Month: September 2023

Google Chrome security bypass | CVE-2023-4908

September 13, 2023

NAME__________Google Chrome security bypassPlatforms Affected:Google Chrome 117.0Risk Level:6.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Google Chrome could allow a remote attacker to bypass security restrictions,...

Adobe Acrobat and Adobe Reader code execution | CVE-2023-26369

September 13, 2023

NAME__________Adobe Acrobat and Adobe Reader code executionPlatforms Affected:Adobe Acrobat DC 23.003.20284 Adobe Acrobat Reader DC 23.003.20284 Adobe Acrobat 2020 20.005.30516...

SAP S/4HANA denial of service | CVE-2023-41369

September 13, 2023

NAME__________SAP S/4HANA denial of servicePlatforms Affected:SAP S/4HANA 100 SAP S/4HANA 101 SAP S/4HANA 102 SAP S/4HANA 103 SAP S/4HANA 104...

Microsoft Azure Kubernetes Service privilege escalation | CVE-2023-29332

September 13, 2023

NAME__________Microsoft Azure Kubernetes Service privilege escalationPlatforms Affected:Microsoft Azure Kubernetes ServiceRisk Level:7.5Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Microsoft Azure Kubernetes Service could allow a remote...

Siemens QMS Automotive weak security | CVE-2023-40727

September 13, 2023

NAME__________Siemens QMS Automotive weak securityPlatforms Affected:Siemens QMS AutomotiveRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Siemens QMS Automotive could provide weaker than expected security, caused...

Adobe Connect cross-site scripting | CVE-2023-29306

September 13, 2023

NAME__________Adobe Connect cross-site scriptingPlatforms Affected:Adobe Connect 12.3Risk Level:4.7Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Connect is vulnerable to cross-site scripting, caused by improper validation...

Microsoft Windows DHCP Server Service information disclosure | CVE-2023-36801

September 13, 2023

NAME__________Microsoft Windows DHCP Server Service information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016...

Microsoft Visual Studio code execution | CVE-2023-36796

September 13, 2023

NAME__________Microsoft Visual Studio code executionPlatforms Affected:Microsoft Visual Studio 2015 Update 3 Microsoft Visual Studio 2013 Update 5 Microsoft Visual Studio...

Google Chrome security bypass | CVE-2023-4901

September 13, 2023

Microsoft Windows Kernel privilege escalation | CVE-2023-38141

September 13, 2023

NAME__________Microsoft Windows Kernel privilege escalationPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft Windows...

Microsoft 3D Viewer code execution | CVE-2023-36740

September 13, 2023

NAME__________Microsoft 3D Viewer code executionPlatforms Affected:Microsoft 3D ViewerRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft 3D Viewer could allow a remote attacker to execute...

Microsoft Windows Scripting Engine code execution | CVE-2023-36805

September 13, 2023

NAME__________Microsoft Windows Scripting Engine code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 Microsoft...

Siemens QMS Automotive information disclosure | CVE-2023-40725

September 13, 2023

NAME__________Siemens QMS Automotive information disclosurePlatforms Affected:Siemens QMS AutomotiveRisk Level:4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Siemens QMS Automotive could allow a local attacker to obtain...

Google Chrome security bypass | CVE-2023-4907

September 13, 2023

SAP S4CORE privilege escalation | CVE-2023-40625

September 13, 2023

NAME__________SAP S4CORE privilege escalationPlatforms Affected:SAP S4CORE 102 SAP S4CORE 103 SAP S4CORE 104 SAP S4CORE 105 SAP S4CORE 106 SAP...

Microsoft 3D Builder code execution | CVE-2023-36771

September 13, 2023

NAME__________Microsoft 3D Builder code executionPlatforms Affected:Microsoft 3D BuilderRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft 3D Builder could allow a remote attacker to execute...

Microsoft Visual Studio code execution | CVE-2023-36794

September 13, 2023

NAME__________Microsoft Visual Studio code executionPlatforms Affected:Microsoft Visual Studio 2015 Update 3 Microsoft Visual Studio 2013 Update 5 Microsoft Visual Studio...

Google Chrome security bypass | CVE-2023-4909

September 13, 2023

Microsoft Office spoofing | CVE-2023-41764

September 13, 2023

NAME__________Microsoft Office spoofingPlatforms Affected:Microsoft Office 2013 SP1 x32 Microsoft Office 2013 SP1 x64 Microsoft Office 2013 SP1 RT Microsoft Office...

SAP NetWeaver AS ABAP cross-site scripting | CVE-2023-40624

September 13, 2023

NAME__________SAP NetWeaver AS ABAP cross-site scriptingPlatforms Affected:SAP NetWeaver AS ABAP SAP_UI 754 SAP NetWeaver AS ABAP SAP_UI 755 SAP NetWeaver...

Microsoft Windows TCP/IP information disclosure | CVE-2023-38160

September 13, 2023

NAME__________Microsoft Windows TCP/IP information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft Windows...

Play Ransomware Victim: Carpet One

September 13, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Play Ransomware Victim: Dpc & S

September 13, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Play Ransomware Victim: Markentrainer Werbeagentur, Elwema Automotive

September 13, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Month: September 2023

Google Chrome security bypass | CVE-2023-4908

Adobe Acrobat and Adobe Reader code execution | CVE-2023-26369

SAP S/4HANA denial of service | CVE-2023-41369

Microsoft Azure Kubernetes Service privilege escalation | CVE-2023-29332

Siemens QMS Automotive weak security | CVE-2023-40727

Adobe Connect cross-site scripting | CVE-2023-29306

Microsoft Windows DHCP Server Service information disclosure | CVE-2023-36801

Microsoft Visual Studio code execution | CVE-2023-36796

Google Chrome security bypass | CVE-2023-4901

Microsoft Windows Kernel privilege escalation | CVE-2023-38141

Microsoft 3D Viewer code execution | CVE-2023-36740

Microsoft Windows Scripting Engine code execution | CVE-2023-36805

Siemens QMS Automotive information disclosure | CVE-2023-40725

Google Chrome security bypass | CVE-2023-4907

SAP S4CORE privilege escalation | CVE-2023-40625

Microsoft 3D Builder code execution | CVE-2023-36771

Microsoft Visual Studio code execution | CVE-2023-36794

Google Chrome security bypass | CVE-2023-4909

Microsoft Office spoofing | CVE-2023-41764

SAP NetWeaver AS ABAP cross-site scripting | CVE-2023-40624

Microsoft Windows TCP/IP information disclosure | CVE-2023-38160

Play Ransomware Victim: Carpet One

Play Ransomware Victim: Dpc & S

Play Ransomware Victim: Markentrainer Werbeagentur, Elwema Automotive

[KILLSEC] – Ransomware Victim: PT Pertamina

[FOG] – Ransomware Victim: Howell Township Public Schools (howell[.]k12[.]nj[.]us)

[FOG] – Ransomware Victim: EP Holdings (epholdingsinc[.]com)

Cobalt Strike Beacon Detected – 101[.]36[.]117[.]41:8880

Cobalt Strike Beacon Detected – 47[.]242[.]206[.]77:8888

You may have missed