Month: April 2024

Node.js request smuggling | CVE-2024-27982

April 4, 2024

NAME__________Node.js request smugglingPlatforms Affected:Node.js Node.js 18.0 Node.js Node.js 20.0 Node.js Node.js 21.0Risk Level:5.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Node.js is vulnerable to HTTP request...

X.Org X server buffer overflow | CVE-2024-31080

April 4, 2024

NAME__________X.Org X server buffer overflowPlatforms Affected:X.Org X Server 21.1 X.Org Xwayland 23.2Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________X.Org X server is vulnerable to...

Cisco Emergency Responder cross-site request forgery | CVE-2024-20347

April 4, 2024

NAME__________Cisco Emergency Responder cross-site request forgeryPlatforms Affected:Cisco Emergency ResponderRisk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cisco Emergency Responder is vulnerable to cross-site request forgery,...

Cisco TelePresence Management Suite cross-site scripting | CVE-2024-20334

April 4, 2024

NAME__________Cisco TelePresence Management Suite cross-site scriptingPlatforms Affected:Cisco TelePresence Management Suite 14.1(1)M Cisco TelePresence Management Suite 15.9.0Risk Level:5.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Cisco TelePresence...

Cisco Unified Communications Manager IM & Presence Service cross-site scripting | CVE-2024-20310

April 4, 2024

NAME__________Cisco Unified Communications Manager IM & Presence Service cross-site scriptingPlatforms Affected:Cisco Unified Communications Manager IM 9.1 Cisco Presence Service 9.1...

Cisco Enterprise Chat and Email (ECE) cross-site scripting | CVE-2024-20367

April 4, 2024

NAME__________Cisco Enterprise Chat and Email (ECE) cross-site scriptingPlatforms Affected:Cisco Enterprise Chat and Email (ECE)Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Cisco Enterprise Chat and...

Open Automation Software OAS Platform security bypass | CVE-2024-22178

April 4, 2024

NAME__________Open Automation Software OAS Platform security bypassPlatforms Affected:Open Automation Software OAS Platform 19.00.0057Risk Level:4.9Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Open Automation Software OAS Platform...

X.Org X server buffer overflow | CVE-2024-31082

April 4, 2024

Open Automation Software OAS Platform denial of service | CVE-2024-24976

April 4, 2024

NAME__________Open Automation Software OAS Platform denial of servicePlatforms Affected:Open Automation Software OAS Platform 19.00.0057Risk Level:4.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Open Automation Software...

Open Automation Software OAS Platform security bypass | CVE-2024-27201

April 4, 2024

Open Automation Software OAS Platform security bypass | CVE-2024-21870

April 4, 2024

8 Base Ransomware Victim: YRW Limited – Chartered Accountants

April 4, 2024

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: APS – Automotive Parts Solutions

April 4, 2024

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: PWS – The Laundry Company

April 4, 2024

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

Critical Vulnerability in WordPress LayerSlider Plugin

April 4, 2024

LayerSlider has released updates to address a critical vulnerability (CVE-2024-2879) affecting their LayerSlider plugin for WordPress. The vulnerability has a...

Sliver C2 Detected – 8[.]222[.]176[.]223:31337

April 4, 2024

The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...

Sliver C2 Detected – 194[.]15[.]216[.]113:31337

April 4, 2024

The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...

Sliver C2 Detected – 143[.]198[.]3[.]13:31337

April 4, 2024

The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...

CISA

CISA: CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities

April 4, 2024

CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities Today, CISA and the...

CISA

CISA: Ivanti Releases Security Updates for Neurons for ITSM and Standalone Sentry

April 4, 2024

Ivanti Releases Security Updates for Neurons for ITSM and Standalone Sentry Ivanti has released security advisories to address vulnerabilities in...

CISA

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

April 4, 2024

CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...

CISA

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

April 4, 2024

CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...

CISA

CISA: CISA Releases Four Industrial Control Systems Advisories

April 4, 2024

CISA Releases Four Industrial Control Systems Advisories CISA released four Industrial Control Systems (ICS) advisories on March 26, 2024. These...

CISA

CISA: CISA Releases One Industrial Control Systems Advisory

April 4, 2024

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on April 2, 2024. These...

Month: April 2024

Node.js request smuggling | CVE-2024-27982

X.Org X server buffer overflow | CVE-2024-31080

Cisco Emergency Responder cross-site request forgery | CVE-2024-20347

Cisco TelePresence Management Suite cross-site scripting | CVE-2024-20334

Cisco Unified Communications Manager IM & Presence Service cross-site scripting | CVE-2024-20310

Cisco Enterprise Chat and Email (ECE) cross-site scripting | CVE-2024-20367

Open Automation Software OAS Platform security bypass | CVE-2024-22178

X.Org X server buffer overflow | CVE-2024-31082

Open Automation Software OAS Platform denial of service | CVE-2024-24976

Open Automation Software OAS Platform security bypass | CVE-2024-27201

Open Automation Software OAS Platform security bypass | CVE-2024-21870

8 Base Ransomware Victim: YRW Limited – Chartered Accountants

8 Base Ransomware Victim: APS – Automotive Parts Solutions

8 Base Ransomware Victim: PWS – The Laundry Company

Critical Vulnerability in WordPress LayerSlider Plugin

Sliver C2 Detected – 8[.]222[.]176[.]223:31337

Sliver C2 Detected – 194[.]15[.]216[.]113:31337

Sliver C2 Detected – 143[.]198[.]3[.]13:31337

CISA: CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate SQL Injection Vulnerabilities

CISA: Ivanti Releases Security Updates for Neurons for ITSM and Standalone Sentry

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: CISA Releases One Industrial Control Systems Advisory

[QILIN] – Ransomware Victim: patria[.]hu

New Phishing Kit Xiū gǒu Targets Users Across Five Countries With 2,000 Fake Sites

Fortifying the Future: Exploring Blockchain Security Challenges and Solutions

81% of US Small Businesses Affected by Data Breaches: Security Measures on the Rise

Surge in Malware Attacks: 236% Increase Targeting Government Sector

You may have missed