{"metadata": {"vulnerability": "CVE-2023-36163", "count": 25, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-06-21T00:00:00Z", "date_only": false, "value": "2023-06-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-36163", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-07-10T11:00:42Z", "date_only": false, "value": "2023-07-10T11:00:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8643", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "f7d99248-6821-4531-89dd-6982f1cbd60e", "content": "#exploit\n1. CVE-2023-36167:\nAn issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component\nhttps://github.com/TraiLeR2/CVE-2023-36167\n\n2. CVE-2023-36163:\nBuildaGate5library - Reflected Cross-Site Scripting (XSS)\nhttps://github.com/TraiLeR2/CVE-2023-36163", "url": "https://t.me/CyberSecurityTechnologies/8643"}, {"timestamp": "2023-07-10T13:48:04Z", "date_only": false, "value": "2023-07-10T13:48:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/702", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "46440e37-008e-4d18-99a6-d4f71ecce983", "content": "https://github.com/TraiLeR2/CVE-2023-36163\nxss \n#github", "url": "https://t.me/CNArsenal/702"}, {"timestamp": "2023-07-11T00:00:00Z", "date_only": false, "value": "2023-07-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-36163", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-07-11T14:15:00Z", "date_only": false, "value": "2023-07-11T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-36163", "record": "GSD-2023-36163", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-07-11T14:15:09Z", "date_only": false, "value": "2023-07-11T14:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C67W-FMJH-642R", "record": "GHSA-C67W-FMJH-642R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-07-11T14:15:09.537Z", "date_only": false, "value": "2023-07-11T14:15:09.537", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36163", "record": "FKIE_CVE-2023-36163", "field": "published"}, {"timestamp": "2023-07-11T15:31:17Z", "date_only": false, "value": "2023-07-11T15:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C67W-FMJH-642R", "record": "GHSA-C67W-FMJH-642R", "field": "published"}, {"timestamp": "2023-07-11T17:06:34.531Z", "date_only": false, "value": "2023-07-11T17:06:34.531Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-36163", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-07-11T18:29:44Z", "date_only": false, "value": "2023-07-11T18:29:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/66391", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "bb332b8d-b104-4ff7-b4c5-a707bd672255", "content": "\u203c CVE-2023-36163 \u203c\n\nCross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/66391"}, {"timestamp": "2023-07-21T16:19:00Z", "date_only": false, "value": "2023-07-21T16:19Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-36163", "record": "GSD-2023-36163", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-07-27T07:52:46Z", "date_only": false, "value": "2023-07-27T07:52:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3119", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "a715f8c1-94e0-4944-83c4-698af0f4f67c", "content": "25 Tools \ud83d\udd27 \ud83d\udd27 - Hackers Factory\n\nWinsocky\n\nWinsocket implementation for #CobaltStrike. Used to communicate with the victim using winsockets instead of the traditional ways.\n\nhttps://github.com/WKL-Sec/Winsocky\n\n#infosec #pentesting #redteam\n\n\u200b\u200bUseful #OSINT hints and links\n\nhttps://github.com/seintpl/osint\n\n#cybersecurity #infosec\n\n\u200b\u200bPyrrha\n\nA tool for firmware cartography.\n\nhttps://github.com/quarkslab/pyrrha\n\n#cybersecurity #infosec\n\n\u200b\u200b\ud83d\udd79 apk.sh\n\napk.sh makes #reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.\n\nhttps://github.com/ax/apk.sh\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-3269 \n\nLinux kernel privilege escalation vulnerability.\n\nhttps://github.com/lrh2000/StackRot\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bmmdb-server\n\nFast API server to lookup IP addresses for their geographic location.\n\nhttps://github.com/adulau/mmdb-server\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-2868\n\nBarracuda ESG Command Injection\n\nhttps://github.com/cfielding-r7/poc-cve-2023-2868\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bDoge-COFFLdr\n\nIts a coff loader ported to go.\n\n\u2022 Ported to go\n\u2022 more opsec\n\u2022 support BeaconOutput\n\u2022 support other Beacon functions(todo)\n\nhttps://github.com/timwhitez/Doge-COFFLdr\n\n#infosec #pentesting #redteam\n\n\u200b\u200bSR-IOV Network Metrics Exporter\n\nExporter that reads metrics for SR-IOV Virtual Functions and exposes them in the Prometheus format.\n\nhttps://github.com/k8snetworkplumbingwg/sriov-network-metrics-exporter\n\n#cybersecurity #infosec\n\n\u200b\u200bnf-tables-lpe\n\nExploits of Team Orca from Sea Security and Qrious Secure for multiple vulnerabilities in Netfilter's nf_table module.\n\nhttps://github.com/kungfulon/nf-tables-lpe\n\n#cybersecurity #infosec\n\n\u200b\u200broute-detect\n\nFind authentication (authn) and authorization (authz) security bugs in web application routes.\n\nhttps://github.com/mschwager/route-detect\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bjava-gate\n\nJava JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders.\n\nhttps://github.com/4ra1n/java-gate\n\n#infosec #pentesting #redteam\n\nTakeMyRDP 2.0\n\nA keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts (like in mstsc.exe and CredentialUIBroker.exe) it operates in the background not as a console windows anymore and handles all messages in a hidden window.\n\nhttps://github.com/nocerainfosec/TakeMyRDP2.0\n\n#infosec #pentesting #redteam\n\nEvil QR\n\nProof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.\n\nhttps://github.com/kgretzky/evilqr\n\n#cybersecurity #infosec\n\n\u200b\u200bDecrypt Chrome Passwords\n\nA simple program to decrypt chrome password saved on your machine. This code has only been tested on windows, so it may not work on other OS.\n\nhttps://github.com/ohyicong/decrypt-chrome-passwords\n\n#cybersecurity #infosec #redteam\n\n\u200b\u200bShortscan\n\nAn IIS short filename enumeration tool.\n\nhttps://github.com/bitquark/shortscan\n\n#cybersecurity #infosec\n\n\u200b\u200bFuzzyLogic.jl\n\nA Flexible Library for Efficient and Productive Fuzzy Inference\n \nhttps://github.com/lucaferranti/fuzzieee2023\n\n#cybersecurity #infosec\n\n\u200b\u200bDECREE\n\nThis is the code repository of the CVPR 2023 paper DECREE, \"Detecting Backdoors in Pre-trained Encoders\", the first backdoor detection method against self-supervising learning (SSL) backdoor attacks.\n\nhttps://github.com/GiantSeaweed/DECREE\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCVE-2023-36163\n\nCross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.\n\nhttps://github.com/TraiLeR2/CVE-2023-36163\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bCVE-2023-36167\n\nAn issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component\n\nhttps://github.com/TraiLeR2/CVE-2023-36167\n\n#cve #cybersecurity #infosec\n\n\u200b\u200b1/1", "url": "https://t.me/dilagrafie/3119"}, {"timestamp": "2023-12-13T01:20:34.733Z", "date_only": false, "value": "2023-12-13T01:20:34.733732Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-36163", "record": "GSD-2023-36163", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T05:56:39Z", "date_only": false, "value": "2024-04-04T05:56:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C67W-FMJH-642R", "record": "GHSA-C67W-FMJH-642R", "field": "modified"}, {"timestamp": "2024-08-02T16:37:41.332Z", "date_only": false, "value": "2024-08-02T16:37:41.332Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-36163", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-08T15:35:06.222Z", "date_only": false, "value": "2024-11-08T15:35:06.222597Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36163", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-08T15:35:06.222Z", "date_only": false, "value": "2024-11-08T15:35:06.222597Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36163", "record": "FKIE_CVE-2023-36163", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-08T15:35:14.836Z", "date_only": false, "value": "2024-11-08T15:35:14.836Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36163", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T16:56:16.210Z", "date_only": false, "value": "2025-02-13T16:56:16.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-36163", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:05:51.127Z", "date_only": false, "value": "2026-06-17T06:05:51.127", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36163", "record": "FKIE_CVE-2023-36163", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:17.584Z", "date_only": false, "value": "2026-07-29T12:00:17.584609Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/16623", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "41ae5009-4ad0-4680-856b-4e5d9785ec10", "url": "https://t.me/CVEhub/16623"}, {"timestamp": "2026-07-30T00:00:36.268Z", "date_only": false, "value": "2026-07-30T00:00:36.268356Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/16623", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "d28e3468-d57e-40b2-b6c5-165ea4a511fc", "url": "https://t.me/CVEhub/16623"}, {"timestamp": "2026-07-31T00:00:40.279Z", "date_only": false, "value": "2026-07-31T00:00:40.279118Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/16623", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "08f4110d-75ab-42ac-9f9f-45227867b1e2", "url": "https://t.me/CVEhub/16623"}, {"timestamp": "2026-09-01T17:00:19.569Z", "date_only": false, "value": "2026-09-01T17:00:19.569919Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7013", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "ebd667d2-a447-4d93-a8cb-86b5bfff8e5a", "url": "https://t.me/cissp/7013"}, {"timestamp": "2026-09-09T23:00:05.949Z", "date_only": false, "value": "2026-09-09T23:00:05.949851Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7013", "record": "CVE-2023-36163", "field": "creation_timestamp", "uuid": "f6db35c8-4490-471c-b656-2c4274796471", "url": "https://t.me/cissp/7013"}]}