Escalating China-Taiwan Tensions Fuel Alarming Surge in Cyber Attacks
The rising geopolitical tensions between China and Taiwan in recent months have sparked a noticeable uptick in cyber attacks on...
Month: May 2023
LockBit 3.0 Ransomware Victim: blackandwhitecabs[.]com[.]au
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Cobalt Stike Beacon Detected – 120[.]46[.]169[.]156:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 101[.]43[.]222[.]226:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 124[.]220[.]28[.]253:81
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 101[.]33[.]199[.]47:8000
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]115[.]219[.]25:2222
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 101[.]33[.]199[.]47:4433
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 192[.]227[.]158[.]39:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Aruba EdgeConnect Enterprise command execution | CVE-2023-30504
NAME__________Aruba EdgeConnect Enterprise command executionPlatforms Affected:Aruba Networks EdgeConnect EnterpriseRisk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Aruba EdgeConnect Enterprise could allow a remote authenticated attacker...
SparkPost Plugin for WordPress cross-site scripting | CVE-2023-23654
NAME__________SparkPost Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress SparkPost Plugin for WordPress 3.2.5Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________SparkPost Plugin for WordPress is vulnerable...
Gpdb directory traversal | CVE-2023-31131
NAME__________Gpdb directory traversalPlatforms Affected:Aruba Networks EdgeConnect EnterpriseRisk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Gpdb could allow a remote attacker to traverse directories on the...
Rockwell Automation FactoryTalk Vantagepoint cross-site request forgery | CVE-2023-2444
NAME__________Rockwell Automation FactoryTalk Vantagepoint cross-site request forgeryPlatforms Affected:Rockwell Automation FactoryTalk VantagePoint 8.00.00Risk Level:7.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Rockwell Automation FactoryTalk Vantagepoint is vulnerable...
Billing Management System SQL injection | CVE-2023-2689
NAME__________Billing Management System SQL injectionPlatforms Affected:Sourcecodester Billing Management System 1.0Risk Level:6.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Billing Management System is vulnerable to SQL injection....
Mail Subscribe List plugin for WordPress cross-site scripting | CVE-2023-23657
NAME__________Mail Subscribe List plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Mail Subscribe List Plugin for WordPress 2.1.9Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Mail Subscribe...
FormCraft plugin for WordPress cross-site scripting | CVE-2023-22717
NAME__________FormCraft plugin for WordPress cross-site scriptingPlatforms Affected:WordPress FormCraft Plugin for WordPress 1.2.6Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________FormCraft plugin for WordPress is vulnerable...
Dell CloudLink information disclosure | CVE-2023-28076
NAME__________Dell CloudLink information disclosurePlatforms Affected:Dell CloudLink 7.1.2Risk Level:5.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Dell CloudLink could allow a remote attacker to obtain sensitive information,...
Aruba EdgeConnect Enterprise command execution | CVE-2023-30503
NAME__________Aruba EdgeConnect Enterprise command executionPlatforms Affected:Aruba Networks EdgeConnect EnterpriseRisk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Aruba EdgeConnect Enterprise could allow a remote authenticated attacker...
Uji Popup plugin for WordPress cross-site scripting | CVE-2023-23641
NAME__________Uji Popup plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Uji Popup Plugin for WordPress 1.4.3Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Uji Popup plugin for...
cURL libcurl security bypass | CVE-2023-28321
NAME__________cURL libcurl security bypassPlatforms Affected:cURL Libcurl 7.12 cURL libcurl 8.0.1Risk Level:3.7Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________cURL libcurl could allow a remote attacker to...
cURL libcurl denial of service | CVE-2023-28320
NAME__________cURL libcurl denial of servicePlatforms Affected:cURL libcurl 8.0.1 cURL libcurl 7.9.8Risk Level:3.7Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________cURL libcurl is vulnerable to a...
Cisco Identity Services Engine command execution | CVE-2023-20163
NAME__________Cisco Identity Services Engine command executionPlatforms Affected:Cisco Identity Services EngineRisk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cisco Identity Services Engine could allow a remote...
Aruba EdgeConnect Enterprise command execution | CVE-2023-30506
NAME__________Aruba EdgeConnect Enterprise command executionPlatforms Affected:Aruba Networks EdgeConnect EnterpriseRisk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Aruba EdgeConnect Enterprise could allow a remote authenticated attacker...
Aruba EdgeConnect Enterprise command execution | CVE-2023-30505
NAME__________Aruba EdgeConnect Enterprise command executionPlatforms Affected:Aruba Networks EdgeConnect EnterpriseRisk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Aruba EdgeConnect Enterprise could allow a remote authenticated attacker...
