Vulnerabilities

CVE-2021-3908

November 16, 2021

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.

Summary:

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.

Reference Links(if available):

https://github.com/cloudflare/cfrpki/security/advisories/GHSA-g5gj-9ggf-9vmq

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)

Tags: CVE, CVE-2021-3908, MISC, Third Party Advisory, vulnerability

[AKIRA] – Ransomware Victim: Billet Precision (billetprecision[.]ca)

December 23, 2024

[CACTUS] – Ransomware Victim: ptcky[.]com

December 23, 2024

Cobalt Strike Beacon Detected – 112[.]124[.]71[.]123:443

December 23, 2024

Cobalt Strike Beacon Detected – 54[.]238[.]39[.]64:443

December 23, 2024

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:80

December 23, 2024

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

[AKIRA] – Ransomware Victim: Billet Precision (billetprecision[.]ca)

[CACTUS] – Ransomware Victim: ptcky[.]com

Cobalt Strike Beacon Detected – 112[.]124[.]71[.]123:443

Cobalt Strike Beacon Detected – 54[.]238[.]39[.]64:443

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:80