RedPacket Security - InfoSec News & Tutorials

a-blog cms open redirect | CVE-2024-25559

February 16, 2024

NAME__________a-blog cms open redirectPlatforms Affected:Appleple a-blog CMS 3.1.0 Appleple a-blog CMS 3.1.8Risk Level:7.4Exploitability:UnprovenConsequences:Other DESCRIPTION__________a-blog cms could allow a remote attacker...

Siemens SIMATIC WinCC and OpenPCS denial of service | CVE-2023-48364

February 16, 2024

NAME__________Siemens SIMATIC WinCC and OpenPCS denial of servicePlatforms Affected:Siemens SIMATIC WinCC 7.4 Siemens SIMATIC WinCC 7.5 Siemens SIMATIC PCS 7...

Siemens Polarion ALM privilege escalation | CVE-2023-50236

February 16, 2024

NAME__________Siemens Polarion ALM privilege escalationPlatforms Affected:Siemens Polarion ALMRisk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Siemens Polarion ALM could allow a local authenticated attacker to...

CKEditor 4 LTS – WYSIWYG HTML editor module for Drupal cross-site scripting | CVE-2024-24815

February 16, 2024

NAME__________CKEditor 4 LTS - WYSIWYG HTML editor module for Drupal cross-site scriptingPlatforms Affected:Drupal CKEditor 4 LTS - WYSIWYG HTML editor...

Mastodon information disclosure | CVE-2024-25619

February 16, 2024

NAME__________Mastodon information disclosurePlatforms Affected:Mastodon Mastodon 3.5.0 Mastodon Mastodon 4.2.5 Mastodon Mastodon 4.2.0 Mastodon Mastodon 4.1.13 Mastodon Mastodon 4.1.0 Mastodon Mastodon...

Siemens Parasolid code execution | CVE-2023-49125

February 16, 2024

NAME__________Siemens Parasolid code executionPlatforms Affected:Siemens Parasolid 35.0 Siemens Parasolid 35.1 Siemens Parasolid 36.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Siemens Parasolid could allow a...

Siemens CP343-1 Devices denial of service | CVE-2023-51440

February 16, 2024

NAME__________Siemens CP343-1 Devices denial of servicePlatforms Affected:Siemens SIMATIC CP 343-1 Siemens SIMATIC CP 343-1 Lean Siemens SIPLUS NET CP 343-1...

Squid denial of service | CVE-2024-25617

February 16, 2024

NAME__________Squid denial of servicePlatforms Affected:Squid-Cache Squid 6.4Risk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Squid is vulnerable to a denial of service, caused by...

Yonyou space-time enterprise information integration platform SQL injection | CVE-2024-24256

February 16, 2024

NAME__________Yonyou space-time enterprise information integration platform SQL injectionPlatforms Affected:Yonyou space-time enterprise information integration platform 9.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Yonyou space-time enterprise...

Siemens SIMATIC WinCC and OpenPCS denial of service | CVE-2023-48363

February 16, 2024

NAME__________Siemens SIMATIC WinCC and OpenPCS denial of servicePlatforms Affected:Siemens SIMATIC WinCC 7.4 Siemens SIMATIC WinCC 7.5 Siemens SIMATIC PCS 7...

Helm directory traversal | CVE-2024-25620

February 16, 2024

NAME__________Helm directory traversalPlatforms Affected:Helm Helm 3.14.0Risk Level:6.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Helm could allow a remote authenticated attacker to traverse directories on the...