Month: October 2023

6789858066b326eeb632b778b407e6990bed0da9bc1a57dacae85661625bb723

Mailchecker – Cross-language Temporary (Disposable/Throwaway) Email Detection Library. Covers 55 734+ Fake Email Providers

October 27, 2023

" dir="auto"><script type="text/javascript" src="MailChecker/platform/javascript/MailChecker.js"></script><script type="text/javascript">if(!MailChecker.isValid('[email protected]')){ console.error('O RLY !');}if(!MailChecker.isValid('myemail.com')){ console.error('O RLY !');}</script> PHP include __DIR__."/MailChecker/platform/php/MailChecker.php";if(!MailChecker::isValid('[email protected]')){ die('O RLY !');}if(!MailChecker::isValid('myemail.com')){ die('O RLY !');}...

e9aae10038dff7bed2c58b908a021e87574fd10a4f82bc183c6868f78e9ca46b

LooneyPwner – Exploit Tool For CVE-2023-4911, Targeting The ‘Looney Tunables’ Glibc Vulnerability In Various Linux Distributions

October 27, 2023

Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions. LooneyPwner is a proof-of-concept (PoC) exploit...

HackerOne Bug Bounty Disclosure: b-possibility-of-deface-through-translation-tool-www-mozilla-com-b-astrounder

October 27, 2023

Company Name: b'Mozilla Core Services' Company HackerOne URL: https://hackerone.com/mozilla_core_services Submitted By:b'astrounder'Link to Submitters Profile:https://hackerone.com/b'astrounder' Report Title:b'Possibility of Deface through translation...

HackerOne Bug Bounty Disclosure: b-race-condition-in-up-voting-and-down-voting-b-flashdisk

October 27, 2023

Company Name: b'Urban Dictionary' Company HackerOne URL: https://hackerone.com/urbandictionary Submitted By:b'flashdisk'Link to Submitters Profile:https://hackerone.com/b'flashdisk' Report Title:b'Race condition in up voting and...

HackerOne Bug Bounty Disclosure: b-cve-apache-airflow-dag-runs-broken-access-control-vulnerability-b-happyhacking

October 27, 2023

Company Name: b'Internet Bug Bounty' Company HackerOne URL: https://hackerone.com/ibb Submitted By:b'happyhacking123'Link to Submitters Profile:https://hackerone.com/b'happyhacking123' Report Title:b'CVE-2023-40611: Apache Airflow Dag Runs...

HackerOne Bug Bounty Disclosure: b-unauthorized-access-to-deleted-interviews-on-glassdoor-platform-b-frankcadillac

October 27, 2023

Company Name: b'Glassdoor' Company HackerOne URL: https://hackerone.com/glassdoor Submitted By:b'frankcadillac'Link to Submitters Profile:https://hackerone.com/b'frankcadillac' Report Title:b'Unauthorized Access to Deleted Interviews on Glassdoor...

Google Expands Its Bug Bounty Program to Tackle Artificial Intelligence Threats

October 27, 2023

Google has announced that it's expanding its Vulnerability Rewards Program (VRP) to compensate researchers for finding attack scenarios tailored to...

N. Korean Lazarus Group Targets Software Vendor Using Known Flaws

October 27, 2023

The North Korea-aligned Lazarus Group has been attributed as behind a new campaign in which an unnamed software vendor was...

CISA

CISA: CISA Announces Launch of Logging Made Easy

October 27, 2023

CISA Announces Launch of Logging Made Easy Today, CISA announces the launch of a new version of Logging Made Easy (LME)(link...

8608b057b14ead2afb17b174ac34323dedf5ecfbaf2313543b4aed4143aa63be

How to Keep Your Business Running in a Contested Environment

October 27, 2023

When organizations start incorporating cybersecurity regulations and cyber incident reporting requirements into their security protocols, it's essential for them to...

F5 Issues Warning: BIG-IP Vulnerability Allows Remote Code Execution

October 27, 2023

F5 has alerted customers of a critical security vulnerability impacting BIG-IP that could result in unauthenticated remote code execution. The...

Akira Ransomware Victim: Inventum Øst

October 27, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Akira Ransomware Victim: Stanford University

October 27, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Akira Ransomware Victim: CMC Group

October 27, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

LockBit 3.0 Ransomware Victim: doverchem[.]com

October 27, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: caminorealcs[.]org

October 27, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

TOTOLINK X2000R buffer overflow | CVE-2023-46554

October 27, 2023

NAME__________TOTOLINK X2000R buffer overflowPlatforms Affected:TOTOLINK X2000R 1.0.0-B20230221.0948.webRisk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________TOTOLINK X2000R is vulnerable to a stack-based buffer overflow, caused by...

Month: October 2023

Mailchecker – Cross-language Temporary (Disposable/Throwaway) Email Detection Library. Covers 55 734+ Fake Email Providers

LooneyPwner – Exploit Tool For CVE-2023-4911, Targeting The ‘Looney Tunables’ Glibc Vulnerability In Various Linux Distributions

HackerOne Bug Bounty Disclosure: b-possibility-of-deface-through-translation-tool-www-mozilla-com-b-astrounder

HackerOne Bug Bounty Disclosure: b-race-condition-in-up-voting-and-down-voting-b-flashdisk

HackerOne Bug Bounty Disclosure: b-cve-apache-airflow-dag-runs-broken-access-control-vulnerability-b-happyhacking

HackerOne Bug Bounty Disclosure: b-unauthorized-access-to-deleted-interviews-on-glassdoor-platform-b-frankcadillac

Google Expands Its Bug Bounty Program to Tackle Artificial Intelligence Threats

N. Korean Lazarus Group Targets Software Vendor Using Known Flaws

CISA: CISA Announces Launch of Logging Made Easy

How to Keep Your Business Running in a Contested Environment

F5 Issues Warning: BIG-IP Vulnerability Allows Remote Code Execution

Akira Ransomware Victim: Inventum Øst

Akira Ransomware Victim: Stanford University

Akira Ransomware Victim: CMC Group

LockBit 3.0 Ransomware Victim: doverchem[.]com

LockBit 3.0 Ransomware Victim: caminorealcs[.]org

TOTOLINK X2000R buffer overflow | CVE-2023-46554

TOTOLINK X2000R buffer overflow | CVE-2023-46564

TOTOLINK X2000R buffer overflow | CVE-2023-46562

TOTOLINK X2000R buffer overflow | CVE-2023-46559

TOTOLINK X2000R buffer overflow | CVE-2023-46544

RabbitMQ Java Client denial of service | CVE-2023-46120

TOTOLINK X2000R buffer overflow | CVE-2023-46555

dom4j information disclosure | CVE-2023-45960

A Fifth of UK Enterprises Uncertain About NIS2 Compliance Requirements

Scattered Spider Case: Five Arrested in Major Cybercrime Investigation

BianLian Ransomware Group Updates Tactics: A Growing Risk to Critical Infrastructure

Infostealer Malware Insights: VietCredCare vs. DuckTail in Vietnam

OSS-Fuzz Uses AI to Uncover 26 Security Vulnerabilities in Open Source Projects

You may have missed