Category: RedPacket Security

Phoenix – 74,776 breached accounts

In mid-2021, the “vintage messaging reborn” service Phoenix suffered a data breach that exposed 75k… This article has been indexed from RedPacket Security Read the original article: Phoenix – 74,776 breached accounts

Medusa Locker Ransomware Victim: EDB

  NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues… This article has been indexed from RedPacket Security Read the original article: Medusa Locker Ransomware Victim: EDB

Medusa Locker Ransomware Victim: ATI Traduction

  NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues… This article has been indexed from RedPacket Security Read the original article: Medusa Locker Ransomware Victim: ATI Traduction

Medusa Locker Ransomware Victim: Global Product Sales

  NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues… This article has been indexed from RedPacket Security Read the original article: Medusa Locker Ransomware Victim: Global Product Sales

Medusa Locker Ransomware Victim: Believe Productions

  NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues… This article has been indexed from RedPacket Security Read the original article: Medusa Locker Ransomware Victim: Believe Productions

Black Basta Ransomware Victim: PIEMME S[.]p[.]A[.]

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Black Basta Ransomware Victim: PIEMME S[.]p[.]A[.]

Black Basta Ransomware Victim: BACCARAT

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Black Basta Ransomware Victim: BACCARAT

Black Basta Ransomware Victim: Edwardian Hotels London

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Black Basta Ransomware Victim: Edwardian Hotels London

Black Basta Ransomware Victim: STANTON WILLIAMS

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Black Basta Ransomware Victim: STANTON WILLIAMS

Black Basta Ransomware Victim: HAFFNER GmbH Co[.]

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Black Basta Ransomware Victim: HAFFNER GmbH Co[.]

GPAC denial of service | CVE-2023-5586

NAME__________GPAC denial of service Platforms Affected:GPAC GPAC 0.7.2 GPAC GPAC 0.8.0 GPAC GPAC 1.0.0 GPAC… This article has been indexed from RedPacket Security Read the original article: GPAC denial of service | CVE-2023-5586

GPAC denial of service | CVE-2023-5595

NAME__________GPAC denial of service Platforms Affected:GPAC GPAC 0.7.2 GPAC GPAC 0.8.0 GPAC GPAC 1.0.0 GPAC… This article has been indexed from RedPacket Security Read the original article: GPAC denial of service | CVE-2023-5595

LockBit 3.0 Ransomware Victim: cpstate[.]org

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: LockBit 3.0 Ransomware Victim: cpstate[.]org

LockBit 3.0 Ransomware Victim: sdproducts[.]co[.]uk

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: LockBit 3.0 Ransomware Victim: sdproducts[.]co[.]uk

Netis N3Mv2 denial of service | CVE-2023-45463

NAME__________Netis N3Mv2 denial of service Platforms Affected:Netis N3Mv2 1.0.1.865 Risk Level:7.5 Exploitability:Unproven Consequences:Denial of Service… This article has been indexed from RedPacket Security Read the original article: Netis N3Mv2 denial of service | CVE-2023-45463

Microsoft Edge (Chromium-based) spoofing | CVE-2023-36559

NAME__________Microsoft Edge (Chromium-based) spoofing Platforms Affected:Microsoft Edge (Chromium-based) Risk Level:4.2 Exploitability:Unproven Consequences:Gain Access DESCRIPTION__________ Microsoft… This article has been indexed from RedPacket Security Read the original article: Microsoft Edge (Chromium-based) spoofing | CVE-2023-36559

HP ThinUpdate information disclosure | CVE-2023-4499

NAME__________HP ThinUpdate information disclosure Platforms Affected:HP ThinUpdate Risk Level:4.8 Exploitability:Unproven Consequences:Obtain Information DESCRIPTION__________ HP ThinUpdate… This article has been indexed from RedPacket Security Read the original article: HP ThinUpdate information disclosure | CVE-2023-4499

ZZZCMS cross-site scripting | CVE-2023-5582

NAME__________ZZZCMS cross-site scripting Platforms Affected:ZZZCMS ZZZCMS 2.2.0 Risk Level:3.5 Exploitability:High Consequences:Cross-Site Scripting DESCRIPTION__________ ZZZCMS is… This article has been indexed from RedPacket Security Read the original article: ZZZCMS cross-site scripting | CVE-2023-5582

CACTUS Ransomware Victim: www[.]ovt[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: CACTUS Ransomware Victim: www[.]ovt[.]com

CACTUS Ransomware Victim: www[.]scsivrea[.]it

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: CACTUS Ransomware Victim: www[.]scsivrea[.]it

Cisco IOS XE Escalation of Privilege Vulnerability

A vulnerability was identified in Cisco IOS XE. A remote attacker could exploit this vulnerability to trigger elevation of privilege… This article has been indexed from RedPacket Security Read the original article: Cisco IOS XE Escalation of Privilege Vulnerability

HackerOne Bug Bounty Disclosure: b-inviting-excessive-long-email-addresses-to-a-calendar-event-makes-the-server-unresponsive-b-shuvam

Company Name: b’Nextcloud’ Company HackerOne URL: https://hackerone.com/nextcloud Submitted By:b’shuvam321′ Link to Submitters Profile:https://hackerone.com/b’shuvam321′ Report Title:b’Inviting… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-inviting-excessive-long-email-addresses-to-a-calendar-event-makes-the-server-unresponsive-b-shuvam

HackerOne Bug Bounty Disclosure: b-critical-curl-cve-vulnerability-code-changes-are-disclosed-on-the-internet-b-shelldoit

Company Name: b’curl’ Company HackerOne URL: https://hackerone.com/curl Submitted By:b’shelldoit’ Link to Submitters Profile:https://hackerone.com/b’shelldoit’ Report Title:b'[Critical]… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-critical-curl-cve-vulnerability-code-changes-are-disclosed-on-the-internet-b-shelldoit

Black Basta Ransomware Victim: NCC_2

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Black Basta Ransomware Victim: NCC_2

Black Basta Ransomware Victim: DOMAIN-BACCARAT_2

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Black Basta Ransomware Victim: DOMAIN-BACCARAT_2

Knight Ransomware Victim: Kinesis Film Srl

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Knight Ransomware Victim: Kinesis Film Srl

Knight Ransomware Victim: Decarie Motors Inc

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Knight Ransomware Victim: Decarie Motors Inc

Knight Ransomware Victim: Hacketts printing services

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Knight Ransomware Victim: Hacketts printing services

Knight Ransomware Victim: GDL Logística Integrada S[.]A

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Knight Ransomware Victim: GDL Logística Integrada S[.]A

Node.js Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Node.js. A remote attacker can exploit these vulnerabilities to… This article has been indexed from RedPacket Security Read the original article: Node.js Multiple Vulnerabilities

HackerOne Bug Bounty Disclosure: b-client-side-string-length-check-b-tomh

Company Name: b’Khan Academy’ Company HackerOne URL: https://hackerone.com/khanacademy Submitted By:b’tomh’ Link to Submitters Profile:https://hackerone.com/b’tomh’ Report… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-client-side-string-length-check-b-tomh

Koha Library Software information disclosure | CVE-2023-44962

NAME__________Koha Library Software information disclosure Platforms Affected:Koha Koha Library Software 23.05.04 Risk Level:5.3 Exploitability:Unproven Consequences:Obtain… This article has been indexed from RedPacket Security Read the original article: Koha Library Software information disclosure | CVE-2023-44962

Sante DICOM Viewer Pro code execution | CVE-2023-39431

NAME__________Sante DICOM Viewer Pro code execution Platforms Affected:Santesoft Sante DICOM Viewer 12.2.5 Risk Level:7.8 Exploitability:Unproven… This article has been indexed from RedPacket Security Read the original article: Sante DICOM Viewer Pro code execution | CVE-2023-39431

BianLian Ransomware Victim: Instron & ITW Inc

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: BianLian Ransomware Victim: Instron & ITW Inc

BianLian Ransomware Victim: Pelindo

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: BianLian Ransomware Victim: Pelindo

BianLian Ransomware Victim: Air Canada

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: BianLian Ransomware Victim: Air Canada

HackerOne Bug Bounty Disclosure: b-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net-b-holybugx

Company Name: b’Mozilla Core Services’ Company HackerOne URL: https://hackerone.com/mozilla_core_services Submitted By:b’holybugx’ Link to Submitters Profile:https://hackerone.com/b’holybugx’… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net-b-holybugx

HackerOne Bug Bounty Disclosure: b-admin-mytva-com-customer-lookup-and-internal-notes-bypass-b-itssixtynein

Company Name: b’Tennessee Valley Authority’ Company HackerOne URL: https://hackerone.com/tennessee-valley-authority Submitted By:b’itssixtynein’ Link to Submitters Profile:https://hackerone.com/b’itssixtynein’… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-admin-mytva-com-customer-lookup-and-internal-notes-bypass-b-itssixtynein

HackerOne Bug Bounty Disclosure: b-exposing-django-debug-panel-and-sensitive-infrastructure-information-at-https-dev-fxprivaterelay-nonprod-cloudops-mozgcp-net-b-aliend

Company Name: b’Mozilla Core Services’ Company HackerOne URL: https://hackerone.com/mozilla_core_services Submitted By:b’aliend89′ Link to Submitters Profile:https://hackerone.com/b’aliend89′… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-exposing-django-debug-panel-and-sensitive-infrastructure-information-at-https-dev-fxprivaterelay-nonprod-cloudops-mozgcp-net-b-aliend

HackerOne Bug Bounty Disclosure: b-xss-reflected-pqm-tva-com-b-tvmbug

Company Name: b’Tennessee Valley Authority’ Company HackerOne URL: https://hackerone.com/tennessee-valley-authority Submitted By:b’tvmbug’ Link to Submitters Profile:https://hackerone.com/b’tvmbug’… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-xss-reflected-pqm-tva-com-b-tvmbug

HackerOne Bug Bounty Disclosure: b-potential-spoofing-risk-through-firefox-private-relay-service-b-nicholas-cw

Company Name: b’Mozilla Core Services’ Company HackerOne URL: https://hackerone.com/mozilla_core_services Submitted By:b’nicholas_cw’ Link to Submitters Profile:https://hackerone.com/b’nicholas_cw’… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-potential-spoofing-risk-through-firefox-private-relay-service-b-nicholas-cw

Unisoc Chipsets information disclosure | CVE-2023-40632

NAME__________Unisoc Chipsets information disclosure Platforms Affected:Unisoc SC9863A Unisoc SC9832E Unisoc SC7731E Unisoc T610 Unisoc T606… This article has been indexed from RedPacket Security Read the original article: Unisoc Chipsets information disclosure | CVE-2023-40632

Samba denial of service | CVE-2023-42670

NAME__________Samba denial of service Platforms Affected:Samba Samba 4.17 Samba Samba 4.18.0 Samba Samba 4.19 Risk… This article has been indexed from RedPacket Security Read the original article: Samba denial of service | CVE-2023-42670

Microsoft Windows TCP/IP denial of service | CVE-2023-36603

NAME__________Microsoft Windows TCP/IP denial of service Platforms Affected:Microsoft Windows Server 2019 Microsoft Windows 10 1809… This article has been indexed from RedPacket Security Read the original article: Microsoft Windows TCP/IP denial of service | CVE-2023-36603

Samba denial of service | CVE-2023-42669

NAME__________Samba denial of service Platforms Affected:Samba Samba 4.17 Samba Samba 4.18.0 Samba Samba 4.19 Risk… This article has been indexed from RedPacket Security Read the original article: Samba denial of service | CVE-2023-42669

Siemens SICAM PAS/PQS privilege escalation | CVE-2023-45205

NAME__________Siemens SICAM PAS/PQS privilege escalation Platforms Affected:Siemens SICAM PAS 8.00 Siemens SICAM PAS 8.21 Siemens… This article has been indexed from RedPacket Security Read the original article: Siemens SICAM PAS/PQS privilege escalation | CVE-2023-45205

Ransomware attacks now target unpatched WS_FTP servers

Internet-exposed WS_FTP servers unpatched against a maximum severity vulnerability are now targeted in ransomware attacks. … This article has been indexed from RedPacket Security Read the original article: Ransomware attacks now target unpatched WS_FTP servers

HackerOne Bug Bounty Disclosure: b-stored-xss-at-nordvpn-com-b-tvmbug

Company Name: b’Nord Security’ Company HackerOne URL: https://hackerone.com/nordsecurity Submitted By:b’tvmbug’ Link to Submitters Profile:https://hackerone.com/b’tvmbug’ Report… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-stored-xss-at-nordvpn-com-b-tvmbug

Medusa Locker Ransomware Victim: ZOUARY & Associés

  NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues… This article has been indexed from RedPacket Security Read the original article: Medusa Locker Ransomware Victim: ZOUARY & Associés

Medusa Locker Ransomware Victim: Neodata

  NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues… This article has been indexed from RedPacket Security Read the original article: Medusa Locker Ransomware Victim: Neodata

Medusa Locker Ransomware Victim: Evasión

  NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues… This article has been indexed from RedPacket Security Read the original article: Medusa Locker Ransomware Victim: Evasión

Medusa Locker Ransomware Victim: SIMTA

  NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues… This article has been indexed from RedPacket Security Read the original article: Medusa Locker Ransomware Victim: SIMTA

Dark Angel Victim: Go-Ahead Group

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Dark Angel Victim: Go-Ahead Group

Dark Angel Victim: Robins & Morton

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Dark Angel Victim: Robins & Morton

Dark Angel Victim: Roper & Vertafore

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Dark Angel Victim: Roper & Vertafore

Dark Angel Victim: CannonDesign

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: Dark Angel Victim: CannonDesign

SAP Business One information disclosure | CVE-2023-41365

NAME__________SAP Business One information disclosure Platforms Affected:SAP Business One 10 Risk Level:4.3 Exploitability:Unproven Consequences:Obtain Information… This article has been indexed from RedPacket Security Read the original article: SAP Business One information disclosure | CVE-2023-41365

Fortinet FortiManager and FortiAnalyzer security bypass | CVE-2023-42787

NAME__________Fortinet FortiManager and FortiAnalyzer security bypass Platforms Affected:Fortinet FortiAnalyzer 6.2.0 Fortinet FortiManager 7.0.0 Fortinet FortiAnalyzer… This article has been indexed from RedPacket Security Read the original article: Fortinet FortiManager and FortiAnalyzer security bypass | CVE-2023-42787

Daily Vulnerability Trends: Thu Oct 12 2023

CVE NAME CVE Description CVE-2023-38545 No description provided CVE-2023-43641 libcue provides an API for parsing… This article has been indexed from RedPacket Security Read the original article: Daily Vulnerability Trends: Thu Oct 12 2023

8 Base Ransomware Victim: KTUA Landscape Architecture and Planning

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: 8 Base Ransomware Victim: KTUA Landscape Architecture and Planning

HackerOne Bug Bounty Disclosure: b-cve-socks-heap-buffer-overflow-b-raysatiro

Company Name: b’curl’ Company HackerOne URL: https://hackerone.com/curl Submitted By:b’raysatiro’ Link to Submitters Profile:https://hackerone.com/b’raysatiro’ Report Title:b’CVE-2023-38545:… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-cve-socks-heap-buffer-overflow-b-raysatiro

HackerOne Bug Bounty Disclosure: b-cve-cookie-injection-with-none-file-b-w-x

Company Name: b’curl’ Company HackerOne URL: https://hackerone.com/curl Submitted By:b’w0x42′ Link to Submitters Profile:https://hackerone.com/b’w0x42′ Report Title:b’CVE-2023-38546:… This article has been indexed from RedPacket Security Read the original article: HackerOne Bug Bounty Disclosure: b-cve-cookie-injection-with-none-file-b-w-x