RedPacket Security - InfoSec News & Tutorials

Zyxel Armor Z1 and Z2 routers cross-site request forgery | CVE-2021-4030

February 25, 2022

NAME Zyxel Armor Z1 and Z2 routers cross-site request forgery Platforms Affected:Zyxel Armor Z1 Zyxel Armor Z2Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION...

Cyclades Serial Console Server privilege escalation |

February 25, 2022

NAME Cyclades Serial Console Server privilege escalation Platforms Affected:Vertiv Cyclades Serial Console Server 3.3.0Risk Level:8.4Exploitability:Proof of ConceptConsequences:Gain Privileges DESCRIPTION Cyclades...

Accusoft ImageGear buffer overflow | CVE-2021-21945

February 25, 2022

NAME Accusoft ImageGear buffer overflow Platforms Affected:Accusoft ImageGear 19.10Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Accusoft ImageGear is vulnerable to a heap-based buffer...

Plesk privilege escalation | CVE-2021-45008

February 25, 2022

NAME Plesk privilege escalation Platforms Affected:Plesk Plesk 18.0.37Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Plesk could allow a remote authenticated attacker to gain...

AWS @awsui/components-react module for NPM cross-site scripting | CVE-2022-24709

February 25, 2022

NAME AWS @awsui/components-react module for NPM cross-site scripting Platforms Affected:AWS @awsui/components-react 3.0.366Risk Level:8.8Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION AWS @awsui/components-react module for NPM...

Wondershare MirrorGo ElevationService.exe privilege escalation |

February 25, 2022

NAME Wondershare MirrorGo ElevationService.exe privilege escalation Platforms Affected:Wondershare Wondershare MirrorGo 2.0.11.346Risk Level:8.4Exploitability:Proof of ConceptConsequences:Gain Privileges DESCRIPTION Wondershare MirrorGo could allow...

Accusoft ImageGear code execution | CVE-2021-21942

February 25, 2022

NAME Accusoft ImageGear code execution Platforms Affected:Accusoft ImageGear 19.10Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Accusoft ImageGear could allow a remote attacker to...

Accusoft ImageGear buffer overflow | CVE-2021-21939

February 25, 2022

Linux Kernel privilege escalation | CVE-2022-25636

February 25, 2022

NAME Linux Kernel privilege escalation Platforms Affected:Linux Kernel 5.4 Linux Kernel 5.5 Linux Kernel 5.6.0 Linux Kernel 5.7.0 Linux Kernel...

Accusoft ImageGear buffer overflow | CVE-2021-21946

February 25, 2022

Distributed Data Systems WebHMI code execution |

February 25, 2022

NAME Distributed Data Systems WebHMI code execution Platforms Affected:Distributed Data Systems WebHMI 4.1Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Distributed Data...

Accusoft ImageGear code execution | CVE-2021-21949

February 25, 2022

Cisco NX-OS Software NX-API command execution | CVE-2022-20650

February 25, 2022

NAME Cisco NX-OS Software NX-API command execution Platforms Affected:Cisco NX-OS Cisco Nexus 3000 Series Switches Cisco Nexus 9000 Series Switches...

Oracle Talent Acquisition Cloud code execution | CVE-2021-35689

February 25, 2022

NAME Oracle Talent Acquisition Cloud code execution Platforms Affected:Oracle Talent Acquisition Cloud Taleo Enterprise EditionRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Oracle Talent...

Accusoft ImageGear buffer overflow | CVE-2021-21947

February 25, 2022

US and UK details a new Python backdoor used by MuddyWater APT group

February 25, 2022

US and UK cybersecurity agencies provided details of a new malware used by Iran-linked MuddyWater APT. CISA, the FBI, the...