Obtain Information

Palantir Foundry workspace-server information disclosure | CVE-2023-30955

July 2, 2023

NAME__________Palantir Foundry workspace-server information disclosurePlatforms Affected:Palantir Foundry workspace-server 7.6.0Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Palantir Foundry workspace-server could allow a remote authenticated attacker...

MCL-Net information disclosure | CVE-2023-34834

June 30, 2023

NAME__________MCL-Net information disclosurePlatforms Affected:MCL MCL-Net 4.3.5.8788Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________MCL-Net could allow a remote attacker to obtain sensitive information. By sending...

Traggo Server directory traversal | CVE-2023-34843

June 30, 2023

NAME__________Traggo Server directory traversalPlatforms Affected:Traggo Server 0.3.0Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Traggo Server could allow a remote attacker to traverse directories on...

NixOS calamares-nixos-extensions information disclosure | CVE-2023-36476

June 30, 2023

NAME__________NixOS calamares-nixos-extensions information disclosurePlatforms Affected:NixOS calamares-nixos-extensions 0.3.12Risk Level:7.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________NixOS calamares-nixos-extensions could allow a local attacker to obtain sensitive information,...

Samsung devices with select Exynos modem chipsets information disclosure | CVE-2023-21512

June 30, 2023

NAME__________Samsung devices with select Exynos modem chipsets information disclosurePlatforms Affected:Samsung Devices with select Exynos modem chipsetsRisk Level:2.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Samsung devices...

GitLab information disclosure | CVE-2023-3102

June 30, 2023

NAME__________GitLab information disclosurePlatforms Affected:GitLab Enterprise Edition 16.1.0 GitLab Enterprise Edition 16.0.5 GitLab Enterprise Edition 15.11.9 GitLab Community Edition 16.1.0 GitLab...

Ovarro TBox RTUs information disclosure | CVE-2023-36610

June 30, 2023

NAME__________Ovarro TBox RTUs information disclosurePlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

GitLab information disclosure | CVE-2023-3362

June 30, 2023

Ovarro TBox RTUs privilege escalation | CVE-2023-36609

June 30, 2023

NAME__________Ovarro TBox RTUs privilege escalationPlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

Ovarro TBox RTUs information disclosure | CVE-2023-36607

June 30, 2023

NAME__________Ovarro TBox RTUs information disclosurePlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

GitLab information disclosure | CVE-2023-2190

June 30, 2023

Ovarro TBox RTUs information disclosure | CVE-2023-3395

June 30, 2023

NAME__________Ovarro TBox RTUs information disclosurePlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

GitLab information disclosure | CVE-2023-2620

June 30, 2023

GitLab information disclosure | CVE-2023-1936

June 30, 2023

GitLab information disclosure | CVE-2023-3363

June 30, 2023

Ovarro TBox RTUs information disclosure | CVE-2023-36608

June 30, 2023

NAME__________Ovarro TBox RTUs information disclosurePlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

Ovarro TBox RTUs information disclosure | CVE-2023-36611

June 30, 2023

NAME__________Ovarro TBox RTUs information disclosurePlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

DataEase information disclosure | CVE-2023-35168

June 29, 2023

NAME__________DataEase information disclosurePlatforms Affected:DataEase DataEase 1.18.7Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________DataEase could allow a remote authetnicated attacker to obtain sensitive information, caused...

Proofpoint Insider Threat Management Server information disclosure | CVE-2023-36002

June 29, 2023

NAME__________Proofpoint Insider Threat Management Server information disclosurePlatforms Affected:Proofpoint Insider Threat Management Server 7.14Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Proofpoint Insider Threat Management Server...

authzed SpiceDB information disclosure | CVE-2023-35930

June 29, 2023

NAME__________authzed SpiceDB information disclosurePlatforms Affected:authzed SpiceDB 1.22.0Risk Level:3.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________authzed SpiceDB could allow a remote attacker to obtain sensitive information,...

MobiSystems Office Suite Premium directory traversal |

June 29, 2023

NAME__________MobiSystems Office Suite Premium directory traversalPlatforms Affected:MobiSystems Office Suite Premium 10.9.1.42602Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________MobiSystems Office Suite Premium could allow a...

Shopware information disclosure | CVE-2023-34098

June 29, 2023

NAME__________Shopware information disclosurePlatforms Affected:Shopware Shopware 5.6.0 Shopware Shopware 5.7.17Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Shopware could allow a remote attacker to obtain sensitive...

Aterm WG2200HP directory traversal | CVE-2023-3330

June 29, 2023

NAME__________Aterm WG2200HP directory traversalPlatforms Affected:Aterm WG2200HPRisk Level:2.6Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Aterm WG2200HP could allow a remote authenticated attacker to traverse directories on...

Apereo CAS information disclosure | CVE-2023-28857

June 29, 2023

NAME__________Apereo CAS information disclosurePlatforms Affected:Apereo CAS 6.6.4Risk Level:4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apereo CAS could allow a remote attacker to obtain sensitive information,...

Obtain Information

Palantir Foundry workspace-server information disclosure | CVE-2023-30955

MCL-Net information disclosure | CVE-2023-34834

Traggo Server directory traversal | CVE-2023-34843

NixOS calamares-nixos-extensions information disclosure | CVE-2023-36476

Samsung devices with select Exynos modem chipsets information disclosure | CVE-2023-21512

GitLab information disclosure | CVE-2023-3102

Ovarro TBox RTUs information disclosure | CVE-2023-36610

GitLab information disclosure | CVE-2023-3362

Ovarro TBox RTUs privilege escalation | CVE-2023-36609

Ovarro TBox RTUs information disclosure | CVE-2023-36607

GitLab information disclosure | CVE-2023-2190

Ovarro TBox RTUs information disclosure | CVE-2023-3395

GitLab information disclosure | CVE-2023-2620

GitLab information disclosure | CVE-2023-1936

GitLab information disclosure | CVE-2023-3363

Ovarro TBox RTUs information disclosure | CVE-2023-36608

Ovarro TBox RTUs information disclosure | CVE-2023-36611

DataEase information disclosure | CVE-2023-35168

Proofpoint Insider Threat Management Server information disclosure | CVE-2023-36002

authzed SpiceDB information disclosure | CVE-2023-35930

MobiSystems Office Suite Premium directory traversal |

Shopware information disclosure | CVE-2023-34098

Aterm WG2200HP directory traversal | CVE-2023-3330

Apereo CAS information disclosure | CVE-2023-28857

[DEVMAN] – Ransomware Victim: smvthailand[.]com

Mastering Ethical Hacking and Penetration Testing for Cyber Defense

TehetségKapu – 54,357 breached accounts

[MEDUSA] – Ransomware Victim: Weil Construction, Inc

[INCRANSOM] – Ransomware Victim: The Saint James Hospital Group

You may have missed