Cobalt Stike Beacon Detected – 103[.]146[.]179[.]87:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Month: October 2022
Cobalt Stike Beacon Detected – 209[.]141[.]43[.]107:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 128[.]199[.]108[.]253:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 54[.]151[.]44[.]102:8084
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Common Cloud-Native Security Misconfigurations & Fixes
Cloud configuration errors are a major concern for modern DevOps teams, introducing a new attack surface with numerous potential points...
LockBit 3.0 Ransomware Victim: seaviewresortkhaolak[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
CISA adds Atlassian Bitbucket Server flaw to its Known Exploited Vulnerabilities Catalog
CISA added a recently disclosed flaw in Atlassian Bitbucket Server, tracked as CVE-2022-36804, to its Known Exploited Vulnerabilities Catalog. The U.S....
Guacamaya hacktivists stole sensitive data from Mexico and Latin American countries
A hacker group called Guacamaya stole classified government information from multiple military and government agencies across several Latin American countries....
Luxury hotel chain Shangri-La suffered a security breach
The Shangri-La hotel group disclosed a data breach, a database containing the personal information of its customers was compromised. The...
Deadfinder – Find Dead-Links (Broken Links)
Dead link (broken link) means a link within a web page that cannot be connected. These links can have a...
Cobalt Stike Beacon Detected – 143[.]198[.]52[.]213:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 124[.]221[.]250[.]89:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 121[.]199[.]68[.]210:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 104[.]243[.]21[.]60:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 39[.]103[.]236[.]200:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]142[.]138[.]251:9000
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Node.js pnpm-utils module code execution |
NAME Node.js pnpm-utils module code execution Platforms Affected:Node.js pnpm-utilsRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js pnpm-utils module could allow a remote attacker...
Vim code execution | CVE-2022-3352
NAME Vim code execution Platforms Affected:Vim Vim 9.0.0613Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Vim could allow a remote attacker to...
Microsoft Exchange Server code execution | CVE-2022-41082
NAME Microsoft Exchange Server code execution Platforms Affected:Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Microsoft Exchange Server 2019Risk Level:8.8Exploitability:UnprovenConsequences:Gain...
Node.js @aszxc/npmexp module code execution |
NAME Node.js @aszxc/npmexp module code execution Platforms Affected:Node.js @aszxc/npmexpRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js @aszxc/npmexp module could allow a remote attacker...
Google Chrome V8 code execution | CVE-2022-3373
NAME Google Chrome V8 code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...
SolarWinds Orion Platform cross-site scripting | CVE-2022-36965
NAME SolarWinds Orion Platform cross-site scripting Platforms Affected:SolarWinds Orion Platform 2022.2Risk Level:7.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION SolarWinds Orion Platform is vulnerable to...
Node.js flp_hk module code execution |
NAME Node.js flp_hk module code execution Platforms Affected:Node.js flp_hkRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js flp_hk module could allow a remote attacker...
Node.js y0ngtest module code execution |
NAME Node.js y0ngtest module code execution Platforms Affected:Node.js y0ngtestRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js y0ngtest module could allow a remote attacker...
