Cobalt Strike Beacon Detected – 36[.]41[.]71[.]241:2086
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Vulnerability Summary: CVE-2025-48927 The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a...
Vulnerability Summary: CVE-2025-48925 The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do...
Vulnerability Summary: CVE-2024-47056 SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible...
Vulnerability Summary: CVE-2025-36572 Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. A...
Vulnerability Summary: CVE-2025-48926 The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords,...
Vulnerability Summary: CVE-2025-5257 SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated...
Vulnerability Summary: CVE-2025-48928 The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is...
Vulnerability Summary: CVE-2025-48930 The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be...
Vulnerability Summary: CVE-2025-48931 The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities...
Vulnerability Summary: CVE-2025-48929 The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token with a...
Vulnerability Summary: CVE-2024-47055 SummaryThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows...
Vulnerability Summary: CVE-2025-1461 Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized...
Vulnerability Summary: CVE-2025-31501 Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink....
Vulnerability Summary: CVE-2024-47057 SummaryThis advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality. This vulnerability...
Vulnerability Summary: CVE-2025-31500 Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name....
Vulnerability Summary: CVE-2025-32803 In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions...
Vulnerability Summary: CVE-2025-48747 Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment...
Vulnerability Summary: CVE-2025-5256 SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploited...
Vulnerability Summary: CVE-2025-48749 Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent...
Vulnerability Summary: CVE-2025-30087 Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of...