LockBit 3.0 Ransomware Victim: ribolia[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Month: November 2023
UserPro Plugin for WordPress information disclosure | CVE-2023-2446
NAME__________UserPro Plugin for WordPress information disclosurePlatforms Affected:WordPress UserPro Plugin for WordPress 5.1.0Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________UserPro Plugin for WordPress could allow...
OpenHarmony information disclosure | CVE-2023-46100
NAME__________OpenHarmony information disclosurePlatforms Affected:Risk Level:6.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________OpenHarmony could allow a local attacker to obtain sensitive information, caused by the use...
UserPro Plugin for WordPress cross-site request forgery | CVE-2023-2438
NAME__________UserPro Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress UserPro Plugin for WordPress 5.1.0Risk Level:6.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________UserPro Plugin for WordPress is...
UserPro Plugin for WordPress cross-site request forgery | CVE-2023-2447
NAME__________UserPro Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress UserPro Plugin for WordPress 5.1.0Risk Level:6.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________UserPro Plugin for WordPress is...
UserPro Plugin for WordPress security bypass | CVE-2023-2448
NAME__________UserPro Plugin for WordPress security bypassPlatforms Affected:WordPress UserPro Plugin for WordPress 5.1.0Risk Level:6.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________UserPro Plugin for WordPress could allow...
OpenHarmony denial of service | CVE-2023-47217
NAME__________OpenHarmony denial of servicePlatforms Affected:Risk Level:4Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________OpenHarmony is vulnerable to a denial of service, caused by a buffer...
Anywhere Flash Embed Plugin for WordPress cross-site scripting | CVE-2023-47811
NAME__________Anywhere Flash Embed Plugin for WordPress cross-site scriptingPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Anywhere Flash Embed Plugin for WordPress is vulnerable to...
Add Widgets to Page Plugin for WordPress cross-site scripting | CVE-2023-47808
NAME__________Add Widgets to Page Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Add Widgets to Page Plugin for WordPress 1.3.2Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting...
BP Profile Shortcodes Extra Plugin for WordPress cross-site scripting | CVE-2023-47815
NAME__________BP Profile Shortcodes Extra Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress BP Profile Shortcodes Extra Plugin for WordPress 2.5.2Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting...
Bamboo Columns Plugin for WordPress cross-site scripting | CVE-2023-47812
NAME__________Bamboo Columns Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Bamboo Columns Plugin for WordPress 1.6.1Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Bamboo Columns Plugin for...
BMI Calculator Plugin for WordPress cross-site scripting | CVE-2023-47814
NAME__________BMI Calculator Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress BMI Calculator Plugin for WordPress 1.0.3Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________BMI Calculator Plugin for...
Elastic Elasticsearch denial of service | CVE-2023-46673
NAME__________Elastic Elasticsearch denial of servicePlatforms Affected:Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Elastic Elasticsearch is vulnerable to a denial of service, caused by...
Accordion Plugin for WordPress cross-site scripting | CVE-2023-47809
NAME__________Accordion Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Accordion Plugin for WordPress 2.6Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Accordion Plugin for WordPress is vulnerable...
Ajax Domain Checker Plugin for WordPress cross-site scripting | CVE-2023-47810
NAME__________Ajax Domain Checker Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress UserPro Plugin for WordPress 5.1.0Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Ajax Domain Checker Plugin...
Charitable Plugin for WordPress cross-site scripting | CVE-2023-47816
NAME__________Charitable Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Charitable Plugin for WordPress 1.7.0.13Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Charitable Plugin for WordPress is vulnerable...
Daily Prayer Time Plugin for WordPress cross-site scripting | CVE-2023-47817
NAME__________Daily Prayer Time Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Daily Prayer Time Plugin for WordPress 2023.10.13Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Daily Prayer...
Better RSS Widget Plugin for WordPress cross-site scripting | CVE-2023-47813
NAME__________Better RSS Widget Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Better RSS Widget Plugin for WordPress 2.8.1Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Better RSS...
New ‘HrServ.dll’ Web Shell Detected in APT Attack Targeting Afghan Government
An unspecified government entity in Afghanistan was targeted by a previously undocumented web shell called HrServ in what's suspected to...
UK and South Korea: Hackers use zero-day in supply-chain attack
The National Cyber Security Centre (NCSC) and Korea's National Intelligence Service (NIS) warn that the North Korean Lazarus hacking group...
Cyberattack on IT provider CTS impacts dozens of UK law firms
A cyberattack on CTS, a leading managed service provider (MSP) for law firms and other organizations in the UK legal...
Critical bug in ownCloud file sharing app exposes admin passwords
Open source file sharing software ownCloud is warning of three critical-severity security vulnerabilities, including one that can expose administrator passwords...
CISA Launches Project to Assess Effectiveness of Security Controls
The US Cybersecurity and Infrastructure Security Agency (CISA) has relaunched a key working group, with ambitious plans to understand the...
Black Friday: Phishing Emails Soar 237%
Security researchers have warned of triple-digit increase in the volume of phishing emails designed to trick shoppers, ahead of the...
