Oracle Java SE, Oracle GraalVM Enterprise Edition unspecified | CVE-2023-21937
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition unspecifiedPlatforms Affected:Oracle Java SE 8u361 Oracle Java SE 8u361-perf Oracle Java SE 11.0.18...
Cilium information disclosure | CVE-2023-29002
NAME__________Cilium information disclosurePlatforms Affected:Cilium Cilium 1.11.15 Cilium Cilium 1.12.8 Cilium Cilium 1.13.1Risk Level:7.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Cilium could allow a local authenticated...
Oracle Java SE, Oracle GraalVM Enterprise Edition unspecified | CVE-2023-21954
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition unspecifiedPlatforms Affected:Oracle Java SE 8u361 Oracle Java SE 8u361-perf Oracle Java SE 11.0.18...
Oracle Java SE, Oracle GraalVM Enterprise Edition unspecified | CVE-2023-21939
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition unspecifiedPlatforms Affected:Oracle Java SE 8u361 Oracle Java SE 8u361-perf Oracle Java SE 11.0.18...
Oracle Java SE, Oracle GraalVM Enterprise Edition unspecified | CVE-2023-21967
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition unspecifiedPlatforms Affected:Oracle Java SE 8u361 Oracle Java SE 8u361-perf Oracle Java SE 11.0.18...
Omron CS/CJ Series information disclosure | CVE-2022-45794
NAME__________Omron CS/CJ Series information disclosurePlatforms Affected:OMRON SYSMAC CJ2H-CPU6-EIP OMRON SYSMAC CJ2H-CPU6 OMRON SYSMAC CJ1G-CPUP OMRON SYSMAC CS1H-CPUH OMRON SYSMAC CS1G-CPUH...
Epiphyt Form Block plugin for WordPress cross-site request forgery | CVE-2023-30616
NAME__________Epiphyt Form Block plugin for WordPress cross-site request forgeryPlatforms Affected:Epiphyt Form Block plugin for WordPress 1.0.1Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Epiphyt Form...
Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE unspecified | CVE-2023-21930
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE unspecifiedPlatforms Affected:Oracle GraalVM Enterprise Edition 20.3.5 Oracle GraalVM...
VMware Tanzu Spring Boot security bypass | CVE-2023-20873
NAME__________VMware Tanzu Spring Boot security bypassPlatforms Affected:VMware Tanzu Spring Boot 2.7.0 VMware Tanzu Spring Boot 2.7.10 VMware Tanzu Spring Boot...
Fastify @fastify/csrf-protection cross-site request forgery | CVE-2023-27495
NAME__________Fastify @fastify/csrf-protection cross-site request forgeryPlatforms Affected:Fastify @fastify/csrf-protection 4.0.1 Fastify @fastify/csrf-protection 5.0.0 Fastify @fastify/csrf-protection 6.2.0Risk Level:5.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Fastify @fastify/csrf-protection is vulnerable...
EvilExtractor malware activity spikes in Europe and the U.S.
Researchers are seeing a rise in attacks spreading the EvilExtractor data theft tool, used to steal users' sensitive data in...
Google ads push BumbleBee malware used by ransomware gangs
The enterprise-targeting Bumblebee malware is distributed through Google Ads and SEO poisoning that promote popular software like Zoom, Cisco AnyConnect,...
GitHub now allows enabling private vulnerability reporting at scale
GitHub announced that private vulnerability reporting is now generally available and can be enabled at scale, on all repositories belonging...
BlackByte Ransomware Victim: Easy Automation
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
CISA: Oracle Releases Security Updates
Oracle Releases Security Updates Oracle has released its Critical Patch Update Advisory, Solaris Third Party Bulletin, and Linux Bulletin for...
CISA: CISA Releases Malware Analysis Report on ICONICSTEALER
CISA Releases Malware Analysis Report on ICONICSTEALER CISA has released a new Malware Analysis Report (MAR) on an infostealer known...
CISA: CISA and Partners Release Cybersecurity Best Practices for Smart Cities
CISA and Partners Release Cybersecurity Best Practices for Smart Cities Today, CISA, NSA, FBI, NCSC-UK(link is external), ACSC(link is external),...
CISA: CISA Releases One Industrial Control Systems Advisory
CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on April 20, 2023. These...
CISA: CISA to Continue and Enhance U.K.’s Logging Made Easy Tool
CISA to Continue and Enhance U.K.’s Logging Made Easy Tool CISA has announced plans to continue and enhance the Logging...
CISA: CISA Releases Two SBOM Documents
CISA Releases Two SBOM Documents Today, CISA released two community-drafted documents around Software Bill of Materials (SBOM): Types of SBOM...
CISA: Cisco Releases Security Advisories for Multiple Products
Cisco Releases Security Advisories for Multiple Products Cisco has released security updates for vulnerabilities affecting Industrial Network Director (IND), Modeling...
CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog,...
CISA: VMware Releases Security Update for Aria Operations for Logs
VMware Releases Security Update for Aria Operations for Logs VMware has released a security update to address multiple vulnerabilities in...
CISA: Drupal Releases Security Advisory to Address Vulnerability in Drupal Core
Drupal Releases Security Advisory to Address Vulnerability in Drupal Core Drupal has released a security advisory to address an access...
