Tag: 2024-05-22

4 Attack Reports | 175 Vulnerabilities

Attack reports

Crimeware report: Acrid, ScarletStealer and Sys01 stealers

This analysis delves into three distinct stealers: Acrid, ScarletStealer, and Sys01. Acrid is a new stealer found in December, employing the 'Heaven's Gate' technique to bypass security controls. ScarletStealer downloads additional executables and Chrome extensions to facilitate data theft. Sys01, …
malware
stealer
data-theft
cybercrime
2024-05-22
acrid
scarletstealer
crimeware
sys01
newb
Published: May 22, 2024
Downloadable IOCs: 5

Spring Exacerbation: UAC-0006 increased cyberattacks

This report aims to provide insights into the ongoing cyber operations targeting Ukraine. It analyzes the tactics, techniques, and procedures employed by threat actors in their malicious campaigns. The document offers a comprehensive overview of the cybersecurity landscape in Ukraine, highlighting …
powershell
ukraine
2024-05-22
smokeloader
uac-0006
taleshot
Published: May 22, 2024
Downloadable IOCs: 31

Analysis and Detection of CLOUD#REVERSER: An Attack Involving Threat Actors Compromising Systems Using A Sophisticated Cloud-Based Malware

Securonix Threat Research has uncovered a sophisticated malware campaign, dubbed CLOUD#REVERSER, that leverages popular cloud storage services like Google Drive and Dropbox for malware delivery, command execution, and data exfiltration. The infection chain starts with a phishing email containing a …
phishing
powershell
cloud
2024-05-22
vbscript
cloud#reverser
Published: May 22, 2024
Downloadable IOCs: 16

Unveiling a Crypto Mining Operation

This report uncovers a sophisticated intrusion campaign involving several malicious modules designed to disable security solutions and execute a persistent crypto-miner. The primary payload, dubbed GHOSTENGINE, leverages vulnerable drivers to terminate and delete known endpoint detection and respon…
xmrig
2024-05-22
cryptomining
ghostengine
Published: May 22, 2024
Downloadable IOCs: 17
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-4443

9.8
    Business Directory Plugin - Easy Listing Directories for WordPress plugin
    Business Directory Plugin for WordPress
Published: May 22, 2024

CVE-2024-5147

9.8
    WPZOOM Addons for Elementor (Templates, Widgets) plugin
    WPZOOM Addons for Elementor (Templates, Widgets)
Published: May 22, 2024

CVE-2024-3495

9.8
    Country State City Dropdown CF7 plugin for WordPress
Published: May 22, 2024

CVE-2023-51637

9.8
    Sante PACS Server PG
Published: May 22, 2024

CVE-2024-3518

8.8
    Media Library Assistant plugin for WordPress
Published: May 22, 2024

CVE-2023-20239

8.8
    Cisco Firepower Management Center (FMC) Software
Published: May 22, 2024

CVE-2024-36077

8.8
    Qlik Sense Enterprise for Windows
    Qlik Sense Enterprise for Windows
Published: May 22, 2024

CVE-2024-20360

8.8
    Cisco Firepower Management Center (FMC) Software
Published: May 22, 2024

CVE-2024-2088

8.5
    NextScripts: Social Networks Auto-Poster plugin for WordPress
Published: May 22, 2024

CVE-2024-5031

8.5
    Memberpress plugin for WordPress
Published: May 22, 2024

CVE-2024-4267

8.4
    parisneo/lollms-webui
Published: May 22, 2024

CVE-2023-51636

7.8
    Avira Prime
Published: May 22, 2024

CVE-2024-4453

7.8
    GStreamer
Published: May 22, 2024

CVE-2024-4157

7.5
    UNKNOWN
    Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
Published: May 22, 2024

CVE-2024-27264

7.4
    IBM Performance Tools for i
Published: May 22, 2024

CVE-2024-4454

7.3
    WithSecure Elements Endpoint Protection
Published: May 22, 2024

CVE-2024-4262

7.2
    Piotnet Addons For Elementor plugin for WordPress
    Piotnet Addons For Elementor plugin
Published: May 22, 2024

CVE-2024-5166

6.5
    Google Cloud's Looker
Published: May 22, 2024

CVE-2024-31904

6.5
    IBM App Connect Enterprise
Published: May 22, 2024

CVE-2024-4980

6.4
    WPKoi Templates for Elementor plugin for WordPress
Published: May 22, 2024

CVE-2024-3066

6.4
    Elegant Addons for elementor plugin for WordPress
    Elegant Addons for Elementor plugin for WordPress
Published: May 22, 2024

CVE-2024-3611

6.4
    Toolbar Extras for Elementor & More - WordPress Admin Bar Enhanced
    Toolbar Extras for Elementor & More - WordPress Admin Bar Enhanced plugin
Published: May 22, 2024

CVE-2024-4971

6.4
    LearnPress - WordPress LMS Plugin
Published: May 22, 2024

CVE-2024-5092

6.4
    Elegant Addons for Elementor plugin for WordPress
Published: May 22, 2024

CVE-2024-3198

6.4
    WP Font Awesome Share Icons plugin for WordPress
Published: May 22, 2024

CVE-2024-2163

6.4
    Ninja Beaver Add-ons for Beaver Builder plugin for WordPress
Published: May 22, 2024

CVE-2024-3666

6.4
    Opal Estate Pro - Property Management and Submission plugin for WordPress
Published: May 22, 2024

CVE-2024-3671

6.4
    Print-O-Matic plugin for WordPress
Published: May 22, 2024

CVE-2024-4362

6.4
    SiteOrigin Widgets Bundle plugin for WordPress
Published: May 22, 2024

CVE-2024-4896

6.4
    WPB Elementor Addons plugin
Published: May 22, 2024

CVE-2024-5025

6.4
    Memberpress plugin for WordPress
Published: May 22, 2024

CVE-2024-3926

6.4
    Element Pack Elementor Addons plugin for WordPress
    Element Pack Elementor Addons plugin
Published: May 22, 2024

CVE-2024-3519

6.1
    Media Library Assistant plugin for WordPress
Published: May 22, 2024

CVE-2024-1762

6.1
    NextScripts: Social Networks Auto-Poster plugin for WordPress
Published: May 22, 2024

CVE-2024-2119

6.1
    LuckyWP Table of Contents plugin for WordPress
Published: May 22, 2024

CVE-2024-4563

6.1
    MOVEit Automation
Published: May 22, 2024

CVE-2024-20261

5.8
    Cisco Firepower Threat Defense (FTD) Software
Published: May 22, 2024

CVE-2024-20293

5.8
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: May 22, 2024

CVE-2024-20361

5.8
    Cisco Firepower Threat Defense (FTD) Software
    Cisco Firepower Management Center (FMC) Software
Published: May 22, 2024

CVE-2024-20363

5.8
    Cisco Snort Intrusion Prevention System (IPS)
Published: May 22, 2024

CVE-2024-2953

5.5
    LuckyWP Table of Contents plugin for WordPress
Published: May 22, 2024

CVE-2024-1446

5.4
    NextScripts: Social Networks Auto-Poster plugin for WordPress
Published: May 22, 2024

CVE-2024-4261

5.4
    Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress
Published: May 22, 2024

CVE-2024-3927

5.3
    Element Pack Elementor Addons plugin
    Element Pack Elementor Addons plugin for WordPress
Published: May 22, 2024

CVE-2024-5193

5.3
    Ritlabs TinyWeb Server
Published: May 22, 2024

CVE-2020-35165

5.1
    Dell BSAFE Crypto-C Micro Edition
    Dell BSAFE Micro Edition Suite
Published: May 22, 2024

CVE-2024-0451

5.0
    AI ChatBot plugin for WordPress
Published: May 22, 2024

CVE-2024-0452

5.0
    WordPress AI ChatBot plugin
    WordPress AI ChatBot plugin
Published: May 22, 2024

CVE-2024-0453

5.0
    AI ChatBot plugin for WordPress
    WordPress AI ChatBot plugin
Published: May 22, 2024

CVE-2024-20355

5.0
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: May 22, 2024

CVE-2024-5194

4.7
    Arris VAP2500
Published: May 22, 2024

CVE-2024-5195

4.7
    Arris VAP2500
Published: May 22, 2024

CVE-2024-5196

4.7
    Arris VAP2500
Published: May 22, 2024

CVE-2024-21791

4.7
    Zoho ManageEngine ADAudit Plus
Published: May 22, 2024

CVE-2023-6487

4.4
    LuckyWP Table of Contents plugin for WordPress
Published: May 22, 2024

CVE-2024-0632

4.4
    Automatic Translator with Google Translate plugin for WordPress
Published: May 22, 2024

CVE-2024-3663

4.3
    WP Scraper plugin for WordPress
Published: May 22, 2024

CVE-2024-2036

4.3
    ApplyOnline - Application Form Builder and Manager plugin for WordPress
Published: May 22, 2024

CVE-2024-4153

4.3
    lunary-ai/lunary
Published: May 22, 2024

CVE-2024-31893

4.3
    IBM App Connect Enterprise
Published: May 22, 2024

CVE-2024-31894

4.3
    IBM App Connect Enterprise
Published: May 22, 2024

CVE-2024-31895

4.3
    IBM App Connect Enterprise
Published: May 22, 2024

CVE-2024-5190

None
    UNKNOWN
Published: May 22, 2024

CVE-2024-30419

None
    a-blog cms
    a-blog cms
Published: May 22, 2024

CVE-2024-30420

None
    a-blog cms
Published: May 22, 2024

CVE-2024-31394

None
    a-blog cms
    a-blog cms
Published: May 22, 2024

CVE-2024-31395

None
    a-blog cms
Published: May 22, 2024

CVE-2024-31396

None
    a-blog cms
Published: May 22, 2024

CVE-2024-31340

None
    TP-Link Tether
    TP-Link Tapo
Published: May 22, 2024

CVE-2024-35162

None
    Download Plugins and Themes from Dashboard
Published: May 22, 2024

CVE-2021-47433

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47434

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47435

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47436

None
    Linux kernel
    Linux kernel
Published: May 22, 2024

CVE-2021-47437

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47438

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47439

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47440

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47441

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47442

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47443

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47444

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47445

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47446

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47447

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47448

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47449

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47450

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47451

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47452

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47453

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47454

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47455

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47456

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47457

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47458

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47459

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47460

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47461

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47462

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47463

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47464

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47465

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47466

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47467

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47468

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47469

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47470

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47471

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47472

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47473

None
    Linux kernel
Published: May 22, 2024

CVE-2024-32988

None
    OfferBox App for Android
    OfferBox App for iOS
Published: May 22, 2024

CVE-2021-47474

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47475

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47476

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47477

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47478

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47479

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47480

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47481

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47482

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47483

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47484

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47485

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47486

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47487

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47488

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47489

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47490

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47491

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47492

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47493

None
    Linux kernel
Published: May 22, 2024

CVE-2021-47494

None
    Linux Kernel
Published: May 22, 2024

CVE-2021-47495

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47496

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47497

None
    Linux kernel
    Linux Kernel
Published: May 22, 2024

CVE-2021-47498

None
    Linux kernel
Published: May 22, 2024

CVE-2024-36010

None
    Linux kernel
    Linux kernel (igb driver)
Published: May 22, 2024

CVE-2024-35409

None
    WeBid
Published: May 22, 2024

CVE-2024-35475

None
    OpenKM Community Edition
    OpenKM Community Edition
Published: May 22, 2024

CVE-2024-35550

None
    idccms
Published: May 22, 2024

CVE-2024-35551

None
    idccms
Published: May 22, 2024

CVE-2024-35552

None
    idccms
Published: May 22, 2024

CVE-2024-35553

None
    idccms
Published: May 22, 2024

CVE-2024-35554

None
    idccms
Published: May 22, 2024

CVE-2024-35555

None
    idccms
Published: May 22, 2024

CVE-2024-35556

None
    idccms
Published: May 22, 2024

CVE-2024-35557

None
    idccms
Published: May 22, 2024

CVE-2024-35558

None
    idccms
Published: May 22, 2024

CVE-2024-35559

None
    idccms
Published: May 22, 2024

CVE-2024-35560

None
    idccms
Published: May 22, 2024

CVE-2024-35561

None
    idccms
Published: May 22, 2024

CVE-2024-33218

None
    ASUS USB 3.0 Boost Storage Driver
Published: May 22, 2024

CVE-2024-33219

None
    ASUS SABERTOOTH X99 Driver
    ASUS SABERTOOTH X99 Driver
Published: May 22, 2024

CVE-2024-33220

None
    ASUSTeK Computer Inc AISuite3
Published: May 22, 2024

CVE-2024-33221

None
    ASUS BIOS Flash Driver
Published: May 22, 2024

CVE-2024-29392

None
    Silverpeas Core
Published: May 22, 2024

CVE-2024-33222

None
    ASUS ATSZIO Driver
Published: May 22, 2024

CVE-2024-33223

None
    ASUS GPU TweakII
Published: May 22, 2024

CVE-2024-33224

None
    Realtek lO Driver
    Realtek lO Driver
Published: May 22, 2024

CVE-2024-33225

None
    Realtek High Definition Audio Function Driver
Published: May 22, 2024

CVE-2024-33226

None
    Wistron Corporation TBT Force Power Control
Published: May 22, 2024

CVE-2024-33227

None
    Nicomsoft WinI2C/DDC
Published: May 22, 2024

CVE-2024-33228

None
    Insyde Software Corp SEG Windows Driver
Published: May 22, 2024

CVE-2024-34448

None
    Ghost
Published: May 22, 2024

CVE-2024-35362

None
    Ecshop
Published: May 22, 2024

CVE-2024-5157

None
    Google Chrome
    Google Chrome
Published: May 22, 2024

CVE-2024-5158

None
    Google Chrome
Published: May 22, 2024

CVE-2024-5159

None
    Google Chrome
Published: May 22, 2024

CVE-2024-5160

None
    Google Chrome
Published: May 22, 2024

CVE-2024-29421

None
    xmedcon
Published: May 22, 2024

CVE-2024-31617

None
    OpenLiteSpeed
Published: May 22, 2024

CVE-2024-25737

None
    VuFind
Published: May 22, 2024

CVE-2024-25738

None
    VuFind
Published: May 22, 2024

CVE-2024-35627

None
    tileserver-gl
Published: May 22, 2024
Click here to see more Vulnerabilities