{"vulnerability": "2023-08", "sightings": [{"uuid": "2a3a4db9-b304-486f-a864-f0292f1ca10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0872", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "4a687fff-7cb0-4dde-9adc-d084a7300362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0872", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:50.000000Z"}, {"uuid": "50f3c870-c430-47ba-9833-b9cc6f8e8372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0872", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}, {"uuid": "d35c7691-36d3-4040-a777-b60b467654af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0876", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qaz6qvt2g", "content": "", "creation_timestamp": "2025-09-17T21:02:39.724916Z"}, {"uuid": "36b77b04-6f30-468a-be60-ea2318a6e7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opennms_horizon_authenticated_rce.rb", "content": "", "creation_timestamp": "2024-03-20T20:10:21.000000Z"}, {"uuid": "996f6241-deb4-4172-91ef-dc4bc4eccd09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3933", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aAnalyzing and Reproducing the Command Injection Vulnerability (CVE-2023-0861) in NetModule Routers\nURL\uff1ahttps://github.com/seifallahhomrani1/CVE-2023-0861-POC\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-03-12T18:17:30.000000Z"}, {"uuid": "40e3785f-00a8-4db0-8150-b14333bac03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0820", "type": "seen", "source": "Telegram/6BhTuCXSE453Y5LgUPWYVG6ZJr9x2yg8Oqv7ebsm_pX-9UXi", "content": "", "creation_timestamp": "2025-02-14T21:09:17.000000Z"}, {"uuid": "af185b34-2461-4d82-947e-7dfc347c79c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0811", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2054", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0811\n\ud83d\udd39 Description: \nOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. \n\n\n\ud83d\udccf Published: 2023-03-16T17:41:25.525Z\n\ud83d\udccf Modified: 2025-01-16T21:42:32.824Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01\n2. https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf", "creation_timestamp": "2025-01-16T21:56:23.000000Z"}, {"uuid": "ad068db4-f3d4-4cac-b04d-28fe5948ec86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0863", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2576", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0863\n\ud83d\udd39 Description: Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.\n\n\n\ud83d\udccf Published: 2023-05-17T07:10:46.122Z\n\ud83d\udccf Modified: 2025-01-22T16:50:53.486Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=9AKK108468A1415&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-01-22T17:01:45.000000Z"}, {"uuid": "857d6308-8b35-4f1e-af66-ab29acef7195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0812", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3018", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0812\n\ud83d\udd39 Description: The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.\n\ud83d\udccf Published: 2023-05-15T12:15:39.193Z\n\ud83d\udccf Modified: 2025-01-24T20:59:04.022Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0ed5e1b3-f2a3-4eb1-b8ae-d3a62f600107", "creation_timestamp": "2025-01-24T21:05:08.000000Z"}, {"uuid": "252d2112-50eb-48ad-b365-eff29c91678e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0864", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2577", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0864\n\ud83d\udd39 Description: Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.\n\n\n\ud83d\udccf Published: 2023-05-17T07:15:52.371Z\n\ud83d\udccf Modified: 2025-01-22T16:50:21.453Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=9AKK108468A1415&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-01-22T17:01:49.000000Z"}, {"uuid": "391ba760-8465-43e1-8a89-cc726f08d22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0892", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0892\n\ud83d\udd39 Description: The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2023-05-15T12:15:34.079Z\n\ud83d\udccf Modified: 2025-01-24T20:41:27.162Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/54150be5-a53f-4b94-8ce5-04e073e3ab1f", "creation_timestamp": "2025-01-24T21:05:22.000000Z"}, {"uuid": "54669531-d7f0-476a-9ef8-3737102e0f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0845", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5909", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0845\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.\n\ud83d\udccf Published: 2023-03-09T15:14:26.581Z\n\ud83d\udccf Modified: 2025-02-28T16:24:23.430Z\n\ud83d\udd17 References:\n1. https://discuss.hashicorp.com/t/hcsec-2023-06-consul-server-panic-when-ingress-and-api-gateways-configured-with-peering-connections/51197\n2. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/", "creation_timestamp": "2025-02-28T16:26:52.000000Z"}, {"uuid": "de63983f-048b-4405-864f-861dacb8cc87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0888", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5731", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0888\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An authenticated user, having access to both the medical device WiFi network (such as a biomedical engineering staff member) and the specific B.Braun Battery Pack SP with WiFi web server credentials, could get administrative (root) access on the infusion pump communication module. This could be used as a vector to start further attacks\n\n\n\ud83d\udccf Published: 2023-03-13T08:14:32.358Z\n\ud83d\udccf Modified: 2025-02-27T18:17:42.996Z\n\ud83d\udd17 References:\n1. https://www.bbraun.com/productsecurity\n2. https://www.bbraunusa.com/productsecurity", "creation_timestamp": "2025-02-27T18:26:47.000000Z"}, {"uuid": "fa61df45-2ca7-42c5-a075-db313582ac9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0887", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7381", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0887\n\ud83d\udd25 CVSS Score: 7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability was found in phjounin TFTPD64-SE 4.64 and classified as critical. This issue affects some unknown processing of the file tftpd64_svc.exe. The manipulation leads to unquoted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The associated identifier of this vulnerability is VDB-221351.\n\ud83d\udccf Published: 2023-02-17T08:20:10.479Z\n\ud83d\udccf Modified: 2025-03-12T20:10:52.014Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.221351\n2. https://vuldb.com/?ctiid.221351", "creation_timestamp": "2025-03-12T20:42:45.000000Z"}, {"uuid": "3304b352-3040-428d-8674-014e32f3e89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0882", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7380", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0882\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse.\u00a0This issue affects Single Connect: 2.16.\n\ud83d\udccf Published: 2023-02-17T06:44:51.711Z\n\ud83d\udccf Modified: 2025-03-12T20:11:39.684Z\n\ud83d\udd17 References:\n1. https://docs.krontech.com/singleconnect-2-16/update-patch-rdp-proxy-idor-vulnerability\n2. https://www.usom.gov.tr/bildirim/tr-23-0092", "creation_timestamp": "2025-03-12T20:42:44.000000Z"}, {"uuid": "bfcc9af6-207c-4925-bea3-9447b5fe41e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0802", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8415", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0802\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T18:59:50.408Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00\n2. https://gitlab.com/libtiff/libtiff/-/issues/500\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0802.json\n4. https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html\n5. https://www.debian.org/security/2023/dsa-5361\n6. https://security.netapp.com/advisory/ntap-20230316-0002/\n7. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-03-21T19:19:47.000000Z"}, {"uuid": "18ff5c68-09a8-4489-b5cb-4c676de2d9b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0821", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7918", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0821\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.\n\ud83d\udccf Published: 2023-02-16T21:23:24.500Z\n\ud83d\udccf Modified: 2025-03-18T14:35:44.335Z\n\ud83d\udd17 References:\n1. https://discuss.hashicorp.com/t/hcsec-2023-05-nomad-client-vulnerable-to-decompression-bombs-in-artifact-block/50292", "creation_timestamp": "2025-03-18T14:50:09.000000Z"}, {"uuid": "c31d7fc2-d9e1-43ed-be8e-661c768e38e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0830", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0830\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2023-02-14T16:13:43.586Z\n\ud83d\udccf Modified: 2025-05-01T15:10:33.281Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.220950\n2. https://vuldb.com/?ctiid.220950\n3. https://vuldb.com/?submit.86683\n4. https://github.com/xbz0n/CVE-2023-0830\n5. https://www.exploit-db.com/exploits/51266", "creation_timestamp": "2025-05-01T15:15:20.000000Z"}, {"uuid": "ffc17f65-cf5f-4591-95eb-5b29b58bb4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0801", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8414", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0801\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T19:00:43.776Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00\n2. https://gitlab.com/libtiff/libtiff/-/issues/498\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0801.json\n4. https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html\n5. https://www.debian.org/security/2023/dsa-5361\n6. https://security.netapp.com/advisory/ntap-20230316-0002/\n7. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-03-21T19:19:46.000000Z"}, {"uuid": "1cbde3c5-1422-4d6f-bfd9-f7b1944449a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0800", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8413", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0800\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T19:01:06.503Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/496\n2. https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0800.json\n4. https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html\n5. https://www.debian.org/security/2023/dsa-5361\n6. https://security.netapp.com/advisory/ntap-20230316-0002/\n7. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-03-21T19:19:45.000000Z"}, {"uuid": "b9c15676-f12f-4e13-94be-cb5e6ecfd484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0803", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8417", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0803\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T18:55:10.527Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00\n2. https://gitlab.com/libtiff/libtiff/-/issues/501\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0803.json\n4. https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html\n5. https://www.debian.org/security/2023/dsa-5361\n6. https://security.netapp.com/advisory/ntap-20230316-0002/\n7. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-03-21T19:19:52.000000Z"}, {"uuid": "6ce81298-d1ea-47a2-8b57-fcfeb25b6c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0849", "type": "seen", "source": "https://t.me/ics_cert/713", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u0627\u0628\u0637 \u0648\u0628 \u0645\u06cc\u0627\u0646\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc Netgear N600 (WNDR3700) \u0628\u0647 \u0639\u062f\u0645 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u067e\u0627\u06a9\u0633\u0627\u0632\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc \u0645\u0631\u0628\u0648\u0637 \u0645\u06cc\u200c\u0634\u0648\u062f.  \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\n\n BDU: 00938-2023\n CVE-2023-0849\n\n \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627 \u0648 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647.\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0628\u0647 \u0631\u0627\u0628\u0637 \u0648\u0628 \u062f\u0633\u062a\u06af\u0627\u0647.\n\n \u0645\u0646\u0627\u0628\u0639 \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc:\n https://nvd.nist.gov/vuln/detail/CVE-2023-0849\n https://vuldb.com/?id.221152\n https://vuldb.com/?ctiid.221152\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2024-07-06T04:18:22.000000Z"}, {"uuid": "f53a5cac-8105-440b-83fa-2f446ba16b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0881", "type": "seen", "source": "https://t.me/cvedetector/21593", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-0881 - Linux Bluefield Kernel Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2023-0881 \nPublished : March 31, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T17:31:35.000000Z"}, {"uuid": "3d0e6bad-2df5-4eef-ac4a-cfa52ab85833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0871", "type": "seen", "source": "https://t.me/ctinow/130691", "content": "https://ift.tt/urVIYkE\nCyRC Vulnerability Advisory: CVE-2023-0871 Vulnerability in OpenNMS Horizon", "creation_timestamp": "2023-08-15T16:12:09.000000Z"}, {"uuid": "b26e6278-2637-4a74-87da-cb54dfbe441b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "published-proof-of-concept", "source": "Telegram/V7m6dyWJdYDSJe7SKroRfeJFuGytvG7wnZqZe-y0JOsicXA", "content": "", "creation_timestamp": "2023-03-20T18:22:35.000000Z"}, {"uuid": "4c2603fd-5ad1-406b-b196-af892d2a2fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0816", "type": "seen", "source": "Telegram/R97rn0W91PvxHS_GpXyydl6up8ZPjuPofIxnMgptdkrvUcbi", "content": "", "creation_timestamp": "2025-02-19T19:13:55.000000Z"}, {"uuid": "ea8f6922-cc37-48c0-b2ef-ba386017b6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0893", "type": "seen", "source": "Telegram/SVmavgpwbP8e-B0iCQ45EaZUofNOG4aH2Zp208rv6HN8hEDK", "content": "", "creation_timestamp": "2025-02-14T10:03:09.000000Z"}, {"uuid": "b69d144e-1103-47aa-aafb-2edcb0fcae7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0842", "type": "seen", "source": "Telegram/Sk-rz3HL0e0iLsp88vxWneGXLnADbwUq9-Ptbqm3yy-MkT5v", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"}, {"uuid": "185a9dfa-6fb3-48f2-bc03-4aa3bde71978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "seen", "source": "https://t.me/cibsecurity/72746", "content": "\u203c CVE-2023-46306 \u203c\n\nThe web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter. This occurs because another thread can be started before the trap that triggers the cleanup function. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. NOTE: this is different from CVE-2023-0861 and CVE-2023-0862, which were fixed in version 4.6.0.105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-23T00:39:04.000000Z"}, {"uuid": "0c53c0d5-fe21-4770-9a32-0c9a260493ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0862", "type": "seen", "source": "https://t.me/cibsecurity/72746", "content": "\u203c CVE-2023-46306 \u203c\n\nThe web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter. This occurs because another thread can be started before the trap that triggers the cleanup function. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. NOTE: this is different from CVE-2023-0861 and CVE-2023-0862, which were fixed in version 4.6.0.105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-23T00:39:04.000000Z"}, {"uuid": "03b2c96a-9834-495e-b947-8d0415126c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0820", "type": "seen", "source": "Telegram/5lhH-5rQ33PCqC-_LOIzDS3VcD4jfUph9S8u_kkMAPaG1Q", "content": "", "creation_timestamp": "2023-04-03T19:36:43.000000Z"}, {"uuid": "6943ec36-5f0d-4a55-bc60-6966756d0d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0872", "type": "published-proof-of-concept", "source": "https://t.me/arpsyndicate/4277", "content": "#ExploitObserverAlert\n\nMSF/exploit_linux/http/opennms_horizon_authenticated_rce\n\nDESCRIPTION: Exploit Observer has 12 entries in 4 file formats related to MSF/exploit_linux/http/opennms_horizon_authenticated_rce. This module exploits built-in functionality in OpenNMS Horizon in order to execute arbitrary commands as the opennms user. For versions 32.0.2 and higher, this module requires valid credentials for a user with ROLE_FILESYSTEM_EDITOR privileges and either ROLE_ADMIN or ROLE_REST. For versions 32.0.1 and lower, credentials are required for a user with ROLE_FILESYSTEM_EDITOR, ROLE_REST, and/or ROLE_ADMIN privileges. In that case, the module will automatically escalate privileges via CVE-2023-40315 or CVE-2023-0872 if necessary. This module has been successfully tested against OpenNMS version 31.0.7", "creation_timestamp": "2024-03-21T21:45:46.000000Z"}, {"uuid": "91708818-6238-4525-aa07-59b910c5f559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0846", "type": "seen", "source": "https://t.me/arpsyndicate/4414", "content": "#ExploitObserverAlert\n\nCVE-2023-0846\n\nDESCRIPTION: Exploit Observer has 7 entries in 3 file formats related to CVE-2023-0846. Unauthenticated, stored cross-site scripting in the display of alarm reduction keys\u00a0in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information.\u00a0Users should upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2024-04-09T20:21:31.000000Z"}, {"uuid": "fe8bbece-5f41-4fd4-a8aa-77e4958e6033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0880", "type": "seen", "source": "https://t.me/arpsyndicate/3033", "content": "#ExploitObserverAlert\n\nCVE-2023-0880\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2023-0880. Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11.\n\nFIRST-EPSS: 0.000510000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2024-01-26T18:25:17.000000Z"}, {"uuid": "bf021f18-ec59-4009-bfa5-c1206e04ec33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0896", "type": "published-proof-of-concept", "source": "https://t.me/RespaldoHackingTeam/1333", "content": "#exploit\n1. CVE-2022-28113:\nWiFi Travel Router exploit\nhttps://code-byter.com/2022/04/06/fantec-wifi.html\n\n2. CVE-2023-0896:\nLenovo Smart Clock Essential\u2019s SSH Hard-Coded Password Vulnerability\nhttps://securityonline.info/cve-2023-0896-lenovo-smart-clock-essentials-ssh-hard-coded-password-vulnerability\n\n3. Uncovering Security Vulnerabilities in Ray-Ban Camera Sunglasses\nhttps://code-byter.com/2023/04/16/rayban-hacking.html", "creation_timestamp": "2023-04-18T07:16:17.000000Z"}, {"uuid": "dcb7a7d8-5fb6-4a08-ab82-b17880897fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0809", "type": "seen", "source": "https://t.me/cibsecurity/71422", "content": "\u203c CVE-2023-0809 \u203c\n\nIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-02T22:40:34.000000Z"}, {"uuid": "514c2695-33db-4a9d-a16b-b930fa2a717b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0833", "type": "seen", "source": "https://t.me/cibsecurity/71095", "content": "\u203c CVE-2023-0833 \u203c\n\nA flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-27T18:45:57.000000Z"}, {"uuid": "5a870420-1d7a-4a6c-8847-55012800c55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0897", "type": "seen", "source": "https://t.me/cibsecurity/73005", "content": "\u203c CVE-2023-0897 \u203c\n\nSielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-27T00:18:01.000000Z"}, {"uuid": "b0f14355-3e7e-4cd4-9c11-33df01539d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0829", "type": "seen", "source": "https://t.me/cibsecurity/70799", "content": "\u203c CVE-2023-0829 \u203c\n\nPlesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting. A malicious subscription owner (either a customer or an additional user), can fully compromise the server if an administrator visits a certain page in Plesk related to the malicious subscription.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-02T11:02:45.000000Z"}, {"uuid": "0bd4206f-3261-43b1-96f9-046ddb4d6115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0813", "type": "seen", "source": "https://t.me/cibsecurity/70618", "content": "\u203c CVE-2023-0813 \u203c\n\nA flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-16T00:25:54.000000Z"}, {"uuid": "b7cdbd36-fcc6-4e08-a0b5-55371920172a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0824", "type": "seen", "source": "https://t.me/ctinow/171515", "content": "https://ift.tt/DYIBhCa\nCVE-2023-0824 Exploit", "creation_timestamp": "2024-01-22T23:16:37.000000Z"}, {"uuid": "ad2b8ac9-cda9-478d-a9bf-a298bc34969e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0824", "type": "seen", "source": "https://t.me/ctinow/168903", "content": "https://ift.tt/Y1Ke8kd\nCVE-2023-0824", "creation_timestamp": "2024-01-16T17:27:00.000000Z"}, {"uuid": "eab75e9b-5a50-4a73-92d8-cd5c0c9a810b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0872", "type": "seen", "source": "https://t.me/cibsecurity/68469", "content": "\u203c CVE-2023-0872 \u203c\n\nThe Horizon REST API includes a users endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to elevation of privilege.\u00c2\u00a0The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.OpenNMS thanks\u00c2\u00a0Erik Wynter for reporting this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T22:19:41.000000Z"}, {"uuid": "38a45055-a06e-4eb9-a896-93e2fa33dbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0871", "type": "seen", "source": "https://t.me/cibsecurity/68375", "content": "\u203c CVE-2023-0871 \u203c\n\nXXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms\u00c2\u00a0is vulnerable to XML external entity (XXE) injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services.\u00c2\u00a0The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-11T20:16:42.000000Z"}, {"uuid": "40496848-e795-420e-bb2a-4ec03fd92cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0838", "type": "seen", "source": "https://t.me/cibsecurity/66624", "content": "\u203c CVE-2023-2620 \u203c\n\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 16.1 prior to 16.1.1. A maintainer could modify a webhook URL to leak masked webhook secrets by manipulating other masked portions. This addresses an incomplete fix for CVE-2023-0838.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-13T07:45:24.000000Z"}, {"uuid": "3b54b9f3-ae6b-4faa-9ad0-4e92b2ab92c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0863", "type": "seen", "source": "https://t.me/cibsecurity/64303", "content": "\u203c CVE-2023-0863 \u203c\n\nImproper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T12:31:10.000000Z"}, {"uuid": "2056d646-354d-4020-b857-9dd645baac14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0864", "type": "seen", "source": "https://t.me/cibsecurity/64299", "content": "\u203c CVE-2023-0864 \u203c\n\nCleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wallbox (CE) (Terra AC MID), ABB Terra AC wallbox (CE) Terra AC Juno CE, ABB Terra AC wallbox (CE) Terra AC PTB, ABB Terra AC wallbox (CE) Symbiosis, ABB Terra AC wallbox (JP).This issue affects Terra AC wallbox (UL40/80A): from 1.0;0 through 1.5.5; Terra AC wallbox (UL32A) : from 1.0;0 through 1.6.5; Terra AC wallbox (CE) (Terra AC MID): from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC Juno CE: from 1.0;0 through 1.6.5; Terra AC wallbox (CE) Terra AC PTB : from 1.0;0 through 1.5.25; Terra AC wallbox (CE) Symbiosis: from 1.0;0 through 1.2.7; Terra AC wallbox (JP): from 1.0;0 through 1.6.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-17T12:31:05.000000Z"}, {"uuid": "dfad86bb-ff0e-4a56-af51-16aa8747a02a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0812", "type": "seen", "source": "https://t.me/cibsecurity/64136", "content": "\u203c CVE-2023-0812 \u203c\n\nThe Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:46:08.000000Z"}, {"uuid": "416ab091-9220-44fd-a6aa-0caef6e341d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0892", "type": "seen", "source": "https://t.me/cibsecurity/64115", "content": "\u203c CVE-2023-0892 \u203c\n\nThe BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:43:04.000000Z"}, {"uuid": "b43c3b39-a472-46dd-85c2-de3b9f2ee2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0857", "type": "seen", "source": "https://t.me/cibsecurity/63874", "content": "\u203c CVE-2023-0857 \u203c\n\nUnintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:18.000000Z"}, {"uuid": "fc3fc79c-96c1-47b2-8b8b-bf5d7d148cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0852", "type": "seen", "source": "https://t.me/cibsecurity/63882", "content": "\u203c CVE-2023-0852 \u203c\n\nBuffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:27.000000Z"}, {"uuid": "3ab2799f-a3b9-48d7-84c9-2e3bf6f5f8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0851", "type": "seen", "source": "https://t.me/cibsecurity/63884", "content": "\u203c CVE-2023-0851 \u203c\n\nBuffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:29.000000Z"}, {"uuid": "352b8bdc-cc3c-4072-98d1-decc0e4c8101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0859", "type": "seen", "source": "https://t.me/cibsecurity/63883", "content": "\u203c CVE-2023-0859 \u203c\n\nArbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:28.000000Z"}, {"uuid": "ef40410a-887e-4324-a941-5959bce785eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0854", "type": "seen", "source": "https://t.me/cibsecurity/63886", "content": "\u203c CVE-2023-0854 \u203c\n\nBuffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:31.000000Z"}, {"uuid": "086151c3-ae2f-4c2c-a275-dbabf5ffc59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0858", "type": "seen", "source": "https://t.me/cibsecurity/63879", "content": "\u203c CVE-2023-0858 \u203c\n\nImproper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:24.000000Z"}, {"uuid": "7a9e4c4a-3289-4e6b-96ac-cad7b6ea839b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0853", "type": "seen", "source": "https://t.me/cibsecurity/63881", "content": "\u203c CVE-2023-0853 \u203c\n\nBuffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:26.000000Z"}, {"uuid": "14e00987-a220-4536-ae3b-81d7702314d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0855", "type": "seen", "source": "https://t.me/cibsecurity/63877", "content": "\u203c CVE-2023-0855 \u203c\n\nBuffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:21.000000Z"}, {"uuid": "8ebfdd17-3e64-40cd-9c12-3c5ffdd66422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0856", "type": "seen", "source": "https://t.me/cibsecurity/63876", "content": "\u203c CVE-2023-0856 \u203c\n\nBuffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T16:15:20.000000Z"}, {"uuid": "88457703-2106-4d4a-b1e8-0ae8594c5a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0873", "type": "seen", "source": "https://t.me/cibsecurity/65572", "content": "\u203c CVE-2023-0873 \u203c\n\nThe Kanban Boards for WordPress plugin before 2.5.21 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-27T18:12:04.000000Z"}, {"uuid": "184038bf-48da-413b-8485-f288c8ea128d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0814", "type": "seen", "source": "https://t.me/cibsecurity/62962", "content": "\u203c CVE-2023-2297 \u203c\n\nThe Profile Builder \u00e2\u20ac\u201c User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function (wppb_front_end_password_recovery). The function uses the plaintext value of a password reset key instead of a hashed value which means it can easily be retrieved and subsequently used. An attacker can leverage CVE-2023-0814, or another vulnerability like SQL Injection in another plugin or theme installed on the site to successfully exploit this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T07:39:59.000000Z"}, {"uuid": "c8ca6864-bd65-4e14-bc03-e6f4c1a2c397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0834", "type": "seen", "source": "https://t.me/cibsecurity/63070", "content": "\u203c CVE-2023-0834 \u203c\n\nIncorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T18:27:35.000000Z"}, {"uuid": "d2ef9aba-87f0-4619-928b-e7b86a8b0e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0805", "type": "seen", "source": "https://t.me/cibsecurity/63261", "content": "\u203c CVE-2023-0805 \u203c\n\nAn issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to have access to the public projects of a public group even after being banned from the public group by the owner.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T02:36:24.000000Z"}, {"uuid": "fa2db2a1-bd62-471a-8580-da87e22af955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0899", "type": "seen", "source": "https://t.me/cibsecurity/62759", "content": "\u203c CVE-2023-0899 \u203c\n\nThe Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before outputting it back in the Shoutbox, leading to Stored Cross-Site Scripting which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T22:24:59.000000Z"}, {"uuid": "a4af0182-9b36-4692-9166-4e9b07892075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0889", "type": "seen", "source": "https://t.me/cibsecurity/62285", "content": "\u203c CVE-2023-0889 \u203c\n\nThemeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-17T16:41:59.000000Z"}, {"uuid": "6ddb56f3-9a57-4fc7-a3df-1835e9744ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0874", "type": "seen", "source": "https://t.me/cibsecurity/61749", "content": "\u203c CVE-2023-0874 \u203c\n\nThe Klaviyo WordPress plugin before 3.0.10 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:32:51.000000Z"}, {"uuid": "7ee1550f-4a54-4694-8a19-4d3687655bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0893", "type": "seen", "source": "https://t.me/cibsecurity/61769", "content": "\u203c CVE-2023-0893 \u203c\n\nThe Time Sheets WordPress plugin before 1.29.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:39:00.000000Z"}, {"uuid": "03e6eb9f-f2cd-430f-8978-92613079c8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0838", "type": "seen", "source": "https://t.me/cibsecurity/61511", "content": "\u203c CVE-2023-0838 \u203c\n\nAn issue has been discovered in GitLab affecting versions starting from 15.1 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. A maintainer could modify a webhook URL to leak masked webhook secrets by adding a new parameter to the url. This addresses an incomplete fix for CVE-2022-4342.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T00:26:37.000000Z"}, {"uuid": "9d3ef4b5-4c35-40f7-a8b3-25d24c94dec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0842", "type": "seen", "source": "https://t.me/cibsecurity/61517", "content": "\u203c CVE-2023-0842 \u203c\n\nxml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T00:26:46.000000Z"}, {"uuid": "39c1d3a6-1421-4caa-b89d-fa5e5d681091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0820", "type": "seen", "source": "https://t.me/cibsecurity/61329", "content": "\u203c CVE-2023-0820 \u203c\n\nThe User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-03T18:24:57.000000Z"}, {"uuid": "9ee28f13-d76a-4205-8140-a19566b6316f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0836", "type": "seen", "source": "https://t.me/cibsecurity/61145", "content": "\u203c CVE-2023-0836 \u203c\n\nAn information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-30T00:15:56.000000Z"}, {"uuid": "da3328fd-3c0b-4d62-b804-c507410ee4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0816", "type": "seen", "source": "https://t.me/cibsecurity/60808", "content": "\u203c CVE-2023-0816 \u203c\n\nThe Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:09.000000Z"}, {"uuid": "d26b7029-ca85-4e70-ad4e-8dfb0cfffbeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0823", "type": "seen", "source": "https://t.me/cibsecurity/60813", "content": "\u203c CVE-2023-0823 \u203c\n\nThe Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.4.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:14.000000Z"}, {"uuid": "7e27b32e-2271-448a-9c5a-7a9b82be2f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0890", "type": "seen", "source": "https://t.me/cibsecurity/60346", "content": "\u203c CVE-2023-0890 \u203c\n\nThe WordPress Shortcodes Plugin \u00e2\u20ac\u201d Shortcodes Ultimate WordPress plugin before 5.12.8 does not ensure that posts to be displayed via some shortcodes are already public and can be accessed by the user making the request, allowing any authenticated users such as subscriber to view draft, private or even password protected posts. It is also possible to leak the password of protected posts\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:36.000000Z"}, {"uuid": "54d54acb-9288-40fd-8f53-9cf87aa4d45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0875", "type": "seen", "source": "https://t.me/cibsecurity/60337", "content": "\u203c CVE-2023-0875 \u203c\n\nThe WP Meta SEO WordPress plugin before 4.5.3 does not properly sanitize and escape inputs into SQL queries, leading to a blind SQL Injection vulnerability that can be exploited by subscriber+ users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:24.000000Z"}, {"uuid": "b8c17cda-b743-45c6-bb27-745964367f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0865", "type": "seen", "source": "https://t.me/cibsecurity/60339", "content": "\u203c CVE-2023-0865 \u203c\n\nThe WooCommerce Multiple Customer Addresses & Shipping WordPress plugin before 21.7 does not ensure that the address to add/update/retrieve/delete and duplicate belong to the user making the request, or is from a high privilege users, allowing any authenticated users, such as subscriber to add/update/duplicate/delete as well as retrieve addresses of other users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:26.000000Z"}, {"uuid": "9ede4b97-9dfa-4b89-80db-772b68b9ebf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0811", "type": "seen", "source": "https://t.me/cibsecurity/60175", "content": "\u203c CVE-2023-0811 \u203c\n\nOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-16T21:30:51.000000Z"}, {"uuid": "2e0984f8-3ee1-4697-8c3c-1b7221130e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0876", "type": "seen", "source": "https://t.me/cibsecurity/60327", "content": "\u203c CVE-2023-0876 \u203c\n\nThe WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:14.000000Z"}, {"uuid": "57e7ac51-5281-4ee0-a975-f0f172827e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0845", "type": "seen", "source": "https://t.me/cibsecurity/59726", "content": "\u203c CVE-2023-0845 \u203c\n\nConsul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-14T23:56:29.000000Z"}, {"uuid": "9b6b0d5d-b626-46fc-91e1-2c90190b86e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0844", "type": "seen", "source": "https://t.me/cibsecurity/59913", "content": "\u203c CVE-2023-0844 \u203c\n\nThe Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T19:23:15.000000Z"}, {"uuid": "98553e18-ecc8-4a13-8477-f03b2d732b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0867", "type": "seen", "source": "https://t.me/cibsecurity/58788", "content": "\u203c CVE-2023-0867 \u203c\n\nMultiple stored and reflected cross-site scripting vulnerabilities in webapp jsp pages in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to confidential session information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:31.000000Z"}, {"uuid": "867dea19-44cc-4860-a4d6-6d242773e533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0885", "type": "seen", "source": "https://t.me/cibsecurity/58766", "content": "\u203c CVE-2023-0885 \u203c\n\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T02:28:58.000000Z"}, {"uuid": "35b4e5d9-89e9-4043-af1d-7088f64c2e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0815", "type": "seen", "source": "https://t.me/cibsecurity/58790", "content": "\u203c CVE-2023-0815 \u203c\n\nPotential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:33.000000Z"}, {"uuid": "1008bf59-657b-4d5f-9fe3-9713ac867deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0868", "type": "seen", "source": "https://t.me/cibsecurity/58781", "content": "\u203c CVE-2023-0868 \u203c\n\nReflected cross-site scripting in graph results in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to steal session cookies.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:20.000000Z"}, {"uuid": "3cb53add-e18a-462c-afba-c75fa29eee77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0869", "type": "seen", "source": "https://t.me/cibsecurity/58777", "content": "\u203c CVE-2023-0869 \u203c\n\nCross-site scripting in outage/list.htm in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential session information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:17.000000Z"}, {"uuid": "45494260-3563-427a-a187-4bfd4d9af022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0886", "type": "seen", "source": "https://t.me/cibsecurity/58745", "content": "\u203c CVE-2023-0886 \u203c\n\nA lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T02:23:42.000000Z"}, {"uuid": "b2737973-0e8e-4c2e-9722-b63982ff1e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0882", "type": "seen", "source": "https://t.me/cibsecurity/58423", "content": "\u203c CVE-2023-0882 \u203c\n\nImproper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse.This issue affects Single Connect: 2.16.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T12:13:03.000000Z"}, {"uuid": "3ef22559-97b6-4e61-83b8-1b871d6eb778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0895", "type": "seen", "source": "https://t.me/cibsecurity/58459", "content": "\u203c CVE-2023-0895 \u203c\n\nThe WP Coder \u00e2\u20ac\u201c add custom html, css and js code plugin for WordPress is vulnerable to time-based SQL Injection via the \u00e2\u20ac\u02dcid\u00e2\u20ac\u2122 parameter in versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with administrative privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T20:13:34.000000Z"}, {"uuid": "91c13f58-343a-4d30-8eab-30cc82795b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0821", "type": "seen", "source": "https://t.me/cibsecurity/58410", "content": "\u203c CVE-2023-0821 \u203c\n\nHashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T00:18:40.000000Z"}, {"uuid": "1cf215f7-da10-4a11-b0a0-08f59f41c174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0822", "type": "seen", "source": "https://t.me/cibsecurity/58445", "content": "\u203c CVE-2023-0822 \u203c\n\nThe affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T20:13:16.000000Z"}, {"uuid": "f7d5ab38-2177-413c-95aa-714ec46fd7c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0883", "type": "seen", "source": "https://t.me/cibsecurity/58425", "content": "\u203c CVE-2023-0883 \u203c\n\nA vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221350 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T12:13:05.000000Z"}, {"uuid": "2863e60f-4705-45ae-965b-7f9848316130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0810", "type": "seen", "source": "https://t.me/cibsecurity/58017", "content": "\u203c CVE-2023-0810 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-13T20:30:04.000000Z"}, {"uuid": "cd0333f9-7a00-45be-8faa-53b420580b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0860", "type": "seen", "source": "https://t.me/cibsecurity/58305", "content": "\u203c CVE-2023-0860 \u203c\n\nImproper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T12:37:13.000000Z"}, {"uuid": "ee69c42f-3c36-4220-8c97-07777096de99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0862", "type": "seen", "source": "https://t.me/cibsecurity/58308", "content": "\u203c CVE-2023-0862 \u203c\n\nThe NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103. The issue affects NSRW packaged by Phoenix Contact routers: from 4.6.72.0 before 4.6.72.101, from 4.6.73.0 before 4.6.73.101.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T12:37:16.000000Z"}, {"uuid": "7605941a-055e-4b57-965b-ea967cd0e6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "seen", "source": "https://t.me/cibsecurity/58306", "content": "\u203c CVE-2023-0861 \u203c\n\nNetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103. The issue affects NSRW packaged by Phoenix Contact routers: from 4.6.72.0 before 4.6.72.101, from 4.6.73.0 before 4.6.73.101.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T12:37:14.000000Z"}, {"uuid": "b9e8e649-5ee4-4e61-b036-3a1040b8c561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0849", "type": "seen", "source": "https://t.me/cibsecurity/58296", "content": "\u203c CVE-2023-0849 \u203c\n\nA vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221152.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T00:37:01.000000Z"}, {"uuid": "bdb1a437-4c55-40d4-b7cc-d87f5353f59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0850", "type": "seen", "source": "https://t.me/cibsecurity/58292", "content": "\u203c CVE-2023-0850 \u203c\n\nA vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component Web Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221153 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T00:36:55.000000Z"}, {"uuid": "246af265-efea-494f-91f9-3e8eb5ebb8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0830", "type": "seen", "source": "https://t.me/cibsecurity/58138", "content": "\u203c CVE-2023-0830 \u203c\n\nA vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. VDB-220950 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T20:41:10.000000Z"}, {"uuid": "56428126-d157-4aed-aaf7-73f9525960e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0848", "type": "seen", "source": "https://t.me/cibsecurity/58289", "content": "\u203c CVE-2023-0848 \u203c\n\nA vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the component Web Management Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221147.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T00:36:53.000000Z"}, {"uuid": "b7609097-d033-4e92-9c99-260cd232bf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0840", "type": "seen", "source": "https://t.me/cibsecurity/58231", "content": "\u203c CVE-2023-0840 \u203c\n\nA vulnerability classified as problematic was found in PHPCrazy 1.1.1. This vulnerability affects unknown code of the file admin/admin.php?action=users&mode=info&user=2. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221086 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T16:36:42.000000Z"}, {"uuid": "163d8eb0-d623-44aa-8718-b8cf45dec469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0818", "type": "seen", "source": "https://t.me/cibsecurity/58031", "content": "\u203c CVE-2023-0818 \u203c\n\nOff-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T00:30:00.000000Z"}, {"uuid": "d0450595-21ab-45d8-9aea-5912b9d5801b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0841", "type": "seen", "source": "https://t.me/cibsecurity/58221", "content": "\u203c CVE-2023-0841 \u203c\n\nA vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-18T00:55:21.000000Z"}, {"uuid": "0674e11a-c9cb-495d-a375-6529b7db7747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0827", "type": "seen", "source": "https://t.me/cibsecurity/58101", "content": "\u203c CVE-2023-0827 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T16:45:57.000000Z"}, {"uuid": "c9b9c883-9fe5-48ba-ada6-c7d2ba2faae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0814", "type": "seen", "source": "https://t.me/cibsecurity/58056", "content": "\u203c CVE-2023-0814 \u203c\n\nThe Profile Builder \u00e2\u20ac\u201c User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the [user_meta] shortcode in versions up to, and including 3.9.0. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account. This does require the Usermeta shortcode be enabled to be exploited.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T07:30:29.000000Z"}, {"uuid": "d2798667-88b7-43c9-9202-98611c61ff7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0819", "type": "seen", "source": "https://t.me/cibsecurity/58047", "content": "\u203c CVE-2023-0819 \u203c\n\nHeap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T00:30:25.000000Z"}, {"uuid": "93d08ce3-1819-4dc8-8a59-5cc0b0b656f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0817", "type": "seen", "source": "https://t.me/cibsecurity/58033", "content": "\u203c CVE-2023-0817 \u203c\n\nBuffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T00:30:02.000000Z"}, {"uuid": "86bf62e5-c179-4aa3-a720-abd60348eeb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0808", "type": "seen", "source": "https://t.me/cibsecurity/57994", "content": "\u203c CVE-2023-0808 \u203c\n\nA vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. Upgrading to version MW3_16U_5406_1.53 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-220769 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-13T14:29:39.000000Z"}, {"uuid": "4cd83fcb-126f-4645-83c4-797cd16659aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0830", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/15999", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0830*\nGithub: https://github.com/xbz0n/CVE-2023-0830", "creation_timestamp": "2026-07-31T00:00:36.266536Z"}, {"uuid": "c4be49ba-5a68-4577-bd4c-15d1dce7a696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7956", "content": "#exploit\n1. CVE-2022-22963:\nVulnerability in the Spring Cloud Function Framework for Java that allows RCE\nhttps://github.com/J0ey17/CVE-2022-22963_Reverse-Shell-Exploit\n\n2. CVE-2023-0861:\nCommand Injection Vulnerability  in NetModule Routers\nhttps://github.com/seifallahhomrani1/CVE-2023-0861-POC", "creation_timestamp": "2023-03-19T13:41:00.000000Z"}, {"uuid": "5c0c32b2-184a-4f54-ac81-16a478aad88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0896", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8135", "content": "#exploit\n1. CVE-2022-28113:\nWiFi Travel Router exploit\nhttps://code-byter.com/2022/04/06/fantec-wifi.html\n\n2. CVE-2023-0896:\nLenovo Smart Clock Essential\u2019s SSH Hard-Coded Password Vulnerability\nhttps://securityonline.info/cve-2023-0896-lenovo-smart-clock-essentials-ssh-hard-coded-password-vulnerability\n\n3. Uncovering Security Vulnerabilities in Ray-Ban Camera Sunglasses\nhttps://code-byter.com/2023/04/16/rayban-hacking.html", "creation_timestamp": "2023-04-17T20:05:05.000000Z"}, {"uuid": "36e56c90-6883-400f-a169-f4804b742462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/7914", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0861-POC*\nGithub: https://github.com/seifallahhomrani1/CVE-2023-0861-POC", "creation_timestamp": "2026-07-31T17:00:04.545034Z"}, {"uuid": "a2b3b78f-0ef5-4674-badc-3c7c64bdb768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/7914", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0861-POC*\nGithub: https://github.com/seifallahhomrani1/CVE-2023-0861-POC", "creation_timestamp": "2026-08-01T00:00:27.256791Z"}, {"uuid": "2ebc7608-627e-498a-a37b-89284acfd6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0830", "type": "seen", "source": "https://t.me/CVEhub/15999", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0830*\nGithub: https://github.com/xbz0n/CVE-2023-0830", "creation_timestamp": "2026-07-29T12:00:19.417569Z"}, {"uuid": "cbc47e62-5ec7-49b4-8640-90226e27263a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "seen", "source": "https://t.me/CVEhub/7914", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0861-POC*\nGithub: https://github.com/seifallahhomrani1/CVE-2023-0861-POC", "creation_timestamp": "2026-07-29T12:00:49.867722Z"}, {"uuid": "fcb5fdf9-1a70-4d0c-af9c-cb54f341e974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0830", "type": "seen", "source": "https://t.me/CVEhub/15999", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0830*\nGithub: https://github.com/xbz0n/CVE-2023-0830", "creation_timestamp": "2026-07-30T00:00:39.720919Z"}, {"uuid": "2e3a42da-e049-4c36-b900-a3b8400cf805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0861", "type": "seen", "source": "https://t.me/CVEhub/7914", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-0861-POC*\nGithub: https://github.com/seifallahhomrani1/CVE-2023-0861-POC", "creation_timestamp": "2026-07-30T00:01:21.786679Z"}, {"uuid": "4c0f106c-c366-41f9-9bd5-306a5dabc1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/opennms_horizon_authenticated_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Erik Wynter\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits built-in functionality in OpenNMS\\n          Horizon in order to execute arbitrary commands as the\\n          opennms user. For versions 32.0.2 and higher, this\\n          module requires valid credentials for a user with\\n          ROLE_FILESYSTEM_EDITOR privileges and either\\n          ROLE_ADMIN or ROLE_REST.\\n\\n          For versions 32.0.1 and lower, credentials are\\n          required for a user with ROLE_FILESYSTEM_EDITOR,\\n          ROLE_REST, and/or ROLE_ADMIN privileges. In that case,\\n          the module will automatically escalate privileges via\\n          CVE-2023-40315 or CVE-2023-0872 if necessary.\\n\\n          This module has been successfully tested against OpenNMS\\n          version 31.0.7\", \"disclosure_date\": \"2023-07-01\", \"fullname\": \"exploit/linux/http/opennms_horizon_authenticated_rce\", \"is_install_path\": true, \"mod_time\": \"2025-06-21 20:37:33 +0000\", \"name\": \"OpenNMS Horizon Authenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/opennms_horizon_authenticated_rce.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/opennms_horizon_authenticated_rce\", \"references\": [\"CVE-2023-40315\", \"CVE-2023-0872\"], \"rport\": 8980, \"session_types\": false, \"targets\": [\"Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:49.549840Z"}]}