[MEOW] – Ransomware Victim: Lincoln University
Ransomware Group: MEOW VICTIM NAME: Lincoln University NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps
Cybersecurity researchers are warning that a command-and-control (C&C) framework called Winos is being distributed within gaming-related applications like installation tools,...
VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware
An ongoing threat campaign dubbed VEILDrive has been observed taking advantage of legitimate services from Microsoft, including Teams, SharePoint, Quick...
HackerOne Bug Bounty Disclosure: cve-hsts-subdomain-overwrites-parent-cache-entry-newfunction
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:newfunctionLink to Submitters Profile:https://hackerone.com/newfunction Report Title:CVE-2024-9681: HSTS subdomain overwrites parent cache entryReport...
HackerOne Bug Bounty Disclosure: potential-xss-in-redirect-url-parameter-kindone
Company Name: Acronis Company HackerOne URL: https://hackerone.com/acronis Submitted By:kindoneLink to Submitters Profile:https://hackerone.com/kindone Report Title:Potential XSS in redirect_url ParameterReport Link:https://hackerone.com/reports/2653342Date Submitted:06...
HackerOne Bug Bounty Disclosure: exploitable-format-string-vulnerability-in-curl-mfprintf-function-reterix
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:reterixLink to Submitters Profile:https://hackerone.com/reterix Report Title:Exploitable Format String Vulnerability in curl_mfprintf FunctionReport...
HackerOne Bug Bounty Disclosure: -potential-xss-vulnerability-in-acronis-login-callback-url-kindone
Company Name: Acronis Company HackerOne URL: https://hackerone.com/acronis Submitted By:kindoneLink to Submitters Profile:https://hackerone.com/kindone Report Title: Potential XSS Vulnerability in Acronis Login...
[FOG] – Ransomware Victim: GSR Andrade Architects (gsr-andrade[.]com)
Ransomware Group: FOG VICTIM NAME: GSR Andrade Architects (gsr-andradecom) NOTE: No files or stolen information are by RedPacket Security. Any...
[FOG] – Ransomware Victim: Cape Cod Regional Technical High School (capetech[.]us)
Ransomware Group: FOG VICTIM NAME: Cape Cod Regional Technical High School (capetechus) NOTE: No files or stolen information are by...
New Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps
Cybersecurity researchers are warning that a command-and-control (C&C) framework called Winos is being distributed within gaming-related applications like installation tools,...
CVE Alert: CVE-2023-29126
Vulnerability Summary: CVE-2023-29126 The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute...
CVE Alert: CVE-2023-29118
Vulnerability Summary: CVE-2023-29118 Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php. Affected...
CVE Alert: CVE-2023-29117
Vulnerability Summary: CVE-2023-29117 Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox...
CVE Alert: CVE-2023-29116
Vulnerability Summary: CVE-2023-29116 Under certain conditions, through a request directed to the Waybox Enel X web management application, information like...
CVE Alert: CVE-2023-29125
Vulnerability Summary: CVE-2023-29125 A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. Affected...
CVE Alert: CVE-2023-29122
Vulnerability Summary: CVE-2023-29122 Under certain conditions, access to service libraries is granted to account they should not have access to....
CVE Alert: CVE-2023-29121
Vulnerability Summary: CVE-2023-29121 Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system. Affected...
CVE Alert: CVE-2024-48312
Vulnerability Summary: CVE-2024-48312 WebLaudos v20.8 (118) was discovered to contain a cross-site scripting (XSS) vulnerability via the login page. Affected...
CVE Alert: CVE-2024-49522
Vulnerability Summary: CVE-2024-49522 Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result...
CVE Alert: CVE-2023-29120
Vulnerability Summary: CVE-2023-29120 Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s...
[RANSOMHUB] – Ransomware Victim: sector5[.]ro
Ransomware Group: RANSOMHUB VICTIM NAME: sector5ro NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[PLAY] – Ransomware Victim: Dome Construction
Ransomware Group: PLAY VICTIM NAME: Dome Construction NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[PLAY] – Ransomware Victim: S & W Kitchens
Ransomware Group: PLAY VICTIM NAME: S & W Kitchens NOTE: No files or stolen information are by RedPacket Security. Any...
[PLAY] – Ransomware Victim: Paragon Plastics
Ransomware Group: PLAY VICTIM NAME: Paragon Plastics NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
