{"vulnerability": "2023-15", "sightings": [{"uuid": "aa84a2ca-6ff6-4ddb-ac77-3740492025a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1514", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-331-05", "content": "", "creation_timestamp": "2024-11-26T11:00:00.000000Z"}, {"uuid": "0d716bd2-a398-43f6-85e9-672b36907e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1545", "type": "exploited", "source": "https://gist.github.com/inesmartins/11dea425720d726f7b498cbe92c88a54", "content": "", "creation_timestamp": "2025-03-06T12:52:07.000000Z"}, {"uuid": "93cc46bd-65d2-4f4f-a3c8-62e8f8e83ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1545", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljitwrx3ze2e", "content": "", "creation_timestamp": "2025-03-03T21:02:32.644170Z"}, {"uuid": "ce055278-0071-4dc3-9a28-5a235e2285e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1544", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mbtivjpfks2m", "content": "", "creation_timestamp": "2026-01-07T12:48:58.879870Z"}, {"uuid": "40bb3088-a647-43a9-b12f-ae4c817879a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1585", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/7361", "content": "\u200bAvast Anti-Virus CVE-2023-1585 CVE-2023-1587 Privileged file operation abuse: \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0410\u0432\u0442\u043e\u0440 \u043d\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0442\u0438\u043f\u0430 Privileged file operation abuse, \u0442.\u043a. \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0438\u043b\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0440\u0430\u0432\u043d\u044f\u0442\u044c\u0441\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0443 \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043d\u043e \u043d\u0435 \u0432 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437). \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u0443\u043f\u0430\u043b \u043d\u0430 Avast, \u043f\u043e\u0441\u043b\u0435 \u0431\u0435\u0433\u043b\u043e\u0432\u043e\u0433\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0433\u043b\u0430\u0437\u0430 \u0437\u0430\u0446\u0435\u043f\u0438\u043b\u0438\u0441\u044c \u0437\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041f\u043e\u0440\u0435\u0441\u0435\u0440\u0432\u0438\u0447 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0442 rack911labs \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 SafeBreach. \u041c\u043e\u0435\u0439 \u0446\u0435\u043b\u044c\u044e \u044f\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043e\u0442 SYSTEM \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0431\u044c\u044e\u0437\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041a\u043e\u043d\u0435\u0447\u043d\u043e \u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043b \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0435\u0440\u0447\u0430, \u043d\u043e \u043a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0433\u043b\u0430\u0437\u0430 \u043a\u0440\u0430\u0441\u043d\u0435\u044e\u0442, \u0440\u0443\u043a\u0438 \u0434\u0435\u043b\u0430\u044e\u0442. \u041d\u0438\u0436\u0435 \u044f \u0432\u044b \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0435\u0442\u0435 \u043a\u0430\u043a\u0438\u0435 \u0448\u0430\u0433\u0438 \u044f \u0434\u0435\u043b\u0430\u043b, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0439\u0442\u0438 \u0434\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e POC. \u041f\u0440\u0438\u044f\u0442\u043d\u043e\u0433\u043e \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f)\n\n\ud83d\udccc \u0427\u0438\u0442\u0430\u0442\u044c \u0441\u0442\u0430\u0442\u044c\u044e\n\n#antivirus #vulnerability #poc", "creation_timestamp": "2023-05-07T09:17:10.000000Z"}, {"uuid": "22f90a77-7e2a-43a3-9294-200cd1f54956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1587", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/7361", "content": "\u200bAvast Anti-Virus CVE-2023-1585 CVE-2023-1587 Privileged file operation abuse: \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0410\u0432\u0442\u043e\u0440 \u043d\u0435 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0442\u0438\u043f\u0430 Privileged file operation abuse, \u0442.\u043a. \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0438\u043b\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0440\u0430\u0432\u043d\u044f\u0442\u044c\u0441\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0443 \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043d\u043e \u043d\u0435 \u0432 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437). \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043c\u043e\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u0443\u043f\u0430\u043b \u043d\u0430 Avast, \u043f\u043e\u0441\u043b\u0435 \u0431\u0435\u0433\u043b\u043e\u0432\u043e\u0433\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0433\u043b\u0430\u0437\u0430 \u0437\u0430\u0446\u0435\u043f\u0438\u043b\u0438\u0441\u044c \u0437\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041f\u043e\u0440\u0435\u0441\u0435\u0440\u0432\u0438\u0447 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0442 rack911labs \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 SafeBreach. \u041c\u043e\u0435\u0439 \u0446\u0435\u043b\u044c\u044e \u044f\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043e\u0442 SYSTEM \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0431\u044c\u044e\u0437\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041a\u043e\u043d\u0435\u0447\u043d\u043e \u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043b \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0435\u0440\u0447\u0430, \u043d\u043e \u043a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0433\u043b\u0430\u0437\u0430 \u043a\u0440\u0430\u0441\u043d\u0435\u044e\u0442, \u0440\u0443\u043a\u0438 \u0434\u0435\u043b\u0430\u044e\u0442. \u041d\u0438\u0436\u0435 \u044f \u0432\u044b \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0435\u0442\u0435 \u043a\u0430\u043a\u0438\u0435 \u0448\u0430\u0433\u0438 \u044f \u0434\u0435\u043b\u0430\u043b, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0439\u0442\u0438 \u0434\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e POC. \u041f\u0440\u0438\u044f\u0442\u043d\u043e\u0433\u043e \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f)\n\n\ud83d\udccc \u0427\u0438\u0442\u0430\u0442\u044c \u0441\u0442\u0430\u0442\u044c\u044e\n\n#antivirus #vulnerability #poc", "creation_timestamp": "2023-05-07T09:17:10.000000Z"}, {"uuid": "be0b3675-37e6-40de-b6fd-26495d8bb93b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1596", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1596\n\ud83d\udd39 Description: The tagDiv Composer WordPress plugin before 4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\ud83d\udccf Published: 2023-05-15T12:15:36.699Z\n\ud83d\udccf Modified: 2025-01-24T20:50:15.320Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/cada9be9-522a-4ce8-847d-c8fff2ddcc07", "creation_timestamp": "2025-01-24T21:05:19.000000Z"}, {"uuid": "9c5062b3-4cb8-459d-b61e-cc5349246f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1549", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3033", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1549\n\ud83d\udd39 Description: The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present\n\ud83d\udccf Published: 2023-05-15T12:15:30.894Z\n\ud83d\udccf Modified: 2025-01-24T20:20:10.676Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c94b3a68-673b-44d7-9251-f3590cc5ee9e", "creation_timestamp": "2025-01-24T21:05:29.000000Z"}, {"uuid": "3efe3269-de55-42f5-8259-c3c1ff0f608e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1583", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4802", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1583\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unregistered, some context information (file_alloc_{start,end} and alloc_hint) is not cleared. A subsequent request that has auto index selection enabled via IORING_FILE_INDEX_ALLOC can cause a NULL pointer dereference. An unprivileged user can use the flaw to cause a system crash.\n\ud83d\udccf Published: 2023-03-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T18:50:07.985Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux-block.git/commit/?h=io_uring-6.3&id=761efd55a0227aca3a69deacdaa112fffd44fe37\n2. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=02a4d923e4400a36d340ea12d8058f69ebf3a383", "creation_timestamp": "2025-02-20T19:49:30.000000Z"}, {"uuid": "e3666062-f626-47e4-8e30-47015029a10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1578", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5383", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1578\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.\n\ud83d\udccf Published: 2023-03-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-25T19:52:13.960Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e\n2. https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2", "creation_timestamp": "2025-02-25T20:23:13.000000Z"}, {"uuid": "1a97a7a7-076b-410b-98b3-c6a9225abea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1535", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5389", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1535\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.\n\ud83d\udccf Published: 2023-03-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-25T21:14:42.121Z\n\ud83d\udd17 References:\n1. https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25\n2. https://huntr.dev/bounties/4d4b0caa-6d8c-4574-ae7e-e9ef5e2e1a40", "creation_timestamp": "2025-02-25T21:27:50.000000Z"}, {"uuid": "c9e1a2c3-9cbd-4c99-9afe-77c5a14d9c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1541", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5721", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1541\n\ud83d\udd25 CVSS Score: 6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.\n\ud83d\udccf Published: 2023-03-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T17:03:49.959Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/8fd891c6-b04e-4dac-818f-9ea30861cd92\n2. https://github.com/answerdev/answer/commit/15390adbfcd5fd37af4661f992f8873ae5a6b840", "creation_timestamp": "2025-02-27T17:25:15.000000Z"}, {"uuid": "296ad593-dadd-4127-9e3d-958e5c39229a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1517", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5607", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1517\n\ud83d\udd25 CVSS Score: 4 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.\n\ud83d\udccf Published: 2023-03-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T19:22:56.581Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d\n2. https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7", "creation_timestamp": "2025-02-26T20:25:03.000000Z"}, {"uuid": "c6327bca-8a56-42d0-b247-1cab3353ed9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1500", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5574", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1500\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument about_info leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223400.\n\ud83d\udccf Published: 2023-03-19T20:00:04.451Z\n\ud83d\udccf Modified: 2025-02-26T19:16:06.419Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.223400\n2. https://vuldb.com/?ctiid.223400\n3. https://github.com/Decemberus/BugHub/blob/main/SIMPLE%20ART%20GALLERY%20system%20has%20%20Cross%20site%20scripting%20vulnerabilities.pdf", "creation_timestamp": "2025-02-26T19:24:04.000000Z"}, {"uuid": "00f4430b-a75c-43d9-ab0f-f8d444eddbd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1515", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5605", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1515\n\ud83d\udd25 CVSS Score: 5.2 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.\n\ud83d\udccf Published: 2023-03-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T19:23:25.873Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282\n2. https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964", "creation_timestamp": "2025-02-26T20:25:01.000000Z"}, {"uuid": "9f5535cc-2dc2-4186-b333-bcde90abf6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1582", "type": "seen", "source": "Telegram/n2zjLLvHTE7KzI-Q_1xx_m2x_8XACADauIo8NQufT8etzUj_", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"}, {"uuid": "7d112f50-d10a-44cc-b9f0-3d901b820456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1579", "type": "seen", "source": "Telegram/XunXts8gepyH6wYojBr4mTYDPx4qGJU_gKLFqb7BUtX5u7qd", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"}, {"uuid": "af20a77f-c773-4920-9f69-e6bc48a012bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1538", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5725", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1538\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.\n\ud83d\udccf Published: 2023-03-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:55:54.306Z\n\ud83d\udd17 References:\n1. https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af\n2. https://huntr.dev/bounties/ac0271eb-660f-4966-8b57-4bc660a9a1a0", "creation_timestamp": "2025-02-27T17:25:21.000000Z"}, {"uuid": "15864aed-7181-4ebe-ac98-1d9f0c4f8ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1539", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5722", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1539\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6.\n\ud83d\udccf Published: 2023-03-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T17:02:43.046Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/b4df67f4-14ea-4051-97d4-26690c979a28\n2. https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af", "creation_timestamp": "2025-02-27T17:25:16.000000Z"}, {"uuid": "cbca6c60-fa04-4788-a026-299e39d81d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1536", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1536\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.\n\ud83d\udccf Published: 2023-03-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:47:35.124Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/538207f4-f805-419a-a314-51716643f05e\n2. https://github.com/answerdev/answer/commit/c3743bad4f2a69f69f8f1e1e5b4b6524fc03da25", "creation_timestamp": "2025-02-27T17:25:23.000000Z"}, {"uuid": "d722dabd-55a9-4c9a-bf24-13d26085f76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1537", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5726", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1537\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.\n\ud83d\udccf Published: 2023-03-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:51:11.306Z\n\ud83d\udd17 References:\n1. https://github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af\n2. https://huntr.dev/bounties/171cde18-a447-446c-a9ab-297953ad9b86", "creation_timestamp": "2025-02-27T17:25:22.000000Z"}, {"uuid": "980483ac-d757-428b-b6a7-319d2ac8473b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1527", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5728", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-1527\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.\n\ud83d\udccf Published: 2023-03-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:43:00.904Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/f0272a31-9944-4545-8428-a26154d20348\n2. https://github.com/tsolucio/corebos/commit/aaaca69185bce2be6a82956c69541938dc871268", "creation_timestamp": "2025-02-27T17:25:24.000000Z"}, {"uuid": "597aea5e-330f-448b-a108-cfaec216ae6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1545", "type": "published-proof-of-concept", "source": "Telegram/Ua8xFph7Qn-2iR9zfb256TuAmkiLzfhtmHOSuaM_2peeiaE", "content": "", "creation_timestamp": "2025-09-22T09:00:05.000000Z"}, {"uuid": "948544c3-7d40-4568-b25b-31cbdc559e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1577", "type": "seen", "source": "https://t.me/cvedetector/2181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-1577 - Lenovo Driver Manager Path Hijacking Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-1577 \nPublished : July 31, 2024, 9:15 p.m. | 45\u00a0minutes ago \nDescription : A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a local user to execute code with elevated privileges. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T00:22:02.000000Z"}, {"uuid": "70f56593-64d9-4483-87ec-4f20a762f736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1583", "type": "seen", "source": "Telegram/y2KU6NoP8xRdsgCKBFm9phzpZtFMughiR21JjUB838p0i0ln", "content": "", "creation_timestamp": "2025-02-20T23:26:56.000000Z"}, {"uuid": "e8b5170c-49e6-42c4-8fd3-ded110372f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1582", "type": "seen", "source": "Telegram/t3TK-tPA-pkBjudpM2Ujdphj5_zaObyFkaHyyzclg0yA5U9Z", "content": "", "creation_timestamp": "2025-02-14T10:06:10.000000Z"}, {"uuid": "3e135425-c332-46bb-a63e-582c76548562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1579", "type": "seen", "source": "Telegram/418qXQ-oeDz8bPSVZYe1hSJHguhWb0hZne-aJ-fMVvmDFNVR", "content": "", "creation_timestamp": "2025-02-14T10:06:10.000000Z"}, {"uuid": "ab5c58b3-880b-4149-bc2d-e8e3c51c6104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1522", "type": "seen", "source": "Telegram/fzllmw0ecUiIcsSf_rC-qSAF-hcwLk01DONs6mb8RK5UB1Ye", "content": "", "creation_timestamp": "2025-02-14T10:05:07.000000Z"}, {"uuid": "812b799d-69a0-4798-adca-1f4060a85cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1545", "type": "published-proof-of-concept", "source": "Telegram/it18vqY4Udf5CVy4NGnAQd5n-4U47TFPaXLfE8fwvQ09tUE", "content": "", "creation_timestamp": "2025-03-01T16:00:09.000000Z"}, {"uuid": "fc482574-9a80-4601-9a48-d0b9cf8e21b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1545", "type": "published-proof-of-concept", "source": "Telegram/bVKl2rVR16OP4Ec2skHtd8ZoJ_jQCFrtWn4vA_PJbiN3wMc", "content": "", "creation_timestamp": "2025-02-23T04:00:07.000000Z"}, {"uuid": "f9c41441-9701-40e5-8123-d39b3d47da93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1545", "type": "published-proof-of-concept", "source": "Telegram/WIO_fQDmsdkHWo8m-IHmRUMGh5pTnjLq-j-7pmekb75T3k4", "content": "", "creation_timestamp": "2025-04-26T05:00:06.000000Z"}, {"uuid": "746f43b4-19e3-4182-84db-48bf480bd003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1545", "type": "published-proof-of-concept", "source": "Telegram/Et5iVFSCdUPdUHeaaqlJJet8Ug6v7OSAbBycvWTpNUP7fWw", "content": "", "creation_timestamp": "2025-02-24T22:00:05.000000Z"}, {"uuid": "000371a7-597e-48a9-8040-944aa22195e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1587", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2898", "content": "Tools - Hackers Factory\n\n\u200b\u200bknife \n\nA #BurpSuite plug-in, the main purpose is to make some small improvements to Burp to make it more convenient to use. It's like using a knife to make a small carving on Burp, hence the name \"knife\".\n\nhttps://github.com/bit4woo/knife\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bAwesome One-liner Bug Bounty\n\nA collection of awesome one-liner scripts especially for bug bounty tips.\n\nhttps://github.com/dwisiswant0/awesome-oneliner-bugbounty\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bKubeStalk\n\nKubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9.\n\nhttps://github.com/redhuntlabs/kubestalk\n\n#cybersecurity #infosec\n\n\u200b\u200bKubestroyer\n\nA Golang exploitation tool that aims to take advantage of Kubernetes clusters misconfigurations. The tool is scanning known Kubernetes ports that can be exposed as well as exploiting them.\n\nhttps://github.com/Rolix44/Kubestroyer\n\n#infosec #pentesting #cybersecurity\n\n\u200b\u200bPortEx\n\nA Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications.\n\nhttps://github.com/struppigel/PortEx\n\n#malware #cybersecurity #infosec\n\n\u200b\u200bClairvoyance\n\nObtain GraphQL API schema even if the introspection is disabled.\n\nhttps://github.com/nikitastupin/clairvoyance\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bauditpolCIS\n\nCIS Benchmark testing of Windows SIEM configuration\n\nThis is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings.\n\nhttps://github.com/SevenStones/auditpolCIS\n\n#cybersecurity #infosec\n\n\u200b\u200buncover\n\nA go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize the results with your current pipeline tools.\n\nhttps://github.com/projectdiscovery/uncover\n\n#OSINT #recon #bugbounty\n\n\u200b\u200bAwesome GPT + Security\n\nA curated list of awesome security tools, experimental case or other interesting things with LLM or GPT.\n\nhttps://github.com/cckuailong/awesome-gpt-security\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bKingOfBugBounty\n\nOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters.\n\nhttps://github.com/KingOfBugbounty/KingOfBugBountyTips\n\n#infosec #cybersecurity #bugbounty\n\n\u200b\u200bGhostTrack\n\nUseful tool to track location or mobile number, so this tool can be called osint or also information gathering.\n\nhttps://github.com/HunxByts/GhostTrack\n\n#OSINT #cybersecurity #infosec\n\n\u200b\u200bdploot\n\ndploot is Python rewrite of SharpDPAPI written un C# by Harmj0y, which is itself a port of DPAPI from Mimikatz by gentilkiwi. It implements all the DPAPI logic of these tools, but this time it is usable with a python interpreter and from a Linux environment.\n\nhttps://github.com/zblurx/dploot\n\n#infosec #pentesting #redteam\n\n\u200b\u200bBlockOpenHandle\n\nBlock any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process, with that you can avoid remote memory scanners.\n\nhttps://github.com/TheD1rkMtr/BlockOpenHandle\n\n#cybersecurity #infosec\n\nCVE-2023-1585 & CVE-2023-1587\n\nAvast Anti-Virus privileged arbitrary file create on virus quarantine (CVE-2023-1585 and CVE-2023-1587).\n\nhttps://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2023-1585%20%26%20CVE-2023-1587/\n\nDetails:\nhttps://the-deniss.github.io/posts/2023/04/26/avast-privileged-arbitrary-file-create-on-quarantine.html\n\n#exploit #cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-04-27T18:41:57.000000Z"}, {"uuid": "cfcf970d-0294-4f2b-8fab-f87de0ade966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1585", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2898", "content": "Tools - Hackers Factory\n\n\u200b\u200bknife \n\nA #BurpSuite plug-in, the main purpose is to make some small improvements to Burp to make it more convenient to use. It's like using a knife to make a small carving on Burp, hence the name \"knife\".\n\nhttps://github.com/bit4woo/knife\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bAwesome One-liner Bug Bounty\n\nA collection of awesome one-liner scripts especially for bug bounty tips.\n\nhttps://github.com/dwisiswant0/awesome-oneliner-bugbounty\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bKubeStalk\n\nKubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9.\n\nhttps://github.com/redhuntlabs/kubestalk\n\n#cybersecurity #infosec\n\n\u200b\u200bKubestroyer\n\nA Golang exploitation tool that aims to take advantage of Kubernetes clusters misconfigurations. The tool is scanning known Kubernetes ports that can be exposed as well as exploiting them.\n\nhttps://github.com/Rolix44/Kubestroyer\n\n#infosec #pentesting #cybersecurity\n\n\u200b\u200bPortEx\n\nA Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications.\n\nhttps://github.com/struppigel/PortEx\n\n#malware #cybersecurity #infosec\n\n\u200b\u200bClairvoyance\n\nObtain GraphQL API schema even if the introspection is disabled.\n\nhttps://github.com/nikitastupin/clairvoyance\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bauditpolCIS\n\nCIS Benchmark testing of Windows SIEM configuration\n\nThis is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings.\n\nhttps://github.com/SevenStones/auditpolCIS\n\n#cybersecurity #infosec\n\n\u200b\u200buncover\n\nA go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with automation in mind, so you can query it and utilize the results with your current pipeline tools.\n\nhttps://github.com/projectdiscovery/uncover\n\n#OSINT #recon #bugbounty\n\n\u200b\u200bAwesome GPT + Security\n\nA curated list of awesome security tools, experimental case or other interesting things with LLM or GPT.\n\nhttps://github.com/cckuailong/awesome-gpt-security\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bKingOfBugBounty\n\nOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters.\n\nhttps://github.com/KingOfBugbounty/KingOfBugBountyTips\n\n#infosec #cybersecurity #bugbounty\n\n\u200b\u200bGhostTrack\n\nUseful tool to track location or mobile number, so this tool can be called osint or also information gathering.\n\nhttps://github.com/HunxByts/GhostTrack\n\n#OSINT #cybersecurity #infosec\n\n\u200b\u200bdploot\n\ndploot is Python rewrite of SharpDPAPI written un C# by Harmj0y, which is itself a port of DPAPI from Mimikatz by gentilkiwi. It implements all the DPAPI logic of these tools, but this time it is usable with a python interpreter and from a Linux environment.\n\nhttps://github.com/zblurx/dploot\n\n#infosec #pentesting #redteam\n\n\u200b\u200bBlockOpenHandle\n\nBlock any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process, with that you can avoid remote memory scanners.\n\nhttps://github.com/TheD1rkMtr/BlockOpenHandle\n\n#cybersecurity #infosec\n\nCVE-2023-1585 & CVE-2023-1587\n\nAvast Anti-Virus privileged arbitrary file create on virus quarantine (CVE-2023-1585 and CVE-2023-1587).\n\nhttps://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2023-1585%20%26%20CVE-2023-1587/\n\nDetails:\nhttps://the-deniss.github.io/posts/2023/04/26/avast-privileged-arbitrary-file-create-on-quarantine.html\n\n#exploit #cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-04-27T18:41:57.000000Z"}, {"uuid": "a8ed38bf-7858-423e-89df-ba3b97936d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1550", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2851", "content": "Cyber Security - Information Security - Pentesting News\n\n\u200aCryptocurrency companies backdoored in 3CX supply chain attack\n\nhttps://www.bleepingcomputer.com/news/security/cryptocurrency-companies-backdoored-in-3cx-supply-chain-attack/\n\n\u200aMullvad VPN Partners with the Tor Project to Release New Browser\n\nhttps://restoreprivacy.com/mullvad-vpn-partners-with-the-tor-project-to-release-new-browser/\n\n\u200aWinRAR SFX archives can run PowerShell without being detected\n\nhttps://www.bleepingcomputer.com/news/security/winrar-sfx-archives-can-run-powershell-without-being-detected/\n\n\u200aUS seizes $112 million from cryptocurrency investment scammers\n\nhttps://www.bleepingcomputer.com/news/security/us-seizes-112-million-from-cryptocurrency-investment-scammers/\n\n\u200aCISA warns of Zimbra bug exploited in attacks against NATO countries\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-zimbra-bug-exploited-in-attacks-against-nato-countries/\n\n\u200aRorschach \u2013 A New Sophisticated and Fast Ransomware\n\nhttps://research.checkpoint.com/2023/rorschach-a-new-sophisticated-and-fast-ransomware/\n\n\u200aAndroid April 2023 update fixes two critical RCE (CVE-2023-21085 & CVE-2023-21096) flaws\n\nhttps://securityonline.info/cve-2023-21085-cve-2023-21096-android-remote-code-execution-vulnerability/\n\n\u200apicoCTF writeup: Introductory cryptanalysis and stenography\n\nhttps://infosecwriteups.com/picoctf-writeup-introductory-cryptanalysis-and-stenography-90e610cff785?source=rss----7b722bfd1b8d---4\n\n\u200aCVE-2023-1550: F5 NGINX Agent information disclosure\n\nhttps://securityonline.info/cve-2023-1550-f5-nginx-agent-information-disclosure/\n\n\u200acertsync: Dump NTDS with golden certificates and UnPAC the hash\n\nhttps://securityonline.info/certsync-dump-ntds-with-golden-certificates-and-unpac-the-hash/\n\n#infosec #cybersecurity", "creation_timestamp": "2023-04-04T11:36:07.000000Z"}, {"uuid": "9d8ae1fb-3d8e-4435-bbe4-7dabfd51c7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1585", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1467", "content": "CVE-2023-1585 and CVE-2023-1587\n\u0421\u043c\u0435\u0448\u043d\u043e\u0435)))\nAvast Anti-Virus privileged arbitrary file create on virus quarantine\nreadme\n*\nPOC exploit\n\n#avast #LPE", "creation_timestamp": "2023-04-27T06:10:24.000000Z"}, {"uuid": "c63895c2-53ce-40cc-8969-585b98a9b7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1587", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1467", "content": "CVE-2023-1585 and CVE-2023-1587\n\u0421\u043c\u0435\u0448\u043d\u043e\u0435)))\nAvast Anti-Virus privileged arbitrary file create on virus quarantine\nreadme\n*\nPOC exploit\n\n#avast #LPE", "creation_timestamp": "2023-04-27T06:10:24.000000Z"}, {"uuid": "2c2c8346-32be-4f86-bf6f-269b97b0c97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1586", "type": "published-proof-of-concept", "source": "Telegram/7S1jjlhByzsxOv3qJQ2GnOdKtgcyTf58_vDU-XQ7XtsfA_Q", "content": "", "creation_timestamp": "2023-07-11T16:15:20.000000Z"}, {"uuid": "69937a7a-d757-457f-a967-4bb27b0909cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1587", "type": "published-proof-of-concept", "source": "Telegram/_Dqexw-quc2Fy3CcgHXVDSvC-8HsD1wrDejj4pIYUBDrHZs", "content": "", "creation_timestamp": "2023-05-22T14:55:22.000000Z"}, {"uuid": "db8d9b4c-a498-4032-84ae-e09d5fe6636a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1585", "type": "published-proof-of-concept", "source": "Telegram/_Dqexw-quc2Fy3CcgHXVDSvC-8HsD1wrDejj4pIYUBDrHZs", "content": "", "creation_timestamp": "2023-05-22T14:55:22.000000Z"}, {"uuid": "ae4fdcad-5e46-4024-a370-f3e77250ee5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1584", "type": "seen", "source": "https://t.me/cibsecurity/71551", "content": "\u203c CVE-2023-1584 \u203c\n\nA flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an insecure HTTP protocol is used, which can allow attackers to access sensitive user data directly from the ID token or by using the access token to access user data from OIDC provider services. Please note that passwords are not stored in access tokens.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-04T14:11:46.000000Z"}, {"uuid": "bc4b3d4d-7d4f-4037-836c-0c4d7414bf6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1586", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/789", "content": "CVE-2023-1586 : Avast Anti-Virus privileged arbitrary file create on virus restore\nBlog : https://the-deniss.github.io/posts/avast-privileged-arbitrary-file-create-on-restore/\nPOC : https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2023-1586/", "creation_timestamp": "2023-08-04T22:29:01.000000Z"}, {"uuid": "f1f310de-db8d-4f6f-b0cf-0d40b2623c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1528", "type": "seen", "source": "https://t.me/true_secator/4206", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Chrome 111, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u043e\u0441\u044c\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041e \u0441\u0435\u043c\u0438\u00a0\u0438\u0437 \u0432\u043e\u0441\u044c\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438. \u0412\u0441\u0435 \u043e\u043d\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0447\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445, RCE \u0438\u043b\u0438 DoS.\n\n\u0415\u0441\u043b\u0438 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044e (10 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410), \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2023-1528 (\u043e\u0448\u0438\u0431\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Chrome.\n\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 - CVE-2023-1529 (\u0434\u043e\u0441\u0442\u0443\u043f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 WebHID), \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 8000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u0422\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 PDF, \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 ANGLE \u0438 \u0432 WebProtect.\n\n\u0417\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u0442\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 7000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0438\u0437 \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 (NCSC). \u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 - \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0446\u0435\u043d\u043a\u0438. \n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 111 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 GPU Video \u0438 ANGLE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google Project Zero.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chrome \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 111.0.5563.110 \u0434\u043b\u044f Mac \u0438 Linux \u0438 111.0.5563.110/.111 - \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-03-23T15:30:39.000000Z"}, {"uuid": "7099c52d-badc-41a2-9087-c5bfebc2a5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1529", "type": "seen", "source": "https://t.me/true_secator/4206", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Chrome 111, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u043e\u0441\u044c\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041e \u0441\u0435\u043c\u0438\u00a0\u0438\u0437 \u0432\u043e\u0441\u044c\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438. \u0412\u0441\u0435 \u043e\u043d\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0447\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445, RCE \u0438\u043b\u0438 DoS.\n\n\u0415\u0441\u043b\u0438 \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044e (10 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410), \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2023-1528 (\u043e\u0448\u0438\u0431\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Chrome.\n\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 - CVE-2023-1529 (\u0434\u043e\u0441\u0442\u0443\u043f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 WebHID), \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0437\u0430\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 8000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u0422\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 PDF, \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 ANGLE \u0438 \u0432 WebProtect.\n\n\u0417\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u0442\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 7000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0438\u0437 \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 (NCSC). \u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 - \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0446\u0435\u043d\u043a\u0438. \n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 111 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 GPU Video \u0438 ANGLE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Google Project Zero.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Chrome \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 111.0.5563.110 \u0434\u043b\u044f Mac \u0438 Linux \u0438 111.0.5563.110/.111 - \u0434\u043b\u044f Windows.", "creation_timestamp": "2023-03-23T15:30:39.000000Z"}, {"uuid": "46820e7f-7d20-4d0d-a49d-ae276ec6dfe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1586", "type": "seen", "source": "https://t.me/crackcodes/3505", "content": "gg's hacker's ( I love you   \u2014\u2764\ufe0f\n                                        \u203c\ufe0fHere we go again \nhere we go again \ud83c\udf89\n#OSINT\n\n1\u20be Visual Ping web page monitoring service, \nhelps to track of changes on any particular website.\n                                ( hourly/everyday )\n\n2\u20be All the internet combines results from\n         different search engines and social media.\n\n3\u20be izito searches and combines all Search Engines!\n        Yahoo, Microsoft Bing, YouTube, Wikipedia, Entireweb etc...\n\n#exploit\n1. CVE-2023-1586:\nAvast Anti-Virus privileged arbitrary file create on virus restore\n\n         and as always #hacker_bano_chutiya_nhe \ud83d\ude0d\ud83d\ude0d", "creation_timestamp": "2023-05-17T20:11:16.000000Z"}, {"uuid": "e00be7cc-488d-4888-8e0a-07419936d0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1514", "type": "seen", "source": "https://t.me/ctinow/167607", "content": "https://ift.tt/LIkKtmu\nCVE-2023-1514 | Hitachi Energy RTU500 1.0.1.30/1.0.2/1.1.1 Scripting Interface certificate validation", "creation_timestamp": "2024-01-12T23:46:34.000000Z"}, {"uuid": "e7146c18-a2b6-4a48-befd-130f4498fbe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1555", "type": "seen", "source": "https://t.me/cibsecurity/69629", "content": "\u203c CVE-2023-1555 \u203c\n\nAn issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A namespace-level banned user can access the API.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T14:13:55.000000Z"}, {"uuid": "4c6ad3d9-16ff-4cc5-a4d0-1f06f71e8ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1523", "type": "seen", "source": "https://t.me/cibsecurity/69685", "content": "\u203c CVE-2023-1523 \u203c\n\nUsing the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others are not affected - this can only be exploited when snaps are run on a virtual console.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T22:14:04.000000Z"}, {"uuid": "bdd0be0b-8837-4346-9da9-72b2ff63d007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1547", "type": "seen", "source": "https://t.me/cibsecurity/66636", "content": "\u203c CVE-2023-1547 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection.This issue affects Parkmatik: before 02.01-a51.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T12:36:23.000000Z"}, {"uuid": "804ceea4-aee0-4052-aadf-99bba611ef67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1596", "type": "seen", "source": "https://t.me/cibsecurity/64114", "content": "\u203c CVE-2023-1596 \u203c\n\nThe tagDiv Composer WordPress plugin before 4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:40:09.000000Z"}, {"uuid": "505ff12b-04d2-44e1-ad2f-e38c9eb63dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1549", "type": "seen", "source": "https://t.me/cibsecurity/64106", "content": "\u203c CVE-2023-1549 \u203c\n\nThe Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:39:58.000000Z"}, {"uuid": "3cd5f1e6-20a3-4b2f-bd54-e40d42f34e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1526", "type": "seen", "source": "https://t.me/cibsecurity/63081", "content": "\u203c CVE-2023-1526 \u203c\n\nCertain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T20:27:32.000000Z"}, {"uuid": "62ca5508-d4f2-4897-8bac-ecc553a365ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1508", "type": "seen", "source": "https://t.me/cibsecurity/64657", "content": "\u203c CVE-2023-1508 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection.This issue affects Mobilmen Terminal Software: before 3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T00:40:32.000000Z"}, {"uuid": "b074757d-7630-4bcc-9e0c-8e82c0531306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1548", "type": "seen", "source": "https://t.me/cibsecurity/62363", "content": "\u203c CVE-2023-1548 \u203c\n\nA CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products:\u00c2\u00a0EcoStruxure Control Expert (V15.1 and above)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-18T20:29:13.000000Z"}, {"uuid": "ba1dbfc1-7e22-47e4-bc6a-4c58ad01f451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1552", "type": "seen", "source": "https://t.me/cibsecurity/61877", "content": "\u203c CVE-2023-1552 \u203c\n\nToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator could execute code in a Toolbox user's context through the deserialization of an untrusted configuration file.\u00c2\u00a0Two CVSS scores have been provided to capture the differences between the two aforementioned attack vectors.\u00c2\u00a0 Customers are advised to update to ToolboxST 7.10 which can be found in ControlST 7.10. If unable to update at this time customers should ensure they are following the guidance laid out in GE Gas Power's Secure Deployment Guide (GEH-6839). Customers should ensure they are not running ToolboxST as an Administrative user.\u00c2\u00a0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T18:23:30.000000Z"}, {"uuid": "adab6dec-5060-4890-9b51-0581d181ec8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1575", "type": "seen", "source": "https://t.me/cibsecurity/61017", "content": "\u203c CVE-2023-1575 \u203c\n\nThe Mega Main Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T18:18:42.000000Z"}, {"uuid": "c5c9bf3f-1897-40ec-a293-4e451f0475e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1550", "type": "seen", "source": "https://t.me/cibsecurity/61023", "content": "\u203c CVE-2023-1550 \u203c\n\nInsertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive information into a log file. An authenticated attacker with local access to read agent log files may gain access to private keys. This issue is only exposed when the non-default trace level logging is enabled. Note: NGINX Agent is included with NGINX Instance Manager and used in conjunction with NGINX API Connectivity Manager, and NGINX Management Suite Security Monitoring.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T20:15:34.000000Z"}, {"uuid": "9ddca694-03e9-4a29-8055-ad567fedd4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1509", "type": "seen", "source": "https://t.me/cibsecurity/61001", "content": "\u203c CVE-2023-1509 \u203c\n\nThe GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.2. This is due to missing nonce validation on the gmace_manager_server function called via the wp_ajax_gmace_manager AJAX action. This makes it possible for unauthenticated attackers to modify arbitrary files and achieve remote code execution via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T14:15:25.000000Z"}, {"uuid": "e1ffdb08-d52b-412e-8686-07e9ade850cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1591", "type": "seen", "source": "https://t.me/cibsecurity/60544", "content": "\u203c CVE-2023-1591 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. This affects an unknown part of the file classes/Users.php?f=save_ruser. The manipulation of the argument id/email leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223659.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T11:36:32.000000Z"}, {"uuid": "3bff673e-ef43-4e27-b1f7-37d3b183616f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1544", "type": "seen", "source": "https://t.me/cibsecurity/60627", "content": "\u203c CVE-2023-1544 \u203c\n\nA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T23:37:10.000000Z"}, {"uuid": "50cac9a4-14c9-4e91-b268-e8cea2e4d30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1589", "type": "seen", "source": "https://t.me/cibsecurity/60543", "content": "\u203c CVE-2023-1589 \u203c\n\nA vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This vulnerability affects the function exec of the file admin/operations/approve_delete.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-223654 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T11:36:31.000000Z"}, {"uuid": "f7d4e3d8-1767-422a-85d8-1ae54e4e3f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1590", "type": "seen", "source": "https://t.me/cibsecurity/60540", "content": "\u203c CVE-2023-1590 \u203c\n\nA vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223655.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T11:36:28.000000Z"}, {"uuid": "471a1265-422b-4982-9ec8-845075c29636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1573", "type": "seen", "source": "https://t.me/cibsecurity/60506", "content": "\u203c CVE-2023-1573 \u203c\n\nA vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-223565 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T19:36:14.000000Z"}, {"uuid": "795e896d-0755-4170-a419-44a18e7a8bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1572", "type": "seen", "source": "https://t.me/cibsecurity/60438", "content": "\u203c CVE-2023-1572 \u203c\n\nA vulnerability has been found in DataGear up to 1.11.1 and classified as problematic. This vulnerability affects unknown code of the component Plugin Handler. The manipulation leads to cross site scripting. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 1.12.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-223564.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T15:35:47.000000Z"}, {"uuid": "b6abf395-d7ed-4d7a-9a19-68558fc440f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1594", "type": "seen", "source": "https://t.me/cibsecurity/60553", "content": "\u203c CVE-2023-1594 \u203c\n\nA vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223662 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T13:49:43.000000Z"}, {"uuid": "d80faedb-0b05-40f1-a27f-bcf4bbd5c35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1592", "type": "seen", "source": "https://t.me/cibsecurity/60551", "content": "\u203c CVE-2023-1592 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file admin/courses/view_class.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-223660.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T13:49:41.000000Z"}, {"uuid": "15715e6e-61c2-4211-a88c-649a1d3427c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1595", "type": "seen", "source": "https://t.me/cibsecurity/60550", "content": "\u203c CVE-2023-1595 \u203c\n\nA vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223663.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T13:46:37.000000Z"}, {"uuid": "464182d8-eae8-4efb-9b94-20a6e3efa4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1593", "type": "seen", "source": "https://t.me/cibsecurity/60549", "content": "\u203c CVE-2023-1593 \u203c\n\nA vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generator System 1.0. This issue affects some unknown processing of the file classes/Master.php?f=save_class. The manipulation of the argument description leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-223661 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T13:41:37.000000Z"}, {"uuid": "e43eb163-189d-49ce-8168-fc3ee4843601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1569", "type": "seen", "source": "https://t.me/cibsecurity/60487", "content": "\u203c CVE-2023-1569 \u203c\n\nA vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument U_NAME with the input alert('1') leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223561 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T17:42:17.000000Z"}, {"uuid": "08368b18-01c3-4101-a18f-a4d277f03a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1571", "type": "seen", "source": "https://t.me/cibsecurity/60476", "content": "\u203c CVE-2023-1571 \u203c\n\nA vulnerability, which was classified as critical, was found in DataGear up to 4.5.0. This affects an unknown part of the file /analysisProject/pagingQueryData. The manipulation of the argument queryOrder leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-223563.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T17:42:04.000000Z"}, {"uuid": "53d35bdc-226e-4579-81d9-9d3d137cff14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1567", "type": "seen", "source": "https://t.me/cibsecurity/60468", "content": "\u203c CVE-2023-1567 \u203c\n\nA vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/assign/assign.php. The manipulation of the argument sid leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223559.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T17:36:51.000000Z"}, {"uuid": "66c08fdc-5bb0-4a49-9c75-d1535279de51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1559", "type": "seen", "source": "https://t.me/cibsecurity/60445", "content": "\u203c CVE-2023-1559 \u203c\n\nA vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223552.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T15:35:56.000000Z"}, {"uuid": "89614178-43e8-4fd4-ac66-9d0931c30c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1564", "type": "seen", "source": "https://t.me/cibsecurity/60444", "content": "\u203c CVE-2023-1564 \u203c\n\nA vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223556.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T15:35:55.000000Z"}, {"uuid": "c2aee80d-8591-4c3c-bf60-4aafec9c95eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1562", "type": "seen", "source": "https://t.me/cibsecurity/60437", "content": "\u203c CVE-2023-1562 \u203c\n\nMattermost fails to check the \"Show Full Name\" setting when rendering the result for the /plugins/focalboard/api/v2/users API call, allowing an attacker to learn the full name of a board owner.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T13:35:43.000000Z"}, {"uuid": "abc95ea7-0052-4ee2-9b5e-6723d2149c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1557", "type": "seen", "source": "https://t.me/cibsecurity/60435", "content": "\u203c CVE-2023-1557 \u203c\n\nA vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ecommerce/admin/user/controller.php?action=edit of the component Username Handler. The manipulation of the argument USERID leads to improper access controls. The attack may be launched remotely. VDB-223550 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T13:35:41.000000Z"}, {"uuid": "0e7c8319-55da-4c3b-97d6-60bdf620e05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1502", "type": "seen", "source": "https://t.me/cibsecurity/60299", "content": "\u203c CVE-2023-1502 \u203c\n\nA vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file function/edit_customer.php. The manipulation of the argument firstname/mi/lastname with the input a' RLIKE SLEEP(5) AND 'dAbu'='dAbu leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-223406 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T11:34:02.000000Z"}, {"uuid": "a84ea381-c2b1-4744-8cf7-f3f6e4507800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1585", "type": "seen", "source": "https://t.me/cibsecurity/62480", "content": "\u203c CVE-2023-1585 \u203c\n\nAvast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T22:30:24.000000Z"}, {"uuid": "4df33ff0-2637-42fc-9597-8686c61b4ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1586", "type": "seen", "source": "https://t.me/cibsecurity/62477", "content": "\u203c CVE-2023-1586 \u203c\n\nAvast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T22:30:21.000000Z"}, {"uuid": "abe752b1-b688-4cb0-86d0-1433a41a8636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1587", "type": "seen", "source": "https://t.me/cibsecurity/62475", "content": "\u203c CVE-2023-1587 \u203c\n\nAvast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T22:30:19.000000Z"}, {"uuid": "b2563011-6386-4a81-ae8b-738bbd588e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1561", "type": "seen", "source": "https://t.me/cibsecurity/60442", "content": "\u203c CVE-2023-1561 \u203c\n\nA vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223554 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T15:35:51.000000Z"}, {"uuid": "18f8750f-cf24-45fa-8d81-d459640283ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1565", "type": "seen", "source": "https://t.me/cibsecurity/60440", "content": "\u203c CVE-2023-1565 \u203c\n\nA vulnerability was found in FeiFeiCMS 2.7.130201. It has been classified as problematic. This affects an unknown part of the file \\Public\\system\\slide_add.html of the component Extension Tool. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223557 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T15:35:49.000000Z"}, {"uuid": "487cbcbf-3f44-4737-868f-13a34fb0aafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1563", "type": "seen", "source": "https://t.me/cibsecurity/60439", "content": "\u203c CVE-2023-1563 \u203c\n\nA vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/assign/assign.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223555.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T15:35:48.000000Z"}, {"uuid": "d52f05bf-f93c-4a69-babd-c0902aa63d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1556", "type": "seen", "source": "https://t.me/cibsecurity/60434", "content": "\u203c CVE-2023-1556 \u203c\n\nA vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file summary_results.php. The manipulation of the argument main_event_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223549 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T13:35:40.000000Z"}, {"uuid": "d0930612-5d32-41f5-a55d-5f3b50416176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1560", "type": "seen", "source": "https://t.me/cibsecurity/60446", "content": "\u203c CVE-2023-1560 \u203c\n\nA vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader.c of the component File Handler. The manipulation leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223553 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T15:35:57.000000Z"}, {"uuid": "9ec11541-6ce1-4d43-83f2-0cb4eff6821b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1558", "type": "seen", "source": "https://t.me/cibsecurity/60433", "content": "\u203c CVE-2023-1558 \u203c\n\nA vulnerability classified as critical has been found in Simple and Beautiful Shopping Cart System 1.0. This affects an unknown part of the file uploadera.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223551.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-22T13:35:39.000000Z"}, {"uuid": "e07b3a88-7001-4461-902d-d58c70962db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1534", "type": "seen", "source": "https://t.me/cibsecurity/60422", "content": "\u203c CVE-2023-1534 \u203c\n\nOut of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T23:35:15.000000Z"}, {"uuid": "79bbf9df-bf79-4723-aa8a-8aa219e40285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1532", "type": "seen", "source": "https://t.me/cibsecurity/60421", "content": "\u203c CVE-2023-1532 \u203c\n\nOut of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T23:35:14.000000Z"}, {"uuid": "5869b9c5-b4ee-4cf4-aa06-32e1086ad1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1529", "type": "seen", "source": "https://t.me/cibsecurity/60419", "content": "\u203c CVE-2023-1529 \u203c\n\nOut of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T23:35:13.000000Z"}, {"uuid": "47157afe-5f07-4287-b7d0-bf1d694dcec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1530", "type": "seen", "source": "https://t.me/cibsecurity/60418", "content": "\u203c CVE-2023-1530 \u203c\n\nUse after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T23:35:12.000000Z"}, {"uuid": "26e116f5-f190-4cef-bdaf-d5271cbf17ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1528", "type": "seen", "source": "https://t.me/cibsecurity/60417", "content": "\u203c CVE-2023-1528 \u203c\n\nUse after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T23:35:08.000000Z"}, {"uuid": "2ad1c8d6-2851-4a2e-a655-f89da6a31059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1531", "type": "seen", "source": "https://t.me/cibsecurity/60414", "content": "\u203c CVE-2023-1531 \u203c\n\nUse after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T23:35:05.000000Z"}, {"uuid": "b6679028-a19f-48dd-a867-0f6c9f33d848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1545", "type": "seen", "source": "https://t.me/cibsecurity/60358", "content": "\u203c CVE-2023-1545 \u203c\n\nSQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T13:34:49.000000Z"}, {"uuid": "931194ac-873a-4376-b51c-c802b16a8e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1527", "type": "seen", "source": "https://t.me/cibsecurity/60356", "content": "\u203c CVE-2023-1527 \u203c\n\nCross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-21T06:34:36.000000Z"}, {"uuid": "034cfc66-d881-4ff8-aa69-941ca2621036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1517", "type": "seen", "source": "https://t.me/cibsecurity/60345", "content": "\u203c CVE-2023-1517 \u203c\n\nCross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:35.000000Z"}, {"uuid": "e3238971-4c0e-40ac-b8e9-0948c010a72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1505", "type": "seen", "source": "https://t.me/cibsecurity/60297", "content": "\u203c CVE-2023-1505 \u203c\n\nA vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue affects some unknown processing of the file /ecommerce/admin/settings/setDiscount.php. The manipulation of the argument id with the input 201737 AND (SELECT 8973 FROM (SELECT(SLEEP(5)))OoAD) leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223409 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T11:34:00.000000Z"}, {"uuid": "7de2fc61-8ac5-40fe-bac1-ffd2363a41a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1515", "type": "seen", "source": "https://t.me/cibsecurity/60322", "content": "\u203c CVE-2023-1515 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T17:34:10.000000Z"}, {"uuid": "5a467311-685d-4eaf-a2ea-3cf08541364a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1503", "type": "seen", "source": "https://t.me/cibsecurity/60302", "content": "\u203c CVE-2023-1503 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file admin/admin_index.php. The manipulation of the argument username/password with the input admin' AND (SELECT 8062 FROM (SELECT(SLEEP(5)))meUD)-- hLiX leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223407.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T11:34:05.000000Z"}, {"uuid": "f9b0fc92-4201-4630-9a3f-9263309b0aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1504", "type": "seen", "source": "https://t.me/cibsecurity/60301", "content": "\u203c CVE-2023-1504 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Alphaware Simple E-Commerce System 1.0. This vulnerability affects unknown code. The manipulation of the argument email/password with the input test1%40test.com ' AND (SELECT 6077 FROM (SELECT(SLEEP(5)))dltn) AND 'PhRa'='PhRa leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223408.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T11:34:05.000000Z"}, {"uuid": "9af60cee-d56e-49cd-bef0-8a2f6640da09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1500", "type": "seen", "source": "https://t.me/cibsecurity/60295", "content": "\u203c CVE-2023-1500 \u203c\n\nA vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument about_info leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223400.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-19T23:33:38.000000Z"}, {"uuid": "dacdb6be-880c-4169-ada3-b6400400eeb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1501", "type": "seen", "source": "https://t.me/cibsecurity/60294", "content": "\u203c CVE-2023-1501 \u203c\n\nA vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223401 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-19T23:33:37.000000Z"}, {"uuid": "2b175bc3-cc88-4239-b0bd-b073768f6aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1579", "type": "seen", "source": "https://t.me/cibsecurity/61365", "content": "\u203c CVE-2023-1579 \u203c\n\nHeap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-04T02:25:09.000000Z"}, {"uuid": "0c33db51-d034-480a-a399-0a6252f6a7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1522", "type": "seen", "source": "https://t.me/cibsecurity/61499", "content": "\u203c CVE-2023-1522 \u203c\n\nSQL Injection in the Hardware Inventory report of Security Center 5.11.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-05T22:41:13.000000Z"}, {"uuid": "335256c2-f215-4b0d-b72d-dd4424fa953e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1534", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8168", "content": "#exploit\n1. CVE-2022-44668:\nWindows DirectMusicPortDownload Double Free Vulnerability\nhttps://starlabs.sg/advisories/22/22-44668\n\n2. CVE-2023-1534:\nChrome SpvGetMappedSamplerName Out-Of-Bounds String Copy\nhttps://packetstormsecurity.com/files/171965/Chrome-SpvGetMappedSamplerName-Out-Of-Bounds-String-Copy.html\n]-> Chrome GL_ShaderBinary Untrusted Process Exposure", "creation_timestamp": "2024-10-20T18:39:23.000000Z"}, {"uuid": "7f6b6317-3ded-46df-b9a4-db828b815e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1586", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8312", "content": "#exploit\n1. CVE-2023-28248:\nWindows Kernel CmpCleanupLightWeightPrepare UAF\nhttps://packetstormsecurity.com/files/172283\n\n2. CVE-2023-32233:\nLinux Kernel Vulnerability\nhttps://github.com/Liuk3r/CVE-2023-32233\n\n3. CVE-2023-1586:\nAnti-Virus privileged arbitrary file create on virus restore\nhttps://the-deniss.github.io/posts/avast-privileged-arbitrary-file-create-on-restore", "creation_timestamp": "2023-05-17T11:02:33.000000Z"}, {"uuid": "1c3f7151-05f7-4801-ab5e-085343370ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1587", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/4993", "content": "CVE-2023-1585 & CVE-2023-1587\n\nAvast Anti-Virus privileged arbitrary file create on virus quarantine\n\nGithub\n\n#Cve \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-05-20T00:26:21.000000Z"}, {"uuid": "0edafd96-16fb-4c6c-9503-c1feb38d3d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-1585", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/4993", "content": "CVE-2023-1585 & CVE-2023-1587\n\nAvast Anti-Virus privileged arbitrary file create on virus quarantine\n\nGithub\n\n#Cve \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-05-20T00:26:21.000000Z"}, {"uuid": "317cac2e-7f5d-4fd2-8fc2-bf3252023504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-1523", "type": "seen", "source": "https://gist.github.com/julian-klode/eb0381c1cb2cec713ba78d7462ad6167", "content": "", "creation_timestamp": "2026-07-08T11:11:39.238583Z"}, {"uuid": "911506d7-7720-4a1f-af95-1bc635561f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-1586", "type": "seen", "source": "https://t.me/reverseame/3419", "content": "", "creation_timestamp": "2026-07-29T12:02:29.135448Z"}, {"uuid": "35fd54ff-edbd-47c0-ae61-9f0404a49bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-1586", "type": "seen", "source": "https://t.me/reverseame/3419", "content": "", "creation_timestamp": "2026-07-30T00:02:29.985506Z"}, {"uuid": "f947f013-d358-489d-9268-1490465ace7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-1586", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3419", "content": "", "creation_timestamp": "2026-08-02T17:00:04.786735Z"}, {"uuid": "acc5dcb4-fbab-4af3-958b-798d8c8f7358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-1586", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3419", "content": "", "creation_timestamp": "2026-08-03T01:49:19.969831Z"}]}