CVE Alert: CVE-2025-0474
Vulnerability Summary: CVE-2025-0474 Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network...
Month: January 2025
CVE Alert: CVE-2025-21131
Vulnerability Summary: CVE-2025-21131 Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result...
CVE Alert: CVE-2024-56374
Vulnerability Summary: CVE-2024-56374 An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack...
CVE Alert: CVE-2025-21128
Vulnerability Summary: CVE-2025-21128 Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could...
CVE Alert: CVE-2025-21130
Vulnerability Summary: CVE-2025-21130 Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result...
CVE Alert: CVE-2025-21129
Vulnerability Summary: CVE-2025-21129 Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could...
[APT73] – Ransomware Victim: betclic[.]com
Ransomware Group: APT73 VICTIM NAME: betcliccom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[LYNX] – Ransomware Victim: Lowe Engineers
Ransomware Group: LYNX VICTIM NAME: Lowe Engineers NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
HackerOne Bug Bounty Disclosure: netrc-and-redirect-credential-leak-nyymi
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:nyymiLink to Submitters Profile:https://hackerone.com/nyymi Report Title:netrc and redirect credential leakReport...
[LYNX] – Ransomware Victim: Woodport Doors
Ransomware Group: LYNX VICTIM NAME: Woodport Doors NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[FUNKSEC] – Ransomware Victim: barilga[.]gov[.]mn
Ransomware Group: FUNKSEC VICTIM NAME: barilgagovmn NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CVE Alert: CVE-2025-21133
Vulnerability Summary: CVE-2025-21133 Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability...
CVE Alert: CVE-2025-21127
Vulnerability Summary: CVE-2025-21127 Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that...
CVE Alert: CVE-2025-21134
Vulnerability Summary: CVE-2025-21134 Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability...
CVE Alert: CVE-2025-21132
Vulnerability Summary: CVE-2025-21132 Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result...
CVE Alert: CVE-2025-21122
Vulnerability Summary: CVE-2025-21122 Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability...
CVE Alert: CVE-2025-23041
Vulnerability Summary: CVE-2025-23041 Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for...
CVE Alert: CVE-2024-55921
Vulnerability Summary: CVE-2024-55921 TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the...
CVE Alert: CVE-2024-55892
Vulnerability Summary: CVE-2024-55892 TYPO3 is a free and open source Content Management Framework. Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally...
CVE Alert: CVE-2024-55891
Vulnerability Summary: CVE-2024-55891 TYPO3 is a free and open source Content Management Framework. It has been discovered that the install...
CVE Alert: CVE-2024-48858
Vulnerability Summary: CVE-2024-48858 Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could...
[LYNX] – Ransomware Victim: communisis[.]com & paragon[.]world
Ransomware Group: LYNX VICTIM NAME: communisiscom & paragonworld NOTE: No files or stolen information are by RedPacket Security. Any legal...
Cobalt Strike Beacon Detected – 154[.]64[.]231[.]1:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 47[.]92[.]135[.]251:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
