rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-48863 
SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to inject malicious SQL commands into the background database engine for execution, and sends some attack codes as commands or query statements to the interpreter. These malicious data can deceive the interpreter, so as to execute unplanned commands or unauthorized access to data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-04T00:00:00.000Z
CVE-2023-48864 
SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-10T00:00:00.000Z
CVE-2023-48865 
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via execute_mode parameter of the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-11T00:00:00.000Z
CVE-2023-48866 
A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shopping_lists/ of Grocy <= 4.0.3 allows attackers to obtain the victim's cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-04T00:00:00.000Z
CVE-2023-48880 
A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&_ajax=1&lang=cn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48881 
A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field Title field at /login.php?m=admin&c=Field&a=arctype_add&_ajax=1&lang=cn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48882 
A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Document Properties field at /login.php m=admin&c=Index&a=changeTableVal&_ajax=1&lang=cn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48886 
A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-01T00:00:00.000Z
CVE-2023-48887 
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-01T00:00:00.000Z
CVE-2023-48893 
SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate or untilDate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-01T00:00:00.000Z
CVE-2023-48894 
Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the doFilter function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-30T00:00:00.000Z
CVE-2023-48901 
A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-03-21T00:00:00.000Z
CVE-2023-48902 
An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload car images via authentication bypass in uploadCarImages.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-03-21T00:00:00.000Z
CVE-2023-48903 
Stored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote unauthenticated attackers to inject arbitrary web script or HTML within parameter "imgType" via in uploadCarImages.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-03-21T00:00:00.000Z
CVE-2023-48906 
Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the char_for_nibble function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-01T00:00:00.000Z
CVE-2023-48909 
An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-12T00:00:00.000Z
CVE-2023-48910 
Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-04T00:00:00.000Z
CVE-2023-48912 
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/edit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-30T00:00:00.000Z
CVE-2023-48913 
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/delete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-30T00:00:00.000Z
CVE-2023-48914 
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-30T00:00:00.000Z
CVE-2023-48925 
SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-14T00:00:00.000Z
CVE-2023-48926 
An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-16T00:00:00.000Z
CVE-2023-48928 
Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Open Redirect. The 'path' parameter of the prefs.asp resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-08T00:00:00.000Z
CVE-2023-48929 
Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The 'sid' parameter in the group_status.asp resource allows an attacker to escalate privileges and obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-08T00:00:00.000Z
CVE-2023-48930 
xinhu xinhuoa 2.2.1 contains a File upload vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-06T00:00:00.000Z
CVE-2023-48940 
A stored cross-site scripting (XSS) vulnerability in /admin.php of DaiCuo v2.5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-06T00:00:00.000Z
CVE-2023-48945 
A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48946 
An issue in the box_mpy function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48947 
An issue in the cha_cmp function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48948 
An issue in the box_div function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48949 
An issue in the box_add function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48950 
An issue in the box_col_len function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48951 
An issue in the box_equal function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48952 
An issue in the box_deserialize_reusing function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-29T00:00:00.000Z
CVE-2023-48957 
PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-25T00:00:00.000Z
CVE-2023-48958 
gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-07T00:00:00.000Z
CVE-2023-48963 
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/wifiSSIDget.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-30T00:00:00.000Z
CVE-2023-48964 
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-30T00:00:00.000Z
CVE-2023-48965 
An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-04T00:00:00.000Z
CVE-2023-48966 
An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Zip file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-04T00:00:00.000Z
CVE-2023-48967 
Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-04T00:00:00.000Z
CVE-2023-48974 
Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-02-08T00:00:00.000Z
CVE-2023-48978 
An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-06-23T00:00:00.000Z
CVE-2023-48985 
Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-02-14T00:00:00.000Z
CVE-2023-48986 
Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-02-14T00:00:00.000Z
CVE-2023-48987 
Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-02-14T00:00:00.000Z
CVE-2023-49000 
An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. NOTE: this is disputed by the vendor, who indicates that ArtisBrowser 34 does not support CSS3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-27T00:00:00.000Z
CVE-2023-49001 
An issue in Indi Browser (aka kvbrowser) v.12.11.23 allows an attacker to bypass intended access restrictions via interaction with the com.example.gurry.kvbrowswer.webview component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-27T00:00:00.000Z
CVE-2023-49002 
An issue in Xenom Technologies (sinous) Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via interaction with com.funprime.calldialer.ui.activities.OutgoingActivity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-27T00:00:00.000Z
CVE-2023-49003 
An issue in simplemobiletools Simple Dialer 5.18.1 allows an attacker to bypass intended access restrictions via interaction with com.simplemobiletools.dialer.activities.DialerActivity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-27T00:00:00.000Z
CVE-2023-49004 
An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-19T00:00:00.000Z
CVE-2023-49006 
Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a crafted page in the XML.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-19T00:00:00.000Z
CVE-2023-49007 
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-08T00:00:00.000Z
CVE-2023-49028 
Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49029 
Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the lock/lock.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49030 
SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49031 
Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-03-03T00:00:00.000Z
CVE-2023-49032 
An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via hijack of the SMS verification code function to arbitrary phone.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-20T00:00:00.000Z
CVE-2023-49034 
Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a crafted script to thecheckvalidHtmlText function in the ack.php and security.php files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-02-20T00:00:00.000Z
CVE-2023-49038 
Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-29T00:00:00.000Z
CVE-2023-49040 
An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49042 
Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the function setSchedWifi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49043 
Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49044 
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49046 
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function formAddMacfilterRule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49047 
Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-49052 
File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-30T00:00:00.000Z
CVE-2023-49058 Directory Traversal vulnerability in SAP Master Data Governance
SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.


Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal)
Affected products: vendor: SAP_SE
product: SAP Master Data Governance
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
version: 3.1
Published: 2023-12-12T01:01:07.964Z
CVE-2023-49060 
An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.
Problem types: description: Privilege escalation through  in ReaderMode
Affected products: vendor: Mozilla
product: Firefox for iOS
Credits: lang: en
value: Muneaki Nishimura
Published: 2023-11-21T14:28:55.428Z
CVE-2023-49061 
An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.
Problem types: description: HTML injection in %READER-BYLINE% of ReaderMode
Affected products: vendor: Mozilla
product: Firefox for iOS
Credits: lang: en
value: Muneaki Nishimura
Published: 2023-11-21T14:28:55.728Z
CVE-2023-49062 
Katran could disclose non-initialized kernel memory as part of an IP header. The issue was present for IPv4 encapsulation and ICMP (v4) Too Big packet generation. After a bpf_xdp_adjust_head call, Katran code didn’t initialize the Identification field for the IPv4 header, resulting in writing content of kernel memory in that field of IP header. The issue affected all Katran versions prior to commit 6a03106ac1eab39d0303662963589ecb2374c97f
Problem types: description: Missing Initialization of a Variable (CWE-456)
Affected products: vendor: Facebook
product: Katran
default_status: unaffected
Published: 2023-11-28T15:45:42.674Z
CVE-2023-49068 Apache DolphinScheduler: Information Leakage Vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects Apache DolphinScheduler: before 3.2.1.

Users are recommended to upgrade to version 3.2.1, which fixes the issue. At the time of disclosure of this advisory, this version has not yet been released. In the mean time, we recommend you make sure the logs are only available to trusted operators.


Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: Apache Software Foundation
product: Apache DolphinScheduler
default_status: unaffected
Credits: lang: en
value: Y4tacker and 4ra1n from Y4secTeam
Published: 2023-11-27T09:49:42.477Z