{"vulnerability": "CVE-2023-3615", "sightings": [{"uuid": "c1ce7b71-788a-4fcb-b179-6a996e39bc43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-3615", "type": "seen", "source": "https://t.me/cibsecurity/66839", "content": "\u203c CVE-2023-3615 \u203c\n\nMattermost iOS app fails\u00c2\u00a0to properly\u00c2\u00a0validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T20:40:21.000000Z"}, {"uuid": "06d80505-dd9b-4042-ae67-0c3a010de9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36158", "type": "seen", "source": "https://t.me/cibsecurity/67748", "content": "\u203c CVE-2023-36158 \u203c\n\nCross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:51.000000Z"}]}