Company Name: b'Internet Bug Bounty' Company HackerOne URL: https://hackerone.com/ibb Submitted By:b'hungtd'Link to Submitters Profile:https://hackerone.com/b'hungtd' Report Title:b'Regular Expression Denial of Service...
Company Name: b'HackerOne' Company HackerOne URL: https://hackerone.com/security Submitted By:b'callmed0_4'Link to Submitters Profile:https://hackerone.com/b'callmed0_4' Report Title:b'Able to see Bonus amount given to...
Company Name: b'Internet Bug Bounty' Company HackerOne URL: https://hackerone.com/ibb Submitted By:b'wct'Link to Submitters Profile:https://hackerone.com/b'wct' Report Title:b"Potential NULL dereference in libssh's...
CISA Adds One Known Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on...
CISA Releases Seven Industrial Control Systems Advisories CISA released seven Industrial Control Systems (ICS) advisories on September 14, 2023. These...
A new malvertising campaign is targeting corporate users who are downloading the popular web conferencing software Webex. Threat actors have...
CISA Adds Two Known Vulnerabilities to Catalog CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on...
CISA Releases Three Industrial Control Systems Advisories CISA released three Industrial Control Systems (ICS) advisories on September 12, 2023. These...
Microsoft Releases September 2023 Updates Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A cyber threat actor...
Adobe Releases Security Updates for Multiple Products Adobe has released security updates to address vulnerabilities affecting Adobe software. A cyber...
CISA Adds Two Known Vulnerabilities to Catalog CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on...
Apple Releases Security Updates for iOS and macOS Apple has released security updates to address a vulnerability in multiple products....
NSA, FBI, and CISA Release Cybersecurity Information Sheet on Deepfake Threats Today, the National Security Agency (NSA), the Federal Bureau...
Mozilla Releases Security Updates for Multiple Products Mozilla has released security updates to address a vulnerability affecting Firefox, Firefox ESR,...
CISA Releases its Open Source Software Security Roadmap Today, CISA released an Open Source Software Security Roadmap to lay out—in...
CISA Adds Three Known Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on...
The iPhone belonging to Galina Timchenko, a prominent Russian journalist and critic of the government, was compromised with NSO Group's...
A high-severity security flaw has been disclosed in N-Able's Take Control Agent that could be exploited by a local unprivileged...
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
NAME__________libvips denial of servicePlatforms Affected:libvips libvips 8.12.0 libvips libvips 8.14.3Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________libvips is vulnerable to a denial of...
NAME__________MapPress Maps Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress MapPress Maps Plugin for WordPress 2.88.4Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________MapPress Maps Plugin for...
NAME__________OpenMage Magento LTS information disclosurePlatforms Affected:OpenMage Magento LTS 19.5.0 OpenMage Magento LTS 20.0.0 OpenMage Magento LTS 20.1.0Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________OpenMage...
NAME__________Samsung Exynos Mobile Processor, Automotive Processor, and Modem denial of servicePlatforms Affected:Samsung Exynos Mobile Processor Samsung Automotive Processor Samsung ModemRisk...
NAME__________Piccolo information disclosurePlatforms Affected:Piccolo Piccolo 0.120.0Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Piccolo could allow a remote attacker to obtain sensitive information, caused by...
