{"vulnerability": "cve-2023-4565", "sightings": [{"uuid": "5bc912ca-ba26-4b54-ba0f-1235927adcf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45657", "type": "seen", "source": "https://t.me/arpsyndicate/900", "content": "#ExploitObserverAlert\n\nCVE-2023-45657\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-45657. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.\n\nFIRST-EPSS: 0.000760000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-03T00:10:43.000000Z"}, {"uuid": "0aebc135-527c-456f-accf-07e0b78089dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45659", "type": "seen", "source": "https://t.me/arpsyndicate/2651", "content": "#ExploitObserverAlert\n\nCVE-2023-45659\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-45659. Engelsystem is a shift planning system for chaos events.  If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixed in the commit `dbb089315ff3d`. Users are advised to update their installations. There are no known workarounds for this vulnerability.\n\nFIRST-EPSS: 0.000430000\nNVD-IS: 1.4\nNVD-ES: 1.3", "creation_timestamp": "2024-01-08T15:08:23.000000Z"}, {"uuid": "fe52d909-adac-49bc-9ce5-d4199c423b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45659", "type": "seen", "source": "https://t.me/cibsecurity/72409", "content": "\u203c CVE-2023-45659 \u203c\n\nEngelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixed in the commit `dbb089315ff3d`. Users are advised to update their installations. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T07:32:48.000000Z"}]}