North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware
The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw...
Month: October 2024
CovenantC2 Detected – 107[.]178[.]101[.]250:7443
The Information provided at the time of posting was detected as "Covenant C2". Depending on when you are viewing this...
CovenantC2 Detected – 138[.]68[.]188[.]35:7443
The Information provided at the time of posting was detected as "Covenant C2". Depending on when you are viewing this...
CVE Alert: CVE-2024-21276
Vulnerability Summary: CVE-2024-21276 Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Messages). Supported versions that...
CVE Alert: CVE-2024-21282
Vulnerability Summary: CVE-2024-21282 Vulnerability in the Oracle Financials product of Oracle E-Business Suite (component: Common Components). Supported versions that are...
CVE Alert: CVE-2024-21275
Vulnerability Summary: CVE-2024-21275 Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: User Interface). Supported versions that are...
CVE Alert: CVE-2024-21273
Vulnerability Summary: CVE-2024-21273 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected...
CVE Alert: CVE-2024-21274
Vulnerability Summary: CVE-2024-21274 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are...
[RANSOMHUB] – Ransomware Victim: G-plans[.]com
Ransomware Group: RANSOMHUB VICTIM NAME: G-planscom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[RANSOMHUB] – Ransomware Victim: Fpapak[.]org
Ransomware Group: RANSOMHUB VICTIM NAME: Fpapakorg NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CVE Alert: CVE-2024-21279
Vulnerability Summary: CVE-2024-21279 Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected...
CVE Alert: CVE-2024-21280
Vulnerability Summary: CVE-2024-21280 Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported versions that are...
CVE Alert: CVE-2024-21278
Vulnerability Summary: CVE-2024-21278 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award...
CVE Alert: CVE-2024-21281
Vulnerability Summary: CVE-2024-21281 Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Infrastructure). The supported...
CVE Alert: CVE-2024-21286
Vulnerability Summary: CVE-2024-21286 Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management product of Oracle PeopleSoft (component: Enterprise Learning Management)....
CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help Desk...
GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access
GitHub has released security updates for Enterprise Server (GHES) to address multiple issues, including a critical bug that could allow...
CVE Alert: CVE-2024-9594
Vulnerability Summary: CVE-2024-9594 A security issue was discovered in the Kubernetes Image Builder versions
CVE Alert: CVE-2024-21284
Vulnerability Summary: CVE-2024-21284 Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports). The supported...
CVE Alert: CVE-2024-31955
Vulnerability Summary: CVE-2024-31955 An issue was discovered in Samsung eMMC with KLMAG2GE4A and KLM8G1WEMB firmware. Code bypass through Electromagnetic Fault...
CVE Alert: CVE-2024-21283
Vulnerability Summary: CVE-2024-21283 Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for...
CVE Alert: CVE-2024-21285
Vulnerability Summary: CVE-2024-21285 Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Reports). The supported...
CVE Alert: CVE-2024-38204
Vulnerability Summary: CVE-2024-38204 Improper Access Control in Imagine Cup allows an authorized attacker to elevate privileges over a network. Affected...
CVE Alert: CVE-2024-38190
Vulnerability Summary: CVE-2024-38190 Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack...
