CVE Alert: CVE-2024-42514
Vulnerability Summary: CVE-2024-42514 A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an...
threatintel
CVE Alert: CVE-2024-9401
Vulnerability Summary: CVE-2024-9401 Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some...
CVE Alert: CVE-2024-9400
Vulnerability Summary: CVE-2024-9400 A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an...
CVE Alert: CVE-2024-46081
Vulnerability Summary: CVE-2024-46081 Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious...
[INCRANSOM] – Ransomware Victim: Quantum Healthcare
Ransomware Group: INCRANSOM VICTIM NAME: Quantum Healthcare NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[TRINITY] – Ransomware Victim: FoccoERP
Ransomware Group: TRINITY VICTIM NAME: FoccoERP NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CVE Alert: CVE-2024-47527
Vulnerability Summary: CVE-2024-47527 LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Device...
CVE Alert: CVE-2024-9355
Vulnerability Summary: CVE-2024-9355 A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause...
CVE Alert: CVE-2024-9411
Vulnerability Summary: CVE-2024-9411 A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of...
CVE Alert: CVE-2024-46083
Vulnerability Summary: CVE-2024-46083 Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious...
CVE Alert: CVE-2024-9341
Vulnerability Summary: CVE-2024-9341 A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may...
CVE Alert: CVE-2024-9407
Vulnerability Summary: CVE-2024-9407 A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not...
CVE Alert: CVE-2024-47523
Vulnerability Summary: CVE-2024-47523 LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Alert...
CVE Alert: CVE-2024-47525
Vulnerability Summary: CVE-2024-47525 LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerability in the "Alert...
CVE Alert: CVE-2024-47524
Vulnerability Summary: CVE-2024-47524 LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can create a Device Groups,...
CVE Alert: CVE-2024-47526
Vulnerability Summary: CVE-2024-47526 LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Self Cross-Site Scripting (Self-XSS) vulnerability in the "Alert...
[STORMOUS] – Ransomware Victim: Acuity Advisor
Ransomware Group: STORMOUS VICTIM NAME: Acuity Advisor NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
CISA: ASD’s ACSC, CISA, FBI, NSA, and International Partners Release Guidance on Principles of OT Cybersecurity for Critical Infrastructure Organizations
ASD’s ACSC, CISA, FBI, NSA, and International Partners Release Guidance on Principles of OT Cybersecurity for Critical Infrastructure Organizations Today,...
BudTrader – 2,721,185 breached accounts
HIBP In July 2024, a data breach of the now defunct cannabis social platform BudTrader was posted for sale on...
CVE Alert: CVE-2024-3635
Vulnerability Summary: CVE-2024-3635 The Post Grid WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings,...
CVE Alert: CVE-2024-8449
Vulnerability Summary: CVE-2024-8449 Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an...
CVE Alert: CVE-2024-8451
Vulnerability Summary: CVE-2024-8451 Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests,...
CVE Alert: CVE-2024-8452
Vulnerability Summary: CVE-2024-8452 Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in...
CVE Alert: CVE-2024-8448
Vulnerability Summary: CVE-2024-8448 Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote...
