[CLOAK] – Ransomware Victim: Wa**********[.]com
Ransomware Group: CLOAK VICTIM NAME: Wa**********com NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Month: January 2025
[CLOAK] – Ransomware Victim: pre*************[.]com
Ransomware Group: CLOAK VICTIM NAME: pre*************com NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[SPACEBEARS] – Ransomware Victim: Inaya Clinique
Ransomware Group: SPACEBEARS VICTIM NAME: Inaya Clinique NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[AKIRA] – Ransomware Victim: Moinho GloboAlimentos
Ransomware Group: AKIRA VICTIM NAME: Moinho GloboAlimentos NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
HackerOne Bug Bounty Disclosure: disclosing-policypageassetgroup-in-private-programs-via-graphql-gid-hackerone-policypageassetgroupsindex-policypageassetgroup-id-haxta-ok
Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:haxta4ok00Link to Submitters Profile:https://hackerone.com/haxta4ok00 Report Title:Disclosing PolicyPageAssetGroup in Private Programs via /graphql...
HackerOne Bug Bounty Disclosure: worker-permission-bypass-via-internalworker-leak-in-diagnostics-leodog
Company Name: Node.js Company HackerOne URL: https://hackerone.com/nodejs Submitted By:leodog896Link to Submitters Profile:https://hackerone.com/leodog896 Report Title:Worker permission bypass via InternalWorker leak in...
CISA: CISA Releases Three Industrial Control Systems Advisories
CISA Releases Three Industrial Control Systems Advisories CISA released three Industrial Control Systems (ICS) advisories on January 21, 2025. These...
CVE Alert: CVE-2025-0576
Vulnerability Summary: CVE-2025-0576 A vulnerability was found in Mobotix M15 4.3.4.83 and classified as problematic. This issue affects some unknown...
CVE Alert: CVE-2025-0578
Vulnerability Summary: CVE-2025-0578 A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as...
Cobalt Strike Beacon Detected – 154[.]223[.]21[.]105:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 43[.]143[.]48[.]234:8082
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 1[.]92[.]139[.]71:4444
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
CovenantC2 Detected – 20[.]8[.]18[.]90:7443
The Information provided at the time of posting was detected as "Covenant C2". Depending on when you are viewing this...
CVE Alert: CVE-2025-0583
Vulnerability Summary: CVE-2025-0583 The a+HRD from aEnrich Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute...
CVE Alert: CVE-2025-0582
Vulnerability Summary: CVE-2025-0582 A vulnerability classified as critical was found in itsourcecode Farm Management System up to 1.0. This vulnerability...
CVE Alert: CVE-2025-0581
Vulnerability Summary: CVE-2025-0581 A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. This affects an...
CVE Alert: CVE-2025-0579
Vulnerability Summary: CVE-2025-0579 A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected...
CVE Alert: CVE-2025-0580
Vulnerability Summary: CVE-2025-0580 A vulnerability was found in Shiprocket Module 3 on OpenCart. It has been rated as critical. Affected...
CVE Alert: CVE-2025-0584
Vulnerability Summary: CVE-2025-0584 The a+HRD from aEnrich Technology has a Server-side Request Forgery, allowing unauthenticated remote attackers to exploit this...
CVE Alert: CVE-2024-13524
Vulnerability Summary: CVE-2024-13524 A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as...
CVE Alert: CVE-2025-0586
Vulnerability Summary: CVE-2025-0586 The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges...
CVE Alert: CVE-2025-24337
Vulnerability Summary: CVE-2025-24337 WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini. Affected...
CVE Alert: CVE-2025-0585
Vulnerability Summary: CVE-2025-0585 The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary...
CVE Alert: CVE-2025-24013
Vulnerability Summary: CVE-2025-24013 CodeIgniter is a PHP full-stack web framework. Prior to 4.5.8, CodeIgniter lacked proper header validation for its...
