Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:stogushoLink to Submitters Profile:https://hackerone.com/stogusho Report Title:curl doesn't hide credentials in /proc/XXX/cmdline provided...
Ransomware Group: QILIN VICTIM NAME: Cenomi Retail NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Ransomware Group: PLAY VICTIM NAME: Biofloral NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: PLAY VICTIM NAME: JFC Electric NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Ransomware Group: PLAY VICTIM NAME: Lydig Construction NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Ransomware Group: PLAY VICTIM NAME: Metric NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: PLAY VICTIM NAME: All Choice Rentals NOTE: No files or stolen information are by RedPacket Security. Any legal...
Ransomware Group: NOVA VICTIM NAME: Rama judicial colombia NOTE: No files or stolen information are by RedPacket Security. Any legal...
Vulnerability Summary: CVE-2025-27024 Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated...
Vulnerability Summary: CVE-2025-27025 The target device exposes a service on a specific TCP port with a configured endpoint. The access...
Vulnerability Summary: CVE-2025-24335 Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation...
Vulnerability Summary: CVE-2025-27022 A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated...
Vulnerability Summary: CVE-2025-27021 The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low...
Vulnerability Summary: CVE-2025-2330 The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
Vulnerability Summary: CVE-2025-39362 Missing Authorization vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a...
Vulnerability Summary: CVE-2025-27023 Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated...
Vulnerability Summary: CVE-2024-35164 The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from...
Vulnerability Summary: CVE-2025-4946 The Vikinger theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation...
Ransomware Group: SARCOMA VICTIM NAME: Sanderling NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: NITROGEN VICTIM NAME: Kirkor Architects and Planners NOTE: No files or stolen information are by RedPacket Security. Any...
Vulnerability Summary: CVE-2025-27026 A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an...
Vulnerability Summary: CVE-2025-52891 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx....
Vulnerability Summary: CVE-2025-53492 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki...
Vulnerability Summary: CVE-2025-46647 A vulnerability of plugin openid-connect in Apache APISIX. This vulnerability will only have an impact if all...
