{"vulnerability": "CVE-2023-5046", "sightings": [{"uuid": "ff0f46be-8f39-46ff-a390-76ee2af49339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50469", "type": "seen", "source": "https://t.me/ctinow/156646", "content": "https://ift.tt/5g4s0HI\nCVE-2023-50469 Exploit", "creation_timestamp": "2023-12-19T23:18:51.000000Z"}, {"uuid": "43dedd89-c627-42a7-accb-163feefa7aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50466", "type": "seen", "source": "https://t.me/ctinow/156979", "content": "https://ift.tt/XqWFsRP\nCVE-2023-50466", "creation_timestamp": "2023-12-20T13:53:10.000000Z"}, {"uuid": "b48db573-7705-45c5-a74c-b644dcc887bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5046", "type": "seen", "source": "https://t.me/cibsecurity/72177", "content": "\u203c CVE-2023-5046 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Procost: before 1390.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-12T16:23:18.000000Z"}, {"uuid": "f1eb949e-130a-4cf8-b577-71a891cfce52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50469", "type": "seen", "source": "https://t.me/ctinow/166665", "content": "https://ift.tt/mQbivUq\nCVE-2023-50469 | Shenzhen Libituo Technology LBT-T300-T310 2.2.2.6 /apply.cgi ApCliEncrypType buffer overflow", "creation_timestamp": "2024-01-11T17:37:10.000000Z"}, {"uuid": "de74a17e-8467-4f54-ab9f-fed63b053547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50466", "type": "seen", "source": "https://t.me/ctinow/167792", "content": "https://ift.tt/kQhyOL9\nCVE-2023-50466 | Weintek cMT2078X Easyweb 2.1.3 HMI Name command injection", "creation_timestamp": "2024-01-13T10:51:31.000000Z"}, {"uuid": "06833a9c-439a-435e-9055-abbfd6c6d424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50465", "type": "seen", "source": "https://t.me/ctinow/161295", "content": "https://ift.tt/jkO6MTG\nCVE-2023-50465 | Monica 4.0.0 SVG Document cross site scripting", "creation_timestamp": "2024-01-01T12:36:49.000000Z"}, {"uuid": "dfc8d2c0-f2b2-442e-90de-42036ba18dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50463", "type": "seen", "source": "https://t.me/ctinow/161271", "content": "https://ift.tt/Wum7513\nCVE-2023-50463 | caddy-geo-ip up to 0.6.0 Header X-Forwarded-For protection mechanism", "creation_timestamp": "2024-01-01T11:31:45.000000Z"}, {"uuid": "c51b0323-6388-4b06-a305-7ecb9f8eb351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50461", "type": "seen", "source": "https://gist.github.com/ichintu/6e4365e719efc73cff29fb6a2ec0065b", "content": "**September 14, 2026 Cyber Threat Intelligence Digest**\n\nThis briefing highlights critical vulnerabilities, AI-driven security shifts, and industry insights:\n\n\u2022 **Active Threats &amp; Vulnerabilities:** A CVSS 9.9 OS command injection flaw (CVE-2026-90699) affects the D-Link DWR-M920 with public exploits. NCSC/CISA warn of active exploitation of a critical GitLab path traversal (CVE-2026-85706). ~2.6 million MikroTik routers expose public services, and an authenticated TYPO3 extension flaw (CVE-2023-50461, CVSS 8.8) enables arbitrary code execution. Separately, a malicious Twitch browser extension leaked OAuth tokens for ~31,000 users to a Russian bot service.\n\n\u2022 **AI &amp; Patching Dynamics:** Microsoft\u2019s September update addresses ~972 vulnerabilities, largely uncovered by AI scanning. While AI accelerates detection, it also compresses patch windows as exploits are rapidly reverse-engineered from new releases.\n\n\u2022 **AI Governance &amp; Leadership:** The 3M ChatGPT litigation case underscores that AI interaction logs are discoverable evidence, requiring risk-based retention, cross-functional accountability, and proactive legal compliance. On career development, transitioning from technical security roles to leadership (e.g., CISO) demands a shift toward business strategy, cross-functional communication, and continuous learning beyond pure cybersecurity.", "creation_timestamp": "2026-09-14T12:02:18.769543Z"}]}