CISA: CISA Releases Eight Industrial Control Systems Advisories
CISA Releases Eight Industrial Control Systems Advisories CISA released eight Industrial Control Systems (ICS) advisories on January 30, 2024. These...
Month: February 2024
CISA: Juniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX Series
Juniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX Series Juniper Networks released a security...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA: Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways
Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways Note: CISA...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA: Moby and Open Container Initiative Release Critical Updates for Multiple Vulnerabilities Affecting Docker-related Components
Moby and Open Container Initiative Release Critical Updates for Multiple Vulnerabilities Affecting Docker-related Components Moby and the Open Container Initiative...
CISA: Juniper Networks Releases Security Bulletin for Juniper Secure Analytics
Juniper Networks Releases Security Bulletin for Juniper Secure Analytics Juniper Networks released a security bulletin to address multiple vulnerabilities affecting...
CISA: CISA and FBI Release Secure by Design Alert Urging Manufacturers to Eliminate Defects in SOHO Routers
CISA and FBI Release Secure by Design Alert Urging Manufacturers to Eliminate Defects in SOHO Routers Today, CISA and the...
CISA: CISA Releases Two Industrial Control Systems Advisories
CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on February 1, 2024. These...
Medusa Locker Ransomware Victim: Digitel Venezuela
Medusa Locker Logo NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...
LockBit 3.0 Ransomware Victim: securinux[.]net
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Emerson Rosemount GC370XA, GC700XA, GC1500XA information disclosure | CVE-2023-43609
NAME__________Emerson Rosemount GC370XA, GC700XA, GC1500XA information disclosurePlatforms Affected:Emerson Rosemount GC370XA Emerson Rosemount GC700XA Emerson Rosemount GC1500XARisk Level:6.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Emerson Rosemount...
Login System with Email Verification SQL injection | CVE-2024-24139
NAME__________Login System with Email Verification SQL injectionPlatforms Affected:Sourcecodester Login System with Email Verification 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Login System with Email...
Embedthis GoAhead Web Server cross-site scripting |
NAME__________Embedthis GoAhead Web Server cross-site scriptingPlatforms Affected:Goahead Goahead Webserver 2.5Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Embedthis GoAhead Web Server is vulnerable to cross-site...
Product Inventory with Export to Excel cross-site scripting | CVE-2024-24135
NAME__________Product Inventory with Export to Excel cross-site scriptingPlatforms Affected:Sourcecodester Product Inventory with Export to Excel 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Product Inventory...
Math Game with Leaderboard cross-site scripting | CVE-2024-24136
NAME__________Math Game with Leaderboard cross-site scriptingPlatforms Affected:Sourcecodester Math Game with Leaderboard 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Math Game with Leaderboard is vulnerable...
Online Food Menu cross-site scripting | CVE-2024-24134
NAME__________Online Food Menu cross-site scriptingPlatforms Affected:Sourcecodester Online Food Menu 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Online Food Menu is vulnerable to cross-site scripting,...
HOME SPOT CUBE2 buffer overflow | CVE-2024-21780
NAME__________HOME SPOT CUBE2 buffer overflowPlatforms Affected:KDDI HOME SPOT CUBE2 102Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________HOME SPOT CUBE2 is vulnerable to a stack-based...
OpenHarmony denial of service | CVE-2024-21863
NAME__________OpenHarmony denial of servicePlatforms Affected:OpenHarmony OpenHarmony 3.2.0 OpenHarmony OpenHarmony 3.2.4 OpenHarmony OpenHarmony 4.0.0 OpenHarmony OpenHarmony 4.0.1Risk Level:4.7Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________OpenHarmony...
Daily Habit Tracker SQL injection | CVE-2024-24140
NAME__________Daily Habit Tracker SQL injectionPlatforms Affected:Sourcecodester Daily Habit Tracker 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Daily Habit Tracker is vulnerable to SQL injection....
School Task Manager SQL injection | CVE-2024-24141
NAME__________School Task Manager SQL injectionPlatforms Affected:Sourcecodester School Task Manager 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________School Task Manager is vulnerable to SQL injection....
The GNU C Library (glibc) denial of service | CVE-2023-6780
NAME__________The GNU C Library (glibc) denial of servicePlatforms Affected:GNU glibc 2.37 GNU glibc 2.38Risk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________The GNU C...
Mastodon Vulnerability Allows Hackers to Hijack Any Decentralized Account
The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over...
U.S. Sanctions 6 Iranian Officials for Critical Infrastructure Cyber Attacks
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) announced sanctions against six officials associated with the Iranian intelligence...
