{"metadata": {"vulnerability": "CVE-2023-2516", "count": 25, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 14}}, "data": [{"timestamp": "2023-05-04T00:00:00Z", "date_only": false, "value": "2023-05-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-2516", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-05T00:00:00Z", "date_only": true, "value": "2023-05-05", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-2516", "record": "GSD-2023-2516", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2023-05-05T00:00:00Z", "date_only": false, "value": "2023-05-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2516", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-05T00:00:00Z", "date_only": false, "value": "2023-05-05T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntrdev", "record": "CVE-2023-2516", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-05T19:15:00Z", "date_only": false, "value": "2023-05-05T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-2516", "record": "GSD-2023-2516", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-05-05T19:15:15Z", "date_only": false, "value": "2023-05-05T19:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2FFP-W665-9MGX", "record": "GHSA-2FFP-W665-9MGX", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-05-05T19:15:15.763Z", "date_only": false, "value": "2023-05-05T19:15:15.763", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2516", "record": "FKIE_CVE-2023-2516", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-05T21:31:11Z", "date_only": false, "value": "2023-05-05T21:31:11Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2FFP-W665-9MGX", "record": "GHSA-2FFP-W665-9MGX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-05T22:25:14Z", "date_only": false, "value": "2023-05-05T22:25:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/63392", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "9442a004-3257-4915-80b6-f3f20f670b2f", "content": "\u203c CVE-2023-2516 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/63392"}, {"timestamp": "2023-05-10T00:00:00Z", "date_only": true, "value": "2023-05-10", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-2516", "record": "GSD-2023-2516", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2023-05-10T02:20:00Z", "date_only": false, "value": "2023-05-10T02:20Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-2516", "record": "GSD-2023-2516", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-05-10T15:31:07Z", "date_only": false, "value": "2023-05-10T15:31:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2FFP-W665-9MGX", "record": "GHSA-2FFP-W665-9MGX", "field": "modified", "linked_record": true}, {"timestamp": "2023-06-01T13:16:22Z", "date_only": false, "value": "2023-06-01T13:16:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/8402", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "eb11dbfa-fe3f-4413-93e9-ae143c18e5be", "content": "#exploit\n1. CVE-2023-34152 / CVE-2023-34151:\nShell Command Injection in ImageMagick / \nUndefined behaviors of casting double to size_t in svg, mvg, and other coders\nhttps://github.com/ImageMagick/ImageMagick/issues/6341\n]-&gt; CVE-2023-34153:\u00a0Shell command injection vulnerability\nhttps://github.com/ImageMagick/ImageMagick/issues/6338\n\n2. CVE-2023-28782:\nPHP Object Injection Flaw in WordPress Gravity Forms Plugin\nhttps://securityonline.info/cve-2023-28782-php-object-injection-flaw-in-wordpress-gravity-forms-plugin-with-1-million-active-installations\n\n3. CVE-2023-3009:\nStored XSS on item name - Bypassing CVE-2023-2516 in TeamPass &lt;3.0.9\nhttps://github.com/mnqazi/CVE-2023-3009", "url": "https://t.me/CyberSecurityTechnologies/8402"}, {"timestamp": "2023-06-02T09:34:10Z", "date_only": false, "value": "2023-06-02T09:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3073", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "a1c099ca-c359-42b2-8284-2ba6212c87e2", "content": "Tools - Hackers Factory \n\nCVE-2023-3009\n\nStored #XSS on item name - Bypassing CVE-2023-2516 in TeamPass &lt; 3.0.9 - by M Nadeem Qazi.\n\nhttps://github.com/mnqazi/CVE-2023-3009\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bApplywdac \n\nPowerShell script for applying WDAC policies.\n\nhttps://github.com/vu-ls/applywdac\n\n#cybersecurity #infosec\n\n\u200b\u200bfake-useragent\n\nUp-to-date simple useragent faker with real world database.\n\nhttps://github.com/fake-useragent/fake-useragent\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bProxiFyre \n\nAdvanced SOCKS5 Routing Solution for Windows.\n\nhttps://github.com/wiresock/socksify\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bThe DEF CON CTF 2023 Qualifier\n\nThis repository contains the open source release for Nautilus Institute's 2023 DEF CON CTF qualifier.\n\nhttps://github.com/Nautilus-Institute/quals-2023\n\n#cybersecurity #infosec\n\n\u200b\u200bWordlists\n\nReal-world infosec wordlists, updated regularly! These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include:\n\n\u2022 Wordpress\n\u2022 Joomla\n\u2022 Drupal\n\u2022 Magento\n\u2022 Ghost\n\u2022 Tomcat\n\nhttps://github.com/trickest/wordlists\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bNanorobeus\n\nCOFF file (BOF) for managing #Kerberos tickets.\n\nhttps://github.com/wavvs/nanorobeus\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCVE-2023-23638\n\nApache Dubbo Vulnerability Exploitation Engineering Practice, covering Dubbo 3.x from service discovery to vulnerability exploitation and reverse display. \n\nhttps://github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp\n\n#cve #poc #cybersecurity #infosec\n\n\u200b\u200bEPI\n\nProcess injection through entry points hijacking.\n\nhttps://github.com/Kudaes/EPI\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCRTER\n\nA command-line tool for fetching subdomains using the CRT.SH certificate search engine. It allows you to provide a list of domain names or fully-qualified domain names (FQDNs) and retrieve the associated subdomains. The tool fetches the subdomains from CRT.SH and saves them to an output file.\n\nhttps://github.com/Micro0x00/CRTER\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bHALA\n\nHALA offers a powerful capability that enables you to identify reflected parameters within the response, providing valuable assistance in your testing and hacking endeavors.\n\nhttps://github.com/whalebone7/Hala\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/3073", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-26T07:34:24Z", "date_only": false, "value": "2023-11-26T07:34:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/590", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "d838b764-5101-47c8-91e7-96f7bc55a595", "content": "#ExploitObserverAlert\n\nCVE-2023-2516\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2023-2516. Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.\n\nFIRST-EPSS: 0.000630000\nNVD-IS: 2.7\nNVD-ES: 2.3", "url": "https://t.me/arpsyndicate/590"}, {"timestamp": "2023-12-13T01:20:32.295Z", "date_only": false, "value": "2023-12-13T01:20:32.295313Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-2516", "record": "GSD-2023-2516", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-02T06:26:09.003Z", "date_only": false, "value": "2024-08-02T06:26:09.003Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-2516", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-29T17:14:46.306Z", "date_only": false, "value": "2025-01-29T17:14:46.306620Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-2516", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-29T17:14:46.306Z", "date_only": false, "value": "2025-01-29T17:14:46.306620Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2516", "record": "FKIE_CVE-2023-2516", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-12T16:42:44.286Z", "date_only": false, "value": "2025-02-12T16:42:44.286Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-2516", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T16:42:44.286Z", "date_only": false, "value": "2025-02-12T16:42:44.286Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-2516", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:52:45.803Z", "date_only": false, "value": "2026-06-17T05:52:45.803", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2516", "record": "FKIE_CVE-2023-2516", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:00:30.009Z", "date_only": false, "value": "2026-07-29T12:00:30.009632Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13626", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "c088e972-a174-42e2-8682-c4dd49315e69", "url": "https://t.me/CVEhub/13626"}, {"timestamp": "2026-07-30T00:00:53.889Z", "date_only": false, "value": "2026-07-30T00:00:53.889219Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13626", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "6d16ea5f-51cb-4275-b1f3-f3d47e33436c", "url": "https://t.me/CVEhub/13626"}, {"timestamp": "2026-07-31T00:00:11.325Z", "date_only": false, "value": "2026-07-31T00:00:11.325392Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13626", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "eee53a13-d192-475b-b347-eab8615386e8", "url": "https://t.me/CVEhub/13626", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-13T01:50:58.883Z", "anchors": {"origin": {"timestamp": "2023-05-05T00:00:00Z", "date_only": false, "value": "2023-05-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2516", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-05-05T00:00:00Z", "date_only": false, "value": "2023-05-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2516", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-06-02T09:34:10Z", "date_only": false, "value": "2023-06-02T09:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3073", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "a1c099ca-c359-42b2-8284-2ba6212c87e2", "content": "Tools - Hackers Factory \n\nCVE-2023-3009\n\nStored #XSS on item name - Bypassing CVE-2023-2516 in TeamPass &lt; 3.0.9 - by M Nadeem Qazi.\n\nhttps://github.com/mnqazi/CVE-2023-3009\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bApplywdac \n\nPowerShell script for applying WDAC policies.\n\nhttps://github.com/vu-ls/applywdac\n\n#cybersecurity #infosec\n\n\u200b\u200bfake-useragent\n\nUp-to-date simple useragent faker with real world database.\n\nhttps://github.com/fake-useragent/fake-useragent\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bProxiFyre \n\nAdvanced SOCKS5 Routing Solution for Windows.\n\nhttps://github.com/wiresock/socksify\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bThe DEF CON CTF 2023 Qualifier\n\nThis repository contains the open source release for Nautilus Institute's 2023 DEF CON CTF qualifier.\n\nhttps://github.com/Nautilus-Institute/quals-2023\n\n#cybersecurity #infosec\n\n\u200b\u200bWordlists\n\nReal-world infosec wordlists, updated regularly! These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include:\n\n\u2022 Wordpress\n\u2022 Joomla\n\u2022 Drupal\n\u2022 Magento\n\u2022 Ghost\n\u2022 Tomcat\n\nhttps://github.com/trickest/wordlists\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bNanorobeus\n\nCOFF file (BOF) for managing #Kerberos tickets.\n\nhttps://github.com/wavvs/nanorobeus\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCVE-2023-23638\n\nApache Dubbo Vulnerability Exploitation Engineering Practice, covering Dubbo 3.x from service discovery to vulnerability exploitation and reverse display. \n\nhttps://github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp\n\n#cve #poc #cybersecurity #infosec\n\n\u200b\u200bEPI\n\nProcess injection through entry points hijacking.\n\nhttps://github.com/Kudaes/EPI\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCRTER\n\nA command-line tool for fetching subdomains using the CRT.SH certificate search engine. It allows you to provide a list of domain names or fully-qualified domain names (FQDNs) and retrieve the associated subdomains. The tool fetches the subdomains from CRT.SH and saves them to an output file.\n\nhttps://github.com/Micro0x00/CRTER\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bHALA\n\nHALA offers a powerful capability that enables you to identify reflected parameters within the response, providing valuable assistance in your testing and hacking endeavors.\n\nhttps://github.com/whalebone7/Hala\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/3073", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2453650.0, "hours": 681.5694444444445, "days": 28.39872685185185, "min_seconds": 2367250.0, "max_seconds": 2453650.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-05T00:00:00Z", "date_only": false, "value": "2023-05-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2516", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-06-02T09:34:10Z", "date_only": false, "value": "2023-06-02T09:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3073", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "a1c099ca-c359-42b2-8284-2ba6212c87e2", "content": "Tools - Hackers Factory \n\nCVE-2023-3009\n\nStored #XSS on item name - Bypassing CVE-2023-2516 in TeamPass &lt; 3.0.9 - by M Nadeem Qazi.\n\nhttps://github.com/mnqazi/CVE-2023-3009\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bApplywdac \n\nPowerShell script for applying WDAC policies.\n\nhttps://github.com/vu-ls/applywdac\n\n#cybersecurity #infosec\n\n\u200b\u200bfake-useragent\n\nUp-to-date simple useragent faker with real world database.\n\nhttps://github.com/fake-useragent/fake-useragent\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bProxiFyre \n\nAdvanced SOCKS5 Routing Solution for Windows.\n\nhttps://github.com/wiresock/socksify\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bThe DEF CON CTF 2023 Qualifier\n\nThis repository contains the open source release for Nautilus Institute's 2023 DEF CON CTF qualifier.\n\nhttps://github.com/Nautilus-Institute/quals-2023\n\n#cybersecurity #infosec\n\n\u200b\u200bWordlists\n\nReal-world infosec wordlists, updated regularly! These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include:\n\n\u2022 Wordpress\n\u2022 Joomla\n\u2022 Drupal\n\u2022 Magento\n\u2022 Ghost\n\u2022 Tomcat\n\nhttps://github.com/trickest/wordlists\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bNanorobeus\n\nCOFF file (BOF) for managing #Kerberos tickets.\n\nhttps://github.com/wavvs/nanorobeus\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCVE-2023-23638\n\nApache Dubbo Vulnerability Exploitation Engineering Practice, covering Dubbo 3.x from service discovery to vulnerability exploitation and reverse display. \n\nhttps://github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp\n\n#cve #poc #cybersecurity #infosec\n\n\u200b\u200bEPI\n\nProcess injection through entry points hijacking.\n\nhttps://github.com/Kudaes/EPI\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCRTER\n\nA command-line tool for fetching subdomains using the CRT.SH certificate search engine. It allows you to provide a list of domain names or fully-qualified domain names (FQDNs) and retrieve the associated subdomains. The tool fetches the subdomains from CRT.SH and saves them to an output file.\n\nhttps://github.com/Micro0x00/CRTER\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bHALA\n\nHALA offers a powerful capability that enables you to identify reflected parameters within the response, providing valuable assistance in your testing and hacking endeavors.\n\nhttps://github.com/whalebone7/Hala\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/3073", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 111289858.883199, "hours": 30913.8496897775, "days": 1288.077070407396, "min_seconds": 111203458.883199, "max_seconds": 111289858.883199, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-05T00:00:00Z", "date_only": false, "value": "2023-05-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2516", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T01:50:58.883Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 108836208.883199, "hours": 30232.28024533306, "days": 1259.678343555544, "min_seconds": 108836208.883199, "max_seconds": 108836208.883199, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-06-02T09:34:10Z", "date_only": false, "value": "2023-06-02T09:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3073", "record": "CVE-2023-2516", "field": "creation_timestamp", "uuid": "a1c099ca-c359-42b2-8284-2ba6212c87e2", "content": "Tools - Hackers Factory \n\nCVE-2023-3009\n\nStored #XSS on item name - Bypassing CVE-2023-2516 in TeamPass &lt; 3.0.9 - by M Nadeem Qazi.\n\nhttps://github.com/mnqazi/CVE-2023-3009\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bApplywdac \n\nPowerShell script for applying WDAC policies.\n\nhttps://github.com/vu-ls/applywdac\n\n#cybersecurity #infosec\n\n\u200b\u200bfake-useragent\n\nUp-to-date simple useragent faker with real world database.\n\nhttps://github.com/fake-useragent/fake-useragent\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bProxiFyre \n\nAdvanced SOCKS5 Routing Solution for Windows.\n\nhttps://github.com/wiresock/socksify\n\n#cybersecurity #infosec #privacy\n\n\u200b\u200bThe DEF CON CTF 2023 Qualifier\n\nThis repository contains the open source release for Nautilus Institute's 2023 DEF CON CTF qualifier.\n\nhttps://github.com/Nautilus-Institute/quals-2023\n\n#cybersecurity #infosec\n\n\u200b\u200bWordlists\n\nReal-world infosec wordlists, updated regularly! These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include:\n\n\u2022 Wordpress\n\u2022 Joomla\n\u2022 Drupal\n\u2022 Magento\n\u2022 Ghost\n\u2022 Tomcat\n\nhttps://github.com/trickest/wordlists\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bNanorobeus\n\nCOFF file (BOF) for managing #Kerberos tickets.\n\nhttps://github.com/wavvs/nanorobeus\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCVE-2023-23638\n\nApache Dubbo Vulnerability Exploitation Engineering Practice, covering Dubbo 3.x from service discovery to vulnerability exploitation and reverse display. \n\nhttps://github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp\n\n#cve #poc #cybersecurity #infosec\n\n\u200b\u200bEPI\n\nProcess injection through entry points hijacking.\n\nhttps://github.com/Kudaes/EPI\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCRTER\n\nA command-line tool for fetching subdomains using the CRT.SH certificate search engine. It allows you to provide a list of domain names or fully-qualified domain names (FQDNs) and retrieve the associated subdomains. The tool fetches the subdomains from CRT.SH and saves them to an output file.\n\nhttps://github.com/Micro0x00/CRTER\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bHALA\n\nHALA offers a powerful capability that enables you to identify reflected parameters within the response, providing valuable assistance in your testing and hacking endeavors.\n\nhttps://github.com/whalebone7/Hala\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/3073", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T01:50:58.883Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}
