SecuriTricks - 2024-07-05

Attack Reports

Title	Published	Tags	Description	Number of indicators
The Hidden Danger of PDF Files with Embedded QR Codes	July 5, 2024, 3:37 p.m.	phishing credential theft 2024-07-05 pdf files qr codes malicious urls	The report describes how malware authors are abusing PDF files with embedded QR codes to deceive users into visiting malicious ph…	1
New Threat: A Deep Dive Into the Zergeca Botnet	July 5, 2024, 3:33 p.m.	persistence ddos botnet 2024-07-05 go zergeca CVE-2018-10562 CVE-2018-10561 CVE-2016-20016 CVE-2022-35733 CVE-2017-17215	An analysis of a newly discovered botnet named Zergeca, implemented in Go language, with capabilities for DDoS attacks, proxying,…	13
Turning Jenkins Into a Cryptomining Machine From an Attacker's Perspective	July 5, 2024, 3:26 p.m.	linux cryptominer 2024-07-05 groovy language jenkins script console	This report analyzes how threat actors can exploit misconfigured Jenkins servers to execute malicious Groovy scripts, leading to …	4
ProxyLogon and ProxyShell Used to Target Government Mail Servers in Asia, Europe, and South America	July 5, 2024, 3:03 p.m.	python powershell CVE-2021-34473 2024-07-05 proxyshell CVE-2021-31207 CVE-2021-34523 microsoft exchange	This analysis describes the identification of a server likely exploiting ProxyLogon and ProxyShell vulnerabilities to gain unauth…	4
Exploring the Infection Chain: ScreenConnect's Link to AsyncRAT Deployment	July 5, 2024, 2:48 p.m.	screenconnect asyncrat autoit 2024-07-05 nsi script nsis installer	In June 2024, eSentire's Threat Response Unit observed several incidents involving users downloading the ScreenConnect remote acc…	77
Death Stealer forked from PowerShell Token Grabber	July 5, 2024, 8:14 a.m.	stealer 2024-07-05 kematian stealer powershell token grabber	The report analyzes Kematian Stealer, a sophisticated PowerShell-based malware that exfiltrates sensitive data from infected syst…	0

» Click here to see all Attack Reports «

Vulnerabilities

CVE	CVSS	Published	Product impacted	Tags
CVE-2024-39696	8.8	July 5, 2024, 7:15 p.m.	Evmos	security-advisories@github.com CWE-863 2024-07-05 CVE-2024-39696
CVE-2024-34361	8.5	July 5, 2024, 7:15 p.m.	Pi-hole	security-advisories@github.com CWE-918 2024-07-05 CVE-2024-34361
CVE-2024-37903	8.2	July 5, 2024, 6:15 p.m.	Mastodon	security-advisories@github.com CWE-862 2024-07-05 CVE-2024-37903
CVE-2024-39321	7.5	July 5, 2024, 6:15 p.m.	Traefik	security-advisories@github.com CWE-639 2024-07-05 CVE-2024-39321
CVE-2024-39689	7.5	July 5, 2024, 7:15 p.m.	Certifi	security-advisories@github.com CWE-345 2024-07-05 CVE-2024-39689
CVE-2024-5753	7.5	July 5, 2024, 8:15 p.m.	vanna-ai/vanna	CWE-200 security@huntr.dev 2024-07-05 CVE-2024-5753
CVE-2024-39687	7.2	July 5, 2024, 6:15 p.m.	Fedify	security-advisories@github.com CWE-918 2024-07-05 CVE-2024-39687
CVE-2024-6505	6.0	July 5, 2024, 2:15 p.m.	QEMU	secalert@redhat.com CWE-125 2024-07-05 CVE-2024-6505
CVE-2024-6524	5.5	July 5, 2024, 12:15 p.m.	ShopXO	cna@vuldb.com CWE-918 2024-07-05 CVE-2024-6524
CVE-2024-23588	5.3	July 5, 2024, 2:15 p.m.	HCL Nomad server on Domino	psirt@hcl.com 2024-07-05 CVE-2024-23588
CVE-2024-39691	4.3	July 5, 2024, 7:15 p.m.	matrix-appservice-irc	security-advisories@github.com CWE-280 2024-07-05 CVE-2024-39691
CVE-2024-6523	3.5	July 5, 2024, 11:15 a.m.	ZKTeco BioTime	CWE-79 cna@vuldb.com 2024-07-05 CVE-2024-6523
CVE-2024-6526	3.5	July 5, 2024, 2:15 p.m.	CodeIgniter Ecommerce-CodeIgniter-Bootstrap	CWE-79 cna@vuldb.com 2024-07-05 CVE-2024-6526
CVE-2024-6525	2.7	July 5, 2024, 1:15 p.m.	D-Link DAR-7000	CWE-502 cna@vuldb.com 2024-07-05 CVE-2024-6525
CVE-2023-52340	None	July 5, 2024, 2:15 a.m.	Linux kernel	cve@mitre.org 2024-07-05 CVE-2023-52340
CVE-2024-32498	None	July 5, 2024, 2:15 a.m.	OpenStack Cinder	cve@mitre.org 2024-07-05 CVE-2024-32498
CVE-2024-34481	None	July 5, 2024, 2:15 a.m.	Drupal Wiki	cve@mitre.org 2024-07-05 CVE-2024-34481
CVE-2024-36041	None	July 5, 2024, 2:15 a.m.	KDE Plasma Workspace	cve@mitre.org 2024-07-05 CVE-2024-36041
CVE-2024-39472	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39472
CVE-2024-39473	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39473
CVE-2024-39474	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39474
CVE-2024-39475	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39475
CVE-2024-39476	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39476
CVE-2024-39477	None	July 5, 2024, 7:15 a.m.	Linux Kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39477
CVE-2024-39478	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39478
CVE-2024-39479	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39479
CVE-2024-39480	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39480
CVE-2024-39481	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39481
CVE-2024-39482	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39482
CVE-2024-39483	None	July 5, 2024, 7:15 a.m.	Linux Kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39483
CVE-2024-39484	None	July 5, 2024, 7:15 a.m.	Linux Kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39484
CVE-2024-39485	None	July 5, 2024, 7:15 a.m.	Linux kernel	416baaa9-dc9f-4396-8d5f-8c081fb06d67 2024-07-05 CVE-2024-39485
CVE-2024-6209	None	July 5, 2024, 11:15 a.m.	ABB ASPECT - Enterprise	CWE-552 cybersecurity@ch.abb.com 2024-07-05 CVE-2024-6209
CVE-2024-6298	None	July 5, 2024, 11:15 a.m.	ABB ASPECT-Enterprise	CWE-20 cybersecurity@ch.abb.com 2024-07-05 CVE-2024-6298
CVE-2024-38346	None	July 5, 2024, 2:15 p.m.	CloudStack	security@apache.org CWE-94 2024-07-05 CVE-2024-38346
CVE-2024-39027	None	July 5, 2024, 2:15 p.m.	SeaCMS	cve@mitre.org 2024-07-05 CVE-2024-39027
CVE-2024-39028	None	July 5, 2024, 2:15 p.m.	SeaCMS	cve@mitre.org 2024-07-05 CVE-2024-39028
CVE-2024-39864	None	July 5, 2024, 2:15 p.m.	CloudStack	security@apache.org CWE-665 2024-07-05 CVE-2024-39864
CVE-2024-23997	None	July 5, 2024, 4:15 p.m.	Lukas Bach yana	cve@mitre.org 2024-07-05 CVE-2024-23997
CVE-2024-23998	None	July 5, 2024, 4:15 p.m.	Another Redis Desktop Manager	cve@mitre.org 2024-07-05 CVE-2024-23998
CVE-2024-29318	None	July 5, 2024, 4:15 p.m.	Volmarg Personal Management System	cve@mitre.org 2024-07-05 CVE-2024-29318
CVE-2024-29319	None	July 5, 2024, 4:15 p.m.	Volmarg Personal Management System	cve@mitre.org 2024-07-05 CVE-2024-29319
CVE-2024-37768	None	July 5, 2024, 4:15 p.m.	14Finger	cve@mitre.org 2024-07-05 CVE-2024-37768
CVE-2024-37769	None	July 5, 2024, 4:15 p.m.	14Finger	cve@mitre.org 2024-07-05 CVE-2024-37769
CVE-2024-39210	None	July 5, 2024, 4:15 p.m.	Best House Rental Management System	cve@mitre.org 2024-07-05 CVE-2024-39210
CVE-2024-27709	None	July 5, 2024, 5:15 p.m.	Eskooly Web Product	cve@mitre.org 2024-07-05 CVE-2024-27709
CVE-2024-27710	None	July 5, 2024, 5:15 p.m.	Eskooly Free Online School management Software	cve@mitre.org 2024-07-05 CVE-2024-27710
CVE-2024-27711	None	July 5, 2024, 5:15 p.m.	Eskooly Free Online School management Software	cve@mitre.org 2024-07-05 CVE-2024-27711
CVE-2024-27712	None	July 5, 2024, 5:15 p.m.	Eskooly Free Online School management Software	cve@mitre.org 2024-07-05 CVE-2024-27712
CVE-2024-27713	None	July 5, 2024, 5:15 p.m.	Eskooly Free Online School management Software	cve@mitre.org 2024-07-05 CVE-2024-27713
CVE-2024-27715	None	July 5, 2024, 5:15 p.m.	Eskooly Free Online School management Software	cve@mitre.org 2024-07-05 CVE-2024-27715
CVE-2024-27716	None	July 5, 2024, 5:15 p.m.	Eskooly Web Product	cve@mitre.org 2024-07-05 CVE-2024-27716
CVE-2024-27717	None	July 5, 2024, 5:15 p.m.	Eskooly Free Online School Management Software	cve@mitre.org 2024-07-05 CVE-2024-27717
CVE-2024-37767	None	July 5, 2024, 5:15 p.m.	14Finger	cve@mitre.org 2024-07-05 CVE-2024-37767
CVE-2024-39150	None	July 5, 2024, 5:15 p.m.	vditor	cve@mitre.org 2024-07-05 CVE-2024-39150
CVE-2024-39178	None	July 5, 2024, 5:15 p.m.	MyPower vc8100	cve@mitre.org 2024-07-05 CVE-2024-39178
CVE-2024-39174	None	July 5, 2024, 6:15 p.m.	yzmcms	cve@mitre.org 2024-07-05 CVE-2024-39174
CVE-2024-39019	None	July 5, 2024, 7:15 p.m.	idccms	cve@mitre.org 2024-07-05 CVE-2024-39019
CVE-2024-39020	None	July 5, 2024, 7:15 p.m.	idccms	cve@mitre.org 2024-07-05 CVE-2024-39020
CVE-2024-39021	None	July 5, 2024, 7:15 p.m.	idccms	cve@mitre.org 2024-07-05 CVE-2024-39021
CVE-2024-39022	None	July 5, 2024, 7:15 p.m.	idccms	cve@mitre.org 2024-07-05 CVE-2024-39022
CVE-2024-39023	None	July 5, 2024, 7:15 p.m.	idccms	cve@mitre.org 2024-07-05 CVE-2024-39023

» Click here to see all Vulnerabilities «

Tag : 2024-07-05