PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap

yeswehack.com | vulnerability | CVE-2023-54391 | #ai-security | #exploit | #vulnerability-disclosure | #silent-patches | #cve-2023-54391 | #proxmox
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2023-54391: a Proxmox VE auth bypass fixed silently in 2023, exploited in 2026 before any advisory. The piece taxonomizes 'silent patch gaps' and why AI-assisted diffing makes them cheap to mine.
CVE
CVE-2023-54391
Published
Collected

Related coverage

vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
Critical · vulnerability · github.com
CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal to Pre-Auth RCE PoC
Provides a working pre-auth exploit against FortiSIEM instances exposing port 27918, escalating from gRPC path traversal to root-level remote command execution without credentials.
vulnerability · hacktron.ai
CVE-2026-1731: Pre-Auth RCE in BeyondTrust Remote Support & PRA
Hacktron AI's agents found a critical pre-auth RCE in BeyondTrust Remote Support and older Privileged Remote Access versions, assigned CVE-2026-1731 with a CVSS 9.9 score.
vulnerability · horizon3.ai
The Quiet Attack Path
See how attackers quietly exploit AD through enumeration, Kerberoasting, and AS-REP roasting—and why most SIEM and EDR tools fail to catch it.
vulnerability · horizon3.ai
CVE-2023-48788: Revisiting Fortinet FortiClient EMS to Exploit 7.2.X
Revisiting CVE-2023-48788, a SQL injection in Fortinet FortiClient EMS Server. This blog details bypassing several restrictions to achieve arbitrary command execution as SYSTEM.
Back