Sponsor of the Day:
Jerkmate
https://blog.sorcery.ie/posts/simpleimportproduct_sqli/
SQLi in SimpleImportProduct Prestashop Module CVE-2023-39675 - Sorcery Blog
prestashop modulecve 2023sorcery blogsqli
https://www.herodevs.com/vulnerability-directory/cve-2023-25194
Vulnerability Directory | CVE-2023-25194 | Spring | HeroDevs
Apache Kafka kafka-clients used in Kafka Connect is affected by a high-severity remote code execution vulnerability (CVE-2023-25194) that allows authenticated...
vulnerability directory cvespring herodevs2023
https://www.ox.security/blog/3-years-later-cve-2023-38646-still-haunts-thousands-of-metabase-deployments/
Metabase CVE-2023-38646 Still Exposes Thousands of Servers
Three years later, CVE-2023-38646 still exposes thousands of Metabase servers to unauthenticated RCE and full system compromise.
cve 2023metabasestillexposesthousands
https://joshua.hu/nagios-hacking-cve-2023-37154
Nagios Plugins: Hacking Monitored Servers with check_by_ssh and Argument Injection: CVE-2023-37154...
Sep 5, 2023 - Turning Nagios from monitoring into a pivot: abusing check_by_ssh argument injection for RCE, bypassing SSH wrappers, and discussing CVE-2023-37154 and related...
nagios pluginsinjection cvehackingmonitoredservers
https://bugzilla.suse.com/show_bug.cgi?id=1206867
1206867 – (CVE-2023-0051) VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub...
heap based buffercve 2023vul 10051vim
https://www.openoffice.org/security/cves/CVE-2023-1183.html
CVE-2023-1183
cve 20231183
https://explore.alas.aws.amazon.com/CVE-2023-52926.html
CVE-2023-52926
cve 2023
https://cve.circl.lu/vuln/CVE-2023-3316
CVE-2023-3316 - Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
cve 2023vulnerability lookup3316
https://www.herodevs.com/vulnerability-directory/cve-2023-20862
Vulnerability Directory | CVE-2023-20862 | Spring | HeroDevs
Patch CVE-2023-20862 immediately to secure your systems from critical vulnerabilities. Protect your applications and prevent exploits with the latest updates...
vulnerability directory cvespring herodevs2023
https://cve.circl.lu/cve/CVE-2023-0288
CVE-2023-0288 - Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
cve 2023 0288vulnerability lookup
https://www.twingate.com/blog/tips/CVE-2023-46748
CVE-2023-46748 Report - Details, Severity, & Advisories | Twingate
We will discuss what is CVE-2023-46748, if you are affected by it, what to do if you're affected by it, and more!
cve 2023report detailsseverityadvisoriestwingate
https://www.postgresql.org/support/security/CVE-2023-5868/
PostgreSQL: CVE-2023-5868: Memory disclosure in aggregate function calls
postgresql cve 2023memory disclosureaggregate function5868calls
https://curl.se/docs/CVE-2023-27537.html
curl - HSTS double free - CVE-2023-27537
curl hstsdouble freecve 2023
https://explore.alas.aws.amazon.com/CVE-2023-38403.html
CVE-2023-38403
cve 2023
https://seclists.org/oss-sec/2023/q1/110
oss-sec: Re: Re: double-free vulnerability in OpenSSH server 9.1 (CVE-2023-25136)
oss secdouble freeopenssh server9 1cve 2023
https://explore.alas.aws.amazon.com/CVE-2023-2156.html
CVE-2023-2156
cve 20232156
https://www.suse.com/security/cve/CVE-2023-0045.html
CVE-2023-0045 Common Vulnerabilities and Exposures | SUSE
Secure your Linux systems from CVE-2023-0045. Stay ahead of potential threats with the latest security updates from SUSE.
cve 2023common vulnerabilitiesexposures suse0045
https://www.tp-link.com/us/support/faq/3643/
Statement on Archer AX21 Remote Code Execution Vulnerability(CVE-2023-1389) | TP-Link
Statement on Archer AX21 Remote Code Execution Vulnerability(CVE-2023-1389)
remote code executionarcher ax21vulnerability cvestatement2023
https://www.postgresql.org/support/security/CVE-2023-5869/
PostgreSQL: CVE-2023-5869: Buffer overrun from integer overflow in array modification
postgresql cve 2023integer overflow5869bufferoverrun
https://nvd.nist.gov/vuln/detail/CVE-2023-20592
NVD - CVE-2023-20592
nvd cve 2023
https://www.postgresql.org/support/security/CVE-2023-5870/
PostgreSQL: CVE-2023-5870: Role "pg_signal_backend" can signal certain superuser processes
postgresql cve 20235870rolepgsignal
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2023-0394
2162120 – (CVE-2023-0394) CVE-2023-0394 kernel: NULL pointer dereference in...
cve 2023 0394kernel null pointerdereference
https://cve.circl.lu/vuln/CVE-2023-27931
CVE-2023-27931 - Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
cve 2023vulnerability lookup
https://docs.keeper.io/en/release-notes/keeper-security/security-advisories/cve-2023-36266
CVE-2023-36266 | Release Notes | Keeper Documentation
Response to CVE-2023-36266
cve 2023release noteskeeper documentation
https://security.archlinux.org/CVE-2023-23454
CVE-2023-23454 - linux-zen linux-hardened linux linux-lts - Arch Linux
linux zen hardenedcve 2023lts arch
https://www.herodevs.com/vulnerability-directory/cve-2023-32559
Vulnerability Directory | CVE-2023-32559 | Node.js | HeroDevs
vulnerability directory cvenode js herodevs2023
https://alephsecurity.com/vulns/aleph-2023000
[CVE-2023-24500] Attacker within WiFi range can install arbitrary firmware over the air on...
Attacker within WiFi range can install arbitrary firmware over the air on unconfigured units
cve 202324500attackerwithinwifi
https://www.securitynewspaper.com/2023/10/16/ciscos-ticking-time-bomb-cve-2023-20198-with-cvss-score-10-hits-cisco-devices/
Cisco’s Ticking Time Bomb: CVE-2023-20198 with CVSS Score 10 Hits Cisco Devices – Information...
ticking time bombcve 2023cvss scorecisco devices10
https://detection.fyi/tags/cve.2023-21746/
cve.2023-21746 | Detection.FYI
cve 2023detection fyi
https://explore.alas.aws.amazon.com/CVE-2023-52628.html
CVE-2023-52628
cve 2023
https://curl.se/docs/CVE-2023-27534.html
curl - SFTP path ~ resolving discrepancy - CVE-2023-27534
cve 2023curlsftppathresolving
https://curl.se/docs/CVE-2023-27538.html
curl - SSH connection too eager reuse still - CVE-2023-27538
ssh connectioncve 2023curleagerreuse
https://www.herodevs.com/vulnerability-directory/cve-2023-30589
Vulnerability Directory | CVE-2023-30589 | Node.js | HeroDevs
Node.js versions 4.0 to 16.20.1 are vulnerable to HTTP Request Smuggling. This issue allows attackers to exploit the HTTP request parsing. Affected package:...
vulnerability directory cvenode js herodevs2023
https://curl.se/docs/CVE-2023-46219.html
curl - HSTS long filename clears contents - CVE-2023-46219
curl hstscve 2023longfilenameclears
https://www.ipa.go.jp/security/security-alert/2024/0417-jre.html
Oracle Java の脆弱性対策について(CVE-2023-41993等) | 情報セキュリティ | IPA 独立行政法人 情報処理推進機構
情報処理推進機構(IPA)の「Oracle Java の脆弱性対策について(CVE-2023-41993等)」に関する情報です。
oracle javacve 2023ipa
https://curl.se/docs/CVE-2023-27533.html
curl - TELNET option IAC injection - CVE-2023-27533
injection cvecurltelnetoptioniac
https://detection.fyi/sigmahq/sigma/emerging-threats/2023/exploits/cve-2023-36884/proxy_exploit_cve_2023_36884_office_windows_html_rce/
Potential CVE-2023-36884 Exploitation Pattern | Detection.FYI
Detects a unique pattern seen being used by RomCom potentially exploiting CVE-2023-36884
pattern detection fyipotential cve2023exploitation
https://security-tracker.debian.org/tracker/CVE-2023-52892
CVE-2023-52892
cve 2023
https://www.postgresql.org/support/security/CVE-2023-2454/
PostgreSQL: CVE-2023-2454: CREATE SCHEMA ... schema_element defeats protective search_path changes
postgresql cve 2023create schemasearch path2454element
https://curl.se/docs/CVE-2023-28322.html
curl - more POST-after-PUT confusion - CVE-2023-28322
cve 2023curlpostputconfusion
https://explore.alas.aws.amazon.com/CVE-2023-54272.html
CVE-2023-54272
cve 2023
https://security.archlinux.org/CVE-2023-0394
CVE-2023-0394 - linux-zen linux-hardened linux linux-lts - Arch Linux
cve 2023 0394linux zen hardenedlts arch
https://curl.se/docs/CVE-2023-28321.html
curl - IDN wildcard match - CVE-2023-28321
cve 2023curlidnwildcardmatch
https://www.herodevs.com/vulnerability-directory/cve-2023-49735
Vulnerability Directory | CVE-2023-49735 | Struts | HeroDevs
Patch CVE-2023-49735 immediately to secure your systems from critical vulnerabilities. Protect your applications and prevent exploits with the latest updates...
vulnerability directory cvestruts herodevs2023
https://curl.se/docs/CVE-2023-32001.html
curl - fopen race condition - CVE-2023-32001
race conditioncve 2023curlfopen
https://curl.se/docs/CVE-2023-38546.html
curl - cookie injection with none file - CVE-2023-38546
curl cookiecve 2023injectionnonefile
https://cve.circl.lu/vuln/CVE-2023-23538
CVE-2023-23538 - Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
cve 2023vulnerability lookup
https://nvd.nist.gov/vuln/detail/CVE-2023-20027
NVD - CVE-2023-20027
nvd cve 2023
https://security.archlinux.org/CVE-2023-0433
CVE-2023-0433 - vim - Arch Linux
vim arch linuxcve 20230433
https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit
ShadowRay (CVE-2023-48022) - exploit - vsociety
cve 2023exploit
https://curl.se/docs/CVE-2023-38039.html
curl - HTTP headers eat all memory - CVE-2023-38039
curl httpcve 2023headerseatmemory
https://detection.fyi/sigmahq/sigma/emerging-threats/2023/exploits/cve-2023-38831/file_event_win_exploit_cve_2023_38331_winrar_susp_double_ext/
CVE-2023-38331 Exploitation Attempt - Suspicious Double Extension File | Detection.FYI
Detects the creation of a file with a double extension and a space by WinRAR. This could be a sign of exploitation of CVE-2023-38331
cve 2023exploitation attemptdetection fyisuspiciousdouble
https://www.postgresql.org/support/security/CVE-2023-39417/
PostgreSQL: CVE-2023-39417: Extension script @substitutions@ within quoting allow SQL injection
postgresql cve 2023extensionscriptsubstitutionswithin
https://securelist.com/windows-clfs-exploits-ransomware-cve-2023-23376/111593/
Windows CLFS and five exploits used by ransomware operators (Exploit #4 – CVE-2023-23376) |...
Dec 21, 2023 - This is part five of our study about the Common Log File System (CLFS) and five vulnerabilities in this Windows OS component that have been used in ransomware...
ransomware operators exploitcve 2023windowsclfsfive
https://detection.fyi/sigmahq/sigma/emerging-threats/2023/exploits/cve-2023-46747/web_cve_2023_46747_f5_remote_code_execution/
CVE-2023-46747 Exploitation Activity - Webserver | Detection.FYI
Detects exploitation activity of CVE-2023-46747 an unauthenticated remote code execution vulnerability in F5 BIG-IP.
cve 2023detection fyiexploitationactivitywebserver
https://cve.circl.lu/cve/CVE-2023-0054
CVE-2023-0054 - Vulnerability-Lookup
Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.
cve 2023vulnerability lookup0054
https://ubuntu.com/security/CVE-2023-0394
CVE-2023-0394 | Ubuntu
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
cve 2023 0394ubuntu
https://www.haproxy.com/blog/december-2023-cve-2023-45539-haproxy-accepts-as-part-of-the-uri-component-fixed
CVE-2023-45539 HAProxy Accepts # as Part of the URI Component Fixed
Jan 16, 2024 - We have received questions regarding CVE-2023-45539 issued in November 2023. The versions of our products released on Monday, 21 August 2023 to fix...
cve 2023haproxyacceptsparturi
https://explore.alas.aws.amazon.com/CVE-2023-48231.html
CVE-2023-48231
cve 2023
https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
HAProxy is not affected by the HTTP/2 Rapid Reset Attack (CVE-2023-44487)
Jan 20, 2026 - HAProxy products are unaffected by CVE-2023-44487, which could allow a DoS attack against web servers, reverse proxies, and more. Stay tuned for updates.
http 2 rapidreset attackcve 2023haproxyaffected
https://nvd.nist.gov/vuln/detail/CVE-2023-44183
NVD - CVE-2023-44183
nvd cve 2023
https://blog.sorcery.ie/tags/cve-2023-39675/
CVE-2023-39675 - Sorcery Blog
cve 2023sorcery blog
https://krebsonsecurity.com/tag/cve-2023-31096/
CVE-2023-31096 – Krebs on Security
cve 2023krebssecurity
https://security.archlinux.org/CVE-2023-25012
CVE-2023-25012 - linux-zen linux-hardened linux linux-lts - Arch Linux
linux zen hardenedcve 2023lts arch
https://liveoverflow.com/webp-cve-2023-4863/
Huffman Table Overflow Visualized (CVE-2023-4863)
May 13, 2024 - Checkout my videos on the webp vulnerability: * https://www.youtube.com/watch?v=lAyhKaclsPM * https://www.youtube.com/watch?v=PJLWlmp8CDM The huffman table...
cve 2023huffmantableoverflowvisualized
https://detection.fyi/sigmahq/sigma/emerging-threats/2023/exploits/cve-2023-36874/file_event_win_exploit_cve_2023_36874_wermgr_creation/
Potential CVE-2023-36874 Exploitation - Fake Wermgr.Exe Creation | Detection.FYI
Detects the creation of a file named
creation detection fyipotential cve2023exploitationfake
https://www.herodevs.com/vulnerability-directory/cve-2023-46809
Vulnerability Directory | CVE-2023-46809 | Node.js | HeroDevs
Node.js versions 4.0 to 18.19.1 are vulnerable to a timing channel attack. This issue allows attackers to exploit RSA decryption vulnerabilities. Affected...
vulnerability directory cvenode js herodevs2023
https://blog.rust-lang.org/2023/08/03/cve-2023-38497/
Security advisory for Cargo (CVE-2023-38497) | Rust Blog
Empowering everyone to build reliable and efficient software.
security advisorycargo cverust blog2023
https://www.postgresql.org/support/security/CVE-2023-2455/
PostgreSQL: CVE-2023-2455: Row security policies disregard user ID changes after inlining
postgresql cve 2023security policiesuser id2455row
https://www.herodevs.com/vulnerability-directory/cve-2023-20863
Vulnerability Directory | CVE-2023-20863 | Spring | HeroDevs
Protect your systems from CVE-2023-20863 with HeroDevs’ Never-Ending Support. Stay secure, compliant, and up-to-date—get support today!
vulnerability directory cvespring herodevs2023
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2023-0288
890746 – (CVE-2023-0288, CVE-2023-0433) app-editors/vim-9.0.1403: huntr.dev input fuzzing bugs
cve 2023 0288app editors viminput fuzzing
https://security.archlinux.org/CVE-2023-0122
CVE-2023-0122 - linux-zen linux-hardened linux linux-lts - Arch Linux
linux zen hardenedcve 2023lts arch0122
https://www.herodevs.com/vulnerability-directory/cve-2023-26118
Vulnerability Directory | CVE-2023-26118 | AngularJS | HeroDevs
vulnerability directory cveangularjs herodevs2023
https://curl.se/docs/CVE-2023-27536.html
curl - GSS delegation too eager connection reuse - CVE-2023-27536
connection reuse cvecurlgssdelegationeager
https://security.archlinux.org/CVE-2023-0049
CVE-2023-0049 - vim - Arch Linux
vim arch linuxcve 20230049
https://www.suse.com/security/cve/CVE-2023-2156.html
CVE-2023-2156 Common Vulnerabilities and Exposures | SUSE
Secure your Linux systems from CVE-2023-2156. Stay ahead of potential threats with the latest security updates from SUSE.
cve 2023common vulnerabilitiesexposures suse2156
https://bugzilla.redhat.com/show_bug.cgi?id=2231017
2231017 – (CVE-2023-38592) CVE-2023-38592 webkitgtk: Processing web content may lead to arbitrary...
cve 2023web contentmay leadwebkitgtkprocessing
https://www.openwall.com/lists/oss-security/2023/01/18/1
oss-security - Re: CVE-2023-0122: Linux kernel: Pre-Auth Remote DoS in NVMe
oss securitycve 2023linux kernelpre auth0122
https://sekurak.pl/masz-stary-router-tp-link-botnet-mirai-aktywnie-wykorzystuje-luke-cve-2023-33538-do-przejecia-kontroli-nad-urzadzeniami/
Masz stary router TP-Link? Botnet Mirai aktywnie wykorzystuje lukę CVE-2023-33538 do przejęcia...
Apr 23, 2026 - Badacze bezpieczeństwa z Unit42 alarmują o trwającej kampanii wymierzonej w posiadaczy starszych routerów TP-Link. Na celowniku są modele, które nie są już...
router tpcve 2023maszstarybotnet
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2023-0433
890746 – (CVE-2023-0288, CVE-2023-0433) app-editors/vim-9.0.1403: huntr.dev input fuzzing bugs
cve 2023 0288app editors viminput fuzzing
https://explore.alas.aws.amazon.com/CVE-2023-54032.html
CVE-2023-54032
cve 2023
https://explore.alas.aws.amazon.com/CVE-2023-53610.html
CVE-2023-53610
cve 2023
https://detection.fyi/sigmahq/sigma/emerging-threats/2023/exploits/cve-2023-34362-moveit-transfer-exploit/web_cve_2023_34362_known_payload_request.yml/
MOVEit CVE-2023-34362 Exploitation Attempt - Potential Web Shell Request | Detection.FYI
Detects get requests to specific files used during the exploitation of MOVEit CVE-2023-34362
cve 2023exploitation attemptweb shelldetection fyimoveit
https://securityaffairs.com/191040/hacking/cve-2023-33538-under-attack-for-a-year-but-exploitation-still-unsuccessful.html
CVE-2023-33538 under attack for a year, but exploitation still unsuccessful
Apr 20, 2026 - Hackers have targeted CVE-2023-33538 flaw in old TP-Link routers for a year, but no successful exploitation has been seen so far.
cve 202333538attackyearexploitation
https://detection.fyi/sigmahq/sigma/emerging-threats/2023/exploits/cve-2023-1389/proxy_exploit_cve_2023_1389_unauth_command_injection_tplink_archer_ax21/
CVE-2023-1389 Potential Exploitation Attempt - Unauthenticated Command Injection In TP-Link Archer...
Detects potential exploitation attempt of CVE-2023-1389 an Unauthenticated Command Injection in TP-Link Archer AX21.
cve 2023exploitation attemptcommand injection1389potential
https://www.helpnetsecurity.com/2023/05/10/cve-2023-29324/
Easily bypassed patch makes zero-click Outlook flaw exploitable again (CVE-2023-29324) - Help Net...
Among the vulnerabilities fixed by Microsoft on May 2023 Patch Tuesday is CVE-2023-29324, a bug in the Windows MSHTML Platform.
patch makescve 2023easilybypassedzero
https://www.herodevs.com/vulnerability-directory/cve-2023-34040
Vulnerability Directory | CVE-2023-34040 | Spring | HeroDevs
Patch CVE-2023-34040 immediately to secure your systems from critical vulnerabilities. Protect your applications and prevent exploits with the latest updates...
vulnerability directory cvespring herodevs2023
https://www.socinvestigation.com/cve-2023-21554-hunt-for-msmq-queuejumper-in-the-environment/
CVE-2023-21554 – Hunt For MSMQ QueueJumper In The Environment - Security Investigation
Apr 13, 2023 - Check Point Research recently discovered three vulnerabilities in the Microsoft Message Queuing service commonly known as MSMQ. These vulnerabilities were...
cve 2023environment securityhuntmsmqinvestigation
https://www.herodevs.com/vulnerability-directory/cve-2023-34036
Vulnerability Directory | CVE-2023-34036 | Spring | HeroDevs
Learn about a Spring HATEOAS vulnerability that can leak internal host information or facilitate cache poisoning via malicious forwarded headers, plus fixes...
vulnerability directory cvespring herodevs2023
https://security.archlinux.org/CVE-2023-0288
CVE-2023-0288 - vim - Arch Linux
cve 2023 0288vim arch linux
https://www.haproxy.com/blog/august-2023-cve-2023-40225-empty-content-length-header-vulnerability-fixed
August 2023 - CVE-2023-40225: Empty content-length header vulnerability fixed
Sep 10, 2024 - HAProxy Technologies released new versions of its products to fix the vulnerability CVE-2023-40225. Learn more here.
august 2023content lengthvulnerability fixedcve40225