{"vulnerability": "cve-2023-2313", "sightings": [{"uuid": "b3c74165-fc95-432f-836e-5b0730329fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23132", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3717", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-23132\nURL\uff1ahttps://github.com/l00neyhacker/CVE-2023-23132\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-01-30T05:42:40.000000Z"}, {"uuid": "bed186fd-c196-40ff-a09b-14016053a106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23131", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9088", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-23131\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings.\n\ud83d\udccf Published: 2023-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T14:23:11.363Z\n\ud83d\udd17 References:\n1. https://github.com/l00neyhacker/CVE-2023-23131", "creation_timestamp": "2025-03-27T14:27:19.000000Z"}, {"uuid": "5e06b9d4-365f-4967-9ea2-c0701d611a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23136", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9100", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-23136\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.\n\ud83d\udccf Published: 2023-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T14:18:59.283Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/litanhua-fost9/hu05qa/izexczwp01w5c68i?singleDoc", "creation_timestamp": "2025-03-27T14:27:39.000000Z"}, {"uuid": "f6052438-2077-49bd-b70d-e45daf41746d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23135", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9095", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-23135\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file.\n\ud83d\udccf Published: 2023-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T14:20:11.282Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/litanhua-fost9/hu05qa/fdmgbrzlvq9qpg3a?singleDoc", "creation_timestamp": "2025-03-27T14:27:32.000000Z"}, {"uuid": "5195ca33-94ee-4966-9b97-94fae657b698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23132", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9094", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-23132\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys.\n\ud83d\udccf Published: 2023-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T14:21:32.746Z\n\ud83d\udd17 References:\n1. https://github.com/l00neyhacker/CVE-2023-23132", "creation_timestamp": "2025-03-27T14:27:31.000000Z"}, {"uuid": "7520529f-a4e6-42e1-8ee8-cfa65c10416c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23136", "type": "seen", "source": "https://t.me/cibsecurity/57312", "content": "\u203c CVE-2023-23136 \u203c\n\nlmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T18:14:06.000000Z"}, {"uuid": "17da326a-4709-4535-becd-16724f5d9da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23135", "type": "seen", "source": "https://t.me/cibsecurity/57310", "content": "\u203c CVE-2023-23135 \u203c\n\nAn arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T18:14:04.000000Z"}, {"uuid": "a5f68018-7fb6-40c8-8373-22de37ec0279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23130", "type": "seen", "source": "https://t.me/cibsecurity/57294", "content": "\u203c CVE-2023-23130 \u203c\n\nConnectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:18.000000Z"}, {"uuid": "61fcd197-0a86-4f09-b3ba-0b85cc7b3125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23132", "type": "seen", "source": "https://t.me/cibsecurity/57290", "content": "\u203c CVE-2023-23132 \u203c\n\nSelfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:11.000000Z"}, {"uuid": "8484d4a0-cb7d-4278-8945-f336a45788f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23131", "type": "seen", "source": "https://t.me/cibsecurity/57289", "content": "\u203c CVE-2023-23131 \u203c\n\nSelfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:11.000000Z"}, {"uuid": "4db20353-e102-4cec-a6b0-d3f7c3239d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-23132", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2611", "content": "#CVE-2023\nPOC and Scanner for CVE-2023-24055\nhttps://github.com/deetl/CVE-2023-24055\n\n\nCVE-2023-21839 exp\n\nhttps://github.com/fakenews2025/CVE-2023-21839\n\nCVE-2023-23132\n\nhttps://github.com/l00neyhacker/CVE-2023-23132\n\n@BlueRedTeam", "creation_timestamp": "2023-03-05T09:27:29.000000Z"}]}