Black Basta Ransomware Victim: Precision Fabrics Group
Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Month: April 2023
14 Kubernetes and Cloud Security Challenges and How to Solve Them
Recently, Andrew Martin, founder and CEO of ControlPlane, released a report entitled Cloud Native and Kubernetes Security Predictions 2023. These...
N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX
The supply chain attack targeting 3CX was the result of a prior supply chain compromise associated with a different company,...
LockBit 3.0 Ransomware Victim: tubosreunidosgroup[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: pkffinconta[.]ro
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: soapro[.]ao
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: soshin[.]co[.]jp
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: ibp[.]com[.]br
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
VMware Tanzu Spring Security security bypass | CVE-2023-20862
NAME__________VMware Tanzu Spring Security security bypassPlatforms Affected:VMware Tanzu Spring Security 5.7.0 VMware Tanzu Spring Security 5.7.7 VMware Tanzu Spring Security...
Strapi information disclosure | CVE-2023-22894
NAME__________Strapi information disclosurePlatforms Affected:Strapi Strapi 4.5.5Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Strapi could allow a remote attacker to obtain sensitive information, caused by...
Joruri GW cross-site scripting | CVE-2023-27888
NAME__________Joruri GW cross-site scriptingPlatforms Affected:Joruri Joruri Gw 3.2.5Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Joruri GW is vulnerable to cross-site scripting, caused by improper...
Omron CS/CJ Series information disclosure | CVE-2022-45794
NAME__________Omron CS/CJ Series information disclosurePlatforms Affected:OMRON SYSMAC CJ2H-CPU6-EIP OMRON SYSMAC CJ2H-CPU6 OMRON SYSMAC CJ1G-CPUP OMRON SYSMAC CS1H-CPUH OMRON SYSMAC CS1G-CPUH...
Cloud Hypervisor security bypass | CVE-2023-30612
NAME__________Cloud Hypervisor security bypassPlatforms Affected:Cloud Hypervisor Cloud Hypervisor 30.0 Cloud Hypervisor Cloud Hypervisor 31.0Risk Level:4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Cloud Hypervisor could allow...
AWS aws-sigv4 information disclosure | CVE-2023-30610
NAME__________AWS aws-sigv4 information disclosurePlatforms Affected:AWS aws-sigv4 0.55.0 AWS aws-sigv4 0.54.1 AWS aws-sigv4 0.53.1 AWS aws-sigv4 0.52.0 AWS aws-sigv4 0.51.0Risk Level:5.5Exploitability:UnprovenConsequences:Obtain...
Weaver Show Posts Plugin for WordPress cross-site scripting | CVE-2023-1404
NAME__________Weaver Show Posts Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Weaver Show Posts Theme for WordPress 1.6Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Weaver Show...
Oracle Java SE, Oracle GraalVM Enterprise Edition unspecified | CVE-2023-21939
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition unspecifiedPlatforms Affected:Oracle Java SE 8u361 Oracle Java SE 8u361-perf Oracle Java SE 11.0.18...
Oracle Java SE, Oracle GraalVM Enterprise Edition unspecified | CVE-2023-21937
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition unspecifiedPlatforms Affected:Oracle Java SE 8u361 Oracle Java SE 8u361-perf Oracle Java SE 11.0.18...
Discourse cross-site scripting | CVE-2023-30538
NAME__________Discourse cross-site scriptingPlatforms Affected:Discourse Discourse 3.0.1 Discourse Discourse 3.1.0.beta2Risk Level:3.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper...
Oracle Java SE, Oracle GraalVM Enterprise Edition unspecified | CVE-2023-21938
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition unspecifiedPlatforms Affected:Oracle GraalVM Enterprise Edition 20.3.8 Oracle GraalVM Enterprise Edition 21.3.4 Oracle GraalVM...
Weaver Xtreme Theme for WordPress cross-site scripting | CVE-2023-1403
NAME__________Weaver Xtreme Theme for WordPress cross-site scriptingPlatforms Affected:WordPress menu shortcode Plugin for WordPress 1.0 WordPress Weaver Xtreme theme for WordPress...
Code Sector TeraCopy information disclosure | CVE-2023-29586
NAME__________Code Sector TeraCopy information disclosurePlatforms Affected:Code Sector TeraCopy 3.9.7Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Code Sector TeraCopy could allow a remote attacker to...
Prestashop Shoppingfeed SQL injection | CVE-2023-28839
NAME__________Prestashop Shoppingfeed SQL injectionPlatforms Affected:PrestaShop Shoppingfeed module for PrestaShop 1.8.2Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Prestashop Shoppingfeed module is vulnerable to SQL injection....
Discourse Reactions information disclosure | CVE-2023-30611
NAME__________Discourse Reactions information disclosurePlatforms Affected:Discourse Discourse Reactions 0.3Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Discourse Reactions could allow a remote attacker to obtain sensitive...
Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE unspecified | CVE-2023-21930
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE unspecifiedPlatforms Affected:Oracle GraalVM Enterprise Edition 20.3.5 Oracle GraalVM...
