RedPacket Security - InfoSec News & Tutorials

Microsoft Windows Server Service Remote Protocol privilege escalation | CVE-2022-38045

October 12, 2022

NAME Microsoft Windows Server Service Remote Protocol privilege escalation Platforms Affected:Microsoft Windows Server 2012 Microsoft Windows 8.1 x32 Microsoft Windows...

Adobe Commerce and Magento Open Source cross-site scripting | CVE-2022-35698

October 12, 2022

NAME Adobe Commerce and Magento Open Source cross-site scripting Platforms Affected:Adobe Commerce 2.4.4-p1 Adobe Commerce 2.4.5 Adobe Magento Open Source...

Adobe ColdFusion directory traversal | CVE-2022-38418

October 12, 2022

NAME Adobe ColdFusion directory traversal Platforms Affected:Adobe ColdFusion 2018 Update 14 Adobe ColdFusion 2021 Update 4Risk Level:8.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Adobe...

Microsoft Windows Point-to-Point Tunneling Protocol code execution | CVE-2022-30198

October 12, 2022

NAME Microsoft Windows Point-to-Point Tunneling Protocol code execution Platforms Affected:Microsoft Windows 7 SP1 x32 Microsoft Windows 7 SP1 x64 Microsoft...

SAP Commerce security bypass | CVE-2022-41204

October 12, 2022

NAME SAP Commerce security bypass Platforms Affected:SAP Commerce 1905 SAP Commerce 2005 SAP Commerce 2011 SAP Commerce 2105 SAP Commerce...

Google Chrome Skia code execution | CVE-2022-3445

October 12, 2022

NAME Google Chrome Skia code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote attacker...

Google Chrome Safe Browsing code execution | CVE-2022-3449

October 12, 2022

NAME Google Chrome Safe Browsing code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote...

SVMPC1 and SVMPC2 information disclosure | CVE-2022-41653

October 12, 2022

NAME SVMPC1 and SVMPC2 information disclosure Platforms Affected:Daikin SVMPC1 2.1.22 Daikin SVMPC2 1.2.3Risk Level:9.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION SVMPC1 and SVMPC2 could...

Microsoft Windows Point-to-Point Tunneling Protocol code execution | CVE-2022-41081

October 12, 2022

NAME Microsoft Windows Point-to-Point Tunneling Protocol code execution Platforms Affected:Microsoft Windows 7 SP1 x32 Microsoft Windows 7 SP1 x64 Microsoft...

Microsoft Windows Active Directory Certificate Services privilege escalation | CVE-2022-37976

October 12, 2022

NAME Microsoft Windows Active Directory Certificate Services privilege escalation Platforms Affected:Microsoft Windows Server 2008 SP2 x64 Microsoft Windows Server 2008...

Microsoft Windows RAS Point-to-Point Tunneling Protocol code execution | CVE-2022-22035

October 12, 2022

NAME Microsoft Windows RAS Point-to-Point Tunneling Protocol code execution Platforms Affected:Microsoft Windows 7 SP1 x32 Microsoft Windows 7 SP1 x64...

Google Chrome WebSQL buffer overflow | CVE-2022-3446

October 12, 2022

NAME Google Chrome WebSQL buffer overflow Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome is vulnerable to a heap-based...

Google Chrome Peer Connection code execution | CVE-2022-3450

October 12, 2022

NAME Google Chrome Peer Connection code execution Platforms Affected:Google Chrome 106.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Google Chrome could allow a remote...

VMware has yet to fix CVE-2021-22048 flaw in vCenter Server disclosed one year ago

October 12, 2022

VMware has yet to address the CVE-2021-22048 privilege escalation vulnerability in vCenter Server disclosed in November 2021. VMware warns customers...

Daily Vulnerability Trends: Wed Oct 12 2022

October 12, 2022

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-42724 No description provided CVE-2022-0847A flaw was found in the way the...

LockBit affiliates compromise Microsoft Exchange servers to deploy ransomware

October 12, 2022

Lockbit ransomware affiliates are compromising Microsoft Exchange servers to deploy their ransomware, experts warn. South-Korean cybersecurity firm AhnLab reported that...