Wi-Fi AP UNIT information disclosure | CVE-2023-31196
NAME__________Wi-Fi AP UNIT information disclosurePlatforms Affected:Inaba Denki Sangyo AC-WAPU-300 1.00_B07 Inaba Denki Sangyo AC-WAPU-300-P 1.00_B08P Inaba Denki Sangyo AC-WAPUM-300 1.00_B07...
Month: June 2023
ASUS RT-AX3000 information disclosure | CVE-2023-31195
NAME__________ASUS RT-AX3000 information disclosurePlatforms Affected:ASUS RT-AX3000 3.0.0.4.384_10177 ASUS RT-AX3000 3.0.0.4Risk Level:3.7Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________ASUS RT-AX3000 could allow a remote attacker...
Thruk directory traversal | CVE-2023-34096
NAME__________Thruk directory traversalPlatforms Affected:Thruk Thruk 3.06Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Thruk could allow a remote authenticated attacker to traverse directories on the...
Ashlar-Vellum Cobalt code execution | CVE-2023-34293
NAME__________Ashlar-Vellum Cobalt code executionPlatforms Affected:Ashlar-Vellum Cobalt 12.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Ashlar-Vellum Cobalt could allow a remote attacker to execute arbitrary code...
Progress DataDirect Connect for ODBC information disclosure | CVE-2023-34363
NAME__________Progress DataDirect Connect for ODBC information disclosurePlatforms Affected:Progress DataDirect Connect for ODBC 08.02Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Progress DataDirect Connect for ODBC...
Trend Micro Apex One privilege escalation | CVE-2023-34147
NAME__________Trend Micro Apex One privilege escalationPlatforms Affected:Trend Micro Apex One as a Service Trend Micro Apex One On Premise (2019)Risk...
Fuji Electric V-Server code execution | CVE-2023-32270
NAME__________Fuji Electric V-Server code executionPlatforms Affected:Fuji Electric V-Server 4.0.15.0 Fuji Electric V-Server Lite 4.0.15.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Fuji Electric V-Server could...
Snowflake Go Snowflake Driver command execution | CVE-2023-34231
NAME__________Snowflake Go Snowflake Driver command executionPlatforms Affected:Snowflake Computing Go Snowflake Driver 1.6.18Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Snowflake Go Snowflake Driver could allow...
Fuji Electric V-Server buffer overflow | CVE-2023-32538
NAME__________Fuji Electric V-Server buffer overflowPlatforms Affected:Fuji Electric V-Server 4.0.15.0 Fuji Electric V-Server Lite 4.0.15.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Fuji Electric V-Server is...
BianLian Ransomware Victim: Aeliusmd Medical Systems
BianLian Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
BlackCat ransomware fails to extort Australian commercial law giant
Australian law firm HWL Ebsworth confirmed to local media outlets that its network was hacked after the ALPHV ransomware gang...
University of Manchester says hackers ‘likely’ stole data in cyberattack
Image: City Suites The University of Manchester warns staff and students that they suffered a cyberattack where threat actors likely stole...
The Week in Ransomware – June 9th 2023 – It’s Clop… Again!
The week was dominated by fallout over the MOVEit Transfer data-theft attacks, with the Clop ransomware gang confirming that they...
Ukrainian hackers take down service provider for Russian banks
A group of Ukrainian hackers known as the Cyber.Anarchy.Squad claimed an attack that took down Russian telecom provider Infotel JSC...
Russians charged with hacking Mt. Gox crypto exchange, running BTC-e
Russian nationals Alexey Bilyuchenko and Aleksandr Verner have been charged with the 2011 hacking of the leading cryptocurrency exchange Mt....
New MOVEit Transfer critical flaws found after security audit, patch now
Progress Software warned customers today of newly found critical SQL injection vulnerabilities in its MOVEit Transfer managed file transfer (MFT)...
CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog,...
CISA: Progress Software Releases Security Advisory for MOVEit Transfer
Progress Software Releases Security Advisory for MOVEit Transfer Progress Software has released a security advisory(link is external) for a SQL injection...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA: CISA and Partners Release Joint Guide to Securing Remote Access Software
CISA and Partners Release Joint Guide to Securing Remote Access Software Today, CISA, Federal Bureau of Investigation (FBI), the National...
CISA: CISA Releases Two Industrial Control Systems Advisories
CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on June 6, 2023. These...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog,...
CISA: CISA and FBI Release #StopRansomware: CL0P Ransomware Gang Exploits MOVEit Vulnerability
CISA and FBI Release #StopRansomware: CL0P Ransomware Gang Exploits MOVEit Vulnerability CISA and FBI released a joint Cybersecurity Advisory (CSA)...
CISA: VMware Releases Security Update for Aria Operations for Networks
VMware Releases Security Update for Aria Operations for Networks VMware has released a security update to address multiple vulnerabilities in...
