https://vulnerability.circl.lu/sightings/feed 2026-06-15T21:12:01.278730+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/78dad90c-6a44-4cae-8f17-dc0ad50c14db/export 2026-06-15T21:12:01.623146+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "78dad90c-6a44-4cae-8f17-dc0ad50c14db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2144", "type": "seen", "source": "https://t.me/cibsecurity/62341", "content": "\u203c CVE-2023-2144 \u203c\n\nA vulnerability was found in Campcodes Online Thesis Archiving System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/departments/view_department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226265 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-18T14:29:03.000000Z"} 2023-04-18T14:29:03+00:00 https://vulnerability.circl.lu/sighting/5e464066-6f1c-49a3-9824-6b4720b8e053/export 2026-06-15T21:12:01.623042+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5e464066-6f1c-49a3-9824-6b4720b8e053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21449", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5612", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21449\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission.\n\ud83d\udccf Published: 2023-03-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T21:15:27.969Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03", "creation_timestamp": "2025-02-26T21:25:25.000000Z"} 2025-02-26T21:25:25+00:00 https://vulnerability.circl.lu/sighting/4fb13ddb-fdb0-4c87-aa52-77cdbbe0d5f5/export 2026-06-15T21:12:01.622935+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4fb13ddb-fdb0-4c87-aa52-77cdbbe0d5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21441", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8507", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21441\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:08:52.393Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02", "creation_timestamp": "2025-03-24T19:23:16.000000Z"} 2025-03-24T19:23:16+00:00 https://vulnerability.circl.lu/sighting/2d7bb5ae-8d37-4af8-9c05-63301f58389f/export 2026-06-15T21:12:01.622834+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2d7bb5ae-8d37-4af8-9c05-63301f58389f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21443", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8510", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21443\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to decrypt encrypted messages or inject commands.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:07:57.762Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02", "creation_timestamp": "2025-03-24T19:23:18.000000Z"} 2025-03-24T19:23:18+00:00 https://vulnerability.circl.lu/sighting/3856385e-20be-4b84-ad1d-8d6685cd07c8/export 2026-06-15T21:12:01.622733+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3856385e-20be-4b84-ad1d-8d6685cd07c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21442", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8509", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21442\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) allows local attackers to get device location information.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:08:23.332Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02", "creation_timestamp": "2025-03-24T19:23:18.000000Z"} 2025-03-24T19:23:18+00:00 https://vulnerability.circl.lu/sighting/e790ed4e-2b88-4696-adde-2fcfe481ca15/export 2026-06-15T21:12:01.622625+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e790ed4e-2b88-4696-adde-2fcfe481ca15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21444", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8511", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21444\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers to decrypt encrypted messages or inject commands.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:07:37.368Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02", "creation_timestamp": "2025-03-24T19:23:19.000000Z"} 2025-03-24T19:23:19+00:00 https://vulnerability.circl.lu/sighting/291d643a-955e-4390-9b18-eb24b06499fe/export 2026-06-15T21:12:01.622519+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "291d643a-955e-4390-9b18-eb24b06499fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21445", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8512", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21445\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:07:12.378Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02", "creation_timestamp": "2025-03-24T19:23:23.000000Z"} 2025-03-24T19:23:23+00:00 https://vulnerability.circl.lu/sighting/7817ebe0-3a3e-48ab-9a20-4fd82793e887/export 2026-06-15T21:12:01.622387+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7817ebe0-3a3e-48ab-9a20-4fd82793e887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21446", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8514", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21446\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:06:38.099Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02", "creation_timestamp": "2025-03-24T19:23:25.000000Z"} 2025-03-24T19:23:25+00:00 https://vulnerability.circl.lu/sighting/e8061c4e-1543-48f0-88f4-142ccd75d6bd/export 2026-06-15T21:12:01.622224+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e8061c4e-1543-48f0-88f4-142ccd75d6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21447", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8515", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21447\n\ud83d\udd25 CVSS Score: 4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:06:04.276Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02", "creation_timestamp": "2025-03-24T19:23:26.000000Z"} 2025-03-24T19:23:26+00:00 https://vulnerability.circl.lu/sighting/595c25d8-3737-458e-9a94-e169a9ad8c59/export 2026-06-15T21:12:01.618763+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "595c25d8-3737-458e-9a94-e169a9ad8c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21448", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-21448\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Path traversal vulnerability in Samsung Cloud prior to version 5.3.0.32 allows attacker to access specific png file.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T19:05:34.603Z\n\ud83d\udd17 References:\n1. https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02", "creation_timestamp": "2025-03-24T19:23:27.000000Z"} 2025-03-24T19:23:27+00:00