https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 04 May 2026 16:49:51 +0000 https://vulnerability.circl.lu/sighting/e8a9373f-a166-40c4-abe9-18f358a0ea6a/export {"uuid": "e8a9373f-a166-40c4-abe9-18f358a0ea6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33983", "type": "seen", "source": "https://t.me/cibsecurity/64710", "content": "\u203c CVE-2023-33983 \u203c\n\nThe Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T22:27:15.000000Z"} {"uuid": "e8a9373f-a166-40c4-abe9-18f358a0ea6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33983", "type": "seen", "source": "https://t.me/cibsecurity/64710", "content": "\u203c CVE-2023-33983 \u203c\n\nThe Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T22:27:15.000000Z"} https://vulnerability.circl.lu/sighting/e8a9373f-a166-40c4-abe9-18f358a0ea6a/export Wed, 24 May 2023 22:27:15 +0000 https://vulnerability.circl.lu/sighting/97065dcf-be42-4e18-8e4e-c35844223433/export {"uuid": "97065dcf-be42-4e18-8e4e-c35844223433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33981", "type": "seen", "source": "https://t.me/cibsecurity/64713", "content": "\u203c CVE-2023-33981 \u203c\n\nBriar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need to be an exact duplicate of a legitimate message displayed alongside the spoofed one.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T22:27:18.000000Z"} {"uuid": "97065dcf-be42-4e18-8e4e-c35844223433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33981", "type": "seen", "source": "https://t.me/cibsecurity/64713", "content": "\u203c CVE-2023-33981 \u203c\n\nBriar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need to be an exact duplicate of a legitimate message displayed alongside the spoofed one.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T22:27:18.000000Z"} https://vulnerability.circl.lu/sighting/97065dcf-be42-4e18-8e4e-c35844223433/export Wed, 24 May 2023 22:27:18 +0000 https://vulnerability.circl.lu/sighting/6b5d85b1-9731-41da-85ee-2a673c812f47/export {"uuid": "6b5d85b1-9731-41da-85ee-2a673c812f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33982", "type": "seen", "source": "https://t.me/cibsecurity/64714", "content": "\u203c CVE-2023-33982 \u203c\n\nBramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts if they later compromise both accounts. NOTE: the eavesdropping is typically impractical because BHP runs over an encrypted session that uses the Tor hidden service protocol.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T22:27:19.000000Z"} {"uuid": "6b5d85b1-9731-41da-85ee-2a673c812f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33982", "type": "seen", "source": "https://t.me/cibsecurity/64714", "content": "\u203c CVE-2023-33982 \u203c\n\nBramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts if they later compromise both accounts. NOTE: the eavesdropping is typically impractical because BHP runs over an encrypted session that uses the Tor hidden service protocol.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T22:27:19.000000Z"} https://vulnerability.circl.lu/sighting/6b5d85b1-9731-41da-85ee-2a673c812f47/export Wed, 24 May 2023 22:27:19 +0000 https://vulnerability.circl.lu/sighting/5baf2cbb-5ac7-4150-851f-16a82afd4e27/export {"uuid": "5baf2cbb-5ac7-4150-851f-16a82afd4e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33980", "type": "seen", "source": "https://t.me/cibsecurity/64715", "content": "\u203c CVE-2023-33980 \u203c\n\nBramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) via a series of long messages to a contact.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T22:27:21.000000Z"} {"uuid": "5baf2cbb-5ac7-4150-851f-16a82afd4e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33980", "type": "seen", "source": "https://t.me/cibsecurity/64715", "content": "\u203c CVE-2023-33980 \u203c\n\nBramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) via a series of long messages to a contact.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T22:27:21.000000Z"} https://vulnerability.circl.lu/sighting/5baf2cbb-5ac7-4150-851f-16a82afd4e27/export Wed, 24 May 2023 22:27:21 +0000 https://vulnerability.circl.lu/sighting/f5ea1155-8dce-4349-a3a7-0fc81cf00c2c/export {"uuid": "f5ea1155-8dce-4349-a3a7-0fc81cf00c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3398", "type": "seen", "source": "https://t.me/cibsecurity/65504", "content": "\u203c CVE-2023-3398 \u203c\n\nDenial of Service in GitHub repository jgraph/drawio prior to 18.1.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T14:40:58.000000Z"} {"uuid": "f5ea1155-8dce-4349-a3a7-0fc81cf00c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3398", "type": "seen", "source": "https://t.me/cibsecurity/65504", "content": "\u203c CVE-2023-3398 \u203c\n\nDenial of Service in GitHub repository jgraph/drawio prior to 18.1.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T14:40:58.000000Z"} https://vulnerability.circl.lu/sighting/f5ea1155-8dce-4349-a3a7-0fc81cf00c2c/export Mon, 26 Jun 2023 14:40:58 +0000 https://vulnerability.circl.lu/sighting/d580be46-c854-430b-b8fb-7e09d7c6c8e0/export {"uuid": "d580be46-c854-430b-b8fb-7e09d7c6c8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33981", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1957", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33981\n\ud83d\udd39 Description: Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need to be an exact duplicate of a legitimate message displayed alongside the spoofed one.\n\ud83d\udccf Published: 2023-05-24T00:00:00\n\ud83d\udccf Modified: 2025-01-16T15:51:06.384Z\n\ud83d\udd17 References:\n1. https://briarproject.org/news/2023-three-security-issues-found-and-fixed/\n2. https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_YuanmingSong.pdf", "creation_timestamp": "2025-01-16T15:55:57.000000Z"} {"uuid": "d580be46-c854-430b-b8fb-7e09d7c6c8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33981", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1957", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33981\n\ud83d\udd39 Description: Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need to be an exact duplicate of a legitimate message displayed alongside the spoofed one.\n\ud83d\udccf Published: 2023-05-24T00:00:00\n\ud83d\udccf Modified: 2025-01-16T15:51:06.384Z\n\ud83d\udd17 References:\n1. https://briarproject.org/news/2023-three-security-issues-found-and-fixed/\n2. https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_YuanmingSong.pdf", "creation_timestamp": "2025-01-16T15:55:57.000000Z"} https://vulnerability.circl.lu/sighting/d580be46-c854-430b-b8fb-7e09d7c6c8e0/export Thu, 16 Jan 2025 15:55:57 +0000 https://vulnerability.circl.lu/sighting/995a0ada-43ef-4290-a190-314158cbcfe5/export {"uuid": "995a0ada-43ef-4290-a190-314158cbcfe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33982", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33982\n\ud83d\udd39 Description: Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts if they later compromise both accounts. NOTE: the eavesdropping is typically impractical because BHP runs over an encrypted session that uses the Tor hidden service protocol.\n\ud83d\udccf Published: 2023-05-24T00:00:00\n\ud83d\udccf Modified: 2025-01-16T15:48:49.894Z\n\ud83d\udd17 References:\n1. https://briarproject.org/news/2023-three-security-issues-found-and-fixed/\n2. https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_YuanmingSong.pdf", "creation_timestamp": "2025-01-16T15:55:58.000000Z"} {"uuid": "995a0ada-43ef-4290-a190-314158cbcfe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33982", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33982\n\ud83d\udd39 Description: Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts if they later compromise both accounts. NOTE: the eavesdropping is typically impractical because BHP runs over an encrypted session that uses the Tor hidden service protocol.\n\ud83d\udccf Published: 2023-05-24T00:00:00\n\ud83d\udccf Modified: 2025-01-16T15:48:49.894Z\n\ud83d\udd17 References:\n1. https://briarproject.org/news/2023-three-security-issues-found-and-fixed/\n2. https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_YuanmingSong.pdf", "creation_timestamp": "2025-01-16T15:55:58.000000Z"} https://vulnerability.circl.lu/sighting/995a0ada-43ef-4290-a190-314158cbcfe5/export Thu, 16 Jan 2025 15:55:58 +0000 https://vulnerability.circl.lu/sighting/9da4b8c2-e00c-44cd-8354-673f4b619944/export {"uuid": "9da4b8c2-e00c-44cd-8354-673f4b619944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33983", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1959", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33983\n\ud83d\udd39 Description: The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.\n\ud83d\udccf Published: 2023-05-24T00:00:00\n\ud83d\udccf Modified: 2025-01-16T15:47:45.687Z\n\ud83d\udd17 References:\n1. https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_YuanmingSong.pdf", "creation_timestamp": "2025-01-16T15:55:59.000000Z"} {"uuid": "9da4b8c2-e00c-44cd-8354-673f4b619944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33983", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1959", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33983\n\ud83d\udd39 Description: The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.\n\ud83d\udccf Published: 2023-05-24T00:00:00\n\ud83d\udccf Modified: 2025-01-16T15:47:45.687Z\n\ud83d\udd17 References:\n1. https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_YuanmingSong.pdf", "creation_timestamp": "2025-01-16T15:55:59.000000Z"} https://vulnerability.circl.lu/sighting/9da4b8c2-e00c-44cd-8354-673f4b619944/export Thu, 16 Jan 2025 15:55:59 +0000