{"vulnerability": "cve-2023-3616", "sightings": [{"uuid": "0d8b04ca-3825-4782-b780-9cb69fb29296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-3616", "type": "seen", "source": "https://t.me/cibsecurity/69889", "content": "\u203c CVE-2023-3616 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mava Software Hotel Management System allows SQL Injection.This issue affects Hotel Management System: before 2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T22:16:56.000000Z"}, {"uuid": "cc196f9a-81f0-46b7-affe-6de344bb66bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36167", "type": "published-proof-of-concept", "source": "Telegram/ZPMcjDl_YbbDJ3etZP3BqKChdYJaSzNeePm8ZdO0d0CqNg", "content": "", "creation_timestamp": "2023-07-11T14:57:43.000000Z"}, {"uuid": "a715f8c1-94e0-4944-83c4-698af0f4f67c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36163", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3119", "content": "25 Tools \ud83d\udd27 \ud83d\udd27 - Hackers Factory\n\nWinsocky\n\nWinsocket implementation for #CobaltStrike. Used to communicate with the victim using winsockets instead of the traditional ways.\n\nhttps://github.com/WKL-Sec/Winsocky\n\n#infosec #pentesting #redteam\n\n\u200b\u200bUseful #OSINT hints and links\n\nhttps://github.com/seintpl/osint\n\n#cybersecurity #infosec\n\n\u200b\u200bPyrrha\n\nA tool for firmware cartography.\n\nhttps://github.com/quarkslab/pyrrha\n\n#cybersecurity #infosec\n\n\u200b\u200b\ud83d\udd79 apk.sh\n\napk.sh makes #reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.\n\nhttps://github.com/ax/apk.sh\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-3269 \n\nLinux kernel privilege escalation vulnerability.\n\nhttps://github.com/lrh2000/StackRot\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bmmdb-server\n\nFast API server to lookup IP addresses for their geographic location.\n\nhttps://github.com/adulau/mmdb-server\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2023-2868\n\nBarracuda ESG Command Injection\n\nhttps://github.com/cfielding-r7/poc-cve-2023-2868\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bDoge-COFFLdr\n\nIts a coff loader ported to go.\n\n\u2022 Ported to go\n\u2022 more opsec\n\u2022 support BeaconOutput\n\u2022 support other Beacon functions(todo)\n\nhttps://github.com/timwhitez/Doge-COFFLdr\n\n#infosec #pentesting #redteam\n\n\u200b\u200bSR-IOV Network Metrics Exporter\n\nExporter that reads metrics for SR-IOV Virtual Functions and exposes them in the Prometheus format.\n\nhttps://github.com/k8snetworkplumbingwg/sriov-network-metrics-exporter\n\n#cybersecurity #infosec\n\n\u200b\u200bnf-tables-lpe\n\nExploits of Team Orca from Sea Security and Qrious Secure for multiple vulnerabilities in Netfilter's nf_table module.\n\nhttps://github.com/kungfulon/nf-tables-lpe\n\n#cybersecurity #infosec\n\n\u200b\u200broute-detect\n\nFind authentication (authn) and authorization (authz) security bugs in web application routes.\n\nhttps://github.com/mschwager/route-detect\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bjava-gate\n\nJava JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders.\n\nhttps://github.com/4ra1n/java-gate\n\n#infosec #pentesting #redteam\n\nTakeMyRDP 2.0\n\nA keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts (like in mstsc.exe and CredentialUIBroker.exe) it operates in the background not as a console windows anymore and handles all messages in a hidden window.\n\nhttps://github.com/nocerainfosec/TakeMyRDP2.0\n\n#infosec #pentesting #redteam\n\nEvil QR\n\nProof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.\n\nhttps://github.com/kgretzky/evilqr\n\n#cybersecurity #infosec\n\n\u200b\u200bDecrypt Chrome Passwords\n\nA simple program to decrypt chrome password saved on your machine. This code has only been tested on windows, so it may not work on other OS.\n\nhttps://github.com/ohyicong/decrypt-chrome-passwords\n\n#cybersecurity #infosec #redteam\n\n\u200b\u200bShortscan\n\nAn IIS short filename enumeration tool.\n\nhttps://github.com/bitquark/shortscan\n\n#cybersecurity #infosec\n\n\u200b\u200bFuzzyLogic.jl\n\nA Flexible Library for Efficient and Productive Fuzzy Inference\n \nhttps://github.com/lucaferranti/fuzzieee2023\n\n#cybersecurity #infosec\n\n\u200b\u200bDECREE\n\nThis is the code repository of the CVPR 2023 paper DECREE, \"Detecting Backdoors in Pre-trained Encoders\", the first backdoor detection method against self-supervising learning (SSL) backdoor attacks.\n\nhttps://github.com/GiantSeaweed/DECREE\n\n#infosec #pentesting #redteam\n\n\u200b\u200bCVE-2023-36163\n\nCross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.\n\nhttps://github.com/TraiLeR2/CVE-2023-36163\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bCVE-2023-36167\n\nAn issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component\n\nhttps://github.com/TraiLeR2/CVE-2023-36167\n\n#cve #cybersecurity #infosec\n\n\u200b\u200b1/1", "creation_timestamp": "2023-07-27T07:52:46.000000Z"}, {"uuid": "f8b32f1e-1ca7-4051-a2bb-b68565d5f90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36167", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/3864", "content": "\ud83d\udd30Hamer Candy Malaysian leak : https://system32.ink/hamer-candy-malaysian-leak/\n\n\ud83d\udd30Mituo China Leak : https://system32.ink/mituo-china-leak/\n\n\ud83d\udd30AdultFilmStarContent_com Leak : https://system32.ink/adultfilmstarcontent.com-leak/\n\n\ud83d\udd30CVE-2023-2133 Poc : https://system32.ink/cve-2023-2133-poc/\n\n\ud83d\udd30CVE-2023-36167 Poc : https://system32.ink/cve-2023-36167-poc/\n\n\ud83d\udd30CVE-2023-22906 Qubo Smart Doorbell device Exploit : https://system32.ink/cve-2023-22906-qubo-smart-doorbell-device-exploit/\n\n@crackcodes | System32.ink | Crackcodes.in", "creation_timestamp": "2023-07-13T21:29:03.000000Z"}, {"uuid": "13ecd9aa-0486-4326-a9de-513da1d49076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36160", "type": "seen", "source": "https://t.me/cibsecurity/70626", "content": "\u203c CVE-2023-36160 \u203c\n\nAn issue was discovered in Qubo Smart Plug10A version HSP02_01_01_14_SYSTEM-10 A, allows local attackers to gain sensitive information and other unspecified impact via UART console.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-16T07:26:02.000000Z"}, {"uuid": "710c7c2d-4146-45b0-8b46-aa87d18d4f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36161", "type": "seen", "source": "https://t.me/cibsecurity/70206", "content": "\u203c CVE-2023-36161 \u203c\n\nAn issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of service (DoS) via Wi-Fi deauthentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T16:22:08.000000Z"}, {"uuid": "47b00382-4da2-4265-b74b-71afd6752f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36162", "type": "seen", "source": "https://t.me/cibsecurity/65897", "content": "\u203c CVE-2023-36162 \u203c\n\nCross Site Request Forgery vulnerability in ZZCMS v.2023 alows a remote attacker to gain privileges via the add function in adminlist.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-04T00:23:07.000000Z"}, {"uuid": "76b8201a-48e0-4526-93aa-5823a2cb36f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36164", "type": "seen", "source": "https://t.me/cibsecurity/66394", "content": "\u203c CVE-2023-36164 \u203c\n\nAn issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code via the MTAgentService component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T18:29:47.000000Z"}, {"uuid": "df58b5ca-4376-496f-b186-f01dfdaf968d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36167", "type": "seen", "source": "https://t.me/cibsecurity/66392", "content": "\u203c CVE-2023-36167 \u203c\n\nAn issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T18:29:45.000000Z"}, {"uuid": "bb332b8d-b104-4ff7-b4c5-a707bd672255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36163", "type": "seen", "source": "https://t.me/cibsecurity/66391", "content": "\u203c CVE-2023-36163 \u203c\n\nCross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-11T18:29:44.000000Z"}, {"uuid": "46440e37-008e-4d18-99a6-d4f71ecce983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36163", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/702", "content": "https://github.com/TraiLeR2/CVE-2023-36163\nxss \n#github", "creation_timestamp": "2023-07-10T13:48:04.000000Z"}, {"uuid": "f7d99248-6821-4531-89dd-6982f1cbd60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36163", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8643", "content": "#exploit\n1. CVE-2023-36167:\nAn issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component\nhttps://github.com/TraiLeR2/CVE-2023-36167\n\n2. CVE-2023-36163:\nBuildaGate5library - Reflected Cross-Site Scripting (XSS)\nhttps://github.com/TraiLeR2/CVE-2023-36163", "creation_timestamp": "2023-07-10T11:00:42.000000Z"}, {"uuid": "6911bc66-1c3a-4e7a-8f5e-27627ba8d3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36167", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8643", "content": "#exploit\n1. CVE-2023-36167:\nAn issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component\nhttps://github.com/TraiLeR2/CVE-2023-36167\n\n2. CVE-2023-36163:\nBuildaGate5library - Reflected Cross-Site Scripting (XSS)\nhttps://github.com/TraiLeR2/CVE-2023-36163", "creation_timestamp": "2023-07-10T11:00:42.000000Z"}, {"uuid": "4bb6246f-0259-4e0e-8008-c4a51f15948a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-36168", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8790", "content": "#exploit\n1. CVE-2023-2033:\nType confusion in V8 in Google Chrome\nhttps://github.com/mistymntncop/CVE-2023-2033\n\n2. CVE-2023-36168:\nAVG Anti Spyware 7.5 - Unquoted Service Path\nhttps://github.com/TraiLeR2/CVE-2023-36168", "creation_timestamp": "2023-08-04T11:00:38.000000Z"}, {"uuid": "24e61d4c-fd8e-49d4-a45d-efa1932180e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36166", "type": "seen", "source": "https://t.me/CVEhub/16620", "content": "", "creation_timestamp": "2026-07-29T12:00:17.752546Z"}, {"uuid": "e86d7e8d-4d90-44fe-a961-8c84d79da349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36167", "type": "seen", "source": "https://t.me/CVEhub/16619", "content": "", "creation_timestamp": "2026-07-29T12:00:17.723422Z"}, {"uuid": "ebe91e65-d96d-4254-829b-1521c985bf04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36164", "type": "seen", "source": "https://t.me/CVEhub/16622", "content": "", "creation_timestamp": "2026-07-29T12:00:17.695831Z"}, {"uuid": "16f42095-2157-40c8-892c-31eff405018b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36165", "type": "seen", "source": "https://t.me/CVEhub/16621", "content": "", "creation_timestamp": "2026-07-29T12:00:17.668334Z"}, {"uuid": "41ae5009-4ad0-4680-856b-4e5d9785ec10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36163", "type": "seen", "source": "https://t.me/CVEhub/16623", "content": "", "creation_timestamp": "2026-07-29T12:00:17.584609Z"}, {"uuid": "0cff39ee-6972-4f35-a1da-a5ef4eb585d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36168", "type": "seen", "source": "https://t.me/CVEhub/18319", "content": "", "creation_timestamp": "2026-07-29T12:00:10.040074Z"}, {"uuid": "3d9b66b9-9543-402e-86eb-bc7885de15ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36169", "type": "seen", "source": "https://t.me/CVEhub/18517", "content": "", "creation_timestamp": "2026-07-29T12:00:09.406174Z"}, {"uuid": "533cf968-3ddd-46b6-81ab-5afe201f13b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36166", "type": "seen", "source": "https://t.me/CVEhub/16620", "content": "", "creation_timestamp": "2026-07-30T00:00:37.147452Z"}, {"uuid": "ba4aa1d7-1e45-4702-93da-040524876f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36167", "type": "seen", "source": "https://t.me/CVEhub/16619", "content": "", "creation_timestamp": "2026-07-30T00:00:37.102268Z"}, {"uuid": "f9a73011-24ff-4383-9f7a-ebb24818fff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36164", "type": "seen", "source": "https://t.me/CVEhub/16622", "content": "", "creation_timestamp": "2026-07-30T00:00:37.053800Z"}, {"uuid": "418a922a-952d-4e16-8438-00aa0a092d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36165", "type": "seen", "source": "https://t.me/CVEhub/16621", "content": "", "creation_timestamp": "2026-07-30T00:00:36.463518Z"}, {"uuid": "d28e3468-d57e-40b2-b6c5-165ea4a511fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36163", "type": "seen", "source": "https://t.me/CVEhub/16623", "content": "", "creation_timestamp": "2026-07-30T00:00:36.268356Z"}, {"uuid": "319d134a-00b2-49fa-a076-ae4b329c5de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18517", "content": "", "creation_timestamp": "2026-07-30T00:00:23.288690Z"}, {"uuid": "fb9f4919-80e9-4f0a-9761-942b13eef373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36168", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18319", "content": "", "creation_timestamp": "2026-07-30T00:00:22.324736Z"}, {"uuid": "08f4110d-75ab-42ac-9f9f-45227867b1e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36163", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16623", "content": "", "creation_timestamp": "2026-07-31T00:00:40.279118Z"}, {"uuid": "ed6cb4bb-9ad1-4ca6-97e5-e12952131671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36165", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16621", "content": "", "creation_timestamp": "2026-07-31T00:00:40.151740Z"}, {"uuid": "f137861d-d8ee-4613-ac19-5994ec60aabd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36164", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16622", "content": "", "creation_timestamp": "2026-07-31T00:00:40.105511Z"}, {"uuid": "524e4b4a-3ba4-4f4f-895d-ca334dda92cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36167", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16619", "content": "", "creation_timestamp": "2026-07-31T00:00:40.056712Z"}, {"uuid": "85d234db-574c-4d11-abfe-bbc3ab41d981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-36166", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16620", "content": "", "creation_timestamp": "2026-07-31T00:00:40.015656Z"}]}