{"vulnerability": "2023-09", "sightings": [{"uuid": "11e1679e-32fb-4557-acef-a284d819a730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0916", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51281", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "a3b94f6c-7286-497c-928d-1239faebe266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0902", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51287", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "31b12182-c400-4f77-ab25-fad8b7c2a8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0938", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51288", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "f8f4c752-269f-4d0f-84db-ebfd032ad7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0943", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51280", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "36779c46-f9ae-4482-8785-b16d167a9578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0902", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51292", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "b55496a2-d4da-4fc6-b3a7-63cbae0a29ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0904", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51286", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "bc7f9613-4f9e-4c1b-ba5e-c54ccd7d9859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0905", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51285", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "f0601dcf-3c01-4883-b0bc-ab25ef5fc496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0962", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51291", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "cb5b6f47-dd8d-469f-be79-4f2a6b234d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0961", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51290", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "ca4778e2-a8e0-467b-97ae-572f5737209e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0963", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51289", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "9d2b47c1-48f3-41fd-bb61-a4da5cc8b1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0913", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51283", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "f6459d13-b68e-4b91-94f7-c3c0a49f904b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0912", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51282", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "8cbfcd54-394f-4008-9c04-b4483cbcf130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0915", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51284", "content": "", "creation_timestamp": "2023-04-06T00:00:00.000000Z"}, {"uuid": "48b28746-698d-4db4-afeb-db03f7694177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0954", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/224", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0954\n\ud83d\udd39 Description: A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack.\n\ud83d\udccf Published: 2023-06-08T20:05:20.697Z\n\ud83d\udccf Modified: 2025-01-06T20:20:50.514Z\n\ud83d\udd17 References:\n1. https://www.johnsoncontrols.com/cyber-solutions/security-advisories\n2. https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-02", "creation_timestamp": "2025-01-06T20:49:51.000000Z"}, {"uuid": "85e99863-b0ba-470e-890c-3d9a23049260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0976", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/249", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0976\n\ud83d\udd39 Description: \nA command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/\u00a0folder. The malicious file is executed by running the TA deployment feature located in the System Tree. \n\n\n\ud83d\udccf Published: 2023-06-07T07:35:57.484Z\n\ud83d\udccf Modified: 2025-01-06T21:05:23.765Z\n\ud83d\udd17 References:\n1. https://kcm.trellix.com/corporate/index?page=content&id=SB10398", "creation_timestamp": "2025-01-06T21:37:46.000000Z"}, {"uuid": "46a26ca0-5a1a-442a-97f9-361a44baf17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0921", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0921\n\ud83d\udd39 Description: A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.\n\ud83d\udccf Published: 2023-06-06T00:00:00\n\ud83d\udccf Modified: 2025-01-07T21:51:37.372Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/392433\n2. https://hackerone.com/reports/1869839\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0921.json", "creation_timestamp": "2025-01-07T22:38:05.000000Z"}, {"uuid": "39c44629-022b-44f3-84d7-c9d790501e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0937", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5386", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0937\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers\n\ud83d\udccf Published: 2023-03-20T15:52:18.503Z\n\ud83d\udccf Modified: 2025-02-25T21:17:38.359Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5110ff02-c721-43eb-b13e-50aca25e1162", "creation_timestamp": "2025-02-25T21:27:47.000000Z"}, {"uuid": "be5f48e1-220b-4eac-8533-4a7e664a5d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0940", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0940\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones.\n\ud83d\udccf Published: 2023-03-20T15:52:16.823Z\n\ud83d\udccf Modified: 2025-02-26T19:05:40.403Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/56744f72-2d48-4f42-8195-24b4dd951bb5", "creation_timestamp": "2025-02-26T19:24:11.000000Z"}, {"uuid": "10681a04-955e-44be-b222-649654134326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0978", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5756", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0978\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nA command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack\n\n\n\ud83d\udccf Published: 2023-03-13T13:29:32.271Z\n\ud83d\udccf Modified: 2025-02-27T19:15:59.531Z\n\ud83d\udd17 References:\n1. https://kcm.trellix.com/corporate/index?page=content&id=SB10397", "creation_timestamp": "2025-02-27T19:25:55.000000Z"}, {"uuid": "f522f2ce-1881-4990-a265-e7e9ba39b324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0918", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7920", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0918\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221494 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2023-02-19T08:19:27.685Z\n\ud83d\udccf Modified: 2025-03-18T15:41:46.796Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.221494\n2. https://vuldb.com/?ctiid.221494\n3. https://blog.0xgabe.com/?p=71", "creation_timestamp": "2025-03-18T15:49:57.000000Z"}, {"uuid": "57eea2eb-91ab-4de5-b80c-d982a578440e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0926", "type": "seen", "source": "https://t.me/cvedetector/4048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-0926 - WordPress Custom Permalinks Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-0926 \nPublished : Aug. 24, 2024, 2:15 a.m. | 24\u00a0minutes ago \nDescription : The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping on tag names. This allows authenticated users, with editor-level permissions or greater to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page, even when 'unfiltered_html' has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-24T04:50:21.000000Z"}, {"uuid": "ea632074-87f0-4795-9fd3-3e6ee60501c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0922", "type": "seen", "source": "Telegram/OV7uW8ZjUFkmIzESbVQZFNyMVUdBruVf7OY1jAy84hC-kCit", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"}, {"uuid": "8c64016a-cc15-4242-a16b-3dd51f2baf1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0922", "type": "seen", "source": "Telegram/EEc6QwaIXkDfJISUMSXQ3lC444cMSM0h193akoonPjLdlchd", "content": "", "creation_timestamp": "2025-02-14T10:06:10.000000Z"}, {"uuid": "deb76480-67f7-4706-9863-e6f268ea5da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0944", "type": "seen", "source": "Telegram/nlkqkBLwRbGhOW97RbK4xP-pvnoUE6zKsiWANVMMFYGGsvtg", "content": "", "creation_timestamp": "2025-02-14T10:09:22.000000Z"}, {"uuid": "c0604ac6-1563-4c70-8a51-3daf848a92a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0967", "type": "seen", "source": "Telegram/2-YU90Wv5YWshlruW1kNzRO2RablTkmy7UBF5dCX03CHAuP2", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"}, {"uuid": "3bbb5f9e-8854-4e9b-96fd-e430ec6d6bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0959", "type": "seen", "source": "Telegram/qt5pNLZnlXO2TAs-200UdBk1eZdn6_aaU3LM14eZkr3PzHgF", "content": "", "creation_timestamp": "2025-02-14T10:09:22.000000Z"}, {"uuid": "50542e57-8a62-4de6-90d7-63490e2d5146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0977", "type": "seen", "source": "Telegram/ucZ2DKqaebb7TxXUn7ot_bmS-qiVivH-dnfbJ24bZ_VYmA", "content": "", "creation_timestamp": "2023-04-03T22:18:53.000000Z"}, {"uuid": "8bffc118-d92e-4e79-8d79-e1261352efac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0975", "type": "seen", "source": "Telegram/xhUzYQFt-0josje-OkWB5gCBwKolJ2zJVI3BDWM5RBxtGw", "content": "", "creation_timestamp": "2023-04-03T22:18:46.000000Z"}, {"uuid": "c299922b-78cb-4468-aa71-e0a3beadf8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0913", "type": "seen", "source": "https://t.me/arpsyndicate/1608", "content": "#ExploitObserverAlert\n\nCVE-2023-0913\n\nDESCRIPTION: Exploit Observer has 4 entries related to CVE-2023-0913. A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sell_vehicle. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221482 is the identifier assigned to this vulnerability.\n\nFIRST-EPSS: 0.000630000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-10T11:40:48.000000Z"}, {"uuid": "ae63f6f0-b840-4515-a9ef-f632cfdd4460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0989", "type": "seen", "source": "https://t.me/cibsecurity/71257", "content": "\u203c CVE-2023-0989 \u203c\n\nAn information disclosure issue in GitLab CE/EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows an attacker to extract non-protected CI/CD variables by tricking a user to visit a fork with a malicious CI/CD configuration.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T12:37:35.000000Z"}, {"uuid": "531135f3-891c-44eb-8fea-3b6fb3451171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0923", "type": "seen", "source": "https://t.me/cibsecurity/70613", "content": "\u203c CVE-2023-0923 \u203c\n\nA flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API. This flaw can lead to file content exposure and other issues.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-16T00:25:47.000000Z"}, {"uuid": "2379045b-2ea6-47ee-86e9-fbcfa61e27a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0925", "type": "seen", "source": "https://t.me/cibsecurity/70028", "content": "\u203c CVE-2023-0925 \u203c\n\nVersion 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by default) and two RMI interfaces (listening on a single, dynamically assigned TCP high port).Port 2099 serves as a Java Remote Method Invocation (RMI) registry which allows for remotely loading and processing data via RMI interfaces. An unauthenticated attacker with network connectivity to the RMI registry and RMI interface ports can abuse this functionality to instruct the webMethods OneData application to load a malicious serialized Java object as a parameter to one of the available Java methods presented by the RMI interface. Once deserialized on the vulnerable server, the malicious code runs as whichever operating system account is used to run the software, which in most cases is the local System account on Windows.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T22:18:10.000000Z"}, {"uuid": "17733071-432d-4943-bbd9-b7ffe408881a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0956", "type": "seen", "source": "https://t.me/cibsecurity/67718", "content": "\u203c CVE-2023-0956 \u203c\n\nExternal input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-03T22:40:10.000000Z"}, {"uuid": "aaec5f90-c02c-4416-bfad-183a786dd153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0958", "type": "seen", "source": "https://t.me/cibsecurity/67370", "content": "\u203c CVE-2023-0958 \u203c\n\nSeveral plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-28T12:29:34.000000Z"}, {"uuid": "fbdf2ab3-7169-42a2-87ed-e5d024728af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0921", "type": "seen", "source": "https://t.me/cibsecurity/65013", "content": "\u203c CVE-2023-0921 \u203c\n\nA lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-06T20:29:25.000000Z"}, {"uuid": "80a51f5e-1f64-48ff-9683-5cc7b6c05b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0965", "type": "seen", "source": "https://t.me/cibsecurity/64425", "content": "\u203c CVE-2023-0965 \u203c\n\nCompiler removal of buffer clearing in sli_cryptoacc_transparent_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T22:32:36.000000Z"}, {"uuid": "11d9fa0f-5312-4910-9a07-40856ea267c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0969", "type": "seen", "source": "https://t.me/cibsecurity/65404", "content": "\u203c CVE-2023-0969 \u203c\n\nA vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-22T00:42:43.000000Z"}, {"uuid": "dc323f7d-cac8-4157-bd91-11cb4ac62c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0971", "type": "seen", "source": "https://t.me/cibsecurity/65401", "content": "\u203c CVE-2023-0971 \u203c\n\nA logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-22T00:39:41.000000Z"}, {"uuid": "3a6ac964-5db9-44fb-b96f-6627cb0dc7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0970", "type": "seen", "source": "https://t.me/cibsecurity/65400", "content": "\u203c CVE-2023-0970 \u203c\n\nMultiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-22T00:39:40.000000Z"}, {"uuid": "e09ffd0b-6dbb-4076-95b2-bf01c333ccb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0972", "type": "seen", "source": "https://t.me/cibsecurity/65397", "content": "\u203c CVE-2023-0972 \u203c\n\nDescription: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-22T00:26:28.000000Z"}, {"uuid": "6591caf6-74d5-4595-86e8-ca75d67d6c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0944", "type": "seen", "source": "https://t.me/cibsecurity/61514", "content": "\u203c CVE-2023-0944 \u203c\n\nBhima version 1.27.0 allows an authenticated attacker with regular user permissions to update arbitrary user session data such as username, email and password. This is possible because the application is vulnerable to IDOR, it does not correctly validate user permissions with respect to certain actions that can be performed by the user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T00:26:43.000000Z"}, {"uuid": "278095cb-1765-4271-8968-3dcd1888a86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0967", "type": "seen", "source": "https://t.me/cibsecurity/61510", "content": "\u203c CVE-2023-0967 \u203c\n\nBhima version 1.27.0 allows an attacker authenticated with normal user permissions to view sensitive data of other application users and data that should only be viewed by the administrator. This is possible because the application is vulnerable to IDOR, it does not properly validate user permissions with respect to certain actions the user can perform.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T00:26:36.000000Z"}, {"uuid": "7faa60f4-6ac1-45f8-a1cc-f2f3f3a77f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0947", "type": "seen", "source": "https://t.me/cibsecurity/58677", "content": "\u203c CVE-2023-0947 \u203c\n\nPath Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-22T07:17:10.000000Z"}, {"uuid": "1dc49484-f28d-4a5d-9c1b-67df8916b0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0955", "type": "seen", "source": "https://t.me/cibsecurity/60805", "content": "\u203c CVE-2023-0955 \u203c\n\nThe WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manage_options capability (admin+), however the plugin has a settings to allow low privilege users to access it as well.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:06.000000Z"}, {"uuid": "a51cdebe-4477-4303-aa0d-05404f8772a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0940", "type": "seen", "source": "https://t.me/cibsecurity/60332", "content": "\u203c CVE-2023-0940 \u203c\n\nThe ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:19.000000Z"}, {"uuid": "38acee19-fad2-40b1-8164-f8d526e04918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0937", "type": "seen", "source": "https://t.me/cibsecurity/60331", "content": "\u203c CVE-2023-0937 \u203c\n\nThe VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:18.000000Z"}, {"uuid": "ab361fda-e446-4b05-970a-331475381b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0911", "type": "seen", "source": "https://t.me/cibsecurity/60343", "content": "\u203c CVE-2023-0911 \u203c\n\nThe WordPress Shortcodes Plugin \u00e2\u20ac\u201d Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user shortcode, allowing any authenticated users such as subscriber to retrieve arbitrary user meta (except the user_pass), such as the user email and activation key by default.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T21:04:33.000000Z"}, {"uuid": "9e410025-bb0e-4c1c-8734-f02679df4ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0973", "type": "seen", "source": "https://t.me/cibsecurity/59930", "content": "\u203c CVE-2023-0973 \u203c\n\nSTEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T21:53:31.000000Z"}, {"uuid": "9624d18f-2b70-4e62-b344-591b00f34bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0978", "type": "seen", "source": "https://t.me/cibsecurity/59897", "content": "\u203c CVE-2023-0978 \u203c\n\nA command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T17:23:25.000000Z"}, {"uuid": "405fa7ad-cba6-4e09-bd8c-8d25061c1d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0979", "type": "seen", "source": "https://t.me/cibsecurity/59487", "content": "\u203c CVE-2023-0979 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData Informatics MedDataPACS.This issue affects MedDataPACS : before 2023-03-03.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-06T18:12:50.000000Z"}, {"uuid": "47493788-5012-4ca0-90e5-b240cf186a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0922", "type": "seen", "source": "https://t.me/cibsecurity/61361", "content": "\u203c CVE-2023-0922 \u203c\n\nThe Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-04T02:25:04.000000Z"}, {"uuid": "55b3901e-9191-4e31-b6f6-ff15bdbafde4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0968", "type": "seen", "source": "https://t.me/cibsecurity/59404", "content": "\u203c CVE-2023-0968 \u203c\n\nThe Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u00e2\u20ac\u02dcdn\u00e2\u20ac\u2122, 'email', 'points', and 'date' parameters in versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-04T00:35:27.000000Z"}, {"uuid": "ba0d9939-b375-4503-baf8-fd6b98027dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0952", "type": "seen", "source": "https://t.me/cibsecurity/59199", "content": "\u203c CVE-2023-0952 \u203c\n\nImproper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an authenticated user to access sensitive data without proper authorization.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T12:39:24.000000Z"}, {"uuid": "b34db713-0829-43f8-b7d1-d4fbf6c5b285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0975", "type": "seen", "source": "https://t.me/cibsecurity/61340", "content": "\u203c CVE-2023-0975 \u203c\n\nA vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to replace one of the Agent\u00e2\u20ac\u2122s executables before it can be executed. This allows the user to elevate their permissions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-03T20:30:16.000000Z"}, {"uuid": "62872fff-318d-4af9-8af3-611512e8715f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0977", "type": "seen", "source": "https://t.me/cibsecurity/61339", "content": "\u203c CVE-2023-0977 \u203c\n\nA heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T17:20:39.000000Z"}, {"uuid": "ced24550-ea32-430e-a4f9-31517ec27617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0960", "type": "seen", "source": "https://t.me/cibsecurity/58697", "content": "\u203c CVE-2023-0960 \u203c\n\nA vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config.ftp.php of the component Picture Management. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-221630 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-22T20:17:44.000000Z"}, {"uuid": "8ac9af16-de72-4100-97e3-c82825d9dc48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0945", "type": "seen", "source": "https://t.me/cibsecurity/58648", "content": "\u203c CVE-2023-0945 \u203c\n\nA vulnerability, which was classified as problematic, was found in SourceCodester Best POS Management System 1.0. Affected is an unknown function of the file index.php?page=add-category. The manipulation of the argument Name with the input \"> leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221592.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-22T00:47:07.000000Z"}, {"uuid": "f7be3c5b-9bde-46bf-9ad5-d743a07f47df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0919", "type": "seen", "source": "https://t.me/cibsecurity/58509", "content": "\u203c CVE-2023-0919 \u203c\n\nMissing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-19T18:15:03.000000Z"}, {"uuid": "211bf8d1-554b-4ac8-a3d2-ea7cede208f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0918", "type": "seen", "source": "https://t.me/cibsecurity/58508", "content": "\u203c CVE-2023-0918 \u203c\n\nA vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221494 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-19T12:14:51.000000Z"}, {"uuid": "403d961e-d2e7-4748-aa31-fea66506a294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0917", "type": "seen", "source": "https://t.me/cibsecurity/58507", "content": "\u203c CVE-2023-0917 \u203c\n\nA vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221493 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-19T12:14:50.000000Z"}, {"uuid": "9aeae29a-d66f-4e95-9d4f-3a20bcdc90e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0916", "type": "seen", "source": "https://t.me/cibsecurity/58506", "content": "\u203c CVE-2023-0916 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221491.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-19T12:14:50.000000Z"}, {"uuid": "821e3a26-ed84-43f9-b584-8aa3a4d93883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0901", "type": "seen", "source": "https://t.me/cibsecurity/58503", "content": "\u203c CVE-2023-0901 \u203c\n\nExposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-18T07:13:45.000000Z"}, {"uuid": "6bf9a610-9e71-477c-b614-f1fc4816857f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0998", "type": "seen", "source": "https://t.me/cibsecurity/58854", "content": "\u203c CVE-2023-0998 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221733 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T12:49:15.000000Z"}, {"uuid": "444aebbd-97e5-4c16-bba5-820bae682a7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0995", "type": "seen", "source": "https://t.me/cibsecurity/58844", "content": "\u203c CVE-2023-0995 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T07:18:53.000000Z"}, {"uuid": "8306be62-42bc-420b-9801-f9c3d2d33749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0997", "type": "seen", "source": "https://t.me/cibsecurity/58851", "content": "\u203c CVE-2023-0997 \u203c\n\nA vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221732.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T12:49:09.000000Z"}, {"uuid": "4072cac3-2e20-436d-922c-d121a6c185cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0999", "type": "seen", "source": "https://t.me/cibsecurity/58849", "content": "\u203c CVE-2023-0999 \u203c\n\nA vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerability affects unknown code of the file admin/?page=user/list. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221734 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T12:49:07.000000Z"}, {"uuid": "d5574230-9b90-4410-9d97-b4273cf451c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0996", "type": "seen", "source": "https://t.me/cibsecurity/58847", "content": "\u203c CVE-2023-0996 \u203c\n\nThere is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T07:18:59.000000Z"}, {"uuid": "67a93271-aa34-4d2a-bdc2-4329d9d9fbcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0994", "type": "seen", "source": "https://t.me/cibsecurity/58846", "content": "\u203c CVE-2023-0994 \u203c\n\nImproper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T07:18:55.000000Z"}, {"uuid": "d9ee8e06-3fd2-473d-ba48-58140edb0f0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0943", "type": "seen", "source": "https://t.me/cibsecurity/58636", "content": "\u203c CVE-2023-0943 \u203c\n\nA vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects some unknown processing of the file index.php?page=site_settings of the component Image Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221591.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T22:16:49.000000Z"}, {"uuid": "6916f9a1-66e8-4dec-92c4-9f67bb466283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0931", "type": "seen", "source": "https://t.me/cibsecurity/58707", "content": "\u203c CVE-2023-0931 \u203c\n\nUse after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T00:52:05.000000Z"}, {"uuid": "a6d34946-48f7-4ba9-9a2a-03aa11715be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0987", "type": "seen", "source": "https://t.me/cibsecurity/58783", "content": "\u203c CVE-2023-0987 \u203c\n\nA vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221680.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:26.000000Z"}, {"uuid": "b4c40e3c-b43d-4b6d-95dd-e4de9e79dd40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0986", "type": "seen", "source": "https://t.me/cibsecurity/58778", "content": "\u203c CVE-2023-0986 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/?page=user/manage_user of the component Edit User. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-221679.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:18.000000Z"}, {"uuid": "acd78911-179a-418a-bace-5c1d76563e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0988", "type": "seen", "source": "https://t.me/cibsecurity/58787", "content": "\u203c CVE-2023-0988 \u203c\n\nA vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=save_user. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221681 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:29.000000Z"}, {"uuid": "3dc6e962-6e4e-4d3c-a303-3f760da0e6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0962", "type": "seen", "source": "https://t.me/cibsecurity/58711", "content": "\u203c CVE-2023-0962 \u203c\n\nA vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file Master.php of the component GET Request Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221632.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T00:52:10.000000Z"}, {"uuid": "84d1a318-01ef-4fac-85bc-cf030d2fcd9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0961", "type": "seen", "source": "https://t.me/cibsecurity/58710", "content": "\u203c CVE-2023-0961 \u203c\n\nA vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. This affects an unknown part of the file view_music_details.php of the component GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221631.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T00:52:09.000000Z"}, {"uuid": "032b098d-ba36-4019-bdb3-d1901f62ac1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0964", "type": "seen", "source": "https://t.me/cibsecurity/58708", "content": "\u203c CVE-2023-0964 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. Affected is an unknown function of the file admin/products/view_product.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-221634 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T00:52:06.000000Z"}, {"uuid": "3df4571c-bfae-4112-8153-dcaf69f5df39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0939", "type": "seen", "source": "https://t.me/cibsecurity/58772", "content": "\u203c CVE-2023-0939 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies Online Services Software allows SQL Injection.This issue affects Online Services Software: before 1.17.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T12:18:13.000000Z"}, {"uuid": "9fb88f46-40e8-4f89-b272-c65a81066396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0933", "type": "seen", "source": "https://t.me/cibsecurity/58704", "content": "\u203c CVE-2023-0933 \u203c\n\nInteger overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T00:52:02.000000Z"}, {"uuid": "597bcd90-7ed5-4541-a0d5-3760b9b19efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0946", "type": "seen", "source": "https://t.me/cibsecurity/58641", "content": "\u203c CVE-2023-0946 \u203c\n\nA vulnerability has been found in SourceCodester Best POS Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file billing/index.php?id=9. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-221593 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-22T00:46:58.000000Z"}, {"uuid": "8bb236b8-976b-4977-9c8b-c82bf6385ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0942", "type": "seen", "source": "https://t.me/cibsecurity/58638", "content": "\u203c CVE-2023-0942 \u203c\n\nThe Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u00e2\u20ac\u02dctab\u00e2\u20ac\u2122 parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T22:16:51.000000Z"}, {"uuid": "bbc3a827-838c-4143-84ad-8b3e4a1ed913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0934", "type": "seen", "source": "https://t.me/cibsecurity/58607", "content": "\u203c CVE-2023-0934 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T18:16:47.000000Z"}, {"uuid": "582a7baf-cb91-4e16-b233-f28e415c883d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0938", "type": "seen", "source": "https://t.me/cibsecurity/58570", "content": "\u203c CVE-2023-0938 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file music_list.php of the component GET Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221553 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:42.000000Z"}, {"uuid": "08004352-9feb-45b3-a8df-3a9ec199b07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0915", "type": "seen", "source": "https://t.me/cibsecurity/58505", "content": "\u203c CVE-2023-0915 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manage_user. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221490 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-19T12:14:49.000000Z"}, {"uuid": "d6da5973-6b32-4b67-8891-a0f86d5095a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0914", "type": "seen", "source": "https://t.me/cibsecurity/58504", "content": "\u203c CVE-2023-0914 \u203c\n\nImproper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-19T07:14:40.000000Z"}, {"uuid": "97cb8c12-b03e-4a14-af27-8e5a1c3fccdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0902", "type": "seen", "source": "https://t.me/hacking_Attack/91843", "content": "Exploit Collector\nSimple Food Ordering System 1.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nSimple Food Ordering System version 1.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | d45b72ba3cbe274c827044256c4b4168a57d0681e2452019badcd0d14e196de2\n\nDownload\n# Simple Food Ordering System - Authenticated Reflected Cross Site Scripting\n\n### Date: \n> 17 February 2023\n\n### CVE Assigned:\n**[CVE-2023-0902](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0902)** [mitre.org](https://www.cve.org/CVERecord?id=CVE-2023-0902) [nvd.nist.org](https://nvd.nist.gov/vuln/detail/CVE-2023-0902)\n\n### Author Email: \n> navaidnasari@hotmail.co.uk\n\n### Vendor Homepage:\n> https://www.sourcecodester.com\n\n### Software Link:\n> [Simple Food Ordering System](https://www.sourcecodester.com/php/15418/simple-food-ordering-system-client-side-phpmysqli-free-source-code.html)\n\n### Version:\n> v 1.0\n\n### What is Reflected Cross-Site Scripting:\n> Reflected cross-site scripting (XSS) is a type of web vulnerability that occurs when a web application fails to properly sanitize user input, allowing an attacker to inject malicious code into the application's response to a user's request. When the user's browser receives the response, the malicious code is executed, potentially allowing the attacker to steal sensitive information or take control of the user's account.\n\n### Affected Page: \n> Vulnerable Page: process_order.php\n\n> In this page order parameter is vulnerable to Reflected Cross Site Scripting Attack\n\n### Description:\n> The Reflected XSS found in order parameter of process_order.php page. Authenticated Reflected Cross-Site Scripting (XSS) is a serious vulnerability that can have a significant impact on the security of a web application and its users. The risk of Authenticated Reflected XSS is similar to that of Reflected XSS, but with the added danger that the attacker must first gain access to a valid user account in order to exploit the vulnerability. The main risk associated with Authenticated Reflected XSS is that it can allow an attacker to steal sensitive information or take control of a user's account on a web application. This can include login credentials, financial information, personal information, and more. Once an attacker gains access to a user's account, they can perform any actions that the user is authorized to do. In addition, Authenticated Reflected XSS can also be used as a stepping stone to launch more advanced attacks, such as phishing attacks, malware distribution, or distributed denial-of-service attacks. By gaining control of a user's account on a web application, an attacker can use that account as a launching point for further attacks against the user or the web application itself.\n\n### Proof of Concept:\n> Initially, I tried to verify the XSS attack, I used standard XSS payload and the Below Image confirmed that, the parameter is vulnerable to reflected XSS.\n\n> Payload: process_order.php?order=\n\n>  ![image](https://user-images.githubusercontent.com/123810418/219717379-d085a7ec-29d4-4d2c-ba19-69e5011891e8.png)\n\n### Recommendation: \n> Whoever uses this CMS, should update line no 41 of process_order.php with the following code to avoid cross-site scripting attack:\n```\nOld Code: ", "creation_timestamp": "2026-09-01T20:01:04.216063Z"}, {"uuid": "cf9ac63a-a67a-4c20-bf73-1f7e06059d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0902", "type": "seen", "source": "https://t.me/hacking_Attack/91843", "content": "Exploit Collector\nSimple Food Ordering System 1.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nSimple Food Ordering System version 1.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | d45b72ba3cbe274c827044256c4b4168a57d0681e2452019badcd0d14e196de2\n\nDownload\n# Simple Food Ordering System - Authenticated Reflected Cross Site Scripting\n\n### Date: \n> 17 February 2023\n\n### CVE Assigned:\n**[CVE-2023-0902](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0902)** [mitre.org](https://www.cve.org/CVERecord?id=CVE-2023-0902) [nvd.nist.org](https://nvd.nist.gov/vuln/detail/CVE-2023-0902)\n\n### Author Email: \n> navaidnasari@hotmail.co.uk\n\n### Vendor Homepage:\n> https://www.sourcecodester.com\n\n### Software Link:\n> [Simple Food Ordering System](https://www.sourcecodester.com/php/15418/simple-food-ordering-system-client-side-phpmysqli-free-source-code.html)\n\n### Version:\n> v 1.0\n\n### What is Reflected Cross-Site Scripting:\n> Reflected cross-site scripting (XSS) is a type of web vulnerability that occurs when a web application fails to properly sanitize user input, allowing an attacker to inject malicious code into the application's response to a user's request. When the user's browser receives the response, the malicious code is executed, potentially allowing the attacker to steal sensitive information or take control of the user's account.\n\n### Affected Page: \n> Vulnerable Page: process_order.php\n\n> In this page order parameter is vulnerable to Reflected Cross Site Scripting Attack\n\n### Description:\n> The Reflected XSS found in order parameter of process_order.php page. Authenticated Reflected Cross-Site Scripting (XSS) is a serious vulnerability that can have a significant impact on the security of a web application and its users. The risk of Authenticated Reflected XSS is similar to that of Reflected XSS, but with the added danger that the attacker must first gain access to a valid user account in order to exploit the vulnerability. The main risk associated with Authenticated Reflected XSS is that it can allow an attacker to steal sensitive information or take control of a user's account on a web application. This can include login credentials, financial information, personal information, and more. Once an attacker gains access to a user's account, they can perform any actions that the user is authorized to do. In addition, Authenticated Reflected XSS can also be used as a stepping stone to launch more advanced attacks, such as phishing attacks, malware distribution, or distributed denial-of-service attacks. By gaining control of a user's account on a web application, an attacker can use that account as a launching point for further attacks against the user or the web application itself.\n\n### Proof of Concept:\n> Initially, I tried to verify the XSS attack, I used standard XSS payload and the Below Image confirmed that, the parameter is vulnerable to reflected XSS.\n\n> Payload: process_order.php?order=\n\n>  ![image](https://user-images.githubusercontent.com/123810418/219717379-d085a7ec-29d4-4d2c-ba19-69e5011891e8.png)\n\n### Recommendation: \n> Whoever uses this CMS, should update line no 41 of process_order.php with the following code to avoid cross-site scripting attack:\n```\nOld Code: ", "creation_timestamp": "2026-09-02T01:01:24.101682Z"}, {"uuid": "5d02d9b1-cba7-40c3-938f-ef811708a217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/91843", "content": "Exploit Collector\nSimple Food Ordering System 1.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nSimple Food Ordering System version 1.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | d45b72ba3cbe274c827044256c4b4168a57d0681e2452019badcd0d14e196de2\n\nDownload\n# Simple Food Ordering System - Authenticated Reflected Cross Site Scripting\n\n### Date: \n> 17 February 2023\n\n### CVE Assigned:\n**[CVE-2023-0902](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0902)** [mitre.org](https://www.cve.org/CVERecord?id=CVE-2023-0902) [nvd.nist.org](https://nvd.nist.gov/vuln/detail/CVE-2023-0902)\n\n### Author Email: \n> navaidnasari@hotmail.co.uk\n\n### Vendor Homepage:\n> https://www.sourcecodester.com\n\n### Software Link:\n> [Simple Food Ordering System](https://www.sourcecodester.com/php/15418/simple-food-ordering-system-client-side-phpmysqli-free-source-code.html)\n\n### Version:\n> v 1.0\n\n### What is Reflected Cross-Site Scripting:\n> Reflected cross-site scripting (XSS) is a type of web vulnerability that occurs when a web application fails to properly sanitize user input, allowing an attacker to inject malicious code into the application's response to a user's request. When the user's browser receives the response, the malicious code is executed, potentially allowing the attacker to steal sensitive information or take control of the user's account.\n\n### Affected Page: \n> Vulnerable Page: process_order.php\n\n> In this page order parameter is vulnerable to Reflected Cross Site Scripting Attack\n\n### Description:\n> The Reflected XSS found in order parameter of process_order.php page. Authenticated Reflected Cross-Site Scripting (XSS) is a serious vulnerability that can have a significant impact on the security of a web application and its users. The risk of Authenticated Reflected XSS is similar to that of Reflected XSS, but with the added danger that the attacker must first gain access to a valid user account in order to exploit the vulnerability. The main risk associated with Authenticated Reflected XSS is that it can allow an attacker to steal sensitive information or take control of a user's account on a web application. This can include login credentials, financial information, personal information, and more. Once an attacker gains access to a user's account, they can perform any actions that the user is authorized to do. In addition, Authenticated Reflected XSS can also be used as a stepping stone to launch more advanced attacks, such as phishing attacks, malware distribution, or distributed denial-of-service attacks. By gaining control of a user's account on a web application, an attacker can use that account as a launching point for further attacks against the user or the web application itself.\n\n### Proof of Concept:\n> Initially, I tried to verify the XSS attack, I used standard XSS payload and the Below Image confirmed that, the parameter is vulnerable to reflected XSS.\n\n> Payload: process_order.php?order=\n\n>  ![image](https://user-images.githubusercontent.com/123810418/219717379-d085a7ec-29d4-4d2c-ba19-69e5011891e8.png)\n\n### Recommendation: \n> Whoever uses this CMS, should update line no 41 of process_order.php with the following code to avoid cross-site scripting attack:\n```\nOld Code: ", "creation_timestamp": "2026-09-04T21:00:04.975782Z"}, {"uuid": "95e67556-31e9-48f0-a128-0bf0d9ed26f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0902", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/91843", "content": "Exploit Collector\nSimple Food Ordering System 1.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nSimple Food Ordering System version 1.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | d45b72ba3cbe274c827044256c4b4168a57d0681e2452019badcd0d14e196de2\n\nDownload\n# Simple Food Ordering System - Authenticated Reflected Cross Site Scripting\n\n### Date: \n> 17 February 2023\n\n### CVE Assigned:\n**[CVE-2023-0902](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0902)** [mitre.org](https://www.cve.org/CVERecord?id=CVE-2023-0902) [nvd.nist.org](https://nvd.nist.gov/vuln/detail/CVE-2023-0902)\n\n### Author Email: \n> navaidnasari@hotmail.co.uk\n\n### Vendor Homepage:\n> https://www.sourcecodester.com\n\n### Software Link:\n> [Simple Food Ordering System](https://www.sourcecodester.com/php/15418/simple-food-ordering-system-client-side-phpmysqli-free-source-code.html)\n\n### Version:\n> v 1.0\n\n### What is Reflected Cross-Site Scripting:\n> Reflected cross-site scripting (XSS) is a type of web vulnerability that occurs when a web application fails to properly sanitize user input, allowing an attacker to inject malicious code into the application's response to a user's request. When the user's browser receives the response, the malicious code is executed, potentially allowing the attacker to steal sensitive information or take control of the user's account.\n\n### Affected Page: \n> Vulnerable Page: process_order.php\n\n> In this page order parameter is vulnerable to Reflected Cross Site Scripting Attack\n\n### Description:\n> The Reflected XSS found in order parameter of process_order.php page. Authenticated Reflected Cross-Site Scripting (XSS) is a serious vulnerability that can have a significant impact on the security of a web application and its users. The risk of Authenticated Reflected XSS is similar to that of Reflected XSS, but with the added danger that the attacker must first gain access to a valid user account in order to exploit the vulnerability. The main risk associated with Authenticated Reflected XSS is that it can allow an attacker to steal sensitive information or take control of a user's account on a web application. This can include login credentials, financial information, personal information, and more. Once an attacker gains access to a user's account, they can perform any actions that the user is authorized to do. In addition, Authenticated Reflected XSS can also be used as a stepping stone to launch more advanced attacks, such as phishing attacks, malware distribution, or distributed denial-of-service attacks. By gaining control of a user's account on a web application, an attacker can use that account as a launching point for further attacks against the user or the web application itself.\n\n### Proof of Concept:\n> Initially, I tried to verify the XSS attack, I used standard XSS payload and the Below Image confirmed that, the parameter is vulnerable to reflected XSS.\n\n> Payload: process_order.php?order=\n\n>  ![image](https://user-images.githubusercontent.com/123810418/219717379-d085a7ec-29d4-4d2c-ba19-69e5011891e8.png)\n\n### Recommendation: \n> Whoever uses this CMS, should update line no 41 of process_order.php with the following code to avoid cross-site scripting attack:\n```\nOld Code: ", "creation_timestamp": "2026-09-05T01:00:15.849344Z"}]}