Tag: 2024-06-28

5 attack reports | 74 vulnerabilities

Attack reports

Supposed Grasshopper: operators impersonate Israeli government and private companies to deploy open-source malware

Published: June 28, 2024

Number of indicators: 18

impersonation wordpress sliver golang 2024-06-28 open-source donut virtual disk

A long-running campaign was identified involving malicious actors impersonating Israeli entities and private companies. The opera…

An Android RAT targets Telegram Users

Published: June 28, 2024

Number of indicators: 4

surveillance rat phishing android keylogger 2024-06-28 spymax

This analysis discusses SpyMax, a Remote Access Trojan (RAT) that targets Android devices and specifically aims at obtaining data…

Kimsuky Deploys TRANSLATEXT Chrome Extension

Published: June 28, 2024

Number of indicators: 10

malware north korea cyber espionage credential theft 2024-06-28 chrome extension

In March 2024, the cybersecurity firm Zscaler observed a new activity from Kimsuky, a North Korean state-sponsored hacker group. …

Examining Water Infection Routine Leading to an XMRig Cryptominer

Published: June 28, 2024

Number of indicators: 13

obfuscation xmrig purecrypter cryptominer CVE-2023-21839 CVE-2017-3506 2024-06-28 vulnerability exploitation multi-stage loading

This report details the multi-stage loading technique utilized by the threat actor Water Sigbin to deliver the PureCrypter loader…

We're not talking about cryptocurrency as much as we used to, but there are still plenty of scammers out there

Published: June 28, 2024

Number of indicators: 4

espionage cryptocurrency sugargh0st spicerat 2024-06-28

While cryptocurrency and blockchain have lost mainstream attention, cybercriminals continue to exploit these technologies through…

» Click here to see all Attack Reports «

Vulnerabilities

CVE-2024-39349
Synology Camera Firmware
9.8
CWE-120 security@synology.com 2024-06-28 CVE-2024-39349
Published: June 28, 2024
CVE-2024-5827
Vanna
9.8
CWE-434 security@huntr.dev 2024-06-28 CVE-2024-5827
Published: June 28, 2024
CVE-2024-29039
tpm2
9.0
security-advisories@github.com 2024-06-28 CVE-2024-29039 CWE-807
Published: June 28, 2024
CVE-2024-38521
Hush Line
8.8
security-advisories@github.com CWE-79 2024-06-28 CVE-2024-38521
Published: June 28, 2024
CVE-2024-37905
authentik
8.8
CWE-284 security-advisories@github.com 2024-06-28 CVE-2024-37905
Published: June 28, 2024
CVE-2024-38371
authentik
8.6
CWE-284 security-advisories@github.com 2024-06-28 CVE-2024-38371
Published: June 28, 2024
CVE-2024-37282
Elasticsearch
8.1
CWE-285 bressers@elastic.co 2024-06-28 CVE-2024-37282
Published: June 28, 2024
CVE-2024-5712
stitionai/devika
8.1
CWE-352 security@huntr.dev 2024-06-28 CVE-2024-5712
Published: June 28, 2024
CVE-2024-39348
Synology Router Manager (SRM)
7.5
CWE-494 security@synology.com 2024-06-28 CVE-2024-39348
Published: June 28, 2024
CVE-2024-39350
Synology Camera Firmware
7.5
CWE-290 security@synology.com 2024-06-28 CVE-2024-39350
Published: June 28, 2024
CVE-2024-31912
IBM MQ
7.5
psirt@us.ibm.com CWE-266 2024-06-28 CVE-2024-31912
Published: June 28, 2024
CVE-2024-38374
cyclonedx-core-java
7.5
security-advisories@github.com CWE-611 2024-06-28 CVE-2024-38374
Published: June 28, 2024
CVE-2024-38528
nptd-rs
7.5
security-advisories@github.com CWE-770 2024-06-28 CVE-2024-38528
Published: June 28, 2024
CVE-2024-38514
NextChat
7.4
security-advisories@github.com CWE-918 2024-06-28 CVE-2024-38514
Published: June 28, 2024
CVE-2023-47802
Synology Camera Firmware
7.2
CWE-78 security@synology.com 2024-06-28 CVE-2023-47802
Published: June 28, 2024
CVE-2024-39351
Synology Camera Firmware
7.2
CWE-78 security@synology.com 2024-06-28 CVE-2024-39351
Published: June 28, 2024
CVE-2024-39708
Delinea Privilege Manager (formerly Thycotic Privilege Manager)
7.0
cve@mitre.org 2024-06-28 CVE-2024-39708
Published: June 28, 2024
CVE-2024-6402
Tenda A301
6.5
CWE-121 cna@vuldb.com 2024-06-28 CVE-2024-6402
Published: June 28, 2024
CVE-2024-6403
Tenda A301
6.5
CWE-121 cna@vuldb.com 2024-06-28 CVE-2024-6403
Published: June 28, 2024
CVE-2024-35155
IBM MQ Console
6.5
psirt@us.ibm.com CWE-209 2024-06-28 CVE-2024-35155
Published: June 28, 2024
CVE-2024-25031
IBM Storage Defender - Resiliency Service
6.5
psirt@us.ibm.com CWE-307 2024-06-28 CVE-2024-25031
Published: June 28, 2024
CVE-2024-35156
IBM MQ
6.5
psirt@us.ibm.com CWE-209 2024-06-28 CVE-2024-35156
Published: June 28, 2024
CVE-2024-6296
Stackable - Page Builder Gutenberg Blocks plugin for WordPress
6.4
security@wordfence.com 2024-06-28 CVE-2024-6296
Published: June 28, 2024
CVE-2024-5788
WordPress Silesia theme
6.4
security@wordfence.com 2024-06-28 CVE-2024-5788
Published: June 28, 2024
CVE-2024-5796
WordPress Infinite theme
6.4
security@wordfence.com 2024-06-28 CVE-2024-5796
Published: June 28, 2024
CVE-2024-5424
WordPress Gallery Blocks with Lightbox Plugin
6.4
security@wordfence.com 2024-06-28 CVE-2024-5424
Published: June 28, 2024
CVE-2024-5662
The Ultimate Post Kit Addons For Elementor plugin for WordPress
6.4
security@wordfence.com 2024-06-28 CVE-2024-5662
Published: June 28, 2024
CVE-2024-5922
WordPress Scylla Lite Theme
6.4
security@wordfence.com 2024-06-28 CVE-2024-5922
Published: June 28, 2024
CVE-2024-5925
WordPress Theron Lite theme
6.4
security@wordfence.com 2024-06-28 CVE-2024-5925
Published: June 28, 2024
CVE-2024-38522
Hush Line
6.3
security-advisories@github.com 2024-06-28 CVE-2024-38522 CWE-183
Published: June 28, 2024
CVE-2024-35137
IBM Security Access Manager Docker
6.2
psirt@us.ibm.com CWE-258 2024-06-28 CVE-2024-35137
Published: June 28, 2024
CVE-2024-35139
IBM Security Access Manager Docker
6.2
psirt@us.ibm.com CWE-276 2024-06-28 CVE-2024-35139
Published: June 28, 2024
CVE-2024-39347
Synology Router Manager (SRM)
5.9
CWE-276 security@synology.com 2024-06-28 CVE-2024-39347
Published: June 28, 2024
CVE-2024-31919
IBM MQ
5.9
psirt@us.ibm.com CWE-770 2024-06-28 CVE-2024-31919
Published: June 28, 2024
CVE-2024-25053
IBM Cognos Analytics
5.9
psirt@us.ibm.com CWE-295 2024-06-28 CVE-2024-25053
Published: June 28, 2024
CVE-2024-35116
IBM MQ
5.9
psirt@us.ibm.com CWE-789 2024-06-28 CVE-2024-35116
Published: June 28, 2024
CVE-2024-5863
Easy Image Collage plugin for WordPress
5.4
security@wordfence.com 2024-06-28 CVE-2024-5863
Published: June 28, 2024
CVE-2024-25041
IBM Cognos Analytics
5.4
CWE-79 psirt@us.ibm.com 2024-06-28 CVE-2024-25041
Published: June 28, 2024
CVE-2023-47803
Synology Camera Firmware
5.3
CWE-22 security@synology.com 2024-06-28 CVE-2023-47803
Published: June 28, 2024
CVE-2024-2795
SEO SIMPLE PACK plugin for WordPress
5.3
security@wordfence.com 2024-06-28 CVE-2024-2795
Published: June 28, 2024
CVE-2024-38322
IBM Storage Defender - Resiliency Service
5.3
psirt@us.ibm.com CWE-204 2024-06-28 CVE-2024-38322
Published: June 28, 2024
CVE-2024-39352
Synology Camera Firmware
4.9
CWE-863 security@synology.com 2024-06-28 CVE-2024-39352
Published: June 28, 2024
CVE-2024-6288
Conversios - Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress
4.7
security@wordfence.com 2024-06-28 CVE-2024-6288
Published: June 28, 2024
CVE-2024-38518
BigBlueButton
4.6
CWE-284 security-advisories@github.com 2024-06-28 CVE-2024-38518
Published: June 28, 2024
CVE-2024-5864
Easy Affiliate Links plugin for WordPress
4.3
security@wordfence.com 2024-06-28 CVE-2024-5864
Published: June 28, 2024
CVE-2024-29038
tpm2-tools
4.3
security-advisories@github.com 2024-06-28 CVE-2024-29038 CWE-1283
Published: June 28, 2024
CVE-2024-29040
Trusted Computing Group's (TCG) TPM2 Software Stack (TSS)
4.3
security-advisories@github.com CWE-502 2024-06-28 CVE-2024-29040
Published: June 28, 2024
CVE-2022-38383
IBM Cloud Pak for Security (CP4S)
4.0
psirt@us.ibm.com CWE-525 2024-06-28 CVE-2022-38383
Published: June 28, 2024
CVE-2024-37137
Dell Key Trust Platform
3.8
security_alert@emc.com 2024-06-28 CVE-2024-37137 CWE-1240
Published: June 28, 2024
CVE-2024-30109
HCL DRYiCE AEX
3.7
psirt@hcl.com CWE-1021 2024-06-28 CVE-2024-30109
Published: June 28, 2024
CVE-2024-30110
HCL DRYiCE AEX
3.7
CWE-20 psirt@hcl.com 2024-06-28 CVE-2024-30110
Published: June 28, 2024
CVE-2024-39302
BigBlueButton
3.7
security-advisories@github.com CWE-269 2024-06-28 CVE-2024-39302
Published: June 28, 2024
CVE-2024-38531
Nix package manager
3.6
security-advisories@github.com 2024-06-28 CVE-2024-38531 CWE-278
Published: June 28, 2024
CVE-2024-39307
Kavita
3.5
security-advisories@github.com CWE-79 2024-06-28 CVE-2024-39307
Published: June 28, 2024
CVE-2024-30111
HCL DRYiCE AEX
3.3
psirt@hcl.com CWE-1326 2024-06-28 CVE-2024-30111
Published: June 28, 2024
CVE-2024-30135
UNKNOWN
3.3
CWE-200 psirt@hcl.com 2024-06-28 CVE-2024-30135
Published: June 28, 2024
CVE-2024-5570
Simple Photoswipe WordPress plugin
None
contact@wpscan.com 2024-06-28 CVE-2024-5570
Published: June 28, 2024
CVE-2024-5727
Widget4Call WordPress plugin
None
contact@wpscan.com 2024-06-28 CVE-2024-5727
Published: June 28, 2024
CVE-2024-5728
Animated AL List WordPress plugin
None
contact@wpscan.com 2024-06-28 CVE-2024-5728
Published: June 28, 2024
CVE-2024-5729
Simple AL Slider WordPress plugin
None
contact@wpscan.com 2024-06-28 CVE-2024-5729
Published: June 28, 2024
CVE-2024-5730
Pagerank tools WordPress plugin
None
contact@wpscan.com 2024-06-28 CVE-2024-5730
Published: June 28, 2024
CVE-2024-5735
AdmirorFrames Joomla! extension
None
cvd@cert.pl CWE-497 2024-06-28 CVE-2024-5735
Published: June 28, 2024
CVE-2024-5736
Joomla! AdmirorFrames extension
None
cvd@cert.pl CWE-918 2024-06-28 CVE-2024-5736
Published: June 28, 2024
CVE-2024-5737
AdmirorFrames Joomla! extension
None
CWE-79 cvd@cert.pl 2024-06-28 CVE-2024-5737
Published: June 28, 2024
CVE-2024-37741
OpenPLC
None
cve@mitre.org 2024-06-28 CVE-2024-37741
Published: June 28, 2024
CVE-2024-39704
Soft Circle French-Bread Melty Blood: Actress Again: Current Code
None
cve@mitre.org 2024-06-28 CVE-2024-39704
Published: June 28, 2024
CVE-2024-3800
S@M CMS (Concept Intermedia)
None
CWE-79 cvd@cert.pl 2024-06-28 CVE-2024-3800
Published: June 28, 2024
CVE-2024-3801
S@M CMS (Concept Intermedia)
None
CWE-79 cvd@cert.pl 2024-06-28 CVE-2024-3801
Published: June 28, 2024
CVE-2024-3816
S@M CMS (Concept Intermedia)
None
cvd@cert.pl CWE-89 2024-06-28 CVE-2024-3816
Published: June 28, 2024
CVE-2022-27540
HP BIOS
None
hp-security-alert@hp.com 2024-06-28 CVE-2022-27540
Published: June 28, 2024
CVE-2024-27628
DCMTK
None
cve@mitre.org 2024-06-28 CVE-2024-27628
Published: June 28, 2024
CVE-2024-27629
dc2niix
None
cve@mitre.org 2024-06-28 CVE-2024-27629
Published: June 28, 2024
CVE-2024-5972
UNKNOWN
None
security@wordfence.com 2024-06-28 CVE-2024-5972
Published: June 28, 2024
CVE-2024-3995
Helix ALM
None
2024-06-28 CVE-2024-3995 security@puppet.com
Published: June 28, 2024
» Click here to see all Vulnerabilities «