Month: July 2023

hackerone

HackerOne Bug Bounty Disclosure: xss-exploit-of-rdoc-documentation-generated-by-rdoc-cve-sighook

July 18, 2023

Company Name: Ruby Company HackerOne URL: https://hackerone.com/ruby Submitted By:sighookLink to Submitters Profile:https://hackerone.com/sighook Report Title:XSS exploit of RDoc documentation generated by...

hackerone

HackerOne Bug Bounty Disclosure: xss-exploit-of-rdoc-documentation-generated-by-rdoc-sighook

July 18, 2023

Company Name: Ruby Company HackerOne URL: https://hackerone.com/ruby Submitted By:sighookLink to Submitters Profile:https://hackerone.com/sighook Report Title:XSS exploit of RDoc documentation generated by...

CISA

CISA: Adobe Releases Security Updates for ColdFusion

July 18, 2023

Adobe Releases Security Updates for ColdFusion Adobe has released security updates to address a critical vulnerability (CVE-2023-38203) affecting ColdFusion(link is...

CISA

CISA: CISA Releases Seven Industrial Control Systems Advisories

July 18, 2023

CISA Releases Seven Industrial Control Systems Advisories CISA released seven Industrial Control Systems (ICS) advisories on July 18, 2023. These...

PoshC2Logo

Posh C2 Detected – 3[.]78[.]75[.]167:443

July 18, 2023

The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...

LockBit 3.0 Ransomware Victim: hopetech[.]com

July 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: johnreilly[.]co[.]uk

July 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: academia21[.]com

July 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: dixiesfed[.]com

July 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: ope[.]com[.]na

July 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: flexity[.]com

July 18, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

CVE prog

Github cmark-gfm denial of service | CVE-2023-37463

July 18, 2023

NAME__________Github cmark-gfm denial of servicePlatforms Affected:GitHub cmark-gfm 0.29.0.gfm.11Risk Level:6.4Exploitability:Proof of ConceptConsequences:Denial of Service DESCRIPTION__________Github cmark-gfm is vulnerable to a denial...

CVE prog

Sante DICOM Viewer Pro information disclosure | CVE-2023-35734

July 18, 2023

NAME__________Sante DICOM Viewer Pro information disclosurePlatforms Affected:Sante DICOM Viewer ProRisk Level:3.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Sante DICOM Viewer Pro could allow a remote...

CVE prog

Online Piggery Management System file upload | CVE-2023-37629

July 18, 2023

NAME__________Online Piggery Management System file uploadPlatforms Affected:Risk Level:5.3Exploitability:UnprovenConsequences:File Manipulation DESCRIPTION__________Online Piggery Management System could allow a remote attacker to upload...

CVE prog

Online Piggery Management System SQL injection | CVE-2023-37628

July 18, 2023

NAME__________Online Piggery Management System SQL injectionPlatforms Affected:SourceCodester Online Piggery Management System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Online Piggery Management System is vulnerable...

CVE prog

thm-mni-ii Feedbacksystem information disclosure | CVE-2023-37468

July 18, 2023

NAME__________thm-mni-ii Feedbacksystem information disclosurePlatforms Affected:thm-mni-ii Feedbacksystem 1.9.1Risk Level:6Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________thm-mni-ii Feedbacksystem could allow a local authenticated attacker to obtain sensitive...

CVE prog

Envoy denial of service | CVE-2023-35945

July 18, 2023

NAME__________Envoy denial of servicePlatforms Affected:Envoy Envoy 1.26.2 Envoy Envoy 1.25.7 Envoy Envoy 1.24.8 Envoy Envoy 1.23.10Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Envoy...

CVE prog

Honeywell Experion PKS, LX, and PlantCruise denial of service | CVE-2023-24480

July 18, 2023

NAME__________Honeywell Experion PKS, LX, and PlantCruise denial of servicePlatforms Affected:Honeywell Experion LX Honeywell Experion PKS Honeywell Experion PlantCruiseRisk Level:7.5Exploitability:UnprovenConsequences:Denial of...

CVE prog

Online Piggery Management System cross-site scripting | CVE-2023-37630

July 18, 2023

NAME__________Online Piggery Management System cross-site scriptingPlatforms Affected:SourceCodester Online Piggery Management System 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Online Piggery Management System is vulnerable...

CVE prog

Retro Cellphone Online Store cross-site scripting | CVE-2023-3681

July 18, 2023

NAME__________Retro Cellphone Online Store cross-site scriptingPlatforms Affected:CampCodes Retro Cellphone Online Store 1.0Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Retro Cellphone Online Store is vulnerable...

CVE prog

Umbraco CMS security bypass | CVE-2023-37267

July 18, 2023

NAME__________Umbraco CMS security bypassPlatforms Affected:Umbraco Umbraco CMS 10.6.0 Umbraco Umbraco CMS 11.4.1 Umbraco Umbraco CMS 12.0.0Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Umbraco CMS...

CVE prog

Buy Me a Coffee plugin for WordPress cross-site scripting | CVE-2023-2082

July 18, 2023

NAME__________Buy Me a Coffee plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Buy Me a Coffee plugin for WordPress 3.6 WordPress Buy...

CVE prog

OpenSSL security bypass | CVE-2023-2975

July 18, 2023

NAME__________OpenSSL security bypassPlatforms Affected:OpenSSL OpenSSL 1.1.1 OpenSSL OpenSSL 1.0.2 OpenSSL OpenSSL 3.0.0 OpenSSL OpenSSL 3.1.0 OpenSSL OpenSSL 3.0.9 OpenSSL OpenSSL...

CVE prog

Honeywell Experion PKS, LX, and PlantCruise denial of service | CVE-2023-26597

July 18, 2023

NAME__________Honeywell Experion PKS, LX, and PlantCruise denial of servicePlatforms Affected:Honeywell Experion LX Honeywell Experion PKS Honeywell Experion PlantCruiseRisk Level:7.5Exploitability:UnprovenConsequences:Denial of...

[INCRANSOM] – Ransomware Victim: Alna-Bioscience

November 23, 2024

Cobalt Strike

Cobalt Strike Beacon Detected – 52[.]231[.]10[.]139:8080

November 23, 2024

Cobalt Strike

Cobalt Strike Beacon Detected – 54[.]224[.]145[.]120:443

November 23, 2024

Cobalt Strike

Cobalt Strike Beacon Detected – 118[.]193[.]37[.]157:8889

November 23, 2024

Cobalt Strike

Cobalt Strike Beacon Detected – 103[.]225[.]196[.]197:80

November 23, 2024