CVE Alert: CVE-2025-23768
Vulnerability Summary: CVE-2025-23768 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound InFunding allows Reflected XSS....
Vulnerability Summary: CVE-2025-23768 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound InFunding allows Reflected XSS....
Vulnerability Summary: CVE-2025-23769 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Content Mirror allows Reflected...
Vulnerability Summary: CVE-2025-23874 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Block Pack allows...
Vulnerability Summary: CVE-2025-23867 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WordPress File Search allows...
Vulnerability Summary: CVE-2025-23846 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kolja Nolte Flexible Blogtitle allows...
Vulnerability Summary: CVE-2025-23812 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Contact Form 7 Round...
Vulnerability Summary: CVE-2025-23866 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EU DSGVO Helper allows...
Ransomware Group: CLOAK VICTIM NAME: Bwfgat NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: FOG VICTIM NAME: Kooijman Vianen (kooijmanvianennl) NOTE: No files or stolen information are by RedPacket Security. Any legal...
Ransomware Group: RANSOMHUB VICTIM NAME: archaeologicalresearchservicescom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: RANSOMHUB VICTIM NAME: samsillcom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CISA Releases Six Industrial Control Systems Advisories CISA released six Industrial Control Systems (ICS) advisories on January 23, 2025. These...
Ransomware Group: AKIRA VICTIM NAME: WorldNet Telecommunications LLC NOTE: No files or stolen information are by RedPacket Security. Any legal...
Ransomware Group: INCRANSOM VICTIM NAME: starkaerospacecom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: AKIRA VICTIM NAME: Enghouse (ex Navita) NOTE: No files or stolen information are by RedPacket Security. Any legal...
Vulnerability Summary: CVE-2025-23803 Cross-Site Request Forgery (CSRF) vulnerability in PQINA Snippy allows Reflected XSS. This issue affects Snippy: from n/a...
Vulnerability Summary: CVE-2025-23938 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound...
Vulnerability Summary: CVE-2025-23811 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP2APP allows Reflected XSS....
Vulnerability Summary: CVE-2025-23806 Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe allows Reflected XSS. This issue affects Ultimate Subscribe:...
Vulnerability Summary: CVE-2025-23932 Deserialization of Untrusted Data vulnerability in NotFound Quick Count allows Object Injection. This issue affects Quick Count:...
Vulnerability Summary: CVE-2025-23882 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Download Codes allows...
Vulnerability Summary: CVE-2025-23931 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound WordPress Local...
Vulnerability Summary: CVE-2025-23918 Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Smallerik File Browser allows Upload a Web...
Vulnerability Summary: CVE-2025-23910 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Menus Plus+...