Cobalt Strike Beacon Detected – 39[.]105[.]8[.]82:12345
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
threatintel
CVE Alert: CVE-2024-13370
Vulnerability Summary: CVE-2024-13370 The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress...
CVE Alert: CVE-2024-12113
Vulnerability Summary: CVE-2024-12113 The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress...
CVE Alert: CVE-2024-12076
Vulnerability Summary: CVE-2024-12076 The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions...
CVE Alert: CVE-2024-12512
Vulnerability Summary: CVE-2024-12512 The Ask Me Anything (Anonymously) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's...
CVE Alert: CVE-2024-11825
Vulnerability Summary: CVE-2024-11825 The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘zone’ parameter in all...
CVE Alert: CVE-2024-13368
Vulnerability Summary: CVE-2024-13368 The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress...
CVE Alert: CVE-2024-12817
Vulnerability Summary: CVE-2024-12817 The Etsy Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_link' shortcode...
CVE Alert: CVE-2024-12826
Vulnerability Summary: CVE-2024-12826 The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due...
CVE Alert: CVE-2024-12816
Vulnerability Summary: CVE-2024-12816 The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's...
CVE Alert: CVE-2024-12885
Vulnerability Summary: CVE-2024-12885 The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file...
[GDLOCKERSEC] – Ransomware Victim: www[.]fgse[.]cu[.]edu[.]eg
Ransomware Group: GDLOCKERSEC VICTIM NAME: wwwfgsecuedueg NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[SPACEBEARS] – Ransomware Victim: Metro Wire & Cable
Ransomware Group: SPACEBEARS VICTIM NAME: Metro Wire & Cable NOTE: No files or stolen information are by RedPacket Security. Any...
[KILLSEC] – Ransomware Victim: Let’s Secure Insurance
Ransomware Group: KILLSEC VICTIM NAME: Let’s Secure Insurance NOTE: No files or stolen information are by RedPacket Security. Any legal...
[FUNKSEC] – Ransomware Victim: punjab[.]gov[.]in
Ransomware Group: FUNKSEC VICTIM NAME: punjabgovin NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CVE Alert: CVE-2024-13441
Vulnerability Summary: CVE-2024-13441 The Bilingual Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bl_otherlang_link_1 parameter in...
CVE Alert: CVE-2024-13550
Vulnerability Summary: CVE-2024-13550 The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and...
CVE Alert: CVE-2024-13548
Vulnerability Summary: CVE-2024-13548 The Power Ups for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's...
CVE Alert: CVE-2024-13467
Vulnerability Summary: CVE-2024-13467 The WP Contact Form7 Email Spam Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via...
CVE Alert: CVE-2024-13458
Vulnerability Summary: CVE-2024-13458 The WordPress SEO Friendly Accordion FAQ with AI assisted content generation plugin for WordPress is vulnerable to...
CVE Alert: CVE-2024-13599
Vulnerability Summary: CVE-2024-13599 The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all...
CVE Alert: CVE-2024-13551
Vulnerability Summary: CVE-2024-13551 The ABC Notation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'abcjs' shortcode...
CVE Alert: CVE-2024-13586
Vulnerability Summary: CVE-2024-13586 The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode...
CVE Alert: CVE-2024-13450
Vulnerability Summary: CVE-2024-13450 The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom...
