{"vulnerability": "CVE-2023-2937", "sightings": [{"uuid": "c53541e0-158a-41da-b9f5-e0b373f3ba10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29371", "type": "seen", "source": "MISP/d930fe8e-c0fa-4a94-a43d-71fc6f512aa3", "content": "", "creation_timestamp": "2023-06-22T09:15:28.000000Z"}, {"uuid": "5a3a6649-838b-4064-ade4-90d7271d2b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29376", "type": "seen", "source": "Telegram/PrDg_Pu8IFDe1RE6tzUcKv9DGfzrKKgXVgvTN3XFqqRds-pR", "content": "", "creation_timestamp": "2025-02-14T10:03:09.000000Z"}, {"uuid": "d453e43a-8b57-40eb-a392-b1baa837ff89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29375", "type": "seen", "source": "Telegram/FZYRQQUJQbAR8bH37xhK4gdLRiI1wRcRcEnuMaW5HZdNSi8M", "content": "", "creation_timestamp": "2025-02-14T10:05:07.000000Z"}, {"uuid": "770726da-1822-4ed0-9f32-60185105330e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29371", "type": "seen", "source": "https://t.me/GhostPrincess/12279", "content": "CVE-2023-29371, Windows GDI Elevation of Privilege Vulnerability, 1day is allegedly on sale\n\n#DarkWeb", "creation_timestamp": "2023-06-16T04:40:39.000000Z"}, {"uuid": "fb109805-87b4-4d92-aaa1-c813296f050a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29372", "type": "seen", "source": "https://t.me/cibsecurity/65192", "content": "\u203c CVE-2023-29372 \u203c\n\nMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-14T07:30:44.000000Z"}, {"uuid": "8cae0064-c3cd-4158-a5a8-dab397f28127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29375", "type": "seen", "source": "https://t.me/cibsecurity/61765", "content": "\u203c CVE-2023-29375 \u203c\n\nAn issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:36:07.000000Z"}, {"uuid": "8bb5f3e7-11e9-4692-af7f-a5454a5a7342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29376", "type": "seen", "source": "https://t.me/cibsecurity/61760", "content": "\u203c CVE-2023-29376 \u203c\n\nAn issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potential XSS by privileged users in Sitefinity to media libraries.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:36:02.000000Z"}, {"uuid": "379824b5-e117-43db-8094-a8d0a131e596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29374", "type": "seen", "source": "https://bsky.app/profile/premarcu.bsky.social/post/3mtcna7rsua2u", "content": "prompt injection isn't just a chatbot trick. when you give an LLM tools (like a terminal or api), a crafted prompt can make it call those tools in ways you didn't intend. real example: CVE-2023-29374 in langchain allowed exactly that. fixed later, but the pattern is everywhere.", "creation_timestamp": "2026-08-17T21:24:42.370766Z"}, {"uuid": "f133d903-21da-4f75-ab0d-e1a1d5639272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29375", "type": "seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-29T20:00:04.122209Z"}, {"uuid": "f36af955-1462-4123-a691-77180eb892db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29375", "type": "published-proof-of-concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-30T00:00:21.539731Z"}]}