CVE-2023-3308

A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231804.

• CWE-502

• https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal%3Aicefrog/icefrog_1.1.8_RCE.mdBroken Link, Exploit
• https://vuldb.com/?ctiid.231804Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.231804Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal%3Aicefrog/icefrog_1.1.8_RCE.mdBroken Link, Exploit
• https://vuldb.com/?ctiid.231804Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.231804Permissions Required, Third Party Advisory, VDB Entry

Published

Jun 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33072Memory corruption in Core while processing control functions…7.8
• CVE-2023-33074Memory corruption in Audio when SSR event is triggered after…7.8
• CVE-2023-33076Memory corruption in Core when updating rollback version for…7.8
• CVE-2023-33077Memory corruption in HLOS while converting from authorizatio…7.8
• CVE-2023-33078Information Disclosure while processing IOCTL request in Fas…5.5
• CVE-2023-33079Memory corruption in Audio while running invalid audio recor…7.8
• CVE-2023-33080Transient DOS while parsing a vender specific IE (Informatio…7.5
• CVE-2023-33081Transient DOS while converting TWT (Target Wake Time) frame …7.5
• CVE-2023-33082Memory corruption while sending an Assoc Request having BTM …9.8
• CVE-2023-33083Memory corruption in WLAN Host while processing RRM beacon o…9.8
• CVE-2023-33084Transient DOS while processing IE fragments from server duri…7.5
• CVE-2023-33085Memory corruption in wearables while processing data from AO…7.8