RedPacket Security - InfoSec News & Tutorials

Microsoft Windows Volume Shadow Copy privilege escalation | CVE-2023-32054

July 12, 2023

NAME__________Microsoft Windows Volume Shadow Copy privilege escalationPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows 10 x32 Microsoft Windows 10 x64 Microsoft...

Microsoft Azure Service Fabric for Windows information disclosure | CVE-2023-36868

July 12, 2023

NAME__________Microsoft Azure Service Fabric for Windows information disclosurePlatforms Affected:Microsoft Azure Service Fabric 9.0 Microsoft Azure Service Fabric 9.1Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information...

Adobe InDesign information disclosure | CVE-2023-29319

July 12, 2023

NAME__________Adobe InDesign information disclosurePlatforms Affected:Adobe InDesign ID18.3 Adobe InDesign ID17.4.1Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe InDesign could allow a remote attacker to...

Microsoft Windows OLE Automation information disclosure | CVE-2023-32042

July 12, 2023

NAME__________Microsoft Windows OLE Automation information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft...

ELECOM wireless LAN routers and wireless LAN repeaters information disclosure | CVE-2023-37563

July 12, 2023

NAME__________ELECOM wireless LAN routers and wireless LAN repeaters information disclosurePlatforms Affected:ELECOM WRC-1167GHBK-S 1.03 ELECOM WRC-1167GEBK-S 1.03 ELECOM WRC-1167FEBK-S 1.04 ELECOM...

Microsoft Windows DNS Server code execution | CVE-2023-35345

July 12, 2023

NAME__________Microsoft Windows DNS Server code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 Microsoft...

Microsoft Windows PostScript and PCL6 Class Printer Driver information disclosure | CVE-2023-35324

July 12, 2023

NAME__________Microsoft Windows PostScript and PCL6 Class Printer Driver information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft...

Adobe InDesign information disclosure | CVE-2023-29309

July 12, 2023

Siemens RUGGEDCOM ROX devices man-in-the-middle | CVE-2023-36749

July 12, 2023

NAME__________Siemens RUGGEDCOM ROX devices man-in-the-middlePlatforms Affected:Siemens RUGGEDCOM ROX MX5000 2.14.0 Siemens RUGGEDCOM ROX RX1400 2.14.0 Siemens RUGGEDCOM ROX RX1500 2.14.0...

Microsoft Windows Remote Procedure Call Runtime denial of service | CVE-2023-35314

July 12, 2023

NAME__________Microsoft Windows Remote Procedure Call Runtime denial of servicePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows...

Mobile Pack plugin for WordPress cross-site request forgery | CVE-2023-37391

July 12, 2023

NAME__________Mobile Pack plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Mobile Pack Plugin for WordPress 3.4.1Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Mobile Pack plugin...

SAP NetWeaver AS ABAP and ABAP Platform security bypass | CVE-2023-35874

July 12, 2023

NAME__________SAP NetWeaver AS ABAP and ABAP Platform security bypassPlatforms Affected:SAP NetWeaver AS ABAP Platform KRNL64NUC 7.22 SAP NetWeaver AS ABAP...

Mozilla Firefox denial of service | CVE-2023-3600

July 12, 2023

NAME__________Mozilla Firefox denial of servicePlatforms Affected:Mozilla Firefox 115.0.1 Mozilla Firefox ESR 115.0.1Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Mozilla Firefox is vulnerable to...

Microsoft Office Graphics code execution | CVE-2023-33149

July 12, 2023

NAME__________Microsoft Office Graphics code executionPlatforms Affected:Microsoft Office 2013 SP1 x32 Microsoft Office 2013 SP1 x64 Microsoft Office 2016 x32 Microsoft...

Microsoft Windows Remote Desktop security bypass | CVE-2023-35352

July 12, 2023

NAME__________Microsoft Windows Remote Desktop security bypassPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2019 Microsoft...

Microsoft Windows Pragmatic General Multicast (PGM) code execution | CVE-2023-35297

July 12, 2023

NAME__________Microsoft Windows Pragmatic General Multicast (PGM) code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10...

Apple Issues Urgent Patch for Zero-Day Flaw Targeting iOS, iPadOS, macOS, and Safari

July 12, 2023

Apple has released Rapid Security Response updates for iOS, iPadOS, macOS, and Safari web browser to address a zero-day flaw...

Python-Based PyLoose Fileless Attack Targets Cloud Workloads for Cryptocurrency Mining

July 12, 2023

A new fileless attack dubbed PyLoose has been observed striking cloud workloads with the goal of delivering a cryptocurrency miner,...

Microsoft Releases Patches for 132 Vulnerabilities, Including 6 Under Active Attack

July 12, 2023

Microsoft on Tuesday released updates to address a total of 132 new security flaws spanning its software, including six zero-day...