9ba1-4c96-9dc9-70bb9cd2d33d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13843", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploite-CVE-2023-30212-vulnerability*\nGithub: https://github.com/libasv/Exploite-CVE-2023-30212-vulnerability", "creation_timestamp": "2026-07-31T00:00:24.405165Z"}, {"uuid": "7c7d6183-bd00-4c6f-9ea0-8cf0a73ecb25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13841", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploit-the-CVE-2023-30212-vulnerability*\nGithub: https://github.com/libas7994/Exploit-the-CVE-2023-30212-vulnerability", "creation_timestamp": "2026-07-31T00:00:24.451625Z"}, {"uuid": "dce99a88-7175-4b67-93f2-ae9ccab865be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15328", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-OURPHP-Vulnerability*\nGithub: https://github.com/MaThEw-ViNcEnT/CVE-2023-30212-OURPHP-Vulnerability", "creation_timestamp": "2026-07-31T00:00:33.152222Z"}, {"uuid": "d15ca5b6-0b73-4213-be53-6e6d2d8c9992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15388", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-POC*\nGithub: https://github.com/arunsnap/CVE-2023-30212-POC", "creation_timestamp": "2026-07-31T00:00:33.225105Z"}, {"uuid": "63293f2d-ad83-4b9f-a4ee-9574c682037b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13838", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *-CVE-2023-30212-Vulnerability*\nGithub: https://github.com/libasmon/-CVE-2023-30212-Vulnerability", "creation_timestamp": "2026-07-31T00:00:24.294367Z"}, {"uuid": "41806408-7a13-4360-a718-749091f6a38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13833", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212*\nGithub: https://github.com/libasmon/-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212", "creation_timestamp": "2026-07-31T00:00:24.330515Z"}, {"uuid": "0dd83631-4637-4d61-9a55-1988548d2785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13832", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Vulnerable-Docker-Environment-CVE-2023-30212*\nGithub: https://github.com/libasmon/Vulnerable-Docker-Environment-CVE-2023-30212", "creation_timestamp": "2026-07-31T00:00:24.366729Z"}, {"uuid": "a398f1f0-4911-4fe5-a382-2537629b3766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13848", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploite-CVE-2023-30212-Vulnerability*\nGithub: https://github.com/libasmon/Exploite-CVE-2023-30212-Vulnerability", "creation_timestamp": "2026-07-31T00:00:24.564868Z"}, {"uuid": "01ee59d2-a40d-4c4a-90cd-feecb24a1ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13934", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212*\nGithub: https://github.com/kai-iszz/CVE-2023-30212", "creation_timestamp": "2026-07-31T00:00:24.764584Z"}, {"uuid": "152ed08d-cf5d-41b2-b652-95223bfbd449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "published-proof-of-concept", "source": "https://t.me/ctftm/581", "content": "Rudder Server < 1.3.0-rc.1\u00a0 - SQL Injection\n\ncve-2023-30625\n\nPOST /v1/warehouse/pending-events HTTP/1.1\nHost: {{Hostname}}\n\n{\"source_id\": \"test'; copy (SELECT '') to program 'id'-- - \"}", "creation_timestamp": "2024-02-22T07:58:21.000000Z"}, {"uuid": "0243f78c-9644-4d52-9b19-47c6fda95000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13708", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-LAB*\nGithub: https://github.com/kuttappu123/CVE-2023-30212-LAB", "creation_timestamp": "2026-07-31T00:00:23.229427Z"}, {"uuid": "1281483b-c743-4798-a768-248e474ef4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13696", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30145.*\nGithub: https://github.com/paragbagul111/CVE-2023-30145.", "creation_timestamp": "2026-07-31T00:00:23.320024Z"}, {"uuid": "e172f5b0-6347-412f-8e18-e4c7d5436a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13768", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-30212-Lab*\nGithub: https://github.com/mallutrojan/CVE-2023-30212-Lab", "creation_timestamp": "2026-07-31T00:00:23.665815Z"}, {"uuid": "7e55fde8-62df-436c-84cd-473bdc9d108f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13813", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *r-CVE-2023-30212-lab*\nGithub: https://github.com/Anandhu990/r-CVE-2023-30212-lab", "creation_timestamp": "2026-07-31T00:00:23.761902Z"}, {"uuid": "c5df5241-5732-456d-82e8-affad6f1b0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3009", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2023-3009*\nGithub: https://github.com/mnqazi/CVE-2023-3009", "creation_timestamp": "2026-07-31T00:00:25.550707Z"}, {"uuid": "357e8003-6511-481d-a0f4-b7886607e07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15236", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30777*\nGithub: https://github.com/Alucard0x1/CVE-2023-30777", "creation_timestamp": "2026-07-31T00:00:31.932297Z"}, {"uuid": "26eda6dd-68a6-4078-bce7-3650b2354ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15233", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-Vulnerable-Lab*\nGithub: https://github.com/AAsh035/CVE-2023-30212-Vulnerable-Lab", "creation_timestamp": "2026-07-31T00:00:31.977205Z"}, {"uuid": "6f59ef6d-dc6e-437e-bad6-4ae4d002d540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30347", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15495", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30347*\nGithub: https://github.com/huzefa2212/CVE-2023-30347", "creation_timestamp": "2026-07-31T00:00:34.001222Z"}, {"uuid": "0a7f01ca-050b-467f-b0a0-ea48f8e36ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/information_security_channel/50052", "content": "Google Patches Third Chrome Zero-Day of 2023\nhttps://www.securityweek.com/google-patches-third-chrome-zero-day-of-2023/\n\nGoogle has released a Chrome 114 security update that patches CVE-2023-3079, the third zero-day vulnerability patched in the browser in 2023.\nThe post Google Patches Third Chrome Zero-Day of 2023 (https://www.securityweek.com/google-patches-third-chrome-zero-day-of-2023/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2023-06-06T11:57:59.000000Z"}, {"uuid": "bea0028f-8a37-447b-8fa9-9dbe724ada48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/thehackernews/3647", "content": "\ud83d\udea8 Heads up, network admins! \n \nMikroTik RouterOS vulnerability (CVE-2023-30799) exposes 500,000+ systems to potential exploitation!   \n \nRead: https://thehackernews.com/2023/07/critical-mikrotik-routeros.html \n \nUpgrade to RouterOS 6.49.8 or 7.x ASAP!", "creation_timestamp": "2023-07-26T07:06:26.000000Z"}, {"uuid": "2204de84-2376-458b-b3ac-aa649103a1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30226", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16616", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30226*\nGithub: https://github.com/ifyGecko/CVE-2023-30226", "creation_timestamp": "2026-07-31T00:00:39.896843Z"}, {"uuid": "ac23584a-00eb-4395-af09-7293ce531cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30383", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/17071", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30383*\nGithub: https://github.com/a2ure123/CVE-2023-30383", "creation_timestamp": "2026-07-31T00:00:42.713536Z"}, {"uuid": "9f829b40-78c3-451a-a1e5-6353ae92199e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://t.me/thehackernews/3257", "content": "Two critical flaws (CVE-2023-29199 / CVE-2023-30547) have been discovered in vm2 JavaScript library that could allow attackers to break out of sandbox protections, potentially leading to RCE attacks.\n\nRead details: https://thehackernews.com/2023/04/critical-flaws-in-vm2-javascript.html", "creation_timestamp": "2023-04-19T06:55:39.000000Z"}, {"uuid": "2e4c90f7-f54c-4d62-8390-9c80f21acefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/thehackernews/3323", "content": "If you're using the Advanced Custom Fields plugin for WordPress, make sure to update to version 6.1.6 as soon as possible! \n \nA security flaw (CVE-2023-30777) has been discovered that could allow for reflected cross-site scripting attacks. \n \nhttps://thehackernews.com/2023/05/new-vulnerability-in-popular-wordpress.html", "creation_timestamp": "2023-05-06T07:50:16.000000Z"}, {"uuid": "f7d8f636-c835-4cd0-86dd-cd91377ff67c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/17304", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30765*\nGithub: https://github.com/0xfml/CVE-2023-30765", "creation_timestamp": "2026-07-31T00:00:43.392830Z"}, {"uuid": "18ea6e18-1537-44d2-8a37-430e4d6093da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30367", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/17422", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30367-mRemoteNG-password-dumper*\nGithub: https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper", "creation_timestamp": "2026-07-31T00:00:44.487151Z"}, {"uuid": "375e7716-f294-475d-b50a-d7ca8ee1c8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "exploited", "source": "https://t.me/xakep_ru/14044", "content": "\u0411\u0430\u0433 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f WordPress \u0441\u0442\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 Advanced Custom Fields (CVE-2023-30777) \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 24 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043b\u044f \u043d\u0435\u0435 \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\n\nhttps://xakep.ru/2023/05/16/advanced-custom-fields/", "creation_timestamp": "2023-05-16T16:05:44.000000Z"}, {"uuid": "4e478106-12c1-4fd7-a80b-f253aceb86f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/kuRtP95_bwqTzj7s5jrSfYah8B2nN-WlVBQbtzHXXkRid4vWgw", "content": "", "creation_timestamp": "2025-04-09T04:24:46.000000Z"}, {"uuid": "a599588b-bb7e-40f1-bc7f-529353681ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30185", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12251", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30185*\nGithub: https://github.com/c7w1n/CVE-2023-30185", "creation_timestamp": "2026-07-31T01:00:04.387507Z"}, {"uuid": "b4c18e0a-fcf8-4858-af50-486814ccaf95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "seen", "source": "https://t.me/thebugbountyhunter/7486", "content": "Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service\n\nhttps://blog.silentsignal.eu/2023/07/03/ibm-i-dde-vulnerability-cve-2023-30990/", "creation_timestamp": "2023-07-03T15:45:35.000000Z"}, {"uuid": "c182ba9d-0cf6-4a9a-93a3-a6cc7da03d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/7571", "content": "Exploiting MikroTik RouterOS Hardware with CVE-2023-30799\n\nhttps://vulncheck.com/blog/mikrotik-foisted-revisited", "creation_timestamp": "2023-07-25T20:27:23.000000Z"}, {"uuid": "9ce5acb6-c5a8-4219-8a24-63c83a9a9380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/593", "content": "https://github.com/WWBN/AVideo/security/advisories/GHSA-2mhh-27v7-3vcx\nAVideo Authenticated RCE\ncve-2023-30854\n#github", "creation_timestamp": "2023-05-25T09:36:02.000000Z"}, {"uuid": "5390adfb-985d-40b2-8a7f-c0af57a267ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/964", "content": "https://github.com/mistymntncop/CVE-2023-3079\n#github", "creation_timestamp": "2023-08-30T09:31:26.000000Z"}, {"uuid": "6314e5bf-e439-41a9-90dc-bf6d12e03a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/980", "content": "https://github.com/d0rb/CVE-2023-30943\n#github", "creation_timestamp": "2023-09-01T05:35:16.000000Z"}, {"uuid": "02950b8f-e80e-4074-ba20-c53efa43d1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1281", "content": "Rudder Server < 1.3.0-rc.1  - SQL Injection\n\ncve-2023-30625\n\nPOST /v1/warehouse/pending-events HTTP/1.1\nHost: {{Hostname}}\n\n{\"source_id\": \"test'; copy (SELECT '') to program 'id'-- - \"}\n\n#poc #exploit", "creation_timestamp": "2023-10-14T17:07:29.000000Z"}, {"uuid": "7da988b2-8c9b-48dd-99ce-d963bf7400de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1689", "content": "https://github.com/rvizx/CVE-2023-30547\n\n#github", "creation_timestamp": "2023-12-10T16:04:46.000000Z"}, {"uuid": "a052aa5e-1a08-4445-88a7-d266271a4344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-31T02:00:03.651124Z"}, {"uuid": "d9f084ac-75a6-458a-b6e6-edc735273349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30839", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11700", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *https-nvd.nist.gov-vuln-detail-CVE-2023-30839*\nGithub: https://github.com/drkbcn/https-nvd.nist.gov-vuln-detail-CVE-2023-30839", "creation_timestamp": "2026-07-31T03:00:04.505297Z"}, {"uuid": "4a7a7651-ff3d-4c20-ba94-7eee657f9700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9566", "content": "#exploit\n1. CVE-2023-30547:\nVM2 Sandbox Escape Vulnerability\nhttps://github.com/rvizx/CVE-2023-30547\n\n2. CVE-2023-21285:\nAndroid MediaSessionRecord*java setMetadata information disclosure\nhttps://github.com/uthrasri/framework_base_CVE-2023-21285_NoPatch\n\n3. CVE-2021-34473:\nMicrosoft Exchange Server RCE\nhttps://github.com/kh4sh3i/ProxyShell", "creation_timestamp": "2023-12-11T17:48:44.000000Z"}, {"uuid": "a62e4048-bf1e-4aeb-a82f-073128338ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/sdnv_funkhole/1057", "content": "MikroTik: CVE-2023-30799\n\nMikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.", "creation_timestamp": "2026-08-01T20:00:06.054719Z"}, {"uuid": "571c413b-9695-492a-baad-f8484c71c5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30458", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11324", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30458*\nGithub: https://github.com/d34dun1c02n/CVE-2023-30458", "creation_timestamp": "2026-07-31T04:00:04.138027Z"}, {"uuid": "88efdad7-dc64-4149-8fba-fc5b50547b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8368", "content": "#exploit\n1. CVE-2020-0683:\nWindows MSI \"Installer service\" EoP\nhttps://github.com/padovah4ck/CVE-2020-0683\n\n2. CVE-2023-30145:\nCamaleon CMS v2.7.0 - SSTI vulnerability\nhttps://github.com/paragbagul111/CVE-2023-30145\n\n3. CVE-2023-2732:\nMStore API <=3.9.2 - Authentication Bypass\nhttps://github.com/RandomRobbieBF/CVE-2023-2732", "creation_timestamp": "2023-05-26T11:05:13.000000Z"}, {"uuid": "8237ea8f-dd28-4952-9731-4ef581e115ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/8146", "content": "#exploit\n1. CVE-2023-2002:\nLinux Bluetooth: Unauthorized management command execution\nhttps://seclists.org/oss-sec/2023/q2/31\n\n2. CVE-2023-30547:\nSandbox Escape in vm2 <= 3.9.16\nhttps://gist.github.com/leesh3288/381b230b04936dd4d74aaf90cc8bb244", "creation_timestamp": "2023-04-19T11:00:23.000000Z"}, {"uuid": "621db306-e18a-4305-b33c-16533371eb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30350", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8238", "content": "#exploit\n1. CVE-2023-30350:\nFS S3900-24T4S Privilege Escalation\nhttps://packetstormsecurity.com/files/172124/FS-S3900-24T4S-Privilege-Escalation.html\n\n2. Apache Solr 8.3.1\nRCE from exposed administration interface\nhttps://blog.scrt.ch/2023/05/01/solr-rce-from-exposed-administration-interface", "creation_timestamp": "2023-05-04T13:29:39.000000Z"}, {"uuid": "82837930-d632-43fe-a19e-d9d213c94b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30237", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8244", "content": "#exploit\n1. CVE-2023-0386:\nLinux Kernel LPE\nhttps://github.com/xkaneiki/CVE-2023-0386\n\n2. CVE-2023-30237:\nCyberGhost VPN client EoP vulnerability\nhttps://www.pentestpartners.com/security-blog/bullied-by-bugcrowd-over-kape-cyberghost-disclosure", "creation_timestamp": "2023-05-06T12:46:15.000000Z"}, {"uuid": "294c0c07-be4d-484d-b5e6-9050fa568e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30347", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8535", "content": "#exploit\n1. CVE-2023-30347:\nReflected Cross-Site-Scripting in Neox Contact Center\nhttps://github.com/huzefa2212/CVE-2023-30347\n\n2. CVE-2023-1454:\nJeecg Boot qurestSql SQL vuln\nhttps://github.com/Sweelg/CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln", "creation_timestamp": "2023-06-22T11:01:08.000000Z"}, {"uuid": "252e7014-2e5b-4321-b9a0-5a6f83da6eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8378", "content": "#exploit\n1. CVE-2022-36449:\nMali GPU Kernel Driver - improper GPU memory processing operations\nhttps://github.blog/2023-05-25-rooting-with-root-cause-finding-a-variant-of-a-project-zero-bug\n\n2. CVE-2023-30212:\nDocker Exploit (XSS)\nhttps://github.com/libasmon/Exploite-CVE-2023-30212-Vulnerability\nhttps://github.com/libasmon/Exploite-CVE-2023-30212-Vulnera", "creation_timestamp": "2023-06-12T00:58:47.000000Z"}, {"uuid": "8f560108-06ef-4324-984e-6b9e544a7c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3009", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/8402", "content": "#exploit\n1. CVE-2023-34152 / CVE-2023-34151:\nShell Command Injection in ImageMagick / \nUndefined behaviors of casting double to size_t in svg, mvg, and other coders\nhttps://github.com/ImageMagick/ImageMagick/issues/6341\n]-> CVE-2023-34153:\u00a0Shell command injection vulnerability\nhttps://github.com/ImageMagick/ImageMagick/issues/6338\n\n2. CVE-2023-28782:\nPHP Object Injection Flaw in WordPress Gravity Forms Plugin\nhttps://securityonline.info/cve-2023-28782-php-object-injection-flaw-in-wordpress-gravity-forms-plugin-with-1-million-active-installations\n\n3. CVE-2023-3009:\nStored XSS on item name - Bypassing CVE-2023-2516 in TeamPass <3.0.9\nhttps://github.com/mnqazi/CVE-2023-3009", "creation_timestamp": "2023-06-01T13:16:22.000000Z"}, {"uuid": "14c346a4-2c15-41bf-b4b2-b4883e21103e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8508", "content": "#exploit\n1. CVE-2023-25610:\nRCE vulnerability in FortiOS\nhttps://github.com/qi4L/CVE-2023-25610\n\n2. CVE-2023-30777:\nXSS in the Advanced Custom Fields WordPress plugin\nhttps://github.com/Alucard0x1/CVE-2023-30777\n\n3. CVE-2023-24078:\nRCE in FuguHub/BarracudaDrive\nhttps://github.com/rio128128/CVE-2023-24078", "creation_timestamp": "2023-06-18T12:50:26.000000Z"}, {"uuid": "18735df4-f706-4aae-8112-d4a2dd9c6685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8634", "content": "#exploit\n1. CVE-2023-31248:\nLinux Kernel nftables UAF LPE\nhttps://github.com/kungfulon/nf-tables-lpe\n\n2. CVE-2023-30990:\nUnauthenticated RCE in IBM i DDM Service\nhttps://blog.silentsignal.eu/2023/07/03/ibm-i-dde-vulnerability-cve-2023-30990\n\n3. CVE-2020-0911:\nWindows Installer arbitrary content manipulation EoP\nhttps://offsec.almond.consulting/windows-msiexec-eop-cve-2020-0911.html", "creation_timestamp": "2024-10-31T15:27:49.000000Z"}, {"uuid": "778faf36-384e-432e-ba79-6695928d09ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8828", "content": "#exploit\n1. CVE-2023-30533:\nSheetJS CE <0.19.2 - Prototype Pollution\nhttps://github.com/BenEdridge/CVE-2023-30533\n\n2. CVE-2023-35356:\nWindows Kernel Security Descriptor UaF\nhttps://packetstormsecurity.com/files/174118/Microsoft-Windows-Kernel-Security-Descriptor-Use-After-Free.html\n\n3. Java Debugger for Visual Studio Code - RCE https://www.mcnulty.blog/posts/dap-csrf", "creation_timestamp": "2023-08-11T11:17:53.000000Z"}, {"uuid": "336e2cac-e25f-43dd-900d-3765f6ce1fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8735", "content": "#Hardware_Security\n1. Zenbleed - vulnerability of AMD Zen2 processors (CVE-2023-20593)\nhttps://lock.cmpxchg8b.com/zenbleed.html\n2. Exploiting MikroTik RouterOS Hardware with CVE-2023-30799\nhttps://vulncheck.com/blog/mikrotik-foisted-revisited", "creation_timestamp": "2023-07-26T11:00:30.000000Z"}, {"uuid": "965b19a0-7626-4a31-9cc0-1ee2a3afea1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8865", "content": "#exploit\n1. CVE-2023-3079:\nType confusion in V8 in Google Chrome\nhttps://github.com/mistymntncop/CVE-2023-3079\n\n2. CVE-2023-38836:\nExploit for file upload vulnerability in BoidCMS <=2.0.0\nhttps://github.com/1337kid/CVE-2023-38836", "creation_timestamp": "2023-08-17T12:25:33.000000Z"}, {"uuid": "1fd04308-4db6-49b3-8c46-01b8bef2ea83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30845", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9072", "content": "#exploit\n1. PoC for demonstrating Race Conditions on Websockets\nhttps://github.com/redrays-io/WS_RaceCondition_PoC\n\n2. CVE-2023-4863:\nHeap buffer overflow in the WebP image library\nhttps://blog.isosceles.com/the-webp-0day\n]-> https://github.com/mistymntncop/CVE-2023-4863\n\n3. CVE-2023-30845:\nJWT authentication bypass via \"X-HTTP-Method-Override\"\nhttps://github.com/himori123/-CVE-2023-30845", "creation_timestamp": "2023-09-23T12:27:01.000000Z"}, {"uuid": "724e4d51-55d1-4d30-9c0e-1deaa51fd2f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3076", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9060", "content": "#tools\n#Offensive_security\n1. Automatic Mass Tool for check/exploiting vulnerability in CVE-2023-3076: MStore API < 3.9.9 - Unauthenticated Privilege Escalation (Mass Add Admin + PHP File Upload)\nhttps://github.com/im-hanzou/MSAPer\n2. X-Recon - tool to find web page inputs for XSS fuzzing\nhttps://github.com/joshkar/X-Recon", "creation_timestamp": "2023-09-21T11:00:56.000000Z"}, {"uuid": "e541df9f-5ad6-4098-a39f-5fdf7d3f546e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8948", "content": "#exploit\n1. CVE-2023-41717:\nInappropriate file type control in Zscaler Proxy\nhttps://github.com/federella/CVE-2023-41717\n\n2. CVE-2023-30943:\nMoodle Vulnerabilities Exploits\nhttps://github.com/d0rb/CVE-2023-30943", "creation_timestamp": "2023-09-01T11:00:45.000000Z"}, {"uuid": "a702fdb9-356e-4d15-b1be-9807a0e49ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8993", "content": "#tools\n#Blue_Team_Techniques\nA Python-based tool to detect the CVE-2023-30943 vulnerability in Moodle\nhttps://github.com/Chocapikk/CVE-2023-30943", "creation_timestamp": "2023-09-09T12:36:01.000000Z"}, {"uuid": "07c17151-2d40-4bd2-b5c5-03c1d38df58d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30800", "type": "seen", "source": "Telegram/cPqT6nqiD-thauJ-DKhE53G7U-5ABg4xxTY3u1WPg9UTpjI", "content": "", "creation_timestamp": "2023-09-08T03:40:16.000000Z"}, {"uuid": "abe3a93d-bc69-4c1a-826e-214f56d32cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30845", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/5519", "content": "CVE-2023-30845\n\nJWT authentication bypass via \"X-HTTP-Method-Override\"\n\nGithub\n\n#CVE #Bypass #Exploit \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-09-24T09:54:42.000000Z"}, {"uuid": "66587b5d-ae4d-4754-aa98-6cc4f2436b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/R3dmg75m21qRaKQfqNH2xrWXCFHtj6HG2HSZ-XRnjPpnmv0", "content": "", "creation_timestamp": "2023-07-20T01:14:05.000000Z"}, {"uuid": "bf6f52cd-7a12-482a-ad6c-d605b88d4298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "Telegram/EIFxJITUDV8gcMx7pqF7TgzjgxOMYFmvaCKm6RSR5pXseFs", "content": "", "creation_timestamp": "2023-07-26T11:38:46.000000Z"}, {"uuid": "ffbd2be8-098c-4cb4-9470-2d2781174e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/5749", "content": "CVE-2023-30547 - PoC Exploit for VM2 Sandbox Escape Vulnerability\n\nGithub \n\n#cve #poc #exploit \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-12-13T05:12:38.000000Z"}, {"uuid": "e1d3a165-5f14-46fb-a623-0957fb724d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30459", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10377", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30459*\nGithub: https://github.com/Toxich4/CVE-2023-30459", "creation_timestamp": "2026-07-31T07:00:04.002897Z"}, {"uuid": "8c7e3c6a-a5ee-4ad1-8d7f-f2ee40b4b792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2244", "content": "#Malware_analysis\n1. CVE-2023-30547:\nVM2 Sandbox Escape Vulnerability\nhttps://github.com/rvizx/CVE-2023-30547\n\n2. CVE-2023-21285:\nAndroid MediaSessionRecord*java setMetadata information disclosure\nhttps://github.com/uthrasri/framework_base_CVE-2023-21285_NoPatch", "creation_timestamp": "2024-08-16T08:56:11.000000Z"}, {"uuid": "6c38e903-c648-4661-bcab-a8fcebfd9511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3076", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1036", "content": "#tools\n#Offensive_security\n1. Automatic Mass Tool for check/exploiting vulnerability in CVE-2023-3076: MStore API < 3.9.9 - Unauthenticated Privilege Escalation (Mass Add Admin + PHP File Upload)\nhttps://github.com/im-hanzou/MSAPer\n2. X-Recon - tool to find web page inputs for XSS fuzzing\nhttps://github.com/joshkar/X-Recon", "creation_timestamp": "2024-08-16T08:26:42.000000Z"}, {"uuid": "47955859-ee33-40f4-85e2-15ee08ed1673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30845", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1103", "content": "#exploit\n1. PoC for demonstrating Race Conditions on Websockets\nhttps://github.com/redrays-io/WS_RaceCondition_PoC\n\n2. CVE-2023-4863:\nHeap buffer overflow in the WebP image library\nhttps://blog.isosceles.com/the-webp-0day\n]-> https://github.com/mistymntncop/CVE-2023-4863\n\n3. CVE-2023-30845:\nJWT authentication bypass via \"X-HTTP-Method-Override\"\nhttps://github.com/himori123/-CVE-2023-30845", "creation_timestamp": "2024-08-16T08:28:21.000000Z"}, {"uuid": "cdd74797-81b5-456f-b25b-611bb28dbc1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/1417", "content": "https://github.com/n00o00b/CVE-2023-30258-RCE-POC\n\nPOC for CVE-2023-30258-RCE by n0o0b\n#github #poc", "creation_timestamp": "2025-03-28T12:33:29.000000Z"}, {"uuid": "b795308a-bbc0-4342-9aa0-d7490db66506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96437", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Codify-TJNULL-OSCP-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R3fr4kt\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 12:17:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n Walkthrough for Codify (Linux - Easy). Exploits vm2 RCE (CVE-2023-30547), SQLite DB hash extraction, Bcrypt cracking with John, and Privilege Escalation via Bash wildcard comparison in `mysql-backup.sh`.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T14:00:04.893420Z"}, {"uuid": "836543a8-790f-490d-b8c5-100032102597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/secmedia/1266", "content": "\u0420\u043e\u0443\u0442\u0435\u0440\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 MikroTik \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0438\u0437-\u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-30799 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u00ab\u0441\u0443\u043f\u0435\u0440\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u00bb, \u0442\u043e \u0435\u0441\u0442\u044c \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.", "creation_timestamp": "2023-07-27T09:20:03.000000Z"}, {"uuid": "83c78e37-bf6a-4a9c-8257-44c6114bedf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/secmedia/1164", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-3079 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome. \u0412 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438 \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0441\u0442\u0430\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438.", "creation_timestamp": "2023-06-08T15:06:38.000000Z"}, {"uuid": "22690f4f-4ec1-49c3-bb2b-e1d83c9e7125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/sdnv_funkhole/1057", "content": "MikroTik: CVE-2023-30799\n\nMikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.", "creation_timestamp": "2026-08-02T00:00:22.180143Z"}, {"uuid": "250bdb00-0054-4fbe-90ae-a49dbaf2de3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-03T16:00:05.474883Z"}, {"uuid": "5997c78a-1439-4cb2-afcf-f2293f5d2220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "seen", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-29T23:00:05.721590Z"}, {"uuid": "77e7475f-016b-4448-913a-13111a048b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "published-proof-of-concept", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-30T00:00:07.582407Z"}, {"uuid": "fd376e46-642d-4bb1-9343-2d4fbac6314e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "published-proof-of-concept", "source": "https://t.me/cisoclub/2475", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (10-16 \u043c\u0430\u044f)\n\n1\ufe0f\u20e3 \u0412 \ud83d\udcf2Telegram \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \ud83c\udf4fMacBook.\n\n2\ufe0f\u20e3 \ud83e\uddb9\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \ud83d\udcf0WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 Advanced Custom Fields (CVE-2023-30777) \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043b\u044f \u043d\u0435\u0451 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\n\n3\ufe0f\u20e3 \u0421\u0435\u0442\u044c \u0431\u043b\u043e\u043a\u0447\u0435\u0439\u043d\u0430 Sui \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0442\u0438\u0445\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \ud83d\udcb0\u00ab\u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\u00bb.\n\n4\ufe0f\u20e3 \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u00ab\u043c\u0430\u0439\u0441\u043a\u0438\u0445\u00bb \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e\u0431 \ud83d\udee0\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 38 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \ud83d\udcbb\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \n\n5\ufe0f\u20e3 \ud83c\uddfa\ud83c\uddf8\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 Linux, \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n6\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 WordPress \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \ud83c\uddee\ud83c\uddf9Ferrari \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Ferrari, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Claroty, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 IoT, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \ud83d\udcdd\u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Netgear.\n\n8\ufe0f\u20e3 \ud83c\udde9\ud83c\uddea\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SAP \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 18 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438.", "creation_timestamp": "2026-08-03T20:00:04.452205Z"}, {"uuid": "3db18bdd-b093-411d-b1f0-d9f93d86814a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/cisoclub/2538", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (1-7 \u0438\u044e\u043d\u044f)\n\n1\ufe0f\u20e3 \u0412 Google Chrome \u0431\u044b\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0442\u0440\u0435\u0442\u044c\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 2023 \u0433\u043e\u0434\u0443. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-3079.\n\n2\ufe0f\u20e3 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Gmail, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044b\u0448\u0435 1,8 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u0440\u0438\u0441 \u041f\u043b\u0430\u043c\u043c\u0435\u0440 \u0432\u044b\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00ab\u0413\u043e\u043b\u0443\u0431\u044b\u0435 \u0433\u0430\u043b\u043e\u0447\u043a\u0438\u00bb, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0438\u0445 \u043d\u0430 \u0432\u0441\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \ud83d\udce8email-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 0d \u0438\u0437 dWallet Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0441\u0435\u0442\u0438 Tron \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043c\u0443\u043b\u044c\u0442\u0438\u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \ud83d\udcb0$500 \u043c\u043b\u043d. \n\n4\ufe0f\u20e3 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0444\u0438\u0440\u043c\u0430 Eclysium \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \ud83c\uddf9\ud83c\uddfcGigabyte UEFI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442.\n\n5\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438 Microsoft \ud83d\udd0e\u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Migraine (CVE-2023-32369) \u0432 macOS. \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \ud83c\udf4fApple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0441 root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 System Integrity Protection (SIP).\n\n6\ufe0f\u20e3 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 KeePass \ud83e\ude9b\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0443\u044e \u0443\u0437\u043d\u0430\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u044c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435. \u041c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.54, \u0437\u0430 \u0441\u0447\u0435\u0442 \u0447\u0435\u0433\u043e \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-32784, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \ud83d\udcdd\u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zyxel \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \ud83d\udcbe\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b ATP, USG Flex, VPN \u0438 ZyWALL/USG, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.", "creation_timestamp": "2026-08-03T20:00:04.665413Z"}, {"uuid": "0634ec6f-b37a-4269-98bf-2cba6c4d044c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30459", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10377", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30459*\nGithub: https://github.com/Toxich4/CVE-2023-30459", "creation_timestamp": "2026-08-01T00:00:38.859558Z"}, {"uuid": "697b2062-62f8-4f63-b250-396fea2ed22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30458", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11324", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30458*\nGithub: https://github.com/d34dun1c02n/CVE-2023-30458", "creation_timestamp": "2026-08-01T00:00:42.745244Z"}, {"uuid": "fef36e03-ef85-4f44-b23b-e14209cebbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30185", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12251", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30185*\nGithub: https://github.com/c7w1n/CVE-2023-30185", "creation_timestamp": "2026-08-01T00:00:46.002046Z"}, {"uuid": "f8369c08-c707-41ff-994a-c19dcd05d4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30839", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11700", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *https-nvd.nist.gov-vuln-detail-CVE-2023-30839*\nGithub: https://github.com/drkbcn/https-nvd.nist.gov-vuln-detail-CVE-2023-30839", "creation_timestamp": "2026-08-01T00:00:44.106483Z"}, {"uuid": "9e2ba4e1-0674-4e29-8ddc-20be147d1776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-08-01T00:00:44.371683Z"}, {"uuid": "be8d5410-a6f7-4092-9273-3ddeaa360cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3019", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "View CSAF\n\nSummary\n\nRuggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens Ruggedcom Rox are affected:\n\n\n\nRUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 9.8\nSiemens\nSiemens Ruggedcom Rox\nUncontrolled Recursion, Integer Underflow (Wrap or Wraparound), Out-of-bounds Write, Out-of-bounds Read, Improper Input Validation, Heap-based Buffer Overflow, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Use After Free, Improper Validation of Syntactic Correctness of Input, Improper Control of a Resource Through its Lifetime, Integer Overflow or Wraparound, Incorrect Calculation of Buffer Size, Use of Weak Hash, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Stack-based Buffer Overflow, Expired Pointer Dereference\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13103\n<div class=\"csaf-accordion-content\">\n\nA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13104\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13106\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14192\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14193\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14194\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14195\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the \"else\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14196\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14197\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.0\n9.1\nCRITICAL\nCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14198\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14199\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14200\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14201\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14202\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14203\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14204\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2020-10648\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-2347\n<div class=\"csaf-accordion-content\">\n\nThere exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30552\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30790\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-34835\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the \"i2c md\" command enables the corruption of the return address pointer of the do_i2c_md function.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-3019\n<div class=\"csaf-accordion-content\">\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-27043\n<div class=\"csaf-accordion-content\">\n\nThe email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-1286 Improper Validation of Syntactic Correctness of Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-3447\n<div class=\"csaf-accordion-content\">\n\nA heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-22365\n<div class=\"csaf-accordion-content\">\n\nlinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-664 Improper Control of a Resource Through its Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57256\n<div class=\"csaf-accordion-content\">\n\nAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57258\n<div class=\"csaf-accordion-content\">\n\nInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-0395\n<div class=\"csaf-accordion-content\">\n\nWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-131 Incorrect Calculation of Buffer Size\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-3576\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-328 Use of Weak Hash\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6020\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-7425\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9714\n<div class=\"csaf-accordion-content\">\n\nUncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-46836\n<div class=\"csaf-accordion-content\">\n\nnet-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49794\n<div class=\"csaf-accordion-content\">\n\nA use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-825 Expired Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49796\n<div class=\"csaf-accordion-content\">\n\nA vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported these vulnerabilities to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-577017 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-577017 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "09e77f35-ac7d-43c5-bbe2-79e77fe013b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96437", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Codify-TJNULL-OSCP-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R3fr4kt\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 12:17:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n Walkthrough for Codify (Linux - Easy). Exploits vm2 RCE (CVE-2023-30547), SQLite DB hash extraction, Bcrypt cracking with John, and Privilege Escalation via Bash wildcard comparison in `mysql-backup.sh`.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:37.727639Z"}, {"uuid": "ebd2377e-aeed-4e71-bb24-091856ca1b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "published-proof-of-concept", "source": "https://t.me/cisoclub/2475", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (10-16 \u043c\u0430\u044f)\n\n1\ufe0f\u20e3 \u0412 \ud83d\udcf2Telegram \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \ud83c\udf4fMacBook.\n\n2\ufe0f\u20e3 \ud83e\uddb9\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \ud83d\udcf0WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 Advanced Custom Fields (CVE-2023-30777) \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043b\u044f \u043d\u0435\u0451 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\n\n3\ufe0f\u20e3 \u0421\u0435\u0442\u044c \u0431\u043b\u043e\u043a\u0447\u0435\u0439\u043d\u0430 Sui \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0442\u0438\u0445\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \ud83d\udcb0\u00ab\u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\u00bb.\n\n4\ufe0f\u20e3 \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u00ab\u043c\u0430\u0439\u0441\u043a\u0438\u0445\u00bb \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e\u0431 \ud83d\udee0\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 38 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \ud83d\udcbb\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \n\n5\ufe0f\u20e3 \ud83c\uddfa\ud83c\uddf8\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 Linux, \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n6\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 WordPress \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \ud83c\uddee\ud83c\uddf9Ferrari \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Ferrari, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Claroty, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 IoT, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \ud83d\udcdd\u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Netgear.\n\n8\ufe0f\u20e3 \ud83c\udde9\ud83c\uddea\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SAP \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 18 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438.", "creation_timestamp": "2026-08-04T00:00:27.576127Z"}, {"uuid": "6e225897-fbdf-460b-b3ad-a0a0d670ec54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/cisoclub/2538", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (1-7 \u0438\u044e\u043d\u044f)\n\n1\ufe0f\u20e3 \u0412 Google Chrome \u0431\u044b\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0442\u0440\u0435\u0442\u044c\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 2023 \u0433\u043e\u0434\u0443. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-3079.\n\n2\ufe0f\u20e3 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Gmail, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044b\u0448\u0435 1,8 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u0440\u0438\u0441 \u041f\u043b\u0430\u043c\u043c\u0435\u0440 \u0432\u044b\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00ab\u0413\u043e\u043b\u0443\u0431\u044b\u0435 \u0433\u0430\u043b\u043e\u0447\u043a\u0438\u00bb, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0438\u0445 \u043d\u0430 \u0432\u0441\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \ud83d\udce8email-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 0d \u0438\u0437 dWallet Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0441\u0435\u0442\u0438 Tron \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043c\u0443\u043b\u044c\u0442\u0438\u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \ud83d\udcb0$500 \u043c\u043b\u043d. \n\n4\ufe0f\u20e3 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0444\u0438\u0440\u043c\u0430 Eclysium \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \ud83c\uddf9\ud83c\uddfcGigabyte UEFI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442.\n\n5\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438 Microsoft \ud83d\udd0e\u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Migraine (CVE-2023-32369) \u0432 macOS. \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \ud83c\udf4fApple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0441 root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 System Integrity Protection (SIP).\n\n6\ufe0f\u20e3 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 KeePass \ud83e\ude9b\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0443\u044e \u0443\u0437\u043d\u0430\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u044c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435. \u041c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.54, \u0437\u0430 \u0441\u0447\u0435\u0442 \u0447\u0435\u0433\u043e \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-32784, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \ud83d\udcdd\u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zyxel \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \ud83d\udcbe\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b ATP, USG Flex, VPN \u0438 ZyWALL/USG, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.", "creation_timestamp": "2026-08-04T00:00:27.771559Z"}, {"uuid": "05a23e35-daab-4579-a303-756c514828be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-04T00:00:33.718756Z"}, {"uuid": "b4bfbcbe-8097-42ca-973d-115c98b01276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3567", "content": "Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service https://blog.silentsignal.eu/2023/07/03/ibm-i-dde-vulnerability-cve-2023-30990/", "creation_timestamp": "2026-08-02T16:02:13.585063Z"}, {"uuid": "8dd1d8c7-3475-44ab-9c58-9ecff60b5a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-30620", "type": "published-proof-of-concept", "source": "https://github.com/mindsdb/minds-platform/security/advisories/GHSA-2g5w-29q9-w6hx", "content": "", "creation_timestamp": "2023-03-30T14:30:58.000000Z"}, {"uuid": "df13f481-3b3f-47a5-96f2-99c3c870ade0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-30860", "type": "published-proof-of-concept", "source": "https://github.com/WWBN/AVideo/security/advisories/GHSA-xr9h-p2rc-rpqm", "content": "", "creation_timestamp": "2023-04-29T00:55:48.000000Z"}, {"uuid": "84c22e83-954b-4b26-b1a5-cc14c245651e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-30547", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-ch3r-j5x3-6q2m", "content": "", "creation_timestamp": "2023-04-20T14:37:53.000000Z"}, {"uuid": "c731d4a7-5418-4bbe-9e8f-2115f2ce9aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "Telegram/8oARSc3tK43-8Onaw2HJov2o6UEMG8Id6VhyomlrqnU5gqA", "content": "", "creation_timestamp": "2026-08-16T19:00:03.768345Z"}, {"uuid": "5f5e201b-db56-437d-b2b0-34bee23ff3f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "Telegram/8oARSc3tK43-8Onaw2HJov2o6UEMG8Id6VhyomlrqnU5gqA", "content": "", "creation_timestamp": "2026-08-17T00:00:11.986913Z"}, {"uuid": "1403e682-9c9a-4c89-8d2c-4af16fc2fae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30253", "type": "seen", "source": "https://t.me/GithubRedTeam/86509", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2023-30253-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jeanback1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 07:37:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2023-30253 \u2014 Dolibarr ERP/CRM 17.0.0 RCE via PHP code injection (exploit educativo)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-30T08:03:52.000000Z"}, {"uuid": "1d9e7daa-b048-45b8-90b6-901f297cffaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30253", "type": "seen", "source": "Telegram/J8DlVyKG2Ha8_8-DPAHAkyXqdyfexf_y2s10iFJfB3MNT4g", "content": "", "creation_timestamp": "2026-05-30T15:00:07.000000Z"}, {"uuid": "79d301f9-2b53-4023-a166-3ba25e63b24d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30000", "type": "published-proof-of-concept", "source": "Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli_9yVwlxO3uxT68v6BA", "content": "", "creation_timestamp": "2026-08-09T01:19:36.299889Z"}, {"uuid": "d9a8154b-893d-4256-b36d-8e8e47e28a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "Telegram/v74GtQljRyDJ2A4wltr-UY3GGs_d6gDfa5Guy6kc0L5LKE0", "content": "", "creation_timestamp": "2026-08-12T17:00:05.265776Z"}, {"uuid": "087578ca-d533-416b-a940-188a5c449dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "81128057-29e7-412a-8659-6d71913ff5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30587", "type": "seen", "source": "https://t.me/critical_bug/1419", "content": "\ud83d\udd75\ufe0f\u200d\u2642\ufe0f\ud83d\udd13\ud83d\udea8 CVE-2023-30587: \u041e\u0431\u0445\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043e\u0434\u0443\u043b\u044f \"inspector\"\n\n\ud83c\udfc6 \u0411\u0430\u0443\u043d\u0442\u0438: $3495\n\ud83d\udd25 \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c: \u0412\u044b\u0441\u043e\u043a\u0430\u044f\n\n\ud83d\udd0d \u0425\u0430\u043a\u0435\u0440 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0431\u0430\u0433 \u0432 Node.js 20, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c inspector, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \"\u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0432\u043e\u0440\u043a\u0435\u0440\" \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043b\u0430\u0441\u0441\u0430 Worker \u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0430 kIsInternal. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 isInternal \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u043e\u0440\u0430 \u0434\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 WorkerImpl. \u0411\u0430\u0433 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Node.js 20, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\u041d\u0435 \u0437\u0430\u0431\u0443\u0434\u044c\u0442\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u043d\u0430\u0448 \u043a\u0430\u043d\u0430\u043b, \u0433\u0434\u0435 \u043c\u044b \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0440\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438!\n\n\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0430\u0435\u043c \u0432\u0430\u0441 \u043e\u0444\u043e\u0440\u043c\u0438\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0443 \u043d\u0430 \u043a\u0430\u043d\u0430\u043b \u0420\u0435\u043f\u043e\u0440\u0442\u044b \u043f\u0440\u043e\u0441\u0442\u044b\u043c \u044f\u0437\u044b\u043a\u043e\u043c VIP, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c \u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043e\u0442\u0447\u0435\u0442\u043e\u0432.", "creation_timestamp": "2024-08-13T17:00:33.000000Z"}, {"uuid": "5806d779-ae3f-4c4b-a790-0ba1a02ca0bd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85450152-6898-4dd1-b58a-615880d48c67", "content": "", "creation_timestamp": "2026-06-19T12:45:57.633184Z"}, {"uuid": "8ddc71f7-0b78-4244-9447-488f75726628", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d64a93b2-e7fc-43c9-934c-f9fdf2d979e8", "content": "", "creation_timestamp": "2026-06-19T12:46:02.106127Z"}, {"uuid": "7c185868-0c6f-4375-9fab-4796e9648d92", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30801", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acbd87d4-2cf7-443c-b844-85171fed11c0", "content": "", "creation_timestamp": "2026-06-19T12:46:47.202695Z"}, {"uuid": "31372e6e-d27d-474c-86e3-b28a882a8187", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30853", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2d6db456-ac60-4fb2-b2e3-126aa593a288", "content": "", "creation_timestamp": "2026-06-19T12:46:55.845119Z"}, {"uuid": "48c710db-713a-4587-bda1-4c95fec9cf27", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8050af40-5675-4a4e-bd27-686a7770cdec", "content": "", "creation_timestamp": "2026-06-19T12:46:53.932767Z"}, {"uuid": "d79df669-5f28-452d-baf8-7bb47f0ff2d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "published-proof-of-concept", "source": "Telegram/v74GtQljRyDJ2A4wltr-UY3GGs_d6gDfa5Guy6kc0L5LKE0", "content": "", "creation_timestamp": "2026-08-13T00:00:08.632950Z"}, {"uuid": "c108e28e-362a-4584-abd9-db295bcdf4bb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30801", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c04574c-9524-43ab-ac1c-d4d90f85c382", "content": "", "creation_timestamp": "2026-06-23T14:04:05.041504Z"}, {"uuid": "6ef1243c-2f12-42b9-92cf-c705516978b9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1f0e08c9-1525-4830-baf4-61cedd517d85", "content": "", "creation_timestamp": "2026-06-23T14:03:20.991532Z"}, {"uuid": "217dd889-cff7-42e6-a74a-91c0f68ae968", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79d915e8-2719-4d39-a254-dd2fb9ea7da2", "content": "", "creation_timestamp": "2026-06-23T14:03:25.281310Z"}, {"uuid": "8c9699ab-b117-4e15-984e-f5963597e78e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0d813923-f2f9-4172-a22f-967a26ae10fb", "content": "", "creation_timestamp": "2026-06-23T14:05:41.518912Z"}, {"uuid": "151f5d70-dd5a-440c-b2df-de04e5e05c99", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30194", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2d50dca1-64eb-4c4b-8956-ed3257da074a", "content": "", "creation_timestamp": "2026-06-23T14:06:13.263711Z"}, {"uuid": "9e8342b2-e375-482c-a6ed-bbef0b0354a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "3c826134-049a-42ea-b860-b4b6dd804daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30309", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "a0128c35-c04f-4496-a8fb-72af86d44e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30307", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "de2ac8ba-4e97-482f-b25b-37aee3d52879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30305", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "d829ddda-a66e-493d-9db0-13915301d8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30308", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "5ff5427b-70ee-4ca7-bb93-1304807516b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30313", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "3c33c8ad-b44a-4831-b8ca-695651918950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30310", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "76c9b581-ef63-40c7-a98b-fb6cbb421cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30314", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "2fb01c2b-bd1f-4c1a-bcc4-84fd3c55fda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30306", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "fc75bfe1-d9f7-4f82-aca4-5b2e42fcb1f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30312", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "8c329950-e4ee-4cf3-b96b-acb0b48fa480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-30311", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9", "content": "", "creation_timestamp": "2026-08-10T13:31:31.434970Z"}, {"uuid": "b529b588-4316-4849-bc7d-f5945fd55e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "content": "", "creation_timestamp": "2026-06-28T10:00:06.819904Z"}, {"uuid": "19600cbc-72c6-471f-bfd7-93fdf65666af", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc556a07-e13b-4b5b-8c8f-edae8649d61f", "content": "", "creation_timestamp": "2026-06-30T09:22:40.547930Z"}, {"uuid": "bb88af40-c5ee-4bd9-84c9-2fb4d6901946", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-30625", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0e02fd27-6c56-477b-b576-2aed10813fbd", "content": "", "creation_timestamp": "2026-06-30T09:22:58.695156Z"}, {"uuid": "29ec12a4-4b2d-4988-a209-59a7863d8c32", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-30194", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b9267b8-230f-4bce-82a5-fe7aa6df334d", "content": "", "creation_timestamp": "2026-06-30T11:39:53.236480Z"}, {"uuid": "7d099f0e-89cb-4e80-825f-d36cb5c53d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:07.649668Z"}, {"uuid": "d989eb9b-ca76-46fb-845e-1d94f507725d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:00:10.788763Z"}, {"uuid": "fe504137-16a0-4ed2-989c-73ced9251f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://gist.github.com/Raiders0786/13386ce9b5d01281a91b90d60e1225b3", "content": "# Security Audit Profile \u2014 Raiders0786\n\nGMT+5:30, India\nEmail: chiragkcv2020@gmail.com\n\n**Public CVEs:** CVE-2022-4722, CVE-2023-3067\n\n**Public Good Projects:**\n- https://digibastion.com\n- https://web3sec.news\n\n## 1. Portfolio, Languages, and Protocol Experience\n\n- GitHub Security Portfolio: https://github.com/Raiders0786/Raiders0786/blob/main/SECURITY-PORTFOLIO.md\n- X / Research Updates: https://x.com/__Raiders\n- Telegram: https://t.me/raiders0786\n\nMost Web2 security work stays private (NDAs / internal company policy). Many companies don't publish pentest reports publicly \u2014 work is handled internally or via platforms like Synack.\n\nWas part of the **Synack Red Team** (invite-only vetted researcher community, private client infra tested through a controlled VPN). Reports are generated on-platform; IP is owned by Synack + client, so they can't be shared publicly. More on the model: https://www.synack.com/why-synack/\n\nRedacted versions of past private audit reports (screenshots/PDFs attached separately, not inline here):\n- https://drive.google.com/file/d/1GW18fVNiCXGmETISFO88nbDL4FehsQCF/view?usp=sharing\n- https://drive.google.com/file/d/1eWqEZA8N_zgNvfxnTJcOXKC7wWklO8A5/view?usp=sharing\n- https://drive.google.com/file/d/16RCokoE8Yt-svPrz5OvE0RXTG_ky1R-2/view?usp=sharing\n- https://drive.google.com/file/d/1ENOvFNqw4tboNObCmVcGWA5kc7R1dU21/view?usp=sharing\n\n## 2. Public Audit Reports\n\n- **MetaMask Connect** (offchain library) \u2014 with Cyfrin: https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-03-05-cyfrin-metamask-connect-v2.0.pdf\n- **Predict.fun** Chainlink CRE Integration \u2014 with Cyfrin: https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-04-25-cyfrin-predict-cre-integration-v2.1.pdf\n- **Omen.trade** \u2014 decentralized perps/options platform on a Rust matching engine. Full off-chain + on-chain audit (web, backend, mobile app, admin dashboard): https://sherlock-files.ams3.digitaloceanspaces.com/reports/2026.07.02%20-%20Final%20-%20Omen.trade%20Collaborative%20Audit%20Report%201782995574.pdf\n\n## 3. Projects Worked With\n\nMetaMask \u00b7 LayerZero \u00b7 Omen Perps \u00b7 Predict.fun \u00b7 Nocturnal \u00b7 BNBShare.fun \u00b7 Fractalized \u00b7 Aztec Network \u00b7 Libre Capital (now kaio.xyz) \u00b7 ZyfAI \u00b7 Biconomy \u00b7 Astaria \u00b7 Ethos Reserve \u00b7 1inch \u2014 and more.\n\n## 4. Public Work & Contributions\n\n- Admin and Creator of **OSWAR**: https://oswar.org\n- Author \u2014 *Domain & DNS Security Framework* (SEAL Alliance): https://frameworks.securityalliance.dev/infrastructure/domain-and-dns-security\n- EthSecurity DAO Badge Holder: https://x.com/__Raiders/status/2043883600152801651\n- SEAL announcement: https://x.com/_SEAL_Org/status/2021222150057693478\n- Ethereum ecosystem operational security project (grant supported): https://x.com/__Raiders/status/1952779461331460240\n- Octant Grant \u2014 Top 30 Ethereum Security Content Creators (~$10k): https://x.com/__Raiders/status/1981273644707029437\n\n**Featured in BlockThreat Newsletter:**\n- https://blockthreat.com/blockthreat-week-46-2025/#:~:text=How%20Multi%2DAgent%20AI%20Is%20Catching%20the%2080%25%20of%20Hacks%20That%20Audits%20Miss\n- https://blockthreat.com/blockthreat-week-24-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security\n- https://blockthreat.com/blockthreat-week-27-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security\n- https://blockthreat.com/blockthreat-week-36-2025/#:~:text=DNS%20Security%20in%20Web3%3A%20Attacks%20%26%20Monitoring%20Setup\n\n**MITRE ATT&CK-style Supply Chain Research:**\n- https://aadapt.mitre.org/techniques/ADT1195/\n- https://aadapt.mitre.org/techniques/ADT1195.001\n\n**Public CVEs Discovered:**\n- Windows Thick Client Application: https://huntr.com/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6\n- Backup Management Software Web Interface: https://huntr.com/bounties/c62126dc-d9a6-4d3e-988d-967031876c58\n\n**Articles & Disclosed Findings:** https://medium.com/@chirag-agrawal\n**Example Pre-Audit Report:** https://hackmd.io/vwz7F9B_T32xFbIiIpNr8A\n\nAlso conducted audits/security reviews with **Cyfrin, Sherlock, Adevarlabs, BailSec, Failsafe**, plus several private protocol engagements.\n\n- **18+** independent full-stack security audits completed\n- Past growth/technical-writing clients: Certora, Guardrail.ai, Cyvers, Spearbit/Cantina, Credshields, Sayfer, Cyfrin, GetRecon, All Things Fuzzy\n- Example collaboration with Cyfrin for a large TradFi crypto company: https://x.com/__Raiders/status/1968997526050066827\n\n## 5. Languages & Technologies\n\nWeb2 and Web3 stacks.\n\n- **Languages/Frameworks:** TypeScript, JavaScript, Angular, Django, React.js / Next.js, Svelte, Rust, Go, Python, Solidity, Cairo, Move\n- **Mobile Security:** React Native, Swift, Kotlin, Dart\n- **Cloud & Infra:** AWS (AWS Certified Security Specialty), Google Cloud security assessments, CI/CD & supply chain security\n- **AI Security:** LLM Security\n\n## 6. Certifications\n\n- Certified LLM Security Professional: https://courses.redteamleaders.com/exam-completion/22d59a6278d33cfe\n- Certified in DevSecOps\n- Certified Blockchain Practitioner\n- Certified AppSec Practitioner\n- AWS Cloud Security Practitioner\n- Certified Blockchain Developer\n\n## 7. Types of Protocols & Systems Audited\n\nWeb2 infra + Web3 protocol stacks: yield aggregators, perps & prediction markets, trading platforms/financial infra, oracle-integrated systems, TradFi-integrated crypto platforms, cryptography-heavy applications, zero-knowledge systems, custody/wallet infra, backend systems supporting blockchain protocols, supply chain & dependency security for Web3 projects.\n\nFull-stack reviews covering: backend logic, infra/cloud config, frontend security & wallet integrations, API/auth flows, domain/DNS infra security, threat modeling & risk assessment, supply chain & third-party risk exposure.\n\n## 8. Web2 / Web3 Security Background\n\nStarted in Web2 security mid-2018, primarily bug bounty + private pentesting.\n\n- Reported multiple vulnerabilities across private and public programs\n- Led security efforts for a Series C tech company in Bangalore for ~4 years\n- Conducted infrastructure, application, and cloud security reviews\n- Worked with vetted pentesting communities like Synack Red Team\n\nStarted in Web3 security late 2022. Since then:\n- Participated in competitive audit contests (Code4rena)\n- Won Secureum Race 14\n- Worked on private protocol audits and backend security reviews\n- Conducted security assessments with firms like Cyfrin, Sherlock, Guardian Audits, and Failsafe\n\nAlso performed rapid-response security reviews for projects under active incidents \u2014 e.g. helped secure a BNB ecosystem launchpad/fee-sharing project that had suffered two prior hacks. After ~7 days of continuous review, patching, and mitigation, the project stabilized with no further compromises and later scaled to a top-3 position in its category in early 2026.\n\nFlexible depending on project requirements and long-term collaboration potential.\n\n## 9. Audit Pace\n\nVaries by complexity:\n- Simple / moderate logic: ~1000\u20131500 LOC/day\n- Complex logic (cryptography, financial systems, ZK, etc.): ~500\u2013800 LOC/day\n\nTypically ~8 focused hours/day; during critical launches or tight timelines, often 12+ hours/day.\n\n## 10. Proof / Confidential Materials\n\n*(Screenshots from audits, bug bounties, and private engagement reports \u2014 attach separately as images; not included inline in this gist.)*\n", "creation_timestamp": "2026-07-15T09:44:28.939011Z"}, {"uuid": "c038c536-8608-476e-abda-39ea2b81b1f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://gist.github.com/Raiders0786/d98e8c077332c60d17c99e7cc1b5a424", "content": "# Security Audit Profile \u2014 Raiders0786\n\nGMT+5:30, India\nTelegram: [t.me/Raiders0786](https://t.me/Raiders0786)\n\n**Public CVEs:** [CVE-2022-4722](https://nvd.nist.gov/vuln/detail/CVE-2022-4722), [CVE-2023-3067](https://nvd.nist.gov/vuln/detail/CVE-2023-3067)\n\n**Public Good Projects:**\n- [digibastion.com](https://digibastion.com)\n- [web3sec.news](https://web3sec.news)\n\n## 1. Portfolio, Languages, and Protocol Experience\n\n- [GitHub Security Portfolio](https://github.com/Raiders0786/Raiders0786/blob/main/SECURITY-PORTFOLIO.md)\n- [X / Research Updates](https://x.com/__Raiders)\n- [Telegram](https://t.me/raiders0786)\n\nMost Web2 security work stays private (NDAs / internal company policy). Many companies don't publish pentest reports publicly \u2014 work is handled internally or via platforms like Synack.\n\nWas part of the **Synack Red Team** (invite-only vetted researcher community, private client infra tested through a controlled VPN). Reports are generated on-platform; IP is owned by Synack + client, so they can't be shared publicly. [More on the model](https://www.synack.com/why-synack/).\n\nRedacted versions of past private audit reports (screenshots/PDFs attached separately, not inline here):\n- [Report 1](https://drive.google.com/file/d/1GW18fVNiCXGmETISFO88nbDL4FehsQCF/view?usp=sharing)\n- [Report 2](https://drive.google.com/file/d/1eWqEZA8N_zgNvfxnTJcOXKC7wWklO8A5/view?usp=sharing)\n- [Report 3](https://drive.google.com/file/d/16RCokoE8Yt-svPrz5OvE0RXTG_ky1R-2/view?usp=sharing)\n- [Report 4](https://drive.google.com/file/d/1ENOvFNqw4tboNObCmVcGWA5kc7R1dU21/view?usp=sharing)\n\n## 2. Public Audit Reports\n\n- **MetaMask Connect** (offchain library) \u2014 with Cyfrin: [report](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-03-05-cyfrin-metamask-connect-v2.0.pdf)\n- **Predict.fun** Chainlink CRE Integration \u2014 with Cyfrin: [report](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-04-25-cyfrin-predict-cre-integration-v2.1.pdf)\n- **Omen.trade** \u2014 decentralized perps/options platform on a Rust matching engine. Full off-chain + on-chain audit (web, backend, mobile app, admin dashboard): [report](https://sherlock-files.ams3.digitaloceanspaces.com/reports/2026.07.02%20-%20Final%20-%20Omen.trade%20Collaborative%20Audit%20Report%201782995574.pdf)\n\n## 3. Projects Worked With\n\nMetaMask \u00b7 LayerZero \u00b7 Omen Perps \u00b7 Predict.fun \u00b7 Nocturnal \u00b7 BNBShare.fun \u00b7 Fractalized \u00b7 Aztec Network \u00b7 Libre Capital (now kaio.xyz) \u00b7 ZyfAI \u00b7 Biconomy \u00b7 Astaria \u00b7 Ethos Reserve \u00b7 1inch \u2014 and more.\n\n## 4. Public Work & Contributions\n\n- Admin and Creator of **[OSWAR](https://oswar.org)**\n- Author \u2014 [*Domain & DNS Security Framework*](https://frameworks.securityalliance.dev/infrastructure/domain-and-dns-security) (SEAL Alliance)\n- [EthSecurity DAO Badge Holder](https://x.com/__Raiders/status/2043883600152801651)\n- [SEAL announcement](https://x.com/_SEAL_Org/status/2021222150057693478)\n- [Ethereum ecosystem operational security project](https://x.com/__Raiders/status/1952779461331460240) (grant supported)\n- [Octant Grant \u2014 Top 30 Ethereum Security Content Creators](https://x.com/__Raiders/status/1981273644707029437) (~$10k)\n\n**Featured in BlockThreat Newsletter:**\n- [How Multi-Agent AI Is Catching the 80% of Hacks That Audits Miss](https://blockthreat.com/blockthreat-week-46-2025/#:~:text=How%20Multi%2DAgent%20AI%20Is%20Catching%20the%2080%25%20of%20Hacks%20That%20Audits%20Miss)\n- [The Need for Robust Web3 Pentesting and Supply Chain Security](https://blockthreat.com/blockthreat-week-24-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security)\n- [The Need for Robust Web3 Pentesting and Supply Chain Security](https://blockthreat.com/blockthreat-week-27-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security)\n- [DNS Security in Web3: Attacks & Monitoring Setup](https://blockthreat.com/blockthreat-week-36-2025/#:~:text=DNS%20Security%20in%20Web3%3A%20Attacks%20%26%20Monitoring%20Setup)\n\n**MITRE ATT&CK-style Supply Chain Research:**\n- [ADT1195](https://aadapt.mitre.org/techniques/ADT1195/)\n- [ADT1195.001](https://aadapt.mitre.org/techniques/ADT1195.001)\n\n**Public CVEs Discovered:**\n- [Windows Thick Client Application](https://huntr.com/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6)\n- [Backup Management Software Web Interface](https://huntr.com/bounties/c62126dc-d9a6-4d3e-988d-967031876c58)\n\n**Articles & Disclosed Findings:** [medium.com/@chirag-agrawal](https://medium.com/@chirag-agrawal)\n**Example Pre-Audit Report:** [hackmd.io](https://hackmd.io/vwz7F9B_T32xFbIiIpNr8A)\n\nAlso conducted audits/security reviews with **Cyfrin, Sherlock, Adevarlabs, BailSec, Failsafe**, plus several private protocol engagements.\n\n- **18+** independent full-stack security audits completed\n- Past growth/technical-writing clients: Certora, Guardrail.ai, Cyvers, Spearbit/Cantina, Credshields, Sayfer, Cyfrin, GetRecon, All Things Fuzzy\n- [Example collaboration with Cyfrin for a large TradFi crypto company](https://x.com/__Raiders/status/1968997526050066827)\n\n## 5. Languages & Technologies\n\nWeb2 and Web3 stacks.\n\n- **Languages/Frameworks:** TypeScript, JavaScript, Angular, Django, React.js / Next.js, Svelte, Rust, Go, Python, Solidity, Cairo, Move\n- **Mobile Security:** React Native, Swift, Kotlin, Dart\n- **Cloud & Infra:** AWS (AWS Certified Security Specialty), Google Cloud security assessments, CI/CD & supply chain security\n- **AI Security:** LLM Security\n\n## 6. Certifications\n\n- [Certified LLM Security Professional](https://courses.redteamleaders.com/exam-completion/22d59a6278d33cfe)\n- Certified in DevSecOps\n- Certified Blockchain Practitioner\n- Certified AppSec Practitioner\n- AWS Cloud Security Practitioner\n- Certified Blockchain Developer\n\n## 7. Types of Protocols & Systems Audited\n\nWeb2 infra + Web3 protocol stacks: yield aggregators, perps & prediction markets, trading platforms/financial infra, oracle-integrated systems, TradFi-integrated crypto platforms, cryptography-heavy applications, zero-knowledge systems, custody/wallet infra, backend systems supporting blockchain protocols, supply chain & dependency security for Web3 projects.\n\nFull-stack reviews covering: backend logic, infra/cloud config, frontend security & wallet integrations, API/auth flows, domain/DNS infra security, threat modeling & risk assessment, supply chain & third-party risk exposure.\n\n## 8. Web2 / Web3 Security Background\n\nStarted in Web2 security mid-2018, primarily bug bounty + private pentesting.\n\n- Reported multiple vulnerabilities across private and public programs\n- Led security efforts for a Series C tech company in Bangalore for ~4 years\n- Conducted infrastructure, application, and cloud security reviews\n- Worked with vetted pentesting communities like Synack Red Team\n\nStarted in Web3 security late 2022. Since then:\n- Participated in competitive audit contests (Code4rena)\n- Won Secureum Race 14\n- Worked on private protocol audits and backend security reviews\n- Conducted security assessments with firms like Cyfrin, Sherlock, Guardian Audits, and Failsafe\n\nAlso performed rapid-response security reviews for projects under active incidents \u2014 e.g. helped secure a BNB ecosystem launchpad/fee-sharing project that had suffered two prior hacks. After ~7 days of continuous review, patching, and mitigation, the project stabilized with no further compromises and later scaled to a top-3 position in its category in early 2026.\n\nFlexible depending on project requirements and long-term collaboration potential.\n\n## 9. Audit Pace\n\nVaries by complexity:\n- Simple / moderate logic: ~1000\u20131500 LOC/day\n- Complex logic (cryptography, financial systems, ZK, etc.): ~500\u2013800 LOC/day\n\nTypically ~8 focused hours/day; during critical launches or tight timelines, often 12+ hours/day.\n\n## 10. Proof / Confidential Materials\n\n*(Screenshots from audits, bug bounties, and private engagement reports \u2014 attach separately as images; not included inline in this gist.)*\n", "creation_timestamp": "2026-07-15T09:47:12.364772Z"}, {"uuid": "7d1f42b1-b856-4b0e-b852-3586a521953d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/fH7euDN0u7NKv6Vni5bOPf_BOlbxr_3I1R2Gxn1b5OcXUqCo", "content": "", "creation_timestamp": "2026-07-20T16:00:04.995745Z"}, {"uuid": "68716b95-ccd1-4670-9794-86d1c5b27c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1411", "content": "\ud83d\udce2 CVE-2023-3079: Deep Dive into the V8 Type Confusion\n https://crack-vault.de/d/670", "creation_timestamp": "2026-07-20T21:00:05.926533Z"}, {"uuid": "0919a1d7-5bd0-4b13-88d2-fbf455732a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30253", "type": "published-proof-of-concept", "source": "https://t.me/kiberdruzhinnik/366", "content": "HackTheBox BoardLight\n\n\u041c\u0430\u0448\u0438\u043d\u0430 BoardLight - \u044d\u0442\u043e \u043b\u0435\u0433\u043a\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430 \u0438\u0437 \u0441\u0435\u0440\u0438\u0438 HackTheBox, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430\u0432\u044b\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-30253 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0434\u044b\u0440\u044f\u0432\u044b\u0439 SUID-\u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a. Time to target practice.\n\nhttps://blog.kiberdruzhinnik.ru/2024/06/hackthebox-boardlight/\n\n#hackthebox #easy #writeup #linux #pentest #hacktheboxseason5", "creation_timestamp": "2026-08-24T21:00:06.827560Z"}, {"uuid": "04232ae6-f151-4fbb-81b8-9ff638315654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1411", "content": "\ud83d\udce2 CVE-2023-3079: Deep Dive into the V8 Type Confusion\n https://crack-vault.de/d/670", "creation_timestamp": "2026-07-21T00:00:17.803605Z"}, {"uuid": "b5511ac3-641f-4470-bd0a-4757eac942e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "Telegram/fH7euDN0u7NKv6Vni5bOPf_BOlbxr_3I1R2Gxn1b5OcXUqCo", "content": "", "creation_timestamp": "2026-07-21T00:00:38.267576Z"}, {"uuid": "f2f48688-4e37-4c62-b57b-3581b3a3f0a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30253", "type": "published-proof-of-concept", "source": "https://t.me/kiberdruzhinnik/366", "content": "HackTheBox BoardLight\n\n\u041c\u0430\u0448\u0438\u043d\u0430 BoardLight - \u044d\u0442\u043e \u043b\u0435\u0433\u043a\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430 \u0438\u0437 \u0441\u0435\u0440\u0438\u0438 HackTheBox, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430\u0432\u044b\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-30253 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0434\u044b\u0440\u044f\u0432\u044b\u0439 SUID-\u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a. Time to target practice.\n\nhttps://blog.kiberdruzhinnik.ru/2024/06/hackthebox-boardlight/\n\n#hackthebox #easy #writeup #linux #pentest #hacktheboxseason5", "creation_timestamp": "2026-08-25T00:00:10.459711Z"}, {"uuid": "d9cb1f73-0589-44c5-8d98-faee1875a93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30628", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-26T00:00:10.589851Z"}, {"uuid": "b2d91bbd-10ef-4cea-87c0-1e6a7f56f717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/EchelonEyes/1593", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0432 Chrome\n\n\u0422\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-3079, \u043e\u0434\u043d\u0430\u043a\u043e Google, \u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0432\u043e\u0438\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u0442 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0435\u0441\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u043d\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0449\u0435 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-3079 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432 \u0432 V8, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 JavaScript Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u043e\u0440\u0443\u0447\u0435\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442, \u043a\u043e\u0433\u0434\u0430 \u0434\u0432\u0438\u0436\u043e\u043a \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0442\u0438\u043f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\u043c \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Google #Chrome", "creation_timestamp": "2026-07-26T02:02:26.482068Z"}, {"uuid": "0e23a9b9-3f8e-4fc0-9b65-26467ba6ad4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30861", "type": "seen", "source": "https://t.me/EchelonEyes/1499", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e Flask \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0444\u0430\u0439\u043b\u0430 cookie \u0441\u0435\u0430\u043d\u0441\u0430 \n\n\u0412 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 GitHub (GitHub Advisory Database) \u0437\u0430\u043d\u0435\u0441\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Flask, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c davidism.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-30861 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5). \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 cookie \u0441\u0435\u0430\u043d\u0441\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Vary: Cookie.\n\n\u00ab\u041e\u0442\u0432\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0442\u0430\u043a\u0436\u0435 \u043a\u044d\u0448\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 Set-Cookie, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0444\u0430\u0439\u043b cookie \u0441\u0435\u0430\u043d\u0441\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u0440\u0443\u0433\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u0441\u0442\u0438. \u2013 \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 cookie\u00bb. \n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0440\u044f\u0434\u0430 \u0443\u0441\u043b\u043e\u0432\u0438\u0439:\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u0437\u0430 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u043d\u0435 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 cookie;\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 session.permanent = True;\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0430\u043d\u0441\u0443 \u0438 \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0435\u0433\u043e \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430;\n\n- SESSION_REFRESH_EACH_REQUEST \u0432\u043a\u043b\u044e\u0447\u0435\u043d (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e);\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Cache-Control, \u0447\u0442\u043e\u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u043e\u0439 \u0438\u043b\u0438 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u0430 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f.\n\n\u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Flask \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Vary: Cookie \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u0438\u043b\u0438 \u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438, \u0430 \u043d\u0435 \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0441\u044f (\u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f) \u0431\u0435\u0437 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://github.com/advisories/GHSA-m2qf-hxjv-5gpq \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Flask", "creation_timestamp": "2026-07-26T02:02:26.973752Z"}, {"uuid": "75d517db-785a-46e0-8a10-6c44cc9c7d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30861", "type": "seen", "source": "https://t.me/EchelonEyes/1499", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e Flask \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0444\u0430\u0439\u043b\u0430 cookie \u0441\u0435\u0430\u043d\u0441\u0430 \n\n\u0412 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 GitHub (GitHub Advisory Database) \u0437\u0430\u043d\u0435\u0441\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Flask, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c davidism.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-30861 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5). \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 cookie \u0441\u0435\u0430\u043d\u0441\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Vary: Cookie.\n\n\u00ab\u041e\u0442\u0432\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0442\u0430\u043a\u0436\u0435 \u043a\u044d\u0448\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 Set-Cookie, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0444\u0430\u0439\u043b cookie \u0441\u0435\u0430\u043d\u0441\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u0440\u0443\u0433\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u0441\u0442\u0438. \u2013 \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 cookie\u00bb. \n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0440\u044f\u0434\u0430 \u0443\u0441\u043b\u043e\u0432\u0438\u0439:\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u0437\u0430 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u043d\u0435 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 cookie;\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 session.permanent = True;\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0430\u043d\u0441\u0443 \u0438 \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0435\u0433\u043e \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430;\n\n- SESSION_REFRESH_EACH_REQUEST \u0432\u043a\u043b\u044e\u0447\u0435\u043d (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e);\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Cache-Control, \u0447\u0442\u043e\u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u043e\u0439 \u0438\u043b\u0438 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u0430 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f.\n\n\u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Flask \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Vary: Cookie \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u0438\u043b\u0438 \u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438, \u0430 \u043d\u0435 \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0441\u044f (\u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f) \u0431\u0435\u0437 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://github.com/advisories/GHSA-m2qf-hxjv-5gpq \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Flask", "creation_timestamp": "2026-07-27T00:01:04.531633Z"}, {"uuid": "d434b77c-a5b8-4893-8d37-487eef9bc82d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/EchelonEyes/1593", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0432 Chrome\n\n\u0422\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-3079, \u043e\u0434\u043d\u0430\u043a\u043e Google, \u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0432\u043e\u0438\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u0442 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0435\u0441\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u043d\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0449\u0435 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-3079 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432 \u0432 V8, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 JavaScript Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u043e\u0440\u0443\u0447\u0435\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442, \u043a\u043e\u0433\u0434\u0430 \u0434\u0432\u0438\u0436\u043e\u043a \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0442\u0438\u043f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\u043c \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Google #Chrome", "creation_timestamp": "2026-07-27T00:01:04.004983Z"}, {"uuid": "f45e61ad-73f8-437f-a84f-e3510e16e579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30861", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1499", "content": "\u0421\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e Flask \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0444\u0430\u0439\u043b\u0430 cookie \u0441\u0435\u0430\u043d\u0441\u0430 \n\n\u0412 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 GitHub (GitHub Advisory Database) \u0437\u0430\u043d\u0435\u0441\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Flask, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c davidism.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-30861 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5). \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 cookie \u0441\u0435\u0430\u043d\u0441\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Vary: Cookie.\n\n\u00ab\u041e\u0442\u0432\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0442\u0430\u043a\u0436\u0435 \u043a\u044d\u0448\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 Set-Cookie, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0444\u0430\u0439\u043b cookie \u0441\u0435\u0430\u043d\u0441\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u0440\u0443\u0433\u0438\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u0441\u0442\u0438. \u2013 \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 cookie\u00bb. \n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0440\u044f\u0434\u0430 \u0443\u0441\u043b\u043e\u0432\u0438\u0439:\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u0437\u0430 \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u043d\u0435 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 cookie;\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 session.permanent = True;\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0430\u043d\u0441\u0443 \u0438 \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0435\u0433\u043e \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430;\n\n- SESSION_REFRESH_EACH_REQUEST \u0432\u043a\u043b\u044e\u0447\u0435\u043d (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e);\n\n- \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Cache-Control, \u0447\u0442\u043e\u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u043e\u0439 \u0438\u043b\u0438 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u0430 \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f.\n\n\u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Flask \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Vary: Cookie \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0441\u0435\u0441\u0441\u0438\u0438 \u0438\u043b\u0438 \u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438, \u0430 \u043d\u0435 \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0441\u044f (\u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f) \u0431\u0435\u0437 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://github.com/advisories/GHSA-m2qf-hxjv-5gpq \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Flask", "creation_timestamp": "2026-07-28T00:00:08.537050Z"}, {"uuid": "33e5ad9f-4ee9-4596-821e-e870937387bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/EchelonEyes/1593", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0432 Chrome\n\n\u0422\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-3079, \u043e\u0434\u043d\u0430\u043a\u043e Google, \u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0432\u043e\u0438\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u0442 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0435\u0441\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u043d\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0449\u0435 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-3079 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432 \u0432 V8, \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 JavaScript Chrome, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u043e\u0440\u0443\u0447\u0435\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442, \u043a\u043e\u0433\u0434\u0430 \u0434\u0432\u0438\u0436\u043e\u043a \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0442\u0438\u043f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044f\u043c \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Google #Chrome", "creation_timestamp": "2026-07-28T00:00:09.310297Z"}, {"uuid": "a4470f5e-63c0-48f7-a63c-951a196f7906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30628", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-25T11:00:03.257680Z"}, {"uuid": "2e962789-9d0d-43f3-bd8c-63f3d934fd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30533", "type": "seen", "source": "https://t.me/CVEhub/18747", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30533*\nGithub: https://github.com/BenEdridge/CVE-2023-30533", "creation_timestamp": "2026-07-29T12:00:07.492490Z"}, {"uuid": "d6ccaa9b-2da8-4d02-a072-2319cdbbffc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/CVEhub/19083", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-3079*\nGithub: https://github.com/mistymntncop/CVE-2023-3079", "creation_timestamp": "2026-07-29T12:00:06.691313Z"}, {"uuid": "dd509e08-2ab7-4e74-9a71-aa284952532a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30146", "type": "seen", "source": "https://t.me/CVEhub/18354", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-30146*\nGithub: https://github.com/L1-0/CVE-2023-30146", "creation_timestamp": "2026-07-29T12:00:09.736118Z"}, {"uuid": "b465dafe-02e2-4c5e-a1af-a02ef521ae45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "seen", "source": "https://t.me/CVEhub/17304", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30765*\nGithub: https://github.com/0xfml/CVE-2023-30765", "creation_timestamp": "2026-07-29T12:00:14.836066Z"}, {"uuid": "435ff9c8-449d-4d0d-8b83-8e288b0adc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30383", "type": "seen", "source": "https://t.me/CVEhub/17071", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30383*\nGithub: https://github.com/a2ure123/CVE-2023-30383", "creation_timestamp": "2026-07-29T12:00:15.332217Z"}, {"uuid": "5d2c80bd-062b-4a92-ac41-1bd7b7deb70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30367", "type": "seen", "source": "https://t.me/CVEhub/17422", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30367-mRemoteNG-password-dumper*\nGithub: https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper", "creation_timestamp": "2026-07-29T12:00:14.229934Z"}, {"uuid": "81cd248d-67aa-44d9-9872-4bf2808b3cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30459", "type": "seen", "source": "https://t.me/CVEhub/10377", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30459*\nGithub: https://github.com/Toxich4/CVE-2023-30459", "creation_timestamp": "2026-07-29T12:00:39.828035Z"}, {"uuid": "3523580e-eb14-4b27-9a37-d43e5dc656fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30226", "type": "seen", "source": "https://t.me/CVEhub/16616", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30226*\nGithub: https://github.com/ifyGecko/CVE-2023-30226", "creation_timestamp": "2026-07-29T12:00:17.845253Z"}, {"uuid": "8b163a34-f4ff-43fe-a519-869bbe8e2373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15233", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-Vulnerable-Lab*\nGithub: https://github.com/AAsh035/CVE-2023-30212-Vulnerable-Lab", "creation_timestamp": "2026-07-29T12:00:22.346673Z"}, {"uuid": "831d214c-740b-40a5-9ed1-d0a4001c1d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/CVEhub/15236", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30777*\nGithub: https://github.com/Alucard0x1/CVE-2023-30777", "creation_timestamp": "2026-07-29T12:00:22.380380Z"}, {"uuid": "3e8cbb0c-6a43-4cc0-a9ce-d87db89aedb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30185", "type": "seen", "source": "https://t.me/CVEhub/12251", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30185*\nGithub: https://github.com/c7w1n/CVE-2023-30185", "creation_timestamp": "2026-07-29T12:00:33.963251Z"}, {"uuid": "ac74b624-f207-4538-bad2-5eb6ca97bca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30347", "type": "seen", "source": "https://t.me/CVEhub/15495", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30347*\nGithub: https://github.com/huzefa2212/CVE-2023-30347", "creation_timestamp": "2026-07-29T12:00:21.641240Z"}, {"uuid": "015c42bd-95e6-4ecf-a748-359d2b19e922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15446", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212*\nGithub: https://github.com/AAsh035/CVE-2023-30212", "creation_timestamp": "2026-07-29T12:00:21.751374Z"}, {"uuid": "cd9b1109-73ab-4974-a25d-431e44408836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15449", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-*\nGithub: https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-", "creation_timestamp": "2026-07-29T12:00:21.774953Z"}, {"uuid": "9ce2ab1c-c737-45be-ab7c-0de9a712d51c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15434", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Vulnerable-Docker-CVE-2023-30212*\nGithub: https://github.com/VisDev23/Vulnerable-Docker-CVE-2023-30212", "creation_timestamp": "2026-07-29T12:00:21.817086Z"}, {"uuid": "5350279c-a48c-475f-b291-2c202f5ea3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15441", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Vulnerable-Docker--CVE-2023-30212-*\nGithub: https://github.com/VisDev23/Vulnerable-Docker--CVE-2023-30212-", "creation_timestamp": "2026-07-29T12:00:21.842680Z"}, {"uuid": "470d3897-65bd-4e4b-8110-fc9e5ffe77b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15388", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-POC*\nGithub: https://github.com/arunsnap/CVE-2023-30212-POC", "creation_timestamp": "2026-07-29T12:00:22.079233Z"}, {"uuid": "bb14611b-728c-4985-a20e-acd449f4b779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15328", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-OURPHP-Vulnerability*\nGithub: https://github.com/MaThEw-ViNcEnT/CVE-2023-30212-OURPHP-Vulnerability", "creation_timestamp": "2026-07-29T12:00:22.135877Z"}, {"uuid": "1c23c1a0-8506-463a-aa6c-feafc1c5b564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13841", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploit-the-CVE-2023-30212-vulnerability*\nGithub: https://github.com/libas7994/Exploit-the-CVE-2023-30212-vulnerability", "creation_timestamp": "2026-07-29T12:00:29.267211Z"}, {"uuid": "4f359c2d-8377-4705-904e-1a87f342ff3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13843", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploite-CVE-2023-30212-vulnerability*\nGithub: https://github.com/libasv/Exploite-CVE-2023-30212-vulnerability", "creation_timestamp": "2026-07-29T12:00:29.290860Z"}, {"uuid": "0870f67a-d2c5-42b3-bf58-e45ed08d4a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13708", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-LAB*\nGithub: https://github.com/kuttappu123/CVE-2023-30212-LAB", "creation_timestamp": "2026-07-29T12:00:29.807379Z"}, {"uuid": "28bae621-469d-48a5-9259-99e4f3d9f63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3009", "type": "seen", "source": "https://t.me/CVEhub/14085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2023-3009*\nGithub: https://github.com/mnqazi/CVE-2023-3009", "creation_timestamp": "2026-07-29T12:00:27.116931Z"}, {"uuid": "54ad0e39-a1e7-4fa4-be3f-6dc2885d72aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13934", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212*\nGithub: https://github.com/kai-iszz/CVE-2023-30212", "creation_timestamp": "2026-07-29T12:00:27.637576Z"}, {"uuid": "ecc7c689-9e5e-4e6d-9141-2b41dcddb414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13848", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploite-CVE-2023-30212-Vulnerability*\nGithub: https://github.com/libasmon/Exploite-CVE-2023-30212-Vulnerability", "creation_timestamp": "2026-07-29T12:00:27.768011Z"}, {"uuid": "dbc03bea-0170-4ca9-b56f-94277404d483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13832", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Vulnerable-Docker-Environment-CVE-2023-30212*\nGithub: https://github.com/libasmon/Vulnerable-Docker-Environment-CVE-2023-30212", "creation_timestamp": "2026-07-29T12:00:29.314688Z"}, {"uuid": "0e552713-ed04-4535-8543-f377c268b8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13833", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212*\nGithub: https://github.com/libasmon/-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212", "creation_timestamp": "2026-07-29T12:00:29.343709Z"}, {"uuid": "dbe2c9f8-95e2-4d17-ac4c-12713494f611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13838", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *-CVE-2023-30212-Vulnerability*\nGithub: https://github.com/libasmon/-CVE-2023-30212-Vulnerability", "creation_timestamp": "2026-07-29T12:00:29.369544Z"}, {"uuid": "8e2178cb-d680-4afe-9e8f-14d41f7b8571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13815", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-iab*\nGithub: https://github.com/Anandhu990/CVE-2023-30212-iab", "creation_timestamp": "2026-07-29T12:00:29.396318Z"}, {"uuid": "fccefeda-ec17-404c-a1d0-e98be790315f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13817", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212_lab*\nGithub: https://github.com/Anandhu990/CVE-2023-30212_lab", "creation_timestamp": "2026-07-29T12:00:29.422265Z"}, {"uuid": "3c142b26-4c6d-4ca7-9508-c273c25bc783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13829", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-30212*\nGithub: https://github.com/libas7994/CVE-2023-30212", "creation_timestamp": "2026-07-29T12:00:29.447085Z"}, {"uuid": "a7307985-9755-40b4-98fc-502cef704f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13812", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *r-CVE-2023-30212--lab*\nGithub: https://github.com/Anandhu990/r-CVE-2023-30212--lab", "creation_timestamp": "2026-07-29T12:00:29.498462Z"}, {"uuid": "3433f7a0-93bf-4423-91f3-66fb9c8e2dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13813", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *r-CVE-2023-30212-lab*\nGithub: https://github.com/Anandhu990/r-CVE-2023-30212-lab", "creation_timestamp": "2026-07-29T12:00:29.521995Z"}, {"uuid": "26a68ef6-7b48-4405-9126-84a1af9e9f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13768", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-30212-Lab*\nGithub: https://github.com/mallutrojan/CVE-2023-30212-Lab", "creation_timestamp": "2026-07-29T12:00:29.568600Z"}, {"uuid": "a8255a29-c009-4112-87c6-e906b608a6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "seen", "source": "https://t.me/CVEhub/13728", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30145*\nGithub: https://github.com/paragbagul111/CVE-2023-30145", "creation_timestamp": "2026-07-29T12:00:29.639504Z"}, {"uuid": "bf234eab-f86d-47b8-b3cc-fa2c2294907c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13719", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-POC-DOCKER-FILE*\nGithub: https://github.com/Rishipatidar/CVE-2023-30212-POC-DOCKER-FILE", "creation_timestamp": "2026-07-29T12:00:29.707017Z"}, {"uuid": "ad6b51ce-9475-45bf-a6e3-687bd46d06d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "seen", "source": "https://t.me/CVEhub/13696", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30145.*\nGithub: https://github.com/paragbagul111/CVE-2023-30145.", "creation_timestamp": "2026-07-29T12:00:29.751391Z"}, {"uuid": "d67f806c-80cd-4b4a-9af2-ddcf50c108ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30256", "type": "seen", "source": "https://t.me/CVEhub/12539", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30256*\nGithub: https://github.com/ahrixia/CVE-2023-30256", "creation_timestamp": "2026-07-29T12:00:32.960390Z"}, {"uuid": "eb35db15-0ceb-4311-b36e-5405cbb62247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30092", "type": "seen", "source": "https://t.me/CVEhub/12439", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30092*\nGithub: https://github.com/nawed20002/CVE-2023-30092", "creation_timestamp": "2026-07-29T12:00:33.341371Z"}, {"uuid": "f7f681f5-51b5-4ba0-b016-84c027612800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30839", "type": "seen", "source": "https://t.me/CVEhub/11700", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *https-nvd.nist.gov-vuln-detail-CVE-2023-30839*\nGithub: https://github.com/drkbcn/https-nvd.nist.gov-vuln-detail-CVE-2023-30839", "creation_timestamp": "2026-07-29T12:00:35.298859Z"}, {"uuid": "17e9e889-2b56-465b-a15b-78aba7271eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-29T12:00:35.109723Z"}, {"uuid": "86812d72-34bb-40a8-897e-db451cd93019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30458", "type": "seen", "source": "https://t.me/CVEhub/11324", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30458*\nGithub: https://github.com/d34dun1c02n/CVE-2023-30458", "creation_timestamp": "2026-07-29T12:00:37.278281Z"}, {"uuid": "4ab7a630-4787-4194-80f6-bc0bc687bdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/sdnv_funkhole/1057", "content": "MikroTik: CVE-2023-30799\n\nMikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.", "creation_timestamp": "2026-07-29T12:01:57.684145Z"}, {"uuid": "0f8d22b8-6e01-4ea6-8097-63a51e263ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30990", "type": "seen", "source": "https://t.me/reverseame/3567", "content": "Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service https://blog.silentsignal.eu/2023/07/03/ibm-i-dde-vulnerability-cve-2023-30990/", "creation_timestamp": "2026-07-29T12:02:28.203028Z"}, {"uuid": "36ca31ae-ad2d-4657-9e24-abe6c502e606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/cisoclub/2538", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (1-7 \u0438\u044e\u043d\u044f)\n\n1\ufe0f\u20e3 \u0412 Google Chrome \u0431\u044b\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0442\u0440\u0435\u0442\u044c\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 2023 \u0433\u043e\u0434\u0443. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-3079.\n\n2\ufe0f\u20e3 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Gmail, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044b\u0448\u0435 1,8 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u0440\u0438\u0441 \u041f\u043b\u0430\u043c\u043c\u0435\u0440 \u0432\u044b\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00ab\u0413\u043e\u043b\u0443\u0431\u044b\u0435 \u0433\u0430\u043b\u043e\u0447\u043a\u0438\u00bb, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0438\u0445 \u043d\u0430 \u0432\u0441\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \ud83d\udce8email-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n3\ufe0f\u20e3 \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 0d \u0438\u0437 dWallet Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0441\u0435\u0442\u0438 Tron \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043c\u0443\u043b\u044c\u0442\u0438\u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \ud83d\udcb0$500 \u043c\u043b\u043d. \n\n4\ufe0f\u20e3 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0444\u0438\u0440\u043c\u0430 Eclysium \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \ud83c\uddf9\ud83c\uddfcGigabyte UEFI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442.\n\n5\ufe0f\u20e3 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0438 Microsoft \ud83d\udd0e\u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Migraine (CVE-2023-32369) \u0432 macOS. \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \ud83c\udf4fApple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0441 root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 System Integrity Protection (SIP).\n\n6\ufe0f\u20e3 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 KeePass \ud83e\ude9b\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0443\u044e \u0443\u0437\u043d\u0430\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u044c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435. \u041c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.54, \u0437\u0430 \u0441\u0447\u0435\u0442 \u0447\u0435\u0433\u043e \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-32784, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440-\u043f\u0430\u0440\u043e\u043b\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \ud83d\udcdd\u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zyxel \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \ud83d\udcbe\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b ATP, USG Flex, VPN \u0438 ZyWALL/USG, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.", "creation_timestamp": "2026-07-29T12:03:10.155917Z"}, {"uuid": "ddc2f40c-a1c6-484f-b218-2587b581debf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/cisoclub/2475", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (10-16 \u043c\u0430\u044f)\n\n1\ufe0f\u20e3 \u0412 \ud83d\udcf2Telegram \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \ud83c\udf4fMacBook.\n\n2\ufe0f\u20e3 \ud83e\uddb9\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \ud83d\udcf0WordPress-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 Advanced Custom Fields (CVE-2023-30777) \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043b\u044f \u043d\u0435\u0451 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442.\n\n3\ufe0f\u20e3 \u0421\u0435\u0442\u044c \u0431\u043b\u043e\u043a\u0447\u0435\u0439\u043d\u0430 Sui \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0442\u0438\u0445\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \ud83d\udcb0\u00ab\u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\u00bb.\n\n4\ufe0f\u20e3 \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u00ab\u043c\u0430\u0439\u0441\u043a\u0438\u0445\u00bb \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e\u0431 \ud83d\udee0\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 38 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \ud83d\udcbb\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \n\n5\ufe0f\u20e3 \ud83c\uddfa\ud83c\uddf8\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 Linux, \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n6\ufe0f\u20e3 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 WordPress \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \ud83c\uddee\ud83c\uddf9Ferrari \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Ferrari, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n7\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Claroty, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 IoT, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \ud83d\udcdd\u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Netgear.\n\n8\ufe0f\u20e3 \ud83c\udde9\ud83c\uddea\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SAP \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 18 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438.", "creation_timestamp": "2026-07-29T12:03:10.247310Z"}, {"uuid": "05a0f42a-2a2a-41f7-95ec-f1214c8fb6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18747", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30533*\nGithub: https://github.com/BenEdridge/CVE-2023-30533", "creation_timestamp": "2026-07-30T00:00:23.937690Z"}, {"uuid": "396cc538-446c-46b3-997a-942a5e529b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30146", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18354", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-30146*\nGithub: https://github.com/L1-0/CVE-2023-30146", "creation_timestamp": "2026-07-30T00:00:22.787388Z"}, {"uuid": "8382aa1c-8fd8-4b01-8441-68d00345e81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/19083", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-3079*\nGithub: https://github.com/mistymntncop/CVE-2023-3079", "creation_timestamp": "2026-07-30T00:00:25.064609Z"}, {"uuid": "63e633da-80d3-4c18-8e7c-0541a53c3962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "seen", "source": "https://t.me/CVEhub/17304", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30765*\nGithub: https://github.com/0xfml/CVE-2023-30765", "creation_timestamp": "2026-07-30T00:00:33.433372Z"}, {"uuid": "1996c0fb-ecf5-47b9-a543-90a6045c6e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30367", "type": "seen", "source": "https://t.me/CVEhub/17422", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30367-mRemoteNG-password-dumper*\nGithub: https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper", "creation_timestamp": "2026-07-30T00:00:32.625643Z"}, {"uuid": "493cb633-ff01-4bc8-b136-7551755e366e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30383", "type": "seen", "source": "https://t.me/CVEhub/17071", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30383*\nGithub: https://github.com/a2ure123/CVE-2023-30383", "creation_timestamp": "2026-07-30T00:00:34.271092Z"}, {"uuid": "a4c2ae34-d1a8-4c00-8801-8a7ac2537d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15446", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212*\nGithub: https://github.com/AAsh035/CVE-2023-30212", "creation_timestamp": "2026-07-30T00:00:42.629436Z"}, {"uuid": "e44763bf-cb12-4cd1-9100-93fd127d43dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15449", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-*\nGithub: https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-", "creation_timestamp": "2026-07-30T00:00:42.675033Z"}, {"uuid": "71f637bf-bfad-4727-87c9-35818140292c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15434", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Vulnerable-Docker-CVE-2023-30212*\nGithub: https://github.com/VisDev23/Vulnerable-Docker-CVE-2023-30212", "creation_timestamp": "2026-07-30T00:00:42.774049Z"}, {"uuid": "d5f792de-fc15-4e99-a6be-a153b5b4fb09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15441", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Vulnerable-Docker--CVE-2023-30212-*\nGithub: https://github.com/VisDev23/Vulnerable-Docker--CVE-2023-30212-", "creation_timestamp": "2026-07-30T00:00:42.818950Z"}, {"uuid": "9e4f6ef8-1b4d-4ef3-9db0-90a1ae5d251a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15233", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-Vulnerable-Lab*\nGithub: https://github.com/AAsh035/CVE-2023-30212-Vulnerable-Lab", "creation_timestamp": "2026-07-30T00:00:43.645916Z"}, {"uuid": "cd18a852-1641-496b-b921-75381c2f01f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/CVEhub/15236", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30777*\nGithub: https://github.com/Alucard0x1/CVE-2023-30777", "creation_timestamp": "2026-07-30T00:00:43.700458Z"}, {"uuid": "03c2299b-3261-49f6-bbdb-e30294cf54e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15388", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-POC*\nGithub: https://github.com/arunsnap/CVE-2023-30212-POC", "creation_timestamp": "2026-07-30T00:00:43.247976Z"}, {"uuid": "90b71644-df6c-4cc1-a58f-d0c16e016958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/15328", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-OURPHP-Vulnerability*\nGithub: https://github.com/MaThEw-ViNcEnT/CVE-2023-30212-OURPHP-Vulnerability", "creation_timestamp": "2026-07-30T00:00:43.329954Z"}, {"uuid": "22b97db0-3f17-4869-afe0-727f41fbcc26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30226", "type": "seen", "source": "https://t.me/CVEhub/16616", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30226*\nGithub: https://github.com/ifyGecko/CVE-2023-30226", "creation_timestamp": "2026-07-30T00:00:37.252688Z"}, {"uuid": "ce32a3b2-0ade-4916-b78a-2988783c64fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30347", "type": "seen", "source": "https://t.me/CVEhub/15495", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30347*\nGithub: https://github.com/huzefa2212/CVE-2023-30347", "creation_timestamp": "2026-07-30T00:00:42.380563Z"}, {"uuid": "fb08459b-8155-457b-9e5d-76844c65def6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13934", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212*\nGithub: https://github.com/kai-iszz/CVE-2023-30212", "creation_timestamp": "2026-07-30T00:00:51.564532Z"}, {"uuid": "1bfe9950-76ef-4feb-98fe-c8d7717e6dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13841", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploit-the-CVE-2023-30212-vulnerability*\nGithub: https://github.com/libas7994/Exploit-the-CVE-2023-30212-vulnerability", "creation_timestamp": "2026-07-30T00:00:51.945599Z"}, {"uuid": "8d133df2-2635-4c83-b494-7e4afd3bc6ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3009", "type": "seen", "source": "https://t.me/CVEhub/14085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2023-3009*\nGithub: https://github.com/mnqazi/CVE-2023-3009", "creation_timestamp": "2026-07-30T00:00:49.984335Z"}, {"uuid": "0c8d0c78-1d71-48b8-b6f2-75f8dfddc9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13848", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploite-CVE-2023-30212-Vulnerability*\nGithub: https://github.com/libasmon/Exploite-CVE-2023-30212-Vulnerability", "creation_timestamp": "2026-07-30T00:00:51.799417Z"}, {"uuid": "177a2c95-cd8e-4822-9195-9dc8a1b9f470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13833", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212*\nGithub: https://github.com/libasmon/-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212", "creation_timestamp": "2026-07-30T00:00:52.083118Z"}, {"uuid": "2f4dee0a-0889-48c5-9dba-7380a43bebb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13813", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *r-CVE-2023-30212-lab*\nGithub: https://github.com/Anandhu990/r-CVE-2023-30212-lab", "creation_timestamp": "2026-07-30T00:00:52.406496Z"}, {"uuid": "8be8c194-4bbd-4707-bc7d-fe0e024f8094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13768", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-30212-Lab*\nGithub: https://github.com/mallutrojan/CVE-2023-30212-Lab", "creation_timestamp": "2026-07-30T00:00:52.540244Z"}, {"uuid": "8b065a57-89dc-4f9c-af24-20817591c15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "seen", "source": "https://t.me/CVEhub/13728", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30145*\nGithub: https://github.com/paragbagul111/CVE-2023-30145", "creation_timestamp": "2026-07-30T00:00:52.679498Z"}, {"uuid": "d3842468-14e2-4999-b708-0be69ebac0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13843", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Exploite-CVE-2023-30212-vulnerability*\nGithub: https://github.com/libasv/Exploite-CVE-2023-30212-vulnerability", "creation_timestamp": "2026-07-30T00:00:51.991990Z"}, {"uuid": "88a4cde3-7ed3-4bf9-9e7e-0f14d9c92c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13832", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Vulnerable-Docker-Environment-CVE-2023-30212*\nGithub: https://github.com/libasmon/Vulnerable-Docker-Environment-CVE-2023-30212", "creation_timestamp": "2026-07-30T00:00:52.038151Z"}, {"uuid": "01e75776-3521-473d-8094-71101c1493c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13838", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *-CVE-2023-30212-Vulnerability*\nGithub: https://github.com/libasmon/-CVE-2023-30212-Vulnerability", "creation_timestamp": "2026-07-30T00:00:52.159164Z"}, {"uuid": "904bd314-3e22-42e9-baef-df5592dfd1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13815", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-iab*\nGithub: https://github.com/Anandhu990/CVE-2023-30212-iab", "creation_timestamp": "2026-07-30T00:00:52.199998Z"}, {"uuid": "23e7c635-7a20-4535-acb4-1b7cbe3ab51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13817", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212_lab*\nGithub: https://github.com/Anandhu990/CVE-2023-30212_lab", "creation_timestamp": "2026-07-30T00:00:52.241803Z"}, {"uuid": "13ff413c-3962-41b1-94c8-3bdffef36eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13829", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2023-30212*\nGithub: https://github.com/libas7994/CVE-2023-30212", "creation_timestamp": "2026-07-30T00:00:52.285309Z"}, {"uuid": "b30d95ad-5403-4b9e-851e-060f84a5b896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13812", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *r-CVE-2023-30212--lab*\nGithub: https://github.com/Anandhu990/r-CVE-2023-30212--lab", "creation_timestamp": "2026-07-30T00:00:52.365149Z"}, {"uuid": "bc9d3afb-2613-477f-a533-0cb47981cdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13719", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-POC-DOCKER-FILE*\nGithub: https://github.com/Rishipatidar/CVE-2023-30212-POC-DOCKER-FILE", "creation_timestamp": "2026-07-30T00:00:52.820858Z"}, {"uuid": "392f1ccc-0532-41da-a298-0292b2fcd075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30145", "type": "seen", "source": "https://t.me/CVEhub/13696", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30145.*\nGithub: https://github.com/paragbagul111/CVE-2023-30145.", "creation_timestamp": "2026-07-30T00:00:53.483763Z"}, {"uuid": "0c685214-e3ff-4593-9753-8be76c4710de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "https://t.me/CVEhub/13708", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30212-LAB*\nGithub: https://github.com/kuttappu123/CVE-2023-30212-LAB", "creation_timestamp": "2026-07-30T00:00:53.575985Z"}, {"uuid": "64647b15-0f33-4481-8e4c-80cf5b477e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30256", "type": "seen", "source": "https://t.me/CVEhub/12539", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30256*\nGithub: https://github.com/ahrixia/CVE-2023-30256", "creation_timestamp": "2026-07-30T00:00:57.540572Z"}, {"uuid": "78d4ce54-edc1-44fd-80c3-3a55a4047355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30092", "type": "seen", "source": "https://t.me/CVEhub/12439", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30092*\nGithub: https://github.com/nawed20002/CVE-2023-30092", "creation_timestamp": "2026-07-30T00:00:58.098992Z"}, {"uuid": "652b2350-afea-4b93-b069-a3c7c971a49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30458", "type": "seen", "source": "https://t.me/CVEhub/11324", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30458*\nGithub: https://github.com/d34dun1c02n/CVE-2023-30458", "creation_timestamp": "2026-07-30T00:01:02.836132Z"}, {"uuid": "25db2269-ab22-44cb-b48d-9e2f2bc350b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30185", "type": "seen", "source": "https://t.me/CVEhub/12251", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30185*\nGithub: https://github.com/c7w1n/CVE-2023-30185", "creation_timestamp": "2026-07-30T00:00:59.453299Z"}, {"uuid": "643010a6-ef64-4985-80b4-6dce194c2aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30854", "type": "seen", "source": "https://t.me/CVEhub/11785", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30854*\nGithub: https://github.com/jmrcsnchz/CVE-2023-30854", "creation_timestamp": "2026-07-30T00:01:01.057564Z"}, {"uuid": "304e124e-94b4-40c5-bd45-89d8c1d71405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30839", "type": "seen", "source": "https://t.me/CVEhub/11700", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *https-nvd.nist.gov-vuln-detail-CVE-2023-30839*\nGithub: https://github.com/drkbcn/https-nvd.nist.gov-vuln-detail-CVE-2023-30839", "creation_timestamp": "2026-07-30T00:01:01.333608Z"}, {"uuid": "1c38e4cd-9885-47ec-953e-d7ba1b13f3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30459", "type": "seen", "source": "https://t.me/CVEhub/10377", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-30459*\nGithub: https://github.com/Toxich4/CVE-2023-30459", "creation_timestamp": "2026-07-30T00:01:08.894316Z"}, {"uuid": "56de3a38-0d6e-4774-9db3-2405de9a60ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/sdnv_funkhole/1057", "content": "MikroTik: CVE-2023-30799\n\nMikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.", "creation_timestamp": "2026-07-30T00:02:09.517266Z"}, {"uuid": "0ad980bb-1d77-4414-a87e-0b7ce6f7355e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/Hackme_news/770", "content": "\ud83d\udea8\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Chrome! \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0432\u043e\u0435\u043c \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0441\u0432\u043e\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441: https://nvd.nist.gov/vuln/detail/CVE-2023-3079", "creation_timestamp": "2026-09-01T17:00:08.446269Z"}, {"uuid": "11003379-ff33-463e-92c6-82123e37933c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30350", "type": "seen", "source": "https://t.me/cissp/6819", "content": "exploit\n1. CVE-2023-30350:\nFS-S3900-24T4S Privilege Escalation\nhttps://packetstormsecurity.com/files/172124/FS-S3900-24T4S-Privilege-Escalation.html\n\n2. Apache Solr 8.3.1\nRCE from exposed administration interface\nhttps://blog.scrt.ch/2023/05/01/solr-rce-from-exposed-administration-interface\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.14", "creation_timestamp": "2026-09-01T17:00:20.502570Z"}, {"uuid": "14f1b27f-614b-4ceb-81dd-31f0b37465cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/cissp/7056", "content": "\ud83d\udea8 Heads up, network admins! \nMikroTik RouterOS vulnerability (CVE-2023-30799) exposes 500,000+ systems to potential exploitation!   \nRead: https://thehackernews.com/2023/07/critical-mikrotik-routeros.html\nUpgrade to RouterOS 6.49.8 or 7.x ASAP!\n\nFraudGPT, the latest cybercrime AI tool, is being sold on dark web marketplaces and Telegram channels. It is claimed that it can create undetectable malware and craft convincing phishing emails. \nRead: https://thehackernews.com/2023/07/new-ai-tool-fraudgpt-emerges-tailored.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.05.04", "creation_timestamp": "2026-09-01T17:00:18.097826Z"}, {"uuid": "21510f15-9320-4e36-8c0e-a28b8b06da8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://t.me/cissp/6774", "content": "Two critical flaws (CVE-2023-29199 / CVE-2023-30547) have been discovered in vm2 JavaScript library that could allow attackers to break out of sandbox protections, potentially leading to RCE attacks.\n\nRead details: https://thehackernews.com/2023/04/critical-flaws-in-vm2-javascript.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.30", "creation_timestamp": "2026-09-01T17:00:21.051357Z"}, {"uuid": "ce8c01ac-12c9-4ec6-813a-68ca3997e703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/cissp/6823", "content": "If you're using the Advanced Custom Fields plugin for WordPress, make sure to update to version 6.1.6 as soon as possible! \n \nA security flaw (CVE-2023-30777) has been discovered that could allow for reflected cross-site scripting attacks. \n \nhttps://thehackernews.com/2023/05/new-vulnerability-in-popular-wordpress.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.16", "creation_timestamp": "2026-09-01T17:00:20.429528Z"}, {"uuid": "c080670d-63ca-418e-b5dd-9a790dc65ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://t.me/hacking_Attack/119016", "content": "22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability\n\n22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability CVE-2023\u20133067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app TrilliumTrilium Notes is a Hierarchical Note-Taking App for Knowledge BasesIntroduction Every digital creation has flaws, and in this blog, we\u2019ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting vulnerabilities in the Title section, which appeared in an unusual place.Understanding CVE-2023\u20133067: Trilium Notes XSS IssueDescription: A vulnerability was discovered while adding new notes in Trilium Notes where the note titles were immediately shown in the \u201cNote Map\u201d function, possibly permitting HTML injection and cross-site scripting (XSS) attacks on both saved and reflected data. The need for security vigilance cannot be overstated.Affected Versions: The vulnerability is present in versions of Trilium Notes stored in the GitHub repository zadam/trilium prior to version 0.59.4Steps to Reproduce:Begin by downloading the vulnerable version (0.58.0-beta for Windows) from this link.Execute the trilium.exe application.Create a new note within Trillium.Manipulate the Note Title: Name the new note as \">.Visit the \u201cNote Map\u201d: Access the \u201cNote Map\u201d functionality within Trillium.Exploit Triggered: Click on the red dot in the \u201cNote Map\u201d or simply wait for the alert to appear. The XSS attack is now reflected and stored, causing the alert box to pop up every time.Cross-Site-Scripting Payload used: \">Screenshot:When the Red Dot in the Note Map was clicked, the stored XSS was executed, and an alert box appeared.\ud83d\udcfd\ufe0fVideo PoC https://drive.google.com/drive/folders/1Wt_BhUngMjFo3L2_7RhA4gFnYyJTHd5ZWhat did I do Next? I responsibly reported the vulnerability to the huntr.dev platform, which then engaged with the administrator of Trilium\u2019s open-source repository. The report was meticulously validated, assigned an appropriate severity score, and promptly addressed through a new software release. Subsequently, I was honored with the assignment of a CVE for my contribution to the security of the software ecosystem. Officially disclosed report:https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6/#bugbounty Official Announcements:https://twitter.com/huntrHacktivity/status/1664648465685815299https://twitter.com/_Raiders/status/1664663048571998208 CVE-2023\u20133067 Detail:https://nvd.nist.gov/vuln/detail/CVE-2023-3067 Thank you for reading \u270c\ud83c\udffb Take care, fellow hackers! Happy Hunting :> You can connect with me on LinkedIn, or Twitter for more such insights! 22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-01T20:00:47.878217Z"}, {"uuid": "d7f1bf9e-c7d5-4cbc-a813-05884fa27db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/hacking_Attack/111592", "content": "Black Hat Ethical Hacking\nSuper Admin Privilege Vulnerability Plagues MikroTik Routers\n\nSuper Admin Privilege Vulnerability Plagues MikroTik RoutersPost Views: 23 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA critical vulnerability dubbed CVE-2023-30799 has put over 900,000 MikroTik RouterOS routers at severe risk, allowing attackers to gain \u201csuper-admin\u201d privileges and take full control of the devices without detection.\n\nDiscovered by renowned Google security researcher Tavis Ormandy, the flaw enables remote attackers with an existing admin account to elevate their privileges through the Winbox or HTTP interface. Although exploitation requires an admin account, the presence of a well-known default \u201cadmin\u201d user in the Mikrotik RouterOS operating system makes this a significant concern.\n\nWhile the vulnerability was initially disclosed without an identifier in June 2022, MikroTik patched the issue in October 2022 for RouterOS stable (v6.49.7) and recently, on July 19, 2023, for RouterOS Long-term (v6.49.8).\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Problem of scaleVulnCheck, a cybersecurity firm, reports that the impact of the flaw is far-reaching, with 474,000 vulnerable devices remotely exposing the web-based management page. However, when accounting for the exploit\u2019s potential over Winbox, a Mikrotek management client, the number of devices exposing this management port balloons to 926,000, making the impact significantly larger.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/Devices/versions.jpg Detected RouterOS versions (VulnCheck) CVE-2023-30799CVE-2023-30799 grants attackers \u201cSuper Admin\u201d privileges, offering unrestricted access to the RouterOS operating system. By leveraging this privilege elevation, attackers can manipulate function calls, enabling them to control the underlying software and evade detection.\n\nVulnCheck\u2019s analysts developed an exploit for the flaw using Margin Research\u2019s FOISted remote RouterOS jailbreak exploit, allowing for root shell access on MIPS-based MikroTik devices. This new exploit bypasses FTP interface exposure requirements and remains unaffected by bindshell blocking or filtering, utilizing the RouterOS web interface to upload files.\n\nMikroTik\u2019s default admin user, which is often not removed as recommended, remains a vulnerability point. Additionally, the lack of admin password strengthening requirements exposes users to brute-force attacks, with MikroTik offering no protection except on the SSH interface.\nTrending: Unlocking Windows System Resource Utilization for Digital Forensics Analysis with SRUM Dump Trending: Digital Forensics Tool: ScrapPy Update your MikroTik devicesMikroTik users must take immediate action to patch the flaw by applying the latest RouterOS update. To enhance security, users should remove administrative interfaces from the internet, restrict login IP addresses to an allow-list, disable Winbox in favor of SSH, and configure SSH to use public/private keys instead of passwords. Failure to address the vulnerability could lead to disastrous consequences, as threat actors may attempt to exploit it rapidly.\nTrending: WormGPT: Unleashing the Dark Side of Generative AI for Cybercrime\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.co[...]", "creation_timestamp": "2026-09-01T20:00:53.720066Z"}, {"uuid": "bcc75fe0-4f45-4f41-95f4-69d2ae204fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/hacking_Attack/102012", "content": "Black Hat Ethical Hacking\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC Release\n\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC ReleasePost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes High-severity reflected cross-site scripting (XSS) flawHackers are wasting no time in exploiting a recently addressed vulnerability in the WordPress Advanced Custom Fields plugin, as they swiftly took advantage of a publicly available proof-of-concept (PoC) exploit just 24 hours after its disclosure.\n\nThe vulnerability, identified as CVE-2023-30777, is a high-severity reflected cross-site scripting (XSS) flaw that enables unauthorized attackers to extract sensitive information and escalate their privileges on targeted WordPress sites.\n\nDiscovered by website security firm Patchstack on May 2nd, 2023, the vulnerability was promptly disclosed, including a PoC exploit, on May 5th, a day after the plugin vendor released a security update with version 6.1.6.\n\nAccording to a report from the Akamai Security Intelligence Group (SIG), significant scanning and exploitation activities were observed starting from May 6th, 2023, using the provided sample code in Patchstack\u2019s disclosure.\n\n\u201cThe Akamai SIG analyzed XSS attack data and identified attacks starting within 24 hours of the exploit PoC being made public,\u201d the report stated.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Attackers Utilize Patchstack\u2019s Sample Code in WordPress Vulnerability What makes this situation particularly noteworthy is that the threat actor replicated and utilized the sample code from Patchstack\u2019s write-up.\n\nWith over 1.4 million websites still running the vulnerable version of the impacted WordPress plugin, based on wordpress.org statistics, attackers have an extensive attack surface to target.\n\nExploiting the XSS flaw requires the involvement of a logged-in user with plugin access, enabling the execution of malicious code in their browser, thereby granting the attackers elevated privileges on the site.\n\nDespite this requirement, the malicious scans demonstrate that threat actors remain undeterred, relying on basic deception and social engineering to overcome this mitigation factor.\n\nFurthermore, the exploit works on default configurations of the affected plugin versions, increasing the likelihood of success for attackers without the need for additional efforts.\nTrending: Maximizing IDOR Detection with Burp Suite\u2019s Autorize Trending: OSINT Tool: GooFuzz WordPress Administrators Urged to Patch Vulnerable PluginsWordPress site administrators using the vulnerable plugins are strongly advised to immediately apply the available patch to protect against ongoing scanning and exploitation attempts.\n\nThe recommended course of action is to update both the \u2018Advanced Custom Fields\u2019 free and pro plugins to version 5.12.6 (backported) and 6.1.6, respectively.\nTrending: CACTUS Ransomware Exploits VPN Flaws to Infiltrate Corporate Networks\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/Images-f[...]", "creation_timestamp": "2026-09-01T20:00:58.421610Z"}, {"uuid": "fb37753d-a0ae-42b5-8ed7-c605ab196424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "Telegram/gaBdUAEEWVgUcYnHku1FjILsSJN1BtvDBCiJZ9Y-qG01X4M", "content": "", "creation_timestamp": "2026-09-02T01:00:04.191321Z"}, {"uuid": "b6fbf1eb-6a7a-4b20-b0a4-565200ee9e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/hacking_Attack/111592", "content": "Black Hat Ethical Hacking\nSuper Admin Privilege Vulnerability Plagues MikroTik Routers\n\nSuper Admin Privilege Vulnerability Plagues MikroTik RoutersPost Views: 23 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA critical vulnerability dubbed CVE-2023-30799 has put over 900,000 MikroTik RouterOS routers at severe risk, allowing attackers to gain \u201csuper-admin\u201d privileges and take full control of the devices without detection.\n\nDiscovered by renowned Google security researcher Tavis Ormandy, the flaw enables remote attackers with an existing admin account to elevate their privileges through the Winbox or HTTP interface. Although exploitation requires an admin account, the presence of a well-known default \u201cadmin\u201d user in the Mikrotik RouterOS operating system makes this a significant concern.\n\nWhile the vulnerability was initially disclosed without an identifier in June 2022, MikroTik patched the issue in October 2022 for RouterOS stable (v6.49.7) and recently, on July 19, 2023, for RouterOS Long-term (v6.49.8).\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Problem of scaleVulnCheck, a cybersecurity firm, reports that the impact of the flaw is far-reaching, with 474,000 vulnerable devices remotely exposing the web-based management page. However, when accounting for the exploit\u2019s potential over Winbox, a Mikrotek management client, the number of devices exposing this management port balloons to 926,000, making the impact significantly larger.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/Devices/versions.jpg Detected RouterOS versions (VulnCheck) CVE-2023-30799CVE-2023-30799 grants attackers \u201cSuper Admin\u201d privileges, offering unrestricted access to the RouterOS operating system. By leveraging this privilege elevation, attackers can manipulate function calls, enabling them to control the underlying software and evade detection.\n\nVulnCheck\u2019s analysts developed an exploit for the flaw using Margin Research\u2019s FOISted remote RouterOS jailbreak exploit, allowing for root shell access on MIPS-based MikroTik devices. This new exploit bypasses FTP interface exposure requirements and remains unaffected by bindshell blocking or filtering, utilizing the RouterOS web interface to upload files.\n\nMikroTik\u2019s default admin user, which is often not removed as recommended, remains a vulnerability point. Additionally, the lack of admin password strengthening requirements exposes users to brute-force attacks, with MikroTik offering no protection except on the SSH interface.\nTrending: Unlocking Windows System Resource Utilization for Digital Forensics Analysis with SRUM Dump Trending: Digital Forensics Tool: ScrapPy Update your MikroTik devicesMikroTik users must take immediate action to patch the flaw by applying the latest RouterOS update. To enhance security, users should remove administrative interfaces from the internet, restrict login IP addresses to an allow-list, disable Winbox in favor of SSH, and configure SSH to use public/private keys instead of passwords. Failure to address the vulnerability could lead to disastrous consequences, as threat actors may attempt to exploit it rapidly.\nTrending: WormGPT: Unleashing the Dark Side of Generative AI for Cybercrime\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.co[...]", "creation_timestamp": "2026-09-02T01:01:14.147015Z"}, {"uuid": "35dd6321-6761-4e0f-b20d-c4d9ede7abaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/hacking_Attack/102012", "content": "Black Hat Ethical Hacking\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC Release\n\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC ReleasePost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes High-severity reflected cross-site scripting (XSS) flawHackers are wasting no time in exploiting a recently addressed vulnerability in the WordPress Advanced Custom Fields plugin, as they swiftly took advantage of a publicly available proof-of-concept (PoC) exploit just 24 hours after its disclosure.\n\nThe vulnerability, identified as CVE-2023-30777, is a high-severity reflected cross-site scripting (XSS) flaw that enables unauthorized attackers to extract sensitive information and escalate their privileges on targeted WordPress sites.\n\nDiscovered by website security firm Patchstack on May 2nd, 2023, the vulnerability was promptly disclosed, including a PoC exploit, on May 5th, a day after the plugin vendor released a security update with version 6.1.6.\n\nAccording to a report from the Akamai Security Intelligence Group (SIG), significant scanning and exploitation activities were observed starting from May 6th, 2023, using the provided sample code in Patchstack\u2019s disclosure.\n\n\u201cThe Akamai SIG analyzed XSS attack data and identified attacks starting within 24 hours of the exploit PoC being made public,\u201d the report stated.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Attackers Utilize Patchstack\u2019s Sample Code in WordPress Vulnerability What makes this situation particularly noteworthy is that the threat actor replicated and utilized the sample code from Patchstack\u2019s write-up.\n\nWith over 1.4 million websites still running the vulnerable version of the impacted WordPress plugin, based on wordpress.org statistics, attackers have an extensive attack surface to target.\n\nExploiting the XSS flaw requires the involvement of a logged-in user with plugin access, enabling the execution of malicious code in their browser, thereby granting the attackers elevated privileges on the site.\n\nDespite this requirement, the malicious scans demonstrate that threat actors remain undeterred, relying on basic deception and social engineering to overcome this mitigation factor.\n\nFurthermore, the exploit works on default configurations of the affected plugin versions, increasing the likelihood of success for attackers without the need for additional efforts.\nTrending: Maximizing IDOR Detection with Burp Suite\u2019s Autorize Trending: OSINT Tool: GooFuzz WordPress Administrators Urged to Patch Vulnerable PluginsWordPress site administrators using the vulnerable plugins are strongly advised to immediately apply the available patch to protect against ongoing scanning and exploitation attempts.\n\nThe recommended course of action is to update both the \u2018Advanced Custom Fields\u2019 free and pro plugins to version 5.12.6 (backported) and 6.1.6, respectively.\nTrending: CACTUS Ransomware Exploits VPN Flaws to Infiltrate Corporate Networks\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/Images-f[...]", "creation_timestamp": "2026-09-02T01:01:18.587416Z"}, {"uuid": "0364faea-7856-4572-bcf6-09bb0bb838f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "seen", "source": "https://t.me/hacking_Attack/119016", "content": "22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability\n\n22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability CVE-2023\u20133067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app TrilliumTrilium Notes is a Hierarchical Note-Taking App for Knowledge BasesIntroduction Every digital creation has flaws, and in this blog, we\u2019ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting vulnerabilities in the Title section, which appeared in an unusual place.Understanding CVE-2023\u20133067: Trilium Notes XSS IssueDescription: A vulnerability was discovered while adding new notes in Trilium Notes where the note titles were immediately shown in the \u201cNote Map\u201d function, possibly permitting HTML injection and cross-site scripting (XSS) attacks on both saved and reflected data. The need for security vigilance cannot be overstated.Affected Versions: The vulnerability is present in versions of Trilium Notes stored in the GitHub repository zadam/trilium prior to version 0.59.4Steps to Reproduce:Begin by downloading the vulnerable version (0.58.0-beta for Windows) from this link.Execute the trilium.exe application.Create a new note within Trillium.Manipulate the Note Title: Name the new note as \">.Visit the \u201cNote Map\u201d: Access the \u201cNote Map\u201d functionality within Trillium.Exploit Triggered: Click on the red dot in the \u201cNote Map\u201d or simply wait for the alert to appear. The XSS attack is now reflected and stored, causing the alert box to pop up every time.Cross-Site-Scripting Payload used: \">Screenshot:When the Red Dot in the Note Map was clicked, the stored XSS was executed, and an alert box appeared.\ud83d\udcfd\ufe0fVideo PoC https://drive.google.com/drive/folders/1Wt_BhUngMjFo3L2_7RhA4gFnYyJTHd5ZWhat did I do Next? I responsibly reported the vulnerability to the huntr.dev platform, which then engaged with the administrator of Trilium\u2019s open-source repository. The report was meticulously validated, assigned an appropriate severity score, and promptly addressed through a new software release. Subsequently, I was honored with the assignment of a CVE for my contribution to the security of the software ecosystem. Officially disclosed report:https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6/#bugbounty Official Announcements:https://twitter.com/huntrHacktivity/status/1664648465685815299https://twitter.com/_Raiders/status/1664663048571998208 CVE-2023\u20133067 Detail:https://nvd.nist.gov/vuln/detail/CVE-2023-3067 Thank you for reading \u270c\ud83c\udffb Take care, fellow hackers! Happy Hunting :> You can connect with me on LinkedIn, or Twitter for more such insights! 22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-02T01:01:09.184577Z"}, {"uuid": "046fa357-897b-4eec-b845-acae8911b2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/cissp/7056", "content": "\ud83d\udea8 Heads up, network admins! \nMikroTik RouterOS vulnerability (CVE-2023-30799) exposes 500,000+ systems to potential exploitation!   \nRead: https://thehackernews.com/2023/07/critical-mikrotik-routeros.html\nUpgrade to RouterOS 6.49.8 or 7.x ASAP!\n\nFraudGPT, the latest cybercrime AI tool, is being sold on dark web marketplaces and Telegram channels. It is claimed that it can create undetectable malware and craft convincing phishing emails. \nRead: https://thehackernews.com/2023/07/new-ai-tool-fraudgpt-emerges-tailored.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.05.04", "creation_timestamp": "2026-09-02T01:03:57.339824Z"}, {"uuid": "f00bb860-684b-4c8c-92b7-600d1d9606c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "seen", "source": "https://t.me/Hackme_news/770", "content": "\ud83d\udea8\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Chrome! \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0432\u043e\u0435\u043c \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0441\u0432\u043e\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441: https://nvd.nist.gov/vuln/detail/CVE-2023-3079", "creation_timestamp": "2026-09-02T01:03:36.953366Z"}, {"uuid": "fb127736-8842-4614-b009-b69dec060700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://t.me/cissp/6774", "content": "Two critical flaws (CVE-2023-29199 / CVE-2023-30547) have been discovered in vm2 JavaScript library that could allow attackers to break out of sandbox protections, potentially leading to RCE attacks.\n\nRead details: https://thehackernews.com/2023/04/critical-flaws-in-vm2-javascript.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.30", "creation_timestamp": "2026-09-02T01:04:01.083779Z"}, {"uuid": "06575391-9134-4eb9-8f27-1f021e0330f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/cissp/6823", "content": "If you're using the Advanced Custom Fields plugin for WordPress, make sure to update to version 6.1.6 as soon as possible! \n \nA security flaw (CVE-2023-30777) has been discovered that could allow for reflected cross-site scripting attacks. \n \nhttps://thehackernews.com/2023/05/new-vulnerability-in-popular-wordpress.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.16", "creation_timestamp": "2026-09-02T01:04:00.318987Z"}, {"uuid": "404e0046-b65b-4154-a345-817cbb4cb4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30350", "type": "seen", "source": "https://t.me/cissp/6819", "content": "exploit\n1. CVE-2023-30350:\nFS-S3900-24T4S Privilege Escalation\nhttps://packetstormsecurity.com/files/172124/FS-S3900-24T4S-Privilege-Escalation.html\n\n2. Apache Solr 8.3.1\nRCE from exposed administration interface\nhttps://blog.scrt.ch/2023/05/01/solr-rce-from-exposed-administration-interface\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.14", "creation_timestamp": "2026-09-02T01:04:00.386351Z"}, {"uuid": "22b4f803-ef5b-40f9-b581-45e9d304b2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30943", "type": "published-proof-of-concept", "source": "Telegram/gaBdUAEEWVgUcYnHku1FjILsSJN1BtvDBCiJZ9Y-qG01X4M", "content": "", "creation_timestamp": "2026-09-03T00:00:59.756924Z"}, {"uuid": "975bb153-3fde-4b3b-9d5d-c0d1d749d88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/119016", "content": "22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability\n\n22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability CVE-2023\u20133067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app TrilliumTrilium Notes is a Hierarchical Note-Taking App for Knowledge BasesIntroduction Every digital creation has flaws, and in this blog, we\u2019ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting vulnerabilities in the Title section, which appeared in an unusual place.Understanding CVE-2023\u20133067: Trilium Notes XSS IssueDescription: A vulnerability was discovered while adding new notes in Trilium Notes where the note titles were immediately shown in the \u201cNote Map\u201d function, possibly permitting HTML injection and cross-site scripting (XSS) attacks on both saved and reflected data. The need for security vigilance cannot be overstated.Affected Versions: The vulnerability is present in versions of Trilium Notes stored in the GitHub repository zadam/trilium prior to version 0.59.4Steps to Reproduce:Begin by downloading the vulnerable version (0.58.0-beta for Windows) from this link.Execute the trilium.exe application.Create a new note within Trillium.Manipulate the Note Title: Name the new note as \">.Visit the \u201cNote Map\u201d: Access the \u201cNote Map\u201d functionality within Trillium.Exploit Triggered: Click on the red dot in the \u201cNote Map\u201d or simply wait for the alert to appear. The XSS attack is now reflected and stored, causing the alert box to pop up every time.Cross-Site-Scripting Payload used: \">Screenshot:When the Red Dot in the Note Map was clicked, the stored XSS was executed, and an alert box appeared.\ud83d\udcfd\ufe0fVideo PoC https://drive.google.com/drive/folders/1Wt_BhUngMjFo3L2_7RhA4gFnYyJTHd5ZWhat did I do Next? I responsibly reported the vulnerability to the huntr.dev platform, which then engaged with the administrator of Trilium\u2019s open-source repository. The report was meticulously validated, assigned an appropriate severity score, and promptly addressed through a new software release. Subsequently, I was honored with the assignment of a CVE for my contribution to the security of the software ecosystem. Officially disclosed report:https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6/#bugbounty Official Announcements:https://twitter.com/huntrHacktivity/status/1664648465685815299https://twitter.com/_Raiders/status/1664663048571998208 CVE-2023\u20133067 Detail:https://nvd.nist.gov/vuln/detail/CVE-2023-3067 Thank you for reading \u270c\ud83c\udffb Take care, fellow hackers! Happy Hunting :> You can connect with me on LinkedIn, or Twitter for more such insights! 22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-04T04:00:05.711856Z"}, {"uuid": "8684b946-443e-42db-bc17-7b205f465cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/111592", "content": "Black Hat Ethical Hacking\nSuper Admin Privilege Vulnerability Plagues MikroTik Routers\n\nSuper Admin Privilege Vulnerability Plagues MikroTik RoutersPost Views: 23 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA critical vulnerability dubbed CVE-2023-30799 has put over 900,000 MikroTik RouterOS routers at severe risk, allowing attackers to gain \u201csuper-admin\u201d privileges and take full control of the devices without detection.\n\nDiscovered by renowned Google security researcher Tavis Ormandy, the flaw enables remote attackers with an existing admin account to elevate their privileges through the Winbox or HTTP interface. Although exploitation requires an admin account, the presence of a well-known default \u201cadmin\u201d user in the Mikrotik RouterOS operating system makes this a significant concern.\n\nWhile the vulnerability was initially disclosed without an identifier in June 2022, MikroTik patched the issue in October 2022 for RouterOS stable (v6.49.7) and recently, on July 19, 2023, for RouterOS Long-term (v6.49.8).\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Problem of scaleVulnCheck, a cybersecurity firm, reports that the impact of the flaw is far-reaching, with 474,000 vulnerable devices remotely exposing the web-based management page. However, when accounting for the exploit\u2019s potential over Winbox, a Mikrotek management client, the number of devices exposing this management port balloons to 926,000, making the impact significantly larger.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/Devices/versions.jpg Detected RouterOS versions (VulnCheck) CVE-2023-30799CVE-2023-30799 grants attackers \u201cSuper Admin\u201d privileges, offering unrestricted access to the RouterOS operating system. By leveraging this privilege elevation, attackers can manipulate function calls, enabling them to control the underlying software and evade detection.\n\nVulnCheck\u2019s analysts developed an exploit for the flaw using Margin Research\u2019s FOISted remote RouterOS jailbreak exploit, allowing for root shell access on MIPS-based MikroTik devices. This new exploit bypasses FTP interface exposure requirements and remains unaffected by bindshell blocking or filtering, utilizing the RouterOS web interface to upload files.\n\nMikroTik\u2019s default admin user, which is often not removed as recommended, remains a vulnerability point. Additionally, the lack of admin password strengthening requirements exposes users to brute-force attacks, with MikroTik offering no protection except on the SSH interface.\nTrending: Unlocking Windows System Resource Utilization for Digital Forensics Analysis with SRUM Dump Trending: Digital Forensics Tool: ScrapPy Update your MikroTik devicesMikroTik users must take immediate action to patch the flaw by applying the latest RouterOS update. To enhance security, users should remove administrative interfaces from the internet, restrict login IP addresses to an allow-list, disable Winbox in favor of SSH, and configure SSH to use public/private keys instead of passwords. Failure to address the vulnerability could lead to disastrous consequences, as threat actors may attempt to exploit it rapidly.\nTrending: WormGPT: Unleashing the Dark Side of Generative AI for Cybercrime\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.co[...]", "creation_timestamp": "2026-09-04T11:00:05.312543Z"}, {"uuid": "14149575-97c9-42b9-8047-ec0c2608a66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "exploited", "source": "https://t.me/hacking_Attack/102012", "content": "Black Hat Ethical Hacking\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC Release\n\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC ReleasePost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes High-severity reflected cross-site scripting (XSS) flawHackers are wasting no time in exploiting a recently addressed vulnerability in the WordPress Advanced Custom Fields plugin, as they swiftly took advantage of a publicly available proof-of-concept (PoC) exploit just 24 hours after its disclosure.\n\nThe vulnerability, identified as CVE-2023-30777, is a high-severity reflected cross-site scripting (XSS) flaw that enables unauthorized attackers to extract sensitive information and escalate their privileges on targeted WordPress sites.\n\nDiscovered by website security firm Patchstack on May 2nd, 2023, the vulnerability was promptly disclosed, including a PoC exploit, on May 5th, a day after the plugin vendor released a security update with version 6.1.6.\n\nAccording to a report from the Akamai Security Intelligence Group (SIG), significant scanning and exploitation activities were observed starting from May 6th, 2023, using the provided sample code in Patchstack\u2019s disclosure.\n\n\u201cThe Akamai SIG analyzed XSS attack data and identified attacks starting within 24 hours of the exploit PoC being made public,\u201d the report stated.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Attackers Utilize Patchstack\u2019s Sample Code in WordPress Vulnerability What makes this situation particularly noteworthy is that the threat actor replicated and utilized the sample code from Patchstack\u2019s write-up.\n\nWith over 1.4 million websites still running the vulnerable version of the impacted WordPress plugin, based on wordpress.org statistics, attackers have an extensive attack surface to target.\n\nExploiting the XSS flaw requires the involvement of a logged-in user with plugin access, enabling the execution of malicious code in their browser, thereby granting the attackers elevated privileges on the site.\n\nDespite this requirement, the malicious scans demonstrate that threat actors remain undeterred, relying on basic deception and social engineering to overcome this mitigation factor.\n\nFurthermore, the exploit works on default configurations of the affected plugin versions, increasing the likelihood of success for attackers without the need for additional efforts.\nTrending: Maximizing IDOR Detection with Burp Suite\u2019s Autorize Trending: OSINT Tool: GooFuzz WordPress Administrators Urged to Patch Vulnerable PluginsWordPress site administrators using the vulnerable plugins are strongly advised to immediately apply the available patch to protect against ongoing scanning and exploitation attempts.\n\nThe recommended course of action is to update both the \u2018Advanced Custom Fields\u2019 free and pro plugins to version 5.12.6 (backported) and 6.1.6, respectively.\nTrending: CACTUS Ransomware Exploits VPN Flaws to Infiltrate Corporate Networks\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/Images-f[...]", "creation_timestamp": "2026-09-04T15:00:05.818084Z"}, {"uuid": "191ced6d-ff5c-4671-8fae-eecc8ce64bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "exploited", "source": "https://t.me/hacking_Attack/102012", "content": "Black Hat Ethical Hacking\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC Release\n\nHackers Exploit Critical WordPress Plugin Vulnerability Within Hours of Public PoC ReleasePost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes High-severity reflected cross-site scripting (XSS) flawHackers are wasting no time in exploiting a recently addressed vulnerability in the WordPress Advanced Custom Fields plugin, as they swiftly took advantage of a publicly available proof-of-concept (PoC) exploit just 24 hours after its disclosure.\n\nThe vulnerability, identified as CVE-2023-30777, is a high-severity reflected cross-site scripting (XSS) flaw that enables unauthorized attackers to extract sensitive information and escalate their privileges on targeted WordPress sites.\n\nDiscovered by website security firm Patchstack on May 2nd, 2023, the vulnerability was promptly disclosed, including a PoC exploit, on May 5th, a day after the plugin vendor released a security update with version 6.1.6.\n\nAccording to a report from the Akamai Security Intelligence Group (SIG), significant scanning and exploitation activities were observed starting from May 6th, 2023, using the provided sample code in Patchstack\u2019s disclosure.\n\n\u201cThe Akamai SIG analyzed XSS attack data and identified attacks starting within 24 hours of the exploit PoC being made public,\u201d the report stated.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Attackers Utilize Patchstack\u2019s Sample Code in WordPress Vulnerability What makes this situation particularly noteworthy is that the threat actor replicated and utilized the sample code from Patchstack\u2019s write-up.\n\nWith over 1.4 million websites still running the vulnerable version of the impacted WordPress plugin, based on wordpress.org statistics, attackers have an extensive attack surface to target.\n\nExploiting the XSS flaw requires the involvement of a logged-in user with plugin access, enabling the execution of malicious code in their browser, thereby granting the attackers elevated privileges on the site.\n\nDespite this requirement, the malicious scans demonstrate that threat actors remain undeterred, relying on basic deception and social engineering to overcome this mitigation factor.\n\nFurthermore, the exploit works on default configurations of the affected plugin versions, increasing the likelihood of success for attackers without the need for additional efforts.\nTrending: Maximizing IDOR Detection with Burp Suite\u2019s Autorize Trending: OSINT Tool: GooFuzz WordPress Administrators Urged to Patch Vulnerable PluginsWordPress site administrators using the vulnerable plugins are strongly advised to immediately apply the available patch to protect against ongoing scanning and exploitation attempts.\n\nThe recommended course of action is to update both the \u2018Advanced Custom Fields\u2019 free and pro plugins to version 5.12.6 (backported) and 6.1.6, respectively.\nTrending: CACTUS Ransomware Exploits VPN Flaws to Infiltrate Corporate Networks\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/05/Images-f[...]", "creation_timestamp": "2026-09-05T01:00:25.820989Z"}, {"uuid": "447ee8c2-f88e-45e2-821f-ce04d904eb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3067", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/119016", "content": "22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability\n\n22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability CVE-2023\u20133067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app TrilliumTrilium Notes is a Hierarchical Note-Taking App for Knowledge BasesIntroduction Every digital creation has flaws, and in this blog, we\u2019ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting vulnerabilities in the Title section, which appeared in an unusual place.Understanding CVE-2023\u20133067: Trilium Notes XSS IssueDescription: A vulnerability was discovered while adding new notes in Trilium Notes where the note titles were immediately shown in the \u201cNote Map\u201d function, possibly permitting HTML injection and cross-site scripting (XSS) attacks on both saved and reflected data. The need for security vigilance cannot be overstated.Affected Versions: The vulnerability is present in versions of Trilium Notes stored in the GitHub repository zadam/trilium prior to version 0.59.4Steps to Reproduce:Begin by downloading the vulnerable version (0.58.0-beta for Windows) from this link.Execute the trilium.exe application.Create a new note within Trillium.Manipulate the Note Title: Name the new note as \">.Visit the \u201cNote Map\u201d: Access the \u201cNote Map\u201d functionality within Trillium.Exploit Triggered: Click on the red dot in the \u201cNote Map\u201d or simply wait for the alert to appear. The XSS attack is now reflected and stored, causing the alert box to pop up every time.Cross-Site-Scripting Payload used: \">Screenshot:When the Red Dot in the Note Map was clicked, the stored XSS was executed, and an alert box appeared.\ud83d\udcfd\ufe0fVideo PoC https://drive.google.com/drive/folders/1Wt_BhUngMjFo3L2_7RhA4gFnYyJTHd5ZWhat did I do Next? I responsibly reported the vulnerability to the huntr.dev platform, which then engaged with the administrator of Trilium\u2019s open-source repository. The report was meticulously validated, assigned an appropriate severity score, and promptly addressed through a new software release. Subsequently, I was honored with the assignment of a CVE for my contribution to the security of the software ecosystem. Officially disclosed report:https://huntr.dev/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6/#bugbounty Official Announcements:https://twitter.com/huntrHacktivity/status/1664648465685815299https://twitter.com/_Raiders/status/1664663048571998208 CVE-2023\u20133067 Detail:https://nvd.nist.gov/vuln/detail/CVE-2023-3067 Thank you for reading \u270c\ud83c\udffb Take care, fellow hackers! Happy Hunting :> You can connect with me on LinkedIn, or Twitter for more such insights! 22.6k+ GitHub Stars Note-Taking App Hit by XSS Vulnerability was originally published in InfoSec Write-ups on Medium, where people are continuing the conversation by highlighting and responding to this story.\nRead more...", "creation_timestamp": "2026-09-05T01:00:41.201779Z"}, {"uuid": "1ca3ed03-8c33-4d91-839e-46ba301752ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/111592", "content": "Black Hat Ethical Hacking\nSuper Admin Privilege Vulnerability Plagues MikroTik Routers\n\nSuper Admin Privilege Vulnerability Plagues MikroTik RoutersPost Views: 23 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA critical vulnerability dubbed CVE-2023-30799 has put over 900,000 MikroTik RouterOS routers at severe risk, allowing attackers to gain \u201csuper-admin\u201d privileges and take full control of the devices without detection.\n\nDiscovered by renowned Google security researcher Tavis Ormandy, the flaw enables remote attackers with an existing admin account to elevate their privileges through the Winbox or HTTP interface. Although exploitation requires an admin account, the presence of a well-known default \u201cadmin\u201d user in the Mikrotik RouterOS operating system makes this a significant concern.\n\nWhile the vulnerability was initially disclosed without an identifier in June 2022, MikroTik patched the issue in October 2022 for RouterOS stable (v6.49.7) and recently, on July 19, 2023, for RouterOS Long-term (v6.49.8).\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Problem of scaleVulnCheck, a cybersecurity firm, reports that the impact of the flaw is far-reaching, with 474,000 vulnerable devices remotely exposing the web-based management page. However, when accounting for the exploit\u2019s potential over Winbox, a Mikrotek management client, the number of devices exposing this management port balloons to 926,000, making the impact significantly larger.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/Devices/versions.jpg Detected RouterOS versions (VulnCheck) CVE-2023-30799CVE-2023-30799 grants attackers \u201cSuper Admin\u201d privileges, offering unrestricted access to the RouterOS operating system. By leveraging this privilege elevation, attackers can manipulate function calls, enabling them to control the underlying software and evade detection.\n\nVulnCheck\u2019s analysts developed an exploit for the flaw using Margin Research\u2019s FOISted remote RouterOS jailbreak exploit, allowing for root shell access on MIPS-based MikroTik devices. This new exploit bypasses FTP interface exposure requirements and remains unaffected by bindshell blocking or filtering, utilizing the RouterOS web interface to upload files.\n\nMikroTik\u2019s default admin user, which is often not removed as recommended, remains a vulnerability point. Additionally, the lack of admin password strengthening requirements exposes users to brute-force attacks, with MikroTik offering no protection except on the SSH interface.\nTrending: Unlocking Windows System Resource Utilization for Digital Forensics Analysis with SRUM Dump Trending: Digital Forensics Tool: ScrapPy Update your MikroTik devicesMikroTik users must take immediate action to patch the flaw by applying the latest RouterOS update. To enhance security, users should remove administrative interfaces from the internet, restrict login IP addresses to an allow-list, disable Winbox in favor of SSH, and configure SSH to use public/private keys instead of passwords. Failure to address the vulnerability could lead to disastrous consequences, as threat actors may attempt to exploit it rapidly.\nTrending: WormGPT: Unleashing the Dark Side of Generative AI for Cybercrime\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.co[...]", "creation_timestamp": "2026-09-05T01:00:32.144792Z"}, {"uuid": "e71fa7eb-9852-406d-893c-e9377448bb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "published-proof-of-concept", "source": "Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85Ww_IzNKkpSTY", "content": "", "creation_timestamp": "2026-09-05T18:00:06.391397Z"}, {"uuid": "f70827ed-6581-4fdd-8bf9-e19d40d4ef1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30765", "type": "published-proof-of-concept", "source": "Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85Ww_IzNKkpSTY", "content": "", "creation_timestamp": "2026-09-06T00:00:39.703320Z"}, {"uuid": "5ee13e29-818b-402e-b631-b36713f9042a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30258", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magnusbilling_unauth_rce_cve_2023_30258.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x64, x86\", \"author\": [\"h00die-gr3y \", \"Eldstal\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A Command Injection vulnerability in MagnusBilling application 6.x and 7.x allows\\n          remote attackers to run arbitrary commands via unauthenticated HTTP request.\\n          A piece of demonstration code is present in `lib/icepay/icepay.php`, with a call to an exec().\\n          The parameter to exec() includes the GET parameter `democ`, which is controlled by the user and\\n          not properly sanitised/escaped.\\n          After successful exploitation, an unauthenticated user is able to execute arbitrary OS commands.\\n          The commands run with the privileges of the web server process, typically `www-data` or `asterisk`.\\n          At a minimum, this allows an attacker to compromise the billing system and its database.\\n\\n          The following MagnusBilling applications are vulnerable:\\n          - MagnusBilling application version 6 (all versions);\\n          - MagnusBilling application up to version 7.x without commit 7af21ed620 which fixes this vulnerability;\", \"disclosure_date\": \"2023-06-26\", \"fullname\": \"exploit/linux/http/magnusbilling_unauth_rce_cve_2023_30258\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"MagnusBilling application unauthenticated Remote Command Execution.\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/magnusbilling_unauth_rce_cve_2023_30258.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/magnusbilling_unauth_rce_cve_2023_30258\", \"references\": [\"CVE-2023-30258\", \"URL-https://attackerkb.com/topics/DFUJhaM5dL/cve-2023-30258\", \"URL-https://eldstal.se/advisories/230327-magnusbilling.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP\", \"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:44.096478Z"}, {"uuid": "b459aab1-a6e4-4a44-92ac-9560780903a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30013", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/totolink_unauth_rce_cve_2023_30013.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, mipsle\", \"author\": [\"h00die-gr3y \", \"Kazamayc https://github.com/Kazamayc\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Multiple TOTOLINK network products contain a command insertion vulnerability in setting/setTracerouteCfg.\\n          This vulnerability allows an attacker to execute arbitrary commands through the \\\"command\\\" parameter.\\n          After exploitation, an attacker will have full access with the same user privileges under\\n          which the webserver is running (typically as user `root`, ;-).\\n\\n          The following TOTOLINK network products and firmware are vulnerable:\\n          - Wireless Gigabit Router model X5000R with firmware X5000R_V9.1.0u.6118_B20201102.zip;\\n          - Wireless Gigabit Router model A7000R with firmware A7000R_V9.1.0u.6115_B20201022.zip;\\n          - Wireless Gigabit Router model A3700R with firmware A3700R_V9.1.2u.6134_B20201202.zip;\\n          - Wireless N Router model N200RE V5 with firmware N200RE_V5_V9.3.5u.6095_B20200916.zip;\\n          - Wireless N Router model N200RE V5 with firmware N200RE_V5_V9.3.5u.6139_B20201216.zip;\\n          - Wireless N Router model N350RT with firmware N350RT_V9.3.5u.6095_B20200916.zip;\\n          - Wireless N Router model N350RT with firmware N350RT_V9.3.5u.6139_B20201216.zip;\\n          - Wireless Extender model EX1200L with firmware EX1200L_V9.3.5u.6146_B20201023.zip; and\\n          - probably more looking at the scale of impacted devices :-(\", \"disclosure_date\": \"2023-05-05\", \"fullname\": \"exploit/linux/http/totolink_unauth_rce_cve_2023_30013\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"TOTOLINK Wireless Routers unauthenticated remote command execution vulnerability.\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/totolink_unauth_rce_cve_2023_30013.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/totolink_unauth_rce_cve_2023_30013\", \"references\": [\"CVE-2023-30013\", \"URL-https://attackerkb.com/topics/xnX3I3PEgM/cve-2023-30013\", \"URL-https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/2\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:58.636322Z"}, {"uuid": "822599ed-2c90-438f-9af2-007bfebb2aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30625", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rudder_server_sqli_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Ege Balc\\u0131 \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This Metasploit module exploits a SQL injection vulnerability in\\n          RudderStack's rudder-server, an open source Customer Data Platform (CDP).\\n          The vulnerability exists in versions of rudder-server prior to 1.3.0-rc.1.\\n          By exploiting this flaw, an attacker can execute arbitrary SQL commands,\\n          which may lead to Remote Code Execution (RCE) due to the `rudder` role\\n          in PostgreSQL having superuser permissions by default.\", \"disclosure_date\": \"2023-06-16\", \"fullname\": \"exploit/multi/http/rudder_server_sqli_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Rudder Server SQLI Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/rudder_server_sqli_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/rudder_server_sqli_rce\", \"references\": [\"CVE-2023-30625\", \"URL-https://securitylab.github.com/advisories/GHSL-2022-097_rudder-server/\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2023-30625\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:11.255317Z"}, {"uuid": "0bd1ad7b-1a17-4a62-a825-2f6aa5240b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30253", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/dolibarr_cms_rce_cve_2023_30253.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Tinexta Cyber Offensive Security Team\", \"Emanuele Cervelli\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Dolibarr ERP/CRM before 17.0.1 allows remote code execution by an\\n          authenticated user who has access to the Website module. The\\n          application filters lowercase `", "creation_timestamp": "2026-09-08T06:50:35.428512Z"}, {"uuid": "336044d1-6c7d-4381-9211-d6721258c633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3079", "type": "exploited", "source": "https://t.me/Hackme_news/770", "content": "\ud83d\udea8\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Chrome! \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0432\u043e\u0435\u043c \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0441\u0432\u043e\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441: https://nvd.nist.gov/vuln/detail/CVE-2023-3079", "creation_timestamp": "2026-09-09T00:00:09.889556Z"}, {"uuid": "83b640ed-3038-43ec-ae0b-0dae98ce663c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv36vspmjp22", "content": "CVE-2023-30547 - vm2\nvm2, a Node.js sandbox, has a security flaw that could allow attackers to break out of its protective boundaries and run malicious code on your system. This affects versions of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-09-09T09:10:05.576561Z"}, {"uuid": "c4b37268-0f83-43d1-b45f-e5547788a5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/cissp/7056", "content": "\ud83d\udea8 Heads up, network admins! \nMikroTik RouterOS vulnerability (CVE-2023-30799) exposes 500,000+ systems to potential exploitation!   \nRead: https://thehackernews.com/2023/07/critical-mikrotik-routeros.html\nUpgrade to RouterOS 6.49.8 or 7.x ASAP!\n\nFraudGPT, the latest cybercrime AI tool, is being sold on dark web marketplaces and Telegram channels. It is claimed that it can create undetectable malware and craft convincing phishing emails. \nRead: https://thehackernews.com/2023/07/new-ai-tool-fraudgpt-emerges-tailored.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.05.04", "creation_timestamp": "2026-09-09T22:00:05.234940Z"}, {"uuid": "48f5c910-cf3a-4205-b1a5-f5145fc44cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30350", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6819", "content": "exploit\n1. CVE-2023-30350:\nFS-S3900-24T4S Privilege Escalation\nhttps://packetstormsecurity.com/files/172124/FS-S3900-24T4S-Privilege-Escalation.html\n\n2. Apache Solr 8.3.1\nRCE from exposed administration interface\nhttps://blog.scrt.ch/2023/05/01/solr-rce-from-exposed-administration-interface\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.14", "creation_timestamp": "2026-09-10T00:00:07.863083Z"}, {"uuid": "c42aa14e-8b3c-45ec-a6dc-96b116d6f136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30777", "type": "seen", "source": "https://t.me/cissp/6823", "content": "If you're using the Advanced Custom Fields plugin for WordPress, make sure to update to version 6.1.6 as soon as possible! \n \nA security flaw (CVE-2023-30777) has been discovered that could allow for reflected cross-site scripting attacks. \n \nhttps://thehackernews.com/2023/05/new-vulnerability-in-popular-wordpress.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.16", "creation_timestamp": "2026-09-10T00:00:08.010649Z"}, {"uuid": "d4fd8ffb-0f52-4570-b448-85d39c5f6cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30799", "type": "seen", "source": "https://t.me/cissp/7056", "content": "\ud83d\udea8 Heads up, network admins! \nMikroTik RouterOS vulnerability (CVE-2023-30799) exposes 500,000+ systems to potential exploitation!   \nRead: https://thehackernews.com/2023/07/critical-mikrotik-routeros.html\nUpgrade to RouterOS 6.49.8 or 7.x ASAP!\n\nFraudGPT, the latest cybercrime AI tool, is being sold on dark web marketplaces and Telegram channels. It is claimed that it can create undetectable malware and craft convincing phishing emails. \nRead: https://thehackernews.com/2023/07/new-ai-tool-fraudgpt-emerges-tailored.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.05.04", "creation_timestamp": "2026-09-10T00:00:11.207820Z"}, {"uuid": "ec9ee5f7-10ca-43a1-bb3c-61d589b09c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://t.me/cissp/6774", "content": "Two critical flaws (CVE-2023-29199 / CVE-2023-30547) have been discovered in vm2 JavaScript library that could allow attackers to break out of sandbox protections, potentially leading to RCE attacks.\n\nRead details: https://thehackernews.com/2023/04/critical-flaws-in-vm2-javascript.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.30", "creation_timestamp": "2026-09-10T01:00:04.180035Z"}, {"uuid": "bf6323a1-0eb6-46aa-a7ef-1e02d2df0cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30547", "type": "seen", "source": "https://t.me/cissp/6774", "content": "Two critical flaws (CVE-2023-29199 / CVE-2023-30547) have been discovered in vm2 JavaScript library that could allow attackers to break out of sandbox protections, potentially leading to RCE attacks.\n\nRead details: https://thehackernews.com/2023/04/critical-flaws-in-vm2-javascript.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.30", "creation_timestamp": "2026-09-11T00:00:56.535580Z"}, {"uuid": "d798805b-47c5-46c3-b528-17772f55d918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "seen", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-14T03:00:06.338047Z"}, {"uuid": "cde1d054-7768-4dd6-8356-56dfb3c15ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30212", "type": "published-proof-of-concept", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-15T00:00:31.142135Z"}]}