{"metadata": {"vulnerability": "CVE-2023-28467", "count": 19, "kinds": {"milestone": 3, "sighting": 6, "kev": 0, "other": 10}}, "data": [{"timestamp": "2023-03-15T00:00:00Z", "date_only": false, "value": "2023-03-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-28467", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-22T00:00:00Z", "date_only": false, "value": "2023-05-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28467", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-22T00:00:00Z", "date_only": false, "value": "2023-05-22T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-28467", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-22T19:15:00Z", "date_only": false, "value": "2023-05-22T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-28467", "record": "GSD-2023-28467", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-05-22T19:15:10.017Z", "date_only": false, "value": "2023-05-22T19:15:10.017", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28467", "record": "FKIE_CVE-2023-28467", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-22T22:24:53Z", "date_only": false, "value": "2023-05-22T22:24:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/64563", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "8c758c61-6a24-4534-a785-42da514cf01f", "content": "\u203c CVE-2023-28467 \u203c\n\nIn MyBB before 1.8.34, there is XSS in the User CP module via the user email field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/64563"}, {"timestamp": "2023-05-27T01:49:00Z", "date_only": false, "value": "2023-05-27T01:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-28467", "record": "GSD-2023-28467", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-07-23T19:34:47Z", "date_only": false, "value": "2023-07-23T19:34:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8720", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "d821104d-b544-43dc-a6ec-22bad79e4800", "content": "#exploit\n1. CVE-2023-32681:\nVulnerability in python-requests affects IBM InfoSphere Information Server\nhttps://github.com/hardikmodha/POC-CVE-2023-32681\n\n2. CVE-2023-28467:\nMyBB 1.8.33 - User CP email persistent XSS\nhttps://github.com/ahmetaltuntas/CVE-2023-28467\n\n3. Google Chrome V8 ArrayShift Race Condition RCE\nhttps://blog.exodusintel.com/2023/05/16/google-chrome-v8-arrayshift-race-condition-remote-code-execution", "url": "https://t.me/CyberSecurityTechnologies/8720", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-07-24T13:05:13Z", "date_only": false, "value": "2023-07-24T13:05:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/5341", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "9796cc83-bb29-4ae7-875a-d55b02ad5b99", "content": "CVE-2023-28467\n\nMyBB 1.8.33 User CP email persistent XSS\n\nGithub\n\n#CVE #XSS\n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/5341", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-07-25T11:56:20Z", "date_only": false, "value": "2023-07-25T11:56:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3127", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "26339c2f-f3c6-410a-bd58-c3e4507f8119", "content": "Tools \ud83d\udd27 \ud83d\udd28 \ud83d\udd27 \ud83d\udd28  -  Hackers Factory\n\n\u200b\u200bFirefox Decrypt\n\nA tool to extract passwords from Mozilla (Firefox\u2122, Waterfox\u2122, Thunderbird\u00ae, SeaMonkey\u00ae) profiles.\n\nhttps://github.com/unode/firefox_decrypt\n\n#infosec #pentesting #redteam\n\n\u200b\u200bmutation fuzzer\n\nMutate a binary to identify potential #exploit candidates.\n\nhttps://github.com/demetriusford/mutation-fuzzer\n\n#cybersecurity #infosec\n\n\u200b\u200bmasm32-kernel-programming\n\nmasm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)\n\nhttps://github.com/therealdreg/masm32-kernel-programming\n\n#malware #cybersecurity #infosec\n\n\u200b\u200bXSS-Bypass-Filters\n\nhttps://github.com/Edr4/XSS-Bypass-Filters\n\n#infosec #bugbounty \n\n\u200b\u200bCVE-2023-3519\n\nThis #Nmap NSE script checks for the CVE-2023-3519 vulnerability in Citrix Gateway and Citrix AAA.\n\nhttps://github.com/dorkerdevil/CitrixFall\n\n#infosec \n\n\u200b\u200bCVE-2023-3519\n\nThe cve_2023_3519_inspector.py is a Python-based vulnerability scanner for detecting the CVE-2023-3519 vulnerability in Citrix Gateways. It performs a passive analysis and fingerprinting of target websites to assess their vulnerability based on a series of checks.\n\nhttps://github.com/securekomodo/citrixInspector\n\n#cve\n\n\u200b\u200bCVE-2023-28121\n\nWooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]\n\nhttps://github.com/im-hanzou/Mass-CVE-2023-28121\n\n#cve\n\n\u200b\u200bCVE-2023-32681\n\nVulnerability in python-requests affects IBM InfoSphere Information Server.\n\nhttps://github.com/hardikmodha/POC-CVE-2023-32681\n\n#cve #poc #cybersecurity #infosec\n\n\u200b\u200bCloudflare Origin ip\n\nThis Python tool compares the HTTP response of the given subdomain to HTTP responses of a list of IPs addresses. This list is based on:\n\n\u2022 subdomains supplied by the user\n\u2022 subdomains found on external sources\n\u2022 IPs found external sources\n\nhttps://github.com/gwen001/cloudflare-origin-ip\n\n\u200b\u200bBucketLoot\n\nBucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.\n\nhttps://github.com/redhuntlabs/BucketLoot\n\n\u200b\u200bHtmlSmuggling\n\nit is malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page.\n\nhttps://github.com/De3vil/HtmlSmuggling\n\n\u200b\u200bTGSThief\n\nI think a lot of people have seen the project GIUDA. It is an interesting way to get the TGS of a user whose logon session is just present on the computer. The problem is that its code is written in Pascal (the last time I wrote in Pascal was at school), so I had to rewrite the project in C++.\n\nhttps://github.com/MzHmO/TGSThief\n\n\u200b\u200bCVE-2023-28467\n\nCross-site scripting (XSS) vulnerability in the User CP module allows remote authenticated users to inject HTML via the user email field, triggered on the User CP Home page.\n\nAfter registration, the e-mail address is changed and the XSS payload is placed. Then, when \"User CP\" is entered, the vulnerability is triggered.\n\nhttps://github.com/ahmetaltuntas/CVE-2023-28467\n\n\u200b\u200bRandomTSScripts\n\nRandom collection of scripts useful for engagements, which don't really need their own repo.\n\nhttps://github.com/xpn/RandomTSScripts\n\n\u200b\u200bCVE-2023-38408 \n\nRemote Code Execution in OpenSSH's forwarded ssh-agent\n\nhttps://github.com/snowcra5h/CVE-2023-38408\n\n\u200b\u200bcombine\n\nRust in-memory dumper. Check your windows local security authority credential's safety with this awesome tool.\n\nhttps://github.com/m3f157O/combine_harvester\n\n\u200b\u200bTokenTactics v2\n\nA fork of the great TokenTactics with support for CAE and token endpoint v2.\n\nhttps://github.com/f-bader/TokenTacticsV2\n\n\u200b\u200bDeepCamera\n\nOpen-Source #AI #Camera. Empower any camera/CCTV with state-of-the-art AI, including facial recognition, person recognition(RE-ID) car detection, fall detection and more...\n\nhttps://github.com/SharpAI/DeepCamera\n\n\u200b\u200bAnalytics & AdBlocker\n\nProtect your #privacy while browsing the web.\n\nhttps://github.com/con-schy1/Analytics_AdBlocker\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3127", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-22T13:20:12Z", "date_only": false, "value": "2023-08-22T13:20:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/851", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "7ce52352-bd80-4a53-9678-83264b330ade", "content": "CVE-2023-28467 : MyBB 1.8.33 User CP module - XSS\nPOC : https://github.com/ahmetaltuntas/CVE-2023-28467", "url": "https://t.me/MrVGunz/851", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:20:47.196Z", "date_only": false, "value": "2023-12-13T01:20:47.196842Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-28467", "record": "GSD-2023-28467", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T12:38:25.477Z", "date_only": false, "value": "2024-08-02T12:38:25.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-28467", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-21T15:25:35.927Z", "date_only": false, "value": "2025-01-21T15:25:35.927025Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28467", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-21T15:25:35.927Z", "date_only": false, "value": "2025-01-21T15:25:35.927025Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28467", "record": "FKIE_CVE-2023-28467", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-21T15:26:10.149Z", "date_only": false, "value": "2025-01-21T15:26:10.149Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-28467", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-21T15:26:10.149Z", "date_only": false, "value": "2025-01-21T15:26:10.149Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28467", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:47:48.340Z", "date_only": false, "value": "2026-06-17T05:47:48.340", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28467", "record": "FKIE_CVE-2023-28467", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:14.097Z", "date_only": false, "value": "2026-07-29T12:00:14.097636Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17534", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "72c8e202-5568-4b1e-ab1e-16aeefd5a16a", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-28467*\nGithub: https://github.com/ahmetaltuntas/CVE-2023-28467", "url": "https://t.me/CVEhub/17534"}], "metrics": {"as_of": "2026-10-31T18:53:35.263Z", "anchors": {"origin": {"timestamp": "2023-05-22T00:00:00Z", "date_only": false, "value": "2023-05-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28467", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-05-22T00:00:00Z", "date_only": false, "value": "2023-05-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28467", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-07-23T19:34:47Z", "date_only": false, "value": "2023-07-23T19:34:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8720", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "d821104d-b544-43dc-a6ec-22bad79e4800", "content": "#exploit\n1. CVE-2023-32681:\nVulnerability in python-requests affects IBM InfoSphere Information Server\nhttps://github.com/hardikmodha/POC-CVE-2023-32681\n\n2. CVE-2023-28467:\nMyBB 1.8.33 - User CP email persistent XSS\nhttps://github.com/ahmetaltuntas/CVE-2023-28467\n\n3. Google Chrome V8 ArrayShift Race Condition RCE\nhttps://blog.exodusintel.com/2023/05/16/google-chrome-v8-arrayshift-race-condition-remote-code-execution", "url": "https://t.me/CyberSecurityTechnologies/8720", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 5427287.0, "hours": 1507.5797222222222, "days": 62.81582175925926, "min_seconds": 5340887.0, "max_seconds": 5427287.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-22T00:00:00Z", "date_only": false, "value": "2023-05-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28467", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-07-23T19:34:47Z", "date_only": false, "value": "2023-07-23T19:34:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8720", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "d821104d-b544-43dc-a6ec-22bad79e4800", "content": "#exploit\n1. CVE-2023-32681:\nVulnerability in python-requests affects IBM InfoSphere Information Server\nhttps://github.com/hardikmodha/POC-CVE-2023-32681\n\n2. CVE-2023-28467:\nMyBB 1.8.33 - User CP email persistent XSS\nhttps://github.com/ahmetaltuntas/CVE-2023-28467\n\n3. Google Chrome V8 ArrayShift Race Condition RCE\nhttps://blog.exodusintel.com/2023/05/16/google-chrome-v8-arrayshift-race-condition-remote-code-execution", "url": "https://t.me/CyberSecurityTechnologies/8720", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 108759215.263343, "hours": 30210.89312870639, "days": 1258.7872136960996, "min_seconds": 108672815.263343, "max_seconds": 108759215.263343, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-22T00:00:00Z", "date_only": false, "value": "2023-05-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28467", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T18:53:35.263Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 103331928.263343, "hours": 28703.31340648417, "days": 1195.9713919368403, "min_seconds": 103331928.263343, "max_seconds": 103331928.263343, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-07-23T19:34:47Z", "date_only": false, "value": "2023-07-23T19:34:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8720", "record": "CVE-2023-28467", "field": "creation_timestamp", "uuid": "d821104d-b544-43dc-a6ec-22bad79e4800", "content": "#exploit\n1. CVE-2023-32681:\nVulnerability in python-requests affects IBM InfoSphere Information Server\nhttps://github.com/hardikmodha/POC-CVE-2023-32681\n\n2. CVE-2023-28467:\nMyBB 1.8.33 - User CP email persistent XSS\nhttps://github.com/ahmetaltuntas/CVE-2023-28467\n\n3. Google Chrome V8 ArrayShift Race Condition RCE\nhttps://blog.exodusintel.com/2023/05/16/google-chrome-v8-arrayshift-race-condition-remote-code-execution", "url": "https://t.me/CyberSecurityTechnologies/8720", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T18:53:35.263Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}