{"vulnerability": "2023-55", "sightings": [{"uuid": "df9035db-e726-45bc-a6ef-0316ab89f81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5517", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "f32df3d6-d62e-4b07-af1b-7bfd7f986a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5508", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulptchri22", "content": "", "creation_timestamp": "2025-02-11T02:17:02.148830Z"}, {"uuid": "2b52d183-3a06-449e-bf0d-ebc96acfd676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5510", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulpvpvxg2i", "content": "", "creation_timestamp": "2025-02-11T02:17:04.708991Z"}, {"uuid": "6bfd8e85-b575-4057-bb67-08003f026625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5513", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulpxykmc2o", "content": "", "creation_timestamp": "2025-02-11T02:17:07.062319Z"}, {"uuid": "73660d7b-55d7-4755-bd74-d03bf2662b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3ljnlneky7526", "content": "", "creation_timestamp": "2025-03-05T18:17:24.771516Z"}, {"uuid": "a17a368e-8d63-4d90-a6fd-57849f832cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5566", "type": "seen", "source": "https://gist.github.com/falconwebsites/099fbf1928b96af4c5e40d257675ebab", "content": "", "creation_timestamp": "2025-05-22T16:51:14.000000Z"}, {"uuid": "7b95e844-1dc9-4d59-aaee-0e0c9e3fb847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5559", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-5559.yaml", "content": "", "creation_timestamp": "2025-09-21T17:35:54.000000Z"}, {"uuid": "c0addcd9-dea3-4e1f-a96d-b462d1b9ec8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2023-5561", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3m4eqbfo5g22p", "content": "", "creation_timestamp": "2025-10-30T00:44:55.343842Z"}, {"uuid": "fe8754db-629f-4cff-9183-7e45c99ee76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ma6ybueq342t", "content": "", "creation_timestamp": "2025-12-17T15:33:09.594804Z"}, {"uuid": "16bb4e66-b1fe-4bce-a036-22c0fa2e6583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5562", "type": "seen", "source": "https://www.knime.com/security/advisories#CVE-2026-4649", "content": "", "creation_timestamp": "2026-03-25T03:00:10.000000Z"}, {"uuid": "5baf0217-c542-4815-86eb-9d61243bed75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/cKure/12525", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Kubernetes Vulnerability Allows Remote Code Execution on Windows Endpoints.\n\nA high-severity Kubernetes vulnerability tracked as CVE-2023-5528 can be exploited to execute arbitrary code on Windows endpoints.\n\nhttps://www.securityweek.com/kubernetes-vulnerability-allows-remote-code-execution-on-windows-endpoints/", "creation_timestamp": "2024-03-14T20:05:50.000000Z"}, {"uuid": "4219e318-9120-4ab9-bc9f-2bbe9bad1e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5538", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5373", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-5538 - MpOperationLogs <= 1.0.1 - \u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u5b58\u50a8\u8de8\u7ad9\u70b9\u811a\u672c\nURL\uff1ahttps://github.com/juweihuitao/MpOperationLogs\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-10-12T01:20:37.000000Z"}, {"uuid": "4fe5edec-fb57-4fb5-b6dc-91b8aecdb5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5958", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-5561\nURL\uff1ahttps://github.com/Ego1stoo/CVE-2023-38646\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-11-26T04:04:01.000000Z"}, {"uuid": "20ae7938-9c68-4699-bd03-96403e595788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "published-proof-of-concept", "source": "Telegram/89ftCfVT4ANXOHkYPkg4f1crlBnUuWLjMtwENkNHyTME0zA", "content": "", "creation_timestamp": "2025-07-01T15:00:05.000000Z"}, {"uuid": "36bf5aa0-5404-4180-948a-af75cf698aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5957", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-5561\nURL\uff1ahttps://github.com/justhx0r/CVE-2023-5561\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-11-26T03:54:33.000000Z"}, {"uuid": "a39da5f2-ed58-481b-a63f-28d7b2190b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5529", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16743", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5529\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Advanced Page Visit Counter  WordPress plugin before 8.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2025-05-15T20:08:58.829Z\n\ud83d\udccf Modified: 2025-05-16T18:34:08.484Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/095c9c35-2618-4f90-8435-a3c34f0bb7f1/", "creation_timestamp": "2025-05-16T19:34:44.000000Z"}, {"uuid": "447d4a5f-b9d6-4812-97fa-757302306379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5512", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17249", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5512\n\ud83d\udd25 CVSS Score: 4.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect representation in the UI.\n\ud83d\udccf Published: 2023-12-15T16:03:00.260Z\n\ud83d\udccf Modified: 2025-05-22T04:09:31.308Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/427827\n2. https://hackerone.com/reports/2194607", "creation_timestamp": "2025-05-22T04:44:27.000000Z"}, {"uuid": "8144cc8a-40f8-4e87-925b-40eee3e5ca3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5553", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17886", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5553\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the vulnerability at this time. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2023-11-21T06:59:42.711Z\n\ud83d\udccf Modified: 2025-06-10T14:00:37.202Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/0a/66/25/cve-2023-5553-en-US-417789.pdf", "creation_timestamp": "2025-06-10T14:30:25.000000Z"}, {"uuid": "6f242f15-688b-4de2-80fe-74bee18234e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5589", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18489", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5589\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-242188.\n\ud83d\udccf Published: 2023-10-15T22:31:04.177Z\n\ud83d\udccf Modified: 2025-06-16T16:53:12.714Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.242188\n2. https://vuldb.com/?ctiid.242188\n3. https://github.com/GodRone/Judging-Management-System_SQL-injection/blob/main/Judging%20Management%20System_SQL%20injection.md", "creation_timestamp": "2025-06-16T17:38:07.000000Z"}, {"uuid": "22e7d311-c5c3-41a8-a9af-cadf070bb4ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "published-proof-of-concept", "source": "Telegram/BWeQUOn9decIP31x67k6XPjZCRkyc1WiOb_YDNDa1jTAj80", "content": "", "creation_timestamp": "2025-07-01T15:00:09.000000Z"}, {"uuid": "6aea74d3-335d-4002-89e1-a34513439de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5560", "type": "seen", "source": "https://t.me/ctinow/155539", "content": "https://ift.tt/zEIkUsO\nCVE-2023-5560 | WP-UserOnline Plugin up to 2.88.2 on WordPress Header X-Forwarded-For cross site scripting", "creation_timestamp": "2023-12-17T09:06:32.000000Z"}, {"uuid": "4994b988-24b7-491d-8bd2-ef5965f13df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5559", "type": "seen", "source": "https://t.me/ctinow/155538", "content": "https://ift.tt/rKjBv8H\nCVE-2023-5559 | 10Web Booster Plugin up to 2.24.17 on WordPress AJAX Action authorization", "creation_timestamp": "2023-12-17T09:06:31.000000Z"}, {"uuid": "2d33a343-879f-46d6-b987-c54a5784c846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5525", "type": "seen", "source": "https://t.me/ctinow/155529", "content": "https://ift.tt/evXiMLq\nCVE-2023-5525 | Limit Login Attempts Reloaded Plugin up to 2.25.25 on WordPress toggle_auto_update authorization", "creation_timestamp": "2023-12-17T08:36:37.000000Z"}, {"uuid": "fd2ab9f6-37e6-4abb-8ee6-ce0019ce4251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5575", "type": "seen", "source": "Telegram/SgGyozQtbcTtdCH8dPVoJm7mqw3FQ5sISX8PpNHXzyna", "content": "", "creation_timestamp": "2023-10-23T21:29:59.000000Z"}, {"uuid": "7bf9cf26-b546-4531-8cdc-01b8db2d3f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5514", "type": "seen", "source": "https://t.me/cibsecurity/73291", "content": "\u203c CVE-2023-5514 \u203c\n\nThe response messages received from the eSOMS report generation using certain parameter queries with full file path can beabused for enumerating the local file system structure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:34:53.000000Z"}, {"uuid": "8d8ea087-df86-471a-8eda-7b7a40b9a0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5516", "type": "seen", "source": "https://t.me/cibsecurity/73299", "content": "\u203c CVE-2023-5516 \u203c\n\nPoorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosinginformation about the underlying technology and other sensitive information details. The website unintentionally reveals sensitive information including technical details like version Info, endpoints,backend server, Internal IP. etc., which can potentially expose additional attack surface containing other interesting vulnerabilities.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:37:44.000000Z"}, {"uuid": "96d5abc3-6d31-437b-b417-bc9b6a66bc34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5505", "type": "seen", "source": "Telegram/HdWBcbf42HB3qEqRtJicBMt2y1NQPi1sWKKykT8CZ1Q372Vk", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "0794960f-7e31-4d50-92c2-fac56f4dcdae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5515", "type": "seen", "source": "https://t.me/cibsecurity/73281", "content": "\u203c CVE-2023-5515 \u203c\n\nThe responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the application and to further plot attacks againstweb servers and deployed web applications.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T06:31:40.000000Z"}, {"uuid": "f583ba69-be26-4bd6-80c4-f6a486cde931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5571", "type": "seen", "source": "https://t.me/cibsecurity/72225", "content": "\u203c CVE-2023-5571 \u203c\n\nImproper Input Validation in GitHub repository vriteio/vrite prior to 0.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T14:28:53.000000Z"}, {"uuid": "eb95b8d0-b92d-44d0-beef-1467ba7d0ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "seen", "source": "https://t.me/cibsecurity/72357", "content": "\u203c CVE-2023-5561 \u203c\n\nThe Popup Builder WordPress plugin through 4.1.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:25.000000Z"}, {"uuid": "3627bf2a-8855-4871-a5c8-361207056415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5534", "type": "seen", "source": "https://t.me/cibsecurity/72638", "content": "\u203c CVE-2023-5655 \u203c\n\nThe AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 4.9.2. This is due to missing or incorrect nonce validation on the corresponding functions. This makes it possible for unauthenticated attackers to invoke those functions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This vulnerability is the same as CVE-2023-5534, but was reintroduced in version 4.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T07:34:55.000000Z"}, {"uuid": "ac0b2bc6-cdd8-4c41-ad1f-9ec1baaece5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5533", "type": "seen", "source": "https://t.me/cibsecurity/72684", "content": "\u203c CVE-2023-5656 \u203c\n\nThe AI ChatBot plugin for WordPress is vulnerable to unauthorized use of AJAX actions due to missing capability checks on the corresponding functions in versions up to, and including, 4.9.2. This makes it possible for unauthenticated attackers to perform some of those actions that were intended for higher privileged users. This vulnerability is the same as CVE-2023-5533 but was reintroduced in version 4.9.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T12:41:28.000000Z"}, {"uuid": "4983ca42-e3fa-4f55-8c2f-8874c6148383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5524", "type": "seen", "source": "https://t.me/cibsecurity/72675", "content": "\u203c CVE-2023-5524 \u203c\n\nInsufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before 23.8 LTS SR1 allows Remote Code Execution via specific file types\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T12:41:15.000000Z"}, {"uuid": "ce2b4c80-617a-4185-b2db-8d27a57632bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5576", "type": "seen", "source": "https://t.me/cibsecurity/72669", "content": "\u203c CVE-2023-5576 \u203c\n\nThe Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 0.9.91 via Google Drive API secrets stored in plaintext in the publicly visible plugin source. This could allow unauthenticated attackers to impersonate the WPVivid Google Drive account via the API if they can trick a user into reauthenticating via another vulnerability or social engineering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T12:41:09.000000Z"}, {"uuid": "a2e6885f-cc8b-4431-b395-b51b384b56f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5506", "type": "seen", "source": "https://t.me/arpsyndicate/2451", "content": "#ExploitObserverAlert\n\nCVE-2023-5506\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-5506. The ImageMapper plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'imgmap_delete_area_ajax' function in versions up to, and including, 1.2.6. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete arbitrary posts and pages.\n\nFIRST-EPSS: 0.000450000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2024-01-04T11:51:57.000000Z"}, {"uuid": "8155661c-b636-41b4-a9a4-5809c9f0252b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5574", "type": "seen", "source": "https://t.me/arpsyndicate/2433", "content": "#ExploitObserverAlert\n\nCVE-2023-5574\n\nDESCRIPTION: Exploit Observer has 4 entries related to CVE-2023-5574. A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.\n\nFIRST-EPSS: 0.000450000\nNVD-IS: 5.9\nNVD-ES: 1.0", "creation_timestamp": "2024-01-04T04:45:22.000000Z"}, {"uuid": "056e8aef-52a8-4a2e-9288-ad383881d8a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/arpsyndicate/555", "content": "#ExploitObserverAlert\n\nCVE-2023-5528\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-5528. A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2023-11-25T00:06:04.000000Z"}, {"uuid": "6b2f79b6-90a6-45ab-9617-13b418f48b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5585", "type": "seen", "source": "https://t.me/cibsecurity/72290", "content": "\u203c CVE-2023-5585 \u203c\n\nA vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/?page=bike of the component Bike List. The manipulation of the argument Model with the input \">confirm (document.cookie) leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-242170 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-15T07:30:27.000000Z"}, {"uuid": "f8dff383-84ad-4b23-b0cd-192605064484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5538", "type": "seen", "source": "https://t.me/cibsecurity/72499", "content": "\u203c CVE-2023-5538 \u203c\n\nThe MpOperationLogs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the IP Request Headers in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-18T12:49:47.000000Z"}, {"uuid": "773ea88c-66c2-43e0-8660-70f6289eede6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5552", "type": "seen", "source": "https://t.me/cibsecurity/72479", "content": "\u203c CVE-2023-5552 \u203c\n\nA password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3) and older, if the password type is set to \u00e2\u20ac\u0153Specified by sender\u00e2\u20ac\ufffd.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-18T07:33:26.000000Z"}, {"uuid": "1afc063b-8fea-42a7-8832-6dbf3a4b099a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5522", "type": "seen", "source": "https://t.me/cibsecurity/72414", "content": "\u203c CVE-2023-5522 \u203c\n\nMattermost Mobile fails to limit\u00c2\u00a0the maximum number of Markdown elements in a post allowing an attacker to send a post with hundreds of emojis to a channel and\u00c2\u00a0freeze the mobile app of users when viewing that particular channel.\u00c2\u00a0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T14:32:55.000000Z"}, {"uuid": "41386bcd-3097-4199-8314-5c03bef97996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5573", "type": "seen", "source": "https://t.me/cibsecurity/72228", "content": "\u203c CVE-2023-5573 \u203c\n\nAllocation of Resources Without Limits or Throttling in GitHub repository vriteio/vrite prior to 0.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T14:28:56.000000Z"}, {"uuid": "9e917729-09f6-4759-b815-ded9a3c9a8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5591", "type": "seen", "source": "https://t.me/cibsecurity/72300", "content": "\u203c CVE-2023-5591 \u203c\n\nSQL Injection in GitHub repository librenms/librenms prior to 23.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-16T07:44:26.000000Z"}, {"uuid": "0032fe15-000e-4014-a133-baff0eb78ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5590", "type": "seen", "source": "https://t.me/cibsecurity/72298", "content": "\u203c CVE-2023-5590 \u203c\n\nNULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-16T02:36:12.000000Z"}, {"uuid": "8940ef13-6920-44c8-a675-f45836c9d503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5587", "type": "seen", "source": "https://t.me/cibsecurity/72297", "content": "\u203c CVE-2023-5587 \u203c\n\nA vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-242186 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-16T02:36:12.000000Z"}, {"uuid": "7fa29b49-97b3-49c4-81ec-e9ec3c40bf6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5588", "type": "seen", "source": "https://t.me/cibsecurity/72296", "content": "\u203c CVE-2023-5588 \u203c\n\nA vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emoji.Pack of the file lib/pleroma/emoji/pack.ex. The manipulation of the argument name leads to path traversal. The complexity of an attack is rather high. The exploitability is told to be difficult. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 2c795094535537a8607cc0d3b7f076a609636f40. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-242187.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-16T02:36:11.000000Z"}, {"uuid": "f3c909f6-f5cb-4d6a-adb5-5efd3c6fe7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5589", "type": "seen", "source": "https://t.me/cibsecurity/72295", "content": "\u203c CVE-2023-5589 \u203c\n\nA vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-242188.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-16T02:36:10.000000Z"}, {"uuid": "07606347-6b6a-46f4-9158-7f6bb59b7a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5586", "type": "seen", "source": "https://t.me/cibsecurity/72292", "content": "\u203c CVE-2023-5586 \u203c\n\nNULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-15T07:30:30.000000Z"}, {"uuid": "bafd8d28-a6cf-40af-a08e-871c228400b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5582", "type": "seen", "source": "https://t.me/cibsecurity/72286", "content": "\u203c CVE-2023-5582 \u203c\n\nA vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-242147.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-14T18:30:02.000000Z"}, {"uuid": "822d877e-91f8-422e-9263-a5e8363d5b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5572", "type": "seen", "source": "https://t.me/cibsecurity/72227", "content": "\u203c CVE-2023-5572 \u203c\n\nServer-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T14:28:55.000000Z"}, {"uuid": "3ee3d9da-9664-479f-90a7-83699664b19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5575", "type": "seen", "source": "https://t.me/cibsecurity/72316", "content": "\u203c CVE-2023-5575 \u203c\n\nImproper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a low privileged user to access entries via a specific combination of permissions in the entry and in its parent.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-16T18:31:49.000000Z"}, {"uuid": "b2ba768c-98fc-48f6-a67e-069d2f1caa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5578", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/72281", "content": "\u203c CVE-2023-5578 \u203c\n\nA vulnerability was found in Port\u00c3\u00a1bilis i-Educar up to 2.7.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file \\intranet\\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the input \");'> alert(document.cookie) leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-242143. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-14T14:29:47.000000Z"}, {"uuid": "415d3aba-99b1-4a6a-b888-75a18b7fdc1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "published-proof-of-concept", "source": "Telegram/ya52r8BpCX606mKAG1ehilKjK65XQ5D4JJDq7jHXp9bL3YQ", "content": "", "creation_timestamp": "2025-04-01T17:00:08.000000Z"}, {"uuid": "19e65a22-a13b-437b-bf28-078b53c4bed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5561", "type": "published-proof-of-concept", "source": "Telegram/l-RUKEq1u5JC4p5gtwKJVjQtOGsljXG_cScAzYuNwcOFMHM", "content": "", "creation_timestamp": "2025-04-02T01:00:08.000000Z"}, {"uuid": "a41dad49-366e-49e9-a857-69df8cdae5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5562", "type": "seen", "source": "https://t.me/cibsecurity/72203", "content": "\u203c CVE-2023-5562 \u203c\n\nAn unsafe default configuration in KNIME Analytics Platform before 5.2.0 allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server or KNIME Business Hub several JavaScript-based view nodes do not sanitize the data that is displayed by default. If the data to be displayed contains JavaScript this code is executed in the browser and can perform any operations that the current user is allowed to perform silently.KNIME Analytics Platform already has configuration options with which sanitization of data can be actived, see https://docs.knime.com/latest/webportal_admin_guide/index.html#html-sanitization-webportal https://docs.knime.com/latest/webportal_admin_guide/index.html#html-sanitization-webportal . However, these are off by default which allows for cross-site scripting attacks.KNIME Analytics Platform 5.2.0 will enable sanitization by default. For all previous releases we recommend users to add the corresponding settings to the executor's knime.ini.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T00:23:25.000000Z"}, {"uuid": "3588f5c6-9932-4e95-a573-9b152f998124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5535", "type": "seen", "source": "https://t.me/cibsecurity/72149", "content": "\u203c CVE-2023-5535 \u203c\n\nUse After Free in GitHub repository vim/vim prior to v9.0.2010.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-12T00:17:54.000000Z"}, {"uuid": "a813da87-da4a-4349-976b-8bc97625bcfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5521", "type": "seen", "source": "https://t.me/cibsecurity/72102", "content": "\u203c CVE-2023-5521 \u203c\n\nIncorrect Authorization in GitHub repository tiann/kernelsu prior to v0.6.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-11T16:31:39.000000Z"}, {"uuid": "f49b86a1-c87d-4b87-b324-f2f335fa160e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5528", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/473026", "content": "{\n  \"Source\": \"https://exploit.in/\",\n  \"Content\": \"CVE-2023-5528: \u0432\u0430\u0448 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 Kubernetes \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430\", \n  \"author\": \"News Support\",\n  \"Detection Date\": \"19 Mar 2024\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2024-03-19T17:42:48.000000Z"}, {"uuid": "840f5522-a3c8-4ee2-84bf-7cde129ba0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5594", "type": "seen", "source": "https://t.me/true_secator/5232", "content": "\u0410\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 ESET \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\nCVE-2023-5594 (CVSS: 7,5) \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL/TLS \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0441\u0430\u0439\u0442\u0443 \u0441 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043d\u0435\u043b\u044c\u0437\u044f \u0434\u043e\u0432\u0435\u0440\u044f\u0442\u044c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \n\n\u041f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c MD5 \u0438\u043b\u0438 SHA1, \u0441\u0447\u0438\u0442\u0430\u043b\u0441\u044f \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c, \u0438, \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 ESET \u043c\u043e\u0433 \u0434\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0441\u0430\u0439\u0442\u0443, \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u043c\u0443 \u0442\u0430\u043a\u0438\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 - \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 NOD32, Internet Security, Smart Security Premium, Security Ultimate, Endpoint Antivirus, Endpoint Security, Server Security, Mail Security, Security \u0434\u043b\u044f Microsoft SharePoint Server \u0438 File Security \u0434\u043b\u044f Microsoft Azure.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441 21 \u043d\u043e\u044f\u0431\u0440\u044f \u2014 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c ESET, \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e.", "creation_timestamp": "2023-12-22T10:55:57.000000Z"}, {"uuid": "881b8867-1c9b-4b03-b5ef-8d03d1bdb2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/true_secator/5522", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Kubernetes \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 Windows \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-5528 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Kubernetes \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u041e\u043d\u0430 \u0441\u0445\u043e\u0436\u0430 \u0441 CVE-2023-3676 (\u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 subPath \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 YAML) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b YAML.\n\n\u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a CVE-2023-3676 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 kubelet \u0444\u0430\u0439\u043b\u043e\u0432 YAML, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0439 \u043f\u0430\u043f\u043a\u0438, CVE-2023-5528 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043c\u043e\u0434\u0443\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u0434\u0435\u043b\u044b \u0434\u0438\u0441\u043a\u0430.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 kubelet \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0442\u043e\u043c\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 \u0438 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u043c\u043e\u0434\u0443\u043b\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0432\u044b\u0437\u043e\u0432\u00a0cmd, \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u0441\u0442\u0440\u043e\u043a\u0430 Windows \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0434\u0438\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043f\u0440\u0438\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 cmd\u00a0\u0438 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 kubelet.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 persistVolume \u2014 \u0442\u0438\u043f\u0430 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0441\u0442\u0430 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0441\u043b\u0443\u0436\u0431\u044b \u043c\u043e\u0434\u0443\u043b\u044f.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u00ablocal.path\u00bb \u0432\u043d\u0443\u0442\u0440\u0438 YAML-\u0444\u0430\u0439\u043b\u0430 persistVolume, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0427\u0442\u043e\u0431\u044b \u0440\u0435\u0448\u0438\u0442\u044c \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, Kubernetes \u0443\u0434\u0430\u043b\u0438\u043b \u0432\u044b\u0437\u043e\u0432 cmd \u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u043b \u0435\u0433\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 Go, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u0441 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u043e\u0439.\n\n\u0412\u0441\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Kubernetes \u0432\u0435\u0440\u0441\u0438\u0438 1.28.3 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0443\u0437\u043b\u0430\u043c\u0438 Windows \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f CVE-2023-5528, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f - 1.28.4.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0441\u0442\u0430\u043d\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439, \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0442\u0441\u044f - \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432 \u043d\u0435\u043c \u043d\u0435\u0442 \u0443\u0437\u043b\u043e\u0432 Windows.", "creation_timestamp": "2024-03-14T14:30:07.000000Z"}, {"uuid": "efbceb0b-1588-49cd-8452-09af98aaa1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5570", "type": "seen", "source": "https://t.me/cibsecurity/73052", "content": "\u203c CVE-2023-5570 \u203c\n\nImproper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting.This issue affects Home Manager Gateway: before v.1.27.12.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-27T16:17:07.000000Z"}, {"uuid": "df5249ee-45a7-4198-b1d9-0b7efd14d788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5517", "type": "seen", "source": "https://t.me/ctinow/199082", "content": "https://ift.tt/oFyWdPt\nCVE-2023-5517 | ISC BIND RFC 1918 Reverse Zone Query assertion (FEDORA-2024-21310568fa)", "creation_timestamp": "2024-03-04T08:41:26.000000Z"}, {"uuid": "955787d8-8829-41b0-8290-58386584a94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5574", "type": "seen", "source": "https://t.me/cibsecurity/72911", "content": "\u203c CVE-2023-5574 \u203c\n\nA use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T00:39:22.000000Z"}, {"uuid": "df772bcc-0a8e-4189-a21e-ca6e950c228a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5558", "type": "seen", "source": "https://t.me/ctinow/179888", "content": "https://ift.tt/PoGVdlz\nCVE-2023-5558 | LearnPress Plugin up to 4.2.5.4 on WordPress cross site scripting", "creation_timestamp": "2024-02-06T10:41:46.000000Z"}, {"uuid": "bdae717b-7df7-4650-a64f-5befe5772fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5584", "type": "seen", "source": "https://t.me/ctinow/180092", "content": "https://ift.tt/0w4fQb9\nCVE-2023-5584", "creation_timestamp": "2024-02-06T16:22:05.000000Z"}, {"uuid": "dba70a46-683a-4289-aefb-b54c1499fe48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5517", "type": "seen", "source": "https://t.me/ctinow/183865", "content": "https://ift.tt/ln4MZrS\nCVE-2023-5517", "creation_timestamp": "2024-02-13T15:21:58.000000Z"}, {"uuid": "c02a481b-b115-4816-8db2-824c2d55479c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/ctinow/170330", "content": "https://ift.tt/R1jfBmQ\nCVE-2023-5528 Kubernetes Vulnerability in NetApp Products", "creation_timestamp": "2024-01-19T18:32:07.000000Z"}, {"uuid": "e4c566d4-eaa0-4aab-bfd2-4d2dd1c5d26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5594", "type": "seen", "source": "https://t.me/ctinow/167991", "content": "https://ift.tt/0emMGvh\nCVE-2023-5594 | ESET NOD32 Antivirus prior 1464 certificate validation", "creation_timestamp": "2024-01-14T10:41:08.000000Z"}, {"uuid": "29d24a89-45b2-4502-b3cf-d48bed9f2c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5558", "type": "seen", "source": "https://t.me/ctinow/172141", "content": "https://ift.tt/S9bxkHE\nCVE-2023-5558 Exploit", "creation_timestamp": "2024-01-23T17:17:01.000000Z"}, {"uuid": "31a7064f-2ed0-4951-9352-594196dbf052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5504", "type": "seen", "source": "https://t.me/ctinow/166419", "content": "https://ift.tt/6lhKcqA\nCVE-2023-5504", "creation_timestamp": "2024-01-11T10:26:26.000000Z"}, {"uuid": "ff860abd-ac59-4890-9822-da68c9ea0c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5512", "type": "seen", "source": "https://t.me/ctinow/166619", "content": "https://ift.tt/vi1rNqk\nCVE-2023-5512 | GitLab Community Edition/Enterprise Edition prior 16.4.4/16.5.4/16.6.2 File Name code injection (Issue 427827)", "creation_timestamp": "2024-01-11T16:31:36.000000Z"}, {"uuid": "19c713a2-b743-4a30-8d9e-b91f35c7cb31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5536", "type": "seen", "source": "https://t.me/ctinow/161331", "content": "https://ift.tt/3XrqFUb\nCVE-2023-5536 | Canonical Ubuntu Server up to 24.03 LXD access control", "creation_timestamp": "2024-01-01T15:07:04.000000Z"}, {"uuid": "807b869d-34f3-48a7-b420-b9df7de2f516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5520", "type": "seen", "source": "https://t.me/cibsecurity/72096", "content": "\u203c CVE-2023-5520 \u203c\n\nOut-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-11T16:22:49.000000Z"}, {"uuid": "f288b6f6-743a-4540-b6ac-3bdcd11e67f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5594", "type": "seen", "source": "https://t.me/ctinow/157671", "content": "https://ift.tt/pATa41t\nCVE-2023-5594", "creation_timestamp": "2023-12-21T13:28:21.000000Z"}, {"uuid": "b910656a-d24c-47aa-a9d0-a652e8372830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5511", "type": "seen", "source": "https://t.me/cibsecurity/72056", "content": "\u203c CVE-2023-5511 \u203c\n\nCross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-11T11:25:49.000000Z"}, {"uuid": "e42e1861-e8d8-4936-b210-70afbaf7be24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5594", "type": "seen", "source": "https://t.me/information_security_channel/51212", "content": "ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature\nhttps://www.securityweek.com/eset-patches-high-severity-vulnerability-in-secure-traffic-scanning-feature/\n\nESET has patched CVE-2023-5594, a high-severity vulnerability that can cause a browser to trust websites that should not be trusted.\nThe post ESET Patches High-Severity Vulnerability in Secure Traffic Scanning Feature (https://www.securityweek.com/eset-patches-high-severity-vulnerability-in-secure-traffic-scanning-feature/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2023-12-21T15:09:21.000000Z"}, {"uuid": "4abd2f22-689e-44bf-b150-f7e408d87feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/thehackernews/4680", "content": "Researchers detail a high-severity flaw in Kubernetes, CVE-2023-5528, that allowed attackers remote code execution with SYSTEM privileges on Windows endpoints within a cluster. \n \nLearn more: https://thehackernews.com/2024/03/researchers-detail-kubernetes.html", "creation_timestamp": "2024-03-14T13:04:05.000000Z"}, {"uuid": "04444fda-4ca6-46f0-8b18-1e881785b2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/ZerodayAlert/193", "content": "", "creation_timestamp": "2026-07-06T11:00:12.340013Z"}, {"uuid": "439b49cb-89c7-4bf8-beee-96fae414b7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5521", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9277", "content": "#exploit\n1. CVE-2023-5521:\nRoot takeover via signature spoofing in tiann/kernelsu\nhttps://huntr.com/bounties/d438eff7-4e24-45e0-bc75-d3a5b3ab2ea1\n\n2. CVE-2023-4632:\nLPE in Lenovo System\u00a0Updater\nhttps://enigma0x3.net/2023/10/26/cve-2023-4632-local-privilege-escalation-in-lenovo-system-updater\n\n3. CVE-2022-32548:\nDrayTek unauthenticated RCE in /cgi-bin/wlogin.cgi\nhttps://github.com/MosaedH/CVE-2022-32548-RCE-POC", "creation_timestamp": "2023-10-28T12:33:01.000000Z"}, {"uuid": "b5022958-425f-4fac-9539-ff511d651610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-5521", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1566", "content": "#exploit\n1. CVE-2023-5521:\nRoot takeover via signature spoofing in tiann/kernelsu\nhttps://huntr.com/bounties/d438eff7-4e24-45e0-bc75-d3a5b3ab2ea1\n\n2. CVE-2023-4632:\nLPE in Lenovo System\u00a0Updater\nhttps://enigma0x3.net/2023/10/26/cve-2023-4632-local-privilege-escalation-in-lenovo-system-updater\n\n3. CVE-2022-32548:\nDrayTek unauthenticated RCE in /cgi-bin/wlogin.cgi\nhttps://github.com/MosaedH/CVE-2022-32548-RCE-POC", "creation_timestamp": "2024-08-16T08:40:14.000000Z"}, {"uuid": "392946d9-b852-45f1-87f0-cb72afa7b5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnish75fes22", "content": "", "creation_timestamp": "2026-06-04T23:42:54.087170Z"}, {"uuid": "b3d6abc8-09f7-4656-8513-383455129222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5535", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/87a0d93f99bcb4bc75fed39733932cb8", "content": "", "creation_timestamp": "2026-06-13T13:17:19.000000Z"}, {"uuid": "2cb9046e-b5c6-46b6-8dcb-b62be672340c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/ZerodayAlert/193", "content": "", "creation_timestamp": "2026-07-07T00:00:20.417655Z"}, {"uuid": "d77ec749-a2a6-4aa7-bdee-ad702793596e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/ZerodayAlert/193", "content": "", "creation_timestamp": "2026-07-12T01:00:03.925942Z"}, {"uuid": "dd3843db-40fe-48e1-8e28-5a66304e65cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/ZerodayAlert/193", "content": "", "creation_timestamp": "2026-07-13T00:00:55.977113Z"}, {"uuid": "e01706f7-23be-4dbd-a427-9343b7922818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/cyberwarehouse/358", "content": "", "creation_timestamp": "2026-07-17T11:00:05.737872Z"}, {"uuid": "675e699a-3615-40bd-aa11-d0eb659412ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/cyberwarehouse/358", "content": "", "creation_timestamp": "2026-07-18T00:00:33.007077Z"}, {"uuid": "9a053ded-d536-4d41-8f00-352ee6ca9d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/EchelonEyes/2562", "content": "", "creation_timestamp": "2026-07-26T07:00:36.464568Z"}, {"uuid": "8c7f0962-6f30-4145-be70-d041fed8c131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "seen", "source": "https://t.me/EchelonEyes/2562", "content": "", "creation_timestamp": "2026-07-27T00:00:49.615489Z"}, {"uuid": "d6a2d5a0-6393-4c5e-82a0-a159b23881fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5528", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/2562", "content": "", "creation_timestamp": "2026-07-28T00:00:38.637697Z"}, {"uuid": "eaeb47d2-5f67-4030-96fd-a38e56ab4ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5546", "type": "seen", "source": "https://t.me/CVEhub/19479", "content": "", "creation_timestamp": "2026-07-29T12:00:05.476888Z"}, {"uuid": "dd2790dc-f679-4af5-8fcb-6cc9efe190f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-5546", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/19479", "content": "", "creation_timestamp": "2026-07-30T00:00:28.445256Z"}]}