Month: November 2023

MiniCMS cross-site scripting | CVE-2023-46378

November 6, 2023

NAME__________MiniCMS cross-site scriptingPlatforms Affected:MiniCMS MiniCMS 1.1.1Risk Level:7.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________MiniCMS is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

ZenTaoPMS cross-site scripting | CVE-2023-46475

November 6, 2023

NAME__________ZenTaoPMS cross-site scriptingPlatforms Affected:ZentaoPMS ZentaoPMS 18.3Risk Level:6.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________ZenTaoPMS is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

pkp/pkp-lib cross-site scripting | CVE-2023-5890

November 6, 2023

NAME__________pkp/pkp-lib cross-site scriptingPlatforms Affected:pkp pkp-lib 3.4.0-3Risk Level:4.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________pkp/pkp-lib is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

U.S. Treasury Sanctions Russian Money Launderer in Cybercrime Crackdown

November 6, 2023

The U.S. Department of the Treasury imposed sanctions against a Russian woman for taking part in the laundering of virtual...

Google Play Store Highlights ‘Independent Security Review’ Badge for VPN Apps

November 6, 2023

Google is rolling out a new banner to highlight the "Independent security review" badge in the Play Store's Data safety...

Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel

November 6, 2023

Google is warning of multiple threat actors sharing a public proof-of-concept (PoC) exploit that leverages its Calendar service to host...

Abyss Ransomware Victim: lathamcenters[.]org

November 6, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Socks5Systemz proxy service infects 10,000 systems worldwide

November 6, 2023

A proxy botnet called 'Socks5Systemz' has been infecting computers worldwide via the 'PrivateLoader' and 'Amadey' malware loaders, currently counting 10,000...

GamingMonk – 654,510 breached accounts

November 6, 2023

HIBP In December 2020, India's "largest esports community" GamingMonk (since acquired by and redirected to MPL Esports), suffered a data...

News

US-CERT Vulnerability Summary for the Week of October 23, 2023

November 5, 2023

High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch Info projectworlds_pvt._limited -- online_art_gallery Online Art Gallery v1.0 is vulnerable to multiple...

20e050c1a41072e44f089090981c2198c71522669761c6cf602268918094924e

NetworkAssessment – With Wireshark Or TCPdump, You Can Determine Whether There Is Harmful Activity On Your Network Traffic That You Have Recorded On The Network You Monitor

November 5, 2023

The Network Compromise Assessment Tool is designed to analyze pcap files to detect potential suspicious network traffic. This tool focuses...

HackerOne Bug Bounty Disclosure: b-cross-site-request-forgery-b-pascal-geuter

November 5, 2023

Company Name: b'ownCloud' Company HackerOne URL: https://hackerone.com/owncloud Submitted By:b'pascal_geuter'Link to Submitters Profile:https://hackerone.com/b'pascal_geuter' Report Title:b'Cross-Site Request Forgery 'Report Link:https://hackerone.com/reports/2041007Date Submitted:05 November...