Tag: 2024-06-14

4 Attack Reports | 166 Vulnerabilities

Attack reports

The Digital Legacy of Botnet 911 S5

The report provides an in-depth analysis of the notorious Botnet 911 S5, revealing its origins, operations, and digital remnants. It traces the botnet's evolution, from its inception in 2014 to its eventual demise in 2024, after a joint law enforcement operation. The botnet leveraged free VPN softw…
botnet
cybercrime
2024-06-14
dewvpn
paladinvpn
shield vpn
maskvpn
shinevpn
proxygate
Published: June 14, 2024
Downloadable IOCs: 35

DERO cryptojacking adopts new techniques to evade detection

This report examines the threat actors behind a 2023 cryptojacking campaign targeting misconfigured Kubernetes clusters, focusing on their evolving techniques to avoid detection. It analyzes the malicious Docker images they deployed, the hardcoded wallet and pool information in the DERO miner binar…
cloud
kubernetes
cryptojacking
2024-06-14
dero miner
Published: June 14, 2024
Downloadable IOCs: 18

Operation Celestial Force employs mobile and desktop malware to target Indian entities

Cisco Talos is disclosing a new malware campaign called 'Operation Celestial Force' conducted by a Pakistani nexus of threat actors called 'Cosmic Leopard'. This multi-year operation has been targeting Indian entities and individuals since at least 2018, employing the use of GravityRAT (an Android …
espionage
surveillance
2024-06-14
targeted attacks
gravityrat
heavylift
Published: June 14, 2024
Downloadable IOCs: 142

Arid Viper poisons Android apps with AridSpy

ESET researchers identified five campaigns targeting Android users with trojanized apps that deploy multistage Android spyware called AridSpy. This malware, attributed with medium confidence to the Arid Viper APT group, focuses on user data espionage. AridSpy downloads additional payloads from its …
espionage
android
exfiltration
spyware
2024-06-14
aridspy
Published: June 14, 2024
Downloadable IOCs: 37
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-27143

9.8
    Toshiba printers
Published: June 14, 2024

CVE-2024-27144

9.8
    Toshiba printers
Published: June 14, 2024

CVE-2024-27145

9.8
    Toshiba printers
Published: June 14, 2024

CVE-2024-3080

9.8
    ASUS router
Published: June 14, 2024

CVE-2024-27172

9.8
    UNKNOWN
Published: June 14, 2024

CVE-2024-27173

9.8
    Toshiba Remote Command program
Published: June 14, 2024

CVE-2024-27174

9.8
    UNKNOWN
Published: June 14, 2024

CVE-2024-4936

9.8
    WordPress Canto plugin
Published: June 14, 2024

CVE-2024-5577

9.8
    Where I Was, Where I Will Be plugin for WordPress
Published: June 14, 2024

CVE-2024-3912

9.8
    ASUS routers
Published: June 14, 2024

CVE-2024-5671

9.8
    Trellix IPS Manager
Published: June 14, 2024

CVE-2024-2472

9.1
    LatePoint Plugin for WordPress
Published: June 14, 2024

CVE-2024-3496

8.8
    Printer Manufacturer
Published: June 14, 2024

CVE-2024-3497

8.8
    Toshiba printer web server
Published: June 14, 2024

CVE-2024-5995

8.8
    Soar Cloud HR Portal
Published: June 14, 2024

CVE-2024-5996

8.8
    Soar Cloud HR Portal
Published: June 14, 2024

CVE-2024-2024

8.8
    Folders Pro plugin for WordPress
Published: June 14, 2024

CVE-2024-4404

8.5
    ElementsKit PRO plugin for WordPress
Published: June 14, 2024

CVE-2024-27169

8.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-34694

8.1
    LNbits
Published: June 14, 2024

CVE-2024-37882

8.1
    Nextcloud Server
Published: June 14, 2024

CVE-2024-36502

7.9
    UNKNOWN
Published: June 14, 2024

CVE-2024-27165

7.8
    Toshiba printers
Published: June 14, 2024

CVE-2024-3498

7.8
    Printer
Published: June 14, 2024

CVE-2024-36500

7.8
    AMS Module
Published: June 14, 2024

CVE-2024-27155

7.7
    Toshiba printers
Published: June 14, 2024

CVE-2024-5551

7.5
    WP STAGING Pro WordPress Backup Plugin
Published: June 14, 2024

CVE-2024-27147

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27148

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27149

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27150

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27151

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27152

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27153

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27158

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27166

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27167

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27170

7.4
    Toshiba printers
Published: June 14, 2024

CVE-2024-27171

7.4
    UNKNOWN
Published: June 14, 2024

CVE-2024-5983

7.3
    itsourcecode Online Bookstore
Published: June 14, 2024

CVE-2024-5984

7.3
    itsourcecode Online Bookstore
Published: June 14, 2024

CVE-2024-1094

7.3
    Timetics- AI-powered Appointment Booking with Visual Seat Plan plugin for WordPress
Published: June 14, 2024

CVE-2024-36503

7.3
    UNKNOWN
Published: June 14, 2024

CVE-2024-37313

7.3
    Nextcloud server
Published: June 14, 2024

CVE-2024-6003

7.3
    Guangdong Baolun Electronics IP Network Broadcasting Service Platform
Published: June 14, 2024

CVE-2024-3079

7.2
    ASUS routers
Published: June 14, 2024

CVE-2024-27176

7.2
    UNKNOWN
Published: June 14, 2024

CVE-2024-27177

7.2
    UNKNOWN
Published: June 14, 2024

CVE-2024-27178

7.2
    UNKNOWN
Published: June 14, 2024

CVE-2024-31161

7.2
    ASUS Download Master
Published: June 14, 2024

CVE-2024-31162

7.2
    ASUS Download Master
Published: June 14, 2024

CVE-2024-31163

7.2
    ASUS Download Master
Published: June 14, 2024

CVE-2024-27164

7.1
    Toshiba printers
Published: June 14, 2024

CVE-2024-27168

7.1
    UNKNOWN
Published: June 14, 2024

CVE-2024-27156

6.8
    UNKNOWN
Published: June 14, 2024

CVE-2024-27157

6.8
    UNKNOWN
Published: June 14, 2024

CVE-2024-36499

6.8
    UNKNOWN
Published: June 14, 2024

CVE-2024-5731

6.8
    UNKNOWN
Published: June 14, 2024

CVE-2024-27146

6.7
    Toshiba printers
Published: June 14, 2024

CVE-2024-27180

6.7
    UNKNOWN
Published: June 14, 2024

CVE-2023-29174

6.5
    NervyThemes SKU Label Changer For WooCommerce
Published: June 14, 2024

CVE-2023-36504

6.5
    BBS e-Theme BBS e-Popup
Published: June 14, 2024

CVE-2024-27163

6.5
    Toshiba printers
Published: June 14, 2024

CVE-2023-51495

6.5
    WooCommerce Warranty Requests
Published: June 14, 2024

CVE-2024-37889

6.5
    MyFinances
Published: June 14, 2024

CVE-2024-2122

6.4
    FooGallery plugin for WordPress
Published: June 14, 2024

CVE-2024-5994

6.4
    WP Go Maps plugin
Published: June 14, 2024

CVE-2024-4863

6.4
    Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress
Published: June 14, 2024

CVE-2023-36694

6.3
    Kingkong Board
Published: June 14, 2024

CVE-2024-5981

6.3
    itsourcecode Online House Rental System
    Online House Rental System
Published: June 14, 2024

CVE-2024-5985

6.3
    SourceCodester Best Online News Portal
Published: June 14, 2024

CVE-2024-37312

6.3
    Nextcloud user_oidc app
Published: June 14, 2024

CVE-2024-27154

6.2
    UNKNOWN
Published: June 14, 2024

CVE-2024-27159

6.2
    Toshiba printers
Published: June 14, 2024

CVE-2024-27160

6.2
    Toshiba printers
Published: June 14, 2024

CVE-2024-27161

6.2
    Toshiba printers
Published: June 14, 2024

CVE-2024-27162

6.1
    Toshiba printers
Published: June 14, 2024

CVE-2024-23442

6.1
    Kibana
Published: June 14, 2024

CVE-2024-37888

6.1
    CKEditor Open Link plugin
Published: June 14, 2024

CVE-2024-27141

5.9
    Toshiba printers
Published: June 14, 2024

CVE-2024-27142

5.9
    Toshiba printers
Published: June 14, 2024

CVE-2024-5465

5.9
    Calendar module
Published: June 14, 2024

CVE-2024-36501

5.6
    UNKNOWN
Published: June 14, 2024

CVE-2023-36695

5.4
    Sublanguage
Published: June 14, 2024

CVE-2023-51516

5.4
    Business Directory Plugin
Published: June 14, 2024

CVE-2023-51497

5.4
    WooCommerce Ship to Multiple Addresses
Published: June 14, 2024

CVE-2024-37886

5.4
    Nextcloud user_oidc app
Published: June 14, 2024

CVE-2023-35040

5.3
    SendPress Newsletters
Published: June 14, 2024

CVE-2023-37394

5.3
    WP Dummy Content Generator
Published: June 14, 2024

CVE-2023-51507

5.3
    Quiz And Survey Master
Published: June 14, 2024

CVE-2023-51377

5.3
    WPEverest Everest Forms
Published: June 14, 2024

CVE-2023-51496

5.3
    WooCommerce Warranty Requests
Published: June 14, 2024

CVE-2024-23504

5.3
    Ninja Tables
Published: June 14, 2024

CVE-2024-21988

5.3
    StorageGRID
Published: June 14, 2024

CVE-2024-31159

4.8
    ASUS Download Master
Published: June 14, 2024

CVE-2024-31160

4.8
    ASUS Download Master
Published: June 14, 2024

CVE-2024-27179

4.7
    UNKNOWN
Published: June 14, 2024

CVE-2024-37182

4.7
    Mattermost Desktop App
Published: June 14, 2024

CVE-2024-37316

4.6
    Nextcloud Calendar App
Published: June 14, 2024

CVE-2024-37317

4.6
    Nextcloud Notes app
Published: June 14, 2024

CVE-2024-27175

4.4
    Printer
Published: June 14, 2024

CVE-2024-34012

4.4
    Acronis Cloud Manager (Windows)
Published: June 14, 2024

CVE-2023-35045

4.3
    Fat Rat Collect
Published: June 14, 2024

CVE-2023-51523

4.3
    WooCommerce Easy Duplicate Product
Published: June 14, 2024

CVE-2023-6492

4.3
    Simple Sitemap - Create a Responsive HTML Sitemap plugin for WordPress
Published: June 14, 2024

CVE-2024-0892

4.3
    Schema App Structured Data plugin for WordPress
Published: June 14, 2024

CVE-2023-51376

4.3
    ProjectHuddle Client Site
Published: June 14, 2024

CVE-2024-2023

4.3
    Folders and Folders Pro plugin for WordPress
Published: June 14, 2024

CVE-2024-37883

4.3
    Nextcloud Deck
Published: June 14, 2024

CVE-2024-5464

4.0
    Huawei NearLink module
Published: June 14, 2024

CVE-2024-36287

3.8
    Mattermost Desktop App
Published: June 14, 2024

CVE-2024-37885

3.8
    Nextcloud Desktop Client for macOS
Published: June 14, 2024

CVE-2024-30119

3.7
    HCL DRYiCE OptiBot Reset Station
Published: June 14, 2024

CVE-2024-37314

3.5
    Nextcloud Server
Published: June 14, 2024

CVE-2024-37315

3.5
    Nextcloud Server
Published: June 14, 2024

CVE-2024-37884

3.5
    Nextcloud Server
Published: June 14, 2024

CVE-2024-37887

3.5
    Nextcloud Server
Published: June 14, 2024

CVE-2024-5469

3.1
    GitLab CE/EE
Published: June 14, 2024

CVE-2024-30120

2.9
    HCL DRYiCE Optibot Reset Station
Published: June 14, 2024

CVE-2024-1295

None
    The Events Calendar WordPress plugin
    The events-calendar-pro WordPress plugin
Published: June 14, 2024

CVE-2024-2218

None
    LuckyWP Table of Contents WordPress plugin
Published: June 14, 2024

CVE-2024-3754

None
    Alemha watermarker WordPress plugin
Published: June 14, 2024

CVE-2024-3965

None
    Pray For Me WordPress plugin
Published: June 14, 2024

CVE-2024-3966

None
    Pray For Me WordPress plugin
Published: June 14, 2024

CVE-2024-3971

None
    Similarity WordPress plugin
Published: June 14, 2024

CVE-2024-3972

None
    Similarity WordPress plugin
Published: June 14, 2024

CVE-2024-3977

None
    WordPress Jitsi Shortcode WordPress plugin
Published: June 14, 2024

CVE-2024-3978

None
    WordPress Jitsi Shortcode plugin
Published: June 14, 2024

CVE-2024-3992

None
    Amen WordPress plugin
Published: June 14, 2024

CVE-2024-3993

None
    AZAN Plugin WordPress plugin
Published: June 14, 2024

CVE-2024-4005

None
    Social Pixel WordPress plugin
Published: June 14, 2024

CVE-2024-4270

None
    SVGMagic WordPress plugin
Published: June 14, 2024

CVE-2024-4271

None
    SVGator WordPress plugin
Published: June 14, 2024

CVE-2024-4480

None
    WP Prayer II WordPress plugin
Published: June 14, 2024

CVE-2024-4751

None
    WP Prayer II WordPress plugin
Published: June 14, 2024

CVE-2024-5155

None
    Inquiry cart WordPress plugin
Published: June 14, 2024

CVE-2024-5961

None
    2ClickPortal
Published: June 14, 2024

CVE-2024-25142

None
    Apache Airflow
Published: June 14, 2024

CVE-2024-5685

None
    snipe-it
Published: June 14, 2024

CVE-2024-36459

None
    SiteMinder Web Agent for IIS Web Server
    SiteMinder Web Agent for Domino Web Server
Published: June 14, 2024

CVE-2024-37637

None
    TOTOLINK A3700R
Published: June 14, 2024

CVE-2024-37639

None
    TOTOLINK A3700R
Published: June 14, 2024

CVE-2024-37640

None
    TOTOLINK A3700R
Published: June 14, 2024

CVE-2024-33374

None
    LB-LINK BL-W1210M v2.0 router
Published: June 14, 2024

CVE-2024-33375

None
    LB-LINK BL-W1210M
Published: June 14, 2024

CVE-2024-33377

None
    LB-LINK BL-W1210M
Published: June 14, 2024

CVE-2024-34539

None
    TerraMaster TOS firmware
Published: June 14, 2024

CVE-2024-36656

None
    MintHCM
Published: June 14, 2024

CVE-2024-37367

None
    Rockwell Automation FactoryTalk View SE
Published: June 14, 2024

CVE-2024-37368

None
    Rockwell Automation FactoryTalk® View SE
Published: June 14, 2024

CVE-2024-37644

None
    TRENDnet TEW-814DAP
Published: June 14, 2024

CVE-2024-33373

None
    LB-LINK BL-W1210M v2.0 router
Published: June 14, 2024

CVE-2024-37641

None
    TRENDnet TEW-814DAP
Published: June 14, 2024

CVE-2024-37642

None
    TRENDnet TEW-814DAP
Published: June 14, 2024

CVE-2024-37643

None
    TRENDnet TEW-814DAP
Published: June 14, 2024

CVE-2024-37645

None
    TRENDnet TEW-814DAP
Published: June 14, 2024

CVE-2024-5934

None
    UNKNOWN
Published: June 14, 2024

CVE-2024-37369

None
    Rockwell Automation
Published: June 14, 2024

CVE-2024-5659

None
    Rockwell Automation controllers
Published: June 14, 2024

CVE-2024-24320

None
    Mgt-commerce CloudPanel
Published: June 14, 2024

CVE-2024-36597

None
    Aegon Life
Published: June 14, 2024

CVE-2024-36598

None
    Aegon Life
Published: June 14, 2024

CVE-2024-36599

None
    Aegon Life
Published: June 14, 2024

CVE-2024-36600

None
    libcdio
Published: June 14, 2024

CVE-2024-37831

None
    Itsourcecode Payroll Management System
Published: June 14, 2024

CVE-2024-2875

None
    UNKNOWN
Published: June 14, 2024
Click here to see more Vulnerabilities