Cobalt Stike Beacon Detected – 38[.]34[.]185[.]188:4999
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Month: June 2023
Cobalt Stike Beacon Detected – 36[.]111[.]175[.]46:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 106[.]14[.]75[.]240:8099
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 82[.]157[.]195[.]150:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Brute Ratel C4 Detected – 18[.]178[.]161[.]19:80
The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...
Microworld Technologies eScan Management Console cross-site scripting | CVE-2023-34837
NAME__________Microworld Technologies eScan Management Console cross-site scriptingPlatforms Affected:Microworld Technologies eScan Management Console 14.0.1400.2281Risk Level:6.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Microworld Technologies eScan Management Console...
Microworld Technologies eScan Management Console cross-site scripting | CVE-2023-34835
NAME__________Microworld Technologies eScan Management Console cross-site scriptingPlatforms Affected:Microworld Technologies eScan Management Console 14.0.1400.2281Risk Level:6.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Microworld Technologies eScan Management Console...
OpenFGA denial of service | CVE-2023-35933
NAME__________OpenFGA denial of servicePlatforms Affected:OpenFGA OpenFGA 1.1.0Risk Level:5.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________OpenFGA is vulnerable to a denial of service, caused by...
DataEase security bypass | CVE-2023-35164
NAME__________DataEase security bypassPlatforms Affected:DataEase DataEase 1.18.7Risk Level:6.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________DataEase could allow a remote authenticated attacker to bypass security restrictions, caused...
Mailchimp module for Drupal cross-site request forgery |
NAME__________Mailchimp module for Drupal cross-site request forgeryPlatforms Affected:Drupal Mailchimp module for Drupal 2.2.1Risk Level:5.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Mailchimp module for Drupal is...
Apple macOS Ventura security bypass | CVE-2022-48505
NAME__________Apple macOS Ventura security bypassPlatforms Affected:Apple macOS VenturaRisk Level:5.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Apple macOS Ventura could allow a remote attacker to bypass...
Microworld Technologies eScan Management Console cross-site scripting | CVE-2023-34838
NAME__________Microworld Technologies eScan Management Console cross-site scriptingPlatforms Affected:Microworld Technologies eScan Management Console 14.0.1400.2281Risk Level:7.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Microworld Technologies eScan Management Console...
ROS2 Foxy Fitzroy denial of service | CVE-2023-33566
NAME__________ROS2 Foxy Fitzroy denial of servicePlatforms Affected:ROS2 Foxy Fitzroy ROS_VERSION 2 ROS2 Foxy Fitzroy ROS_PYTHON_VERSION 2Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________ROS2...
Microworld Technologies eScan Management Console cross-site scripting | CVE-2023-34836
NAME__________Microworld Technologies eScan Management Console cross-site scriptingPlatforms Affected:Microworld Technologies eScan Management Console 14.0.1400.2281Risk Level:6.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Microworld Technologies eScan Management Console...
DataEase information disclosure | CVE-2023-35168
NAME__________DataEase information disclosurePlatforms Affected:DataEase DataEase 1.18.7Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________DataEase could allow a remote authetnicated attacker to obtain sensitive information, caused...
IssabelPBX cross-site request forgery | CVE-2023-34839
NAME__________IssabelPBX cross-site request forgeryPlatforms Affected:Issabel IssabelPBX 4.0.0-6Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________IssabelPBX is vulnerable to cross-site request forgery, caused by improper validation...
CloudExplorer-Lite brute force | CVE-2023-34240
NAME__________CloudExplorer-Lite brute forcePlatforms Affected:CloudExplorer-Lite Team of @fit2cloud CloudExplorer-Lite 1.1.0Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________CloudExplorer-Lite is vulnerable to a brute force attack, caused...
Aterm WG2200HP command execution | CVE-2023-3333
NAME__________Aterm WG2200HP command executionPlatforms Affected:Aterm WG2200HPRisk Level:6.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Aterm WG2200HP could allow a remote authenticated attacker to execute arbitrary commands...
authzed SpiceDB information disclosure | CVE-2023-35930
NAME__________authzed SpiceDB information disclosurePlatforms Affected:authzed SpiceDB 1.22.0Risk Level:3.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________authzed SpiceDB could allow a remote attacker to obtain sensitive information,...
MobiSystems Office Suite Premium directory traversal |
NAME__________MobiSystems Office Suite Premium directory traversalPlatforms Affected:MobiSystems Office Suite Premium 10.9.1.42602Risk Level:7.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________MobiSystems Office Suite Premium could allow a...
ONEST CRM cross-site scripting |
NAME__________ONEST CRM cross-site scriptingPlatforms Affected:Onest Tech ONEST CRM 1.0Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________ONEST CRM is vulnerable to cross-site scripting, caused by...
H3C Magic B1ST denial of service | CVE-2023-34928
NAME__________H3C Magic B1ST denial of servicePlatforms Affected:H3C Magic B1ST 100R012Risk Level:5.3Exploitability:Proof of ConceptConsequences:Denial of Service DESCRIPTION__________H3C Magic B1ST is vulnerable...
Proofpoint Insider Threat Management Server information disclosure | CVE-2023-36002
NAME__________Proofpoint Insider Threat Management Server information disclosurePlatforms Affected:Proofpoint Insider Threat Management Server 7.14Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Proofpoint Insider Threat Management Server...
H3C Magic B1ST denial of service | CVE-2023-34930
NAME__________H3C Magic B1ST denial of servicePlatforms Affected:H3C Magic B1ST 100R012Risk Level:5.3Exploitability:Proof of ConceptConsequences:Denial of Service DESCRIPTION__________H3C Magic B1ST is vulnerable...
