Tag: 2024-05-15

3 Attack Reports | 132 Vulnerabilities

Attack reports

Ebury is alive but unseen: 400k Linux servers compromised for cryptotheft and financial gain

The Ebury malware gang is continuing to expand, with hundreds of thousands of servers compromised and used to steal cryptocurrency and credit card data, according to a paper published by ESET Research on 14 May 2024.
linux
bitcoin
2024-05-15
2024-05-10
apache
ebury
windigo
apachemodule
Published: May 15, 2024
Downloadable IOCs: 141

The Overlapping Cyber Strategies Of Transparent Tribe And SideCopy Against India

CRIL's analysis revealed SideCopy APT group's sophisticated malware campaign, employing malicious LNK files and a complex infection chain involving HTAs and loader DLLs to deploy malware like ReverseRAT and Action RAT. SideCopy targets Indian universities and government entities, suggesting potenti…
malware
apt
rat
action rat
india
infection chain
2024-05-15
2024-05-10
reverserat
Published: May 15, 2024
Downloadable IOCs: 21

Ongoing Malvertising Campaign leads to Ransomware

Rapid7 detected an ongoing malware distribution campaign involving trojanized installers of WinSCP and PuTTY, delivered via malicious search engine ads. The infection chain employs DLL side-loading, credential access, and deploys Sliver beacons followed by Cobalt Strike. In one case, the threat act…
malware
ransomware
python
cobalt strike
2024-05-15
2024-05-10
msi package
winscp
sliver
putty
service
execution
localappdata
dropped
c2 address
sliver beacon
dnstwist
Published: May 15, 2024
Downloadable IOCs: 78
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-32888

10.0
    Amazon JDBC Driver for Redshift
Published: May 15, 2024

CVE-2024-4893

9.8
    DigiWin EasyFlow .NET
Published: May 15, 2024

CVE-2024-32047

9.8
    CyberPower PowerPanel
Published: May 15, 2024

CVE-2024-32053

9.8
    CyberPower PowerPanel
Published: May 15, 2024

CVE-2024-33625

9.8
    CyberPower PowerPanel Business
Published: May 15, 2024

CVE-2024-34025

9.8
    CyberPower PowerPanel business application
Published: May 15, 2024

CVE-2024-3319

9.1
    Identity Security Cloud (ISC)
    Identity Security Cloud
    IdentityProfile
Published: May 15, 2024

CVE-2024-4847

8.8
    WordPress Alt Text AI plugin
    Alt Text AI plugin for WordPress
Published: May 15, 2024

CVE-2024-4010

8.8
    Email Subscribers by Icegram Express plugin for WordPress
Published: May 15, 2024

CVE-2024-4670

8.8
    All-in-One Video Gallery plugin for WordPress
Published: May 15, 2024

CVE-2024-31856

8.8
    CyberPower PowerPanel
Published: May 15, 2024

CVE-2024-33615

8.8
    CyberPower PowerPanel
Published: May 15, 2024

CVE-2024-34082

8.5
    Grav
    Grav
Published: May 15, 2024

CVE-2024-28042

8.4
    PowerSYSTEM Center
Published: May 15, 2024

CVE-2023-6324

8.1
    ThroughTek Kalay SDK
Published: May 15, 2024

CVE-2023-5938

8.0
    Arc
    Arc
Published: May 15, 2024

CVE-2024-30284

7.8
    Acrobat Reader
Published: May 15, 2024

CVE-2024-30310

7.8
    Acrobat Reader
Published: May 15, 2024

CVE-2024-34094

7.8
    Acrobat Reader
Published: May 15, 2024

CVE-2024-34095

7.8
    Acrobat Reader
    Acrobat Reader
Published: May 15, 2024

CVE-2024-34096

7.8
    Acrobat Reader
    Acrobat Reader
Published: May 15, 2024

CVE-2024-34097

7.8
    Acrobat Reader
Published: May 15, 2024

CVE-2024-34098

7.8
    Acrobat Reader
Published: May 15, 2024

CVE-2024-34099

7.8
    Acrobat Reader
Published: May 15, 2024

CVE-2024-34100

7.8
    Acrobat Reader
Published: May 15, 2024

CVE-2023-5936

7.8
    Arc
    Arc
Published: May 15, 2024

CVE-2024-3483

7.8
    OpenText iManager
Published: May 15, 2024

CVE-2024-3486

7.8
    OpenText iManager
Published: May 15, 2024

CVE-2024-3968

7.8
    OpenText iManager
Published: May 15, 2024

CVE-2024-20366

7.8
    Cisco Crosswork Network Services Orchestrator (NSO)
Published: May 15, 2024

CVE-2024-4200

7.7
    Progress Telerik Reporting
Published: May 15, 2024

CVE-2024-4202

7.7
    Progress Telerik Reporting
Published: May 15, 2024

CVE-2024-31410

7.7
    CyberPower PowerPanel
Published: May 15, 2024

CVE-2024-3967

7.6
    OpenText iManager
Published: May 15, 2024

CVE-2023-5935

7.4
    Arc
Published: May 15, 2024

CVE-2023-6321

7.2
    UNKNOWN
Published: May 15, 2024

CVE-2023-6322

7.2
    Roku Indoor Camera SE
    Wyze Cam v3
Published: May 15, 2024

CVE-2024-3892

7.2
    Telerik UI for WinForms
    Telerik UI for WinForms
Published: May 15, 2024

CVE-2024-35179

6.8
    Stalwart Mail Server
Published: May 15, 2024

CVE-2024-20391

6.8
    Cisco Secure Client
Published: May 15, 2024

CVE-2024-27244

6.7
    Zoom Workplace VDI App for Windows
Published: May 15, 2024

CVE-2024-3744

6.5
    azure-file-csi-driver
Published: May 15, 2024

CVE-2024-3317

6.5
    Identity Security Cloud (ISC)
Published: May 15, 2024

CVE-2024-4357

6.5
    Progress Telerik Report Server
Published: May 15, 2024

CVE-2024-3182

6.5
    TIBCO Hawk
Published: May 15, 2024

CVE-2024-31409

6.5
    CyberPower PowerPanel
Published: May 15, 2024

CVE-2024-27243

6.5
    Zoom Workplace Apps and SDK
Published: May 15, 2024

CVE-2024-4363

6.4
    Visual Portfolio, Photo Gallery & Post Grid plugin for WordPress
Published: May 15, 2024

CVE-2024-4370

6.4
    WPZOOM Addons for Elementor (Templates, Widgets) plugin
    WPZOOM Addons for Elementor plugin
Published: May 15, 2024

CVE-2024-4373

6.4
    Sina Extension for Elementor plugin for WordPress
    Sina Extension for Elementor plugin
Published: May 15, 2024

CVE-2024-4618

6.4
    Exclusive Addons for Elementor plugin for WordPress
Published: May 15, 2024

CVE-2024-4208

6.4
    Gutenberg Blocks with AI by Kadence WP - Page Builder Features plugin for WordPress
Published: May 15, 2024

CVE-2024-4636

6.4
    Image Optimization by Optimole plugin for WordPress
    Image Optimization by Optimole WordPress plugin
Published: May 15, 2024

CVE-2024-4702

6.4
    Mega Elements plugin for WordPress
Published: May 15, 2024

CVE-2024-2248

6.4
    JFrog platform
    JFrog platform
Published: May 15, 2024

CVE-2024-4903

6.3
    Tongda OA
Published: May 15, 2024

CVE-2024-4905

6.3
    Kashipara College Management System
Published: May 15, 2024

CVE-2024-4906

6.3
    Campcodes Complete Web-Based School Management System
Published: May 15, 2024

CVE-2024-4907

6.3
    Campcodes Complete Web-Based School Management System
Published: May 15, 2024

CVE-2024-4908

6.3
    Campcodes Complete Web-Based School Management System
Published: May 15, 2024

CVE-2024-4909

6.3
    Campcodes Complete Web-Based School Management System
Published: May 15, 2024

CVE-2024-4904

6.3
    Byzoro Smart S200 Management Platform
Published: May 15, 2024

CVE-2024-4910

6.3
    Campcodes Complete Web-Based School Management System
Published: May 15, 2024

CVE-2024-4911

6.3
    Campcodes Complete Web-Based School Management System
Published: May 15, 2024

CVE-2024-4912

6.3
    Campcodes Online Examination System
Published: May 15, 2024

CVE-2024-4913

6.3
    Campcodes Online Examination System
Published: May 15, 2024

CVE-2024-4914

6.3
    Campcodes Online Examination System
Published: May 15, 2024

CVE-2024-4915

6.3
    Campcodes Online Examination System
Published: May 15, 2024

CVE-2024-20258

6.1
    Cisco Secure Email and Web Manager
    Secure Email Gateway
Published: May 15, 2024

CVE-2024-20392

6.1
    Cisco Secure Email Gateway
Published: May 15, 2024

CVE-2024-3484

5.7
    OpenText iManager
    iManager
Published: May 15, 2024

CVE-2024-3488

5.6
    OpenText iManager
Published: May 15, 2024

CVE-2024-30311

5.5
    Acrobat Reader
Published: May 15, 2024

CVE-2024-30312

5.5
    Acrobat Reader
    Acrobat Reader
Published: May 15, 2024

CVE-2024-34101

5.5
    Acrobat Reader
    Acrobat Reader
Published: May 15, 2024

CVE-2024-20394

5.5
    Cisco AppDynamics Network Visibility Agent
Published: May 15, 2024

CVE-2024-35184

5.5
    Paperless-ngx
Published: May 15, 2024

CVE-2024-3189

5.4
    Gutenberg Blocks by Kadence Blocks - WordPress Plugin
    Gutenberg Blocks by Kadence Blocks - Page Builder Features plugin for WordPress
Published: May 15, 2024

CVE-2024-4894

5.3
    ITPison OMICARD EDM
Published: May 15, 2024

CVE-2024-3485

5.3
    OpenText iManager
Published: May 15, 2024

CVE-2024-3970

5.3
    OpenText iManager
    OpenText™ iManager
Published: May 15, 2024

CVE-2024-4837

5.3
    Progress Telerik Report Server
    Progress Telerik Report Server
Published: May 15, 2024

CVE-2024-31216

5.1
    source-controller
Published: May 15, 2024

CVE-2024-32042

4.9
    CyberPower PowerPanel
Published: May 15, 2024

CVE-2023-7258

4.8
    Gvisor Sandbox
Published: May 15, 2024

CVE-2024-20256

4.8
    Cisco Secure Email and Web Manager
    Cisco Secure Web Appliance
Published: May 15, 2024

CVE-2024-20257

4.8
    Cisco Secure Email Gateway
Published: May 15, 2024

CVE-2024-20383

4.8
    Cisco Crosswork NSO
    ConfD
    Cisco Crosswork NSO CLI
    ConfD CLI
Published: May 15, 2024

CVE-2024-20369

4.7
    Cisco Crosswork Network Services Orchestrator (NSO)
Published: May 15, 2024

CVE-2024-4656

4.4
    Import and export users and customers plugin for WordPress
    WordPress Import and Export Users and Customers Plugin
Published: May 15, 2024

CVE-2024-4734

4.4
    Import and export users and customers plugin for WordPress
Published: May 15, 2024

CVE-2024-35183

4.4
    wolfictl
Published: May 15, 2024

CVE-2024-0437

4.3
    Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease
Published: May 15, 2024

CVE-2024-4199

4.3
    Bulk Posts Editing For WordPress plugin for WordPress
    Bulk Posts Editing For WordPress plugin
Published: May 15, 2024

CVE-2023-6323

4.3
    ThroughTek Kalay SDK
Published: May 15, 2024

CVE-2024-3318

4.2
    UNKNOWN
    DelimitedFileConnector Cloud Connector
Published: May 15, 2024

CVE-2023-5937

3.8
    Arc
    Arc configuration files on Windows systems
Published: May 15, 2024

CVE-2024-3487

3.5
    OpenText iManager
Published: May 15, 2024

CVE-2024-35108

None
    idccms
Published: May 15, 2024

CVE-2024-35109

None
    idccms
Published: May 15, 2024

CVE-2024-3405

None
    WP Prayer WordPress plugin
    WP Prayer WordPress plugin
Published: May 15, 2024

CVE-2024-3406

None
    WP Prayer WordPress plugin
Published: May 15, 2024

CVE-2024-3407

None
    WP Prayer WordPress plugin
Published: May 15, 2024

CVE-2024-3548

None
    WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin
    Shortcodes Ultimate WordPress plugin
Published: May 15, 2024

CVE-2024-3629

None
    HL Twitter WordPress plugin
Published: May 15, 2024

CVE-2024-3630

None
    HL Twitter WordPress plugin
Published: May 15, 2024

CVE-2024-3631

None
    HL Twitter WordPress plugin
Published: May 15, 2024

CVE-2024-3634

None
    benaceur WordPress plugin
Published: May 15, 2024

CVE-2024-3748

None
    SP Project & Document Manager WordPress plugin
Published: May 15, 2024

CVE-2024-3749

None
    SP Project & Document Manager WordPress plugin
    SP Project & Document Manager WordPress plugin
Published: May 15, 2024

CVE-2024-3822

None
    Base64 Encoder/Decoder WordPress plugin
Published: May 15, 2024

CVE-2024-3823

None
    Base64 Encoder/Decoder WordPress plugin
    Base64 Encoder/Decoder WordPress plugin
Published: May 15, 2024

CVE-2024-3824

None
    Base64 Encoder/Decoder WordPress plugin
    Base64 Encoder/Decoder WordPress plugin
Published: May 15, 2024

CVE-2024-25078

None
    Insyde InsydeH2O
    InsydeH2O BIOS
Published: May 15, 2024

CVE-2024-25079

None
    InsydeH2O
    Insyde InsydeH2O
Published: May 15, 2024

CVE-2024-27353

None
    Insyde InsydeH2O kernel
    Insyde InsydeH2O
Published: May 15, 2024

CVE-2024-34954

None
    Code-projects Budget Management
Published: May 15, 2024

CVE-2024-34955

None
    Code-projects Budget Management
Published: May 15, 2024

CVE-2024-27593

None
    Eramba
Published: May 15, 2024

CVE-2024-28087

None
    Bonitasoft Bonita Runtime
    Bonitasoft runtime Community edition
Published: May 15, 2024

CVE-2024-4622

None
    alpitronic Hypercharger EV charging devices
Published: May 15, 2024

CVE-2024-25743

None
    Linux kernel
    AMD SEV-SNP
    AMD SEV-ES
Published: May 15, 2024

CVE-2024-35102

None
    VITEC AvediaServer
Published: May 15, 2024

CVE-2023-40297

None
    Stakater Forecastle
Published: May 15, 2024

CVE-2024-34906

None
    dootask
Published: May 15, 2024

CVE-2024-34909

None
    KYKMS
Published: May 15, 2024

CVE-2024-34913

None
    r-pan-scaffolding
Published: May 15, 2024

CVE-2024-4947

None
    Google Chrome
Published: May 15, 2024

CVE-2024-4948

None
    Google Chrome
Published: May 15, 2024

CVE-2024-4949

None
    Google Chrome
Published: May 15, 2024

CVE-2024-4950

None
    Google Chrome
Published: May 15, 2024

CVE-2024-4976

None
    Xpdf
Published: May 15, 2024
Click here to see more Vulnerabilities