Tag: 2024-07-15

7 attack reports | 89 vulnerabilities

Attack reports

New BugSleep Backdoor Deployed in Recent MuddyWater Campaigns

Published: July 15, 2024

Number of indicators: 50

An Iranian threat group known as MuddyWater, affiliated with the Ministry of Intelligence and Security, has significantly intensi…

ShadowRoot Ransomware Targeting Turkish Businesses

Published: July 15, 2024

Number of indicators: 3

ransomware 2024-07-15 türkiye

An analysis reveals a basic ransomware campaign targeting Turkish enterprises. The attack commences with a malicious PDF attachme…

Disarming DarkGate: A Deep Dive into Thwarting the Latest DarkGate Variant

Published: July 15, 2024

Number of indicators: 4

rat darkgate 2024-07-15

This report analyzes a recent phishing campaign distributing a new DarkGate Remote Access Trojan variant. The malware leverages v…

A Social Engineering Tactic to Deploy Malware

Published: July 15, 2024

Number of indicators: 7

darkgate lumma stealer 2024-07-15 clickfix

McAfee Labs uncovered a sophisticated social engineering technique, dubbed 'ClickFix,' for deploying malware such as DarkGate and…

WorkersDevBackdoor and MadMxShell converge in malvertising campaigns

Published: July 15, 2024

Number of indicators: 51

malvertising madmxshell 2024-07-15 workersdevbackdoor

This report analyzes two recent malware distribution campaigns that leverage malvertising techniques. The campaigns deliver the W…

Security Advisory for Squarespace

Published: July 15, 2024

Number of indicators: 4

2024-07-15 squarespace

This report outlines a critical vulnerability affecting the Squarespace platform, a widely used website builder. The flaw allows …

Braodo Info Stealer Targeting Vietnam and Abroad

Published: July 15, 2024

Number of indicators: 14

obfuscation stealer exfiltration 2024-07-15 telegram vietnam braodo stealer

CYFIRMA discovered Braodo Stealer, a Python-based malware active since early 2024, primarily targeting users in Vietnam but also …

» Click here to see all Attack Reports «

Vulnerabilities

CVE-2024-39915

Thruk

9.9

security-advisories@github.com CWE-94 2024-07-15 CVE-2024-39915

Published: July 15, 2024

CVE-2024-6743

AguardNet's Space Management System

9.8

CWE-89 twcert@cert.org.tw 2024-07-15 CVE-2024-6743

Published: July 15, 2024

CVE-2024-6744

Secure Email Gateway from Cellopoint

9.8

CWE-121 twcert@cert.org.tw 2024-07-15 CVE-2024-6744

Published: July 15, 2024

CVE-2024-40624

TorrentPier

9.8

security-advisories@github.com CWE-502 2024-07-15 CVE-2024-40624

Published: July 15, 2024

CVE-2024-6345

setuptools

8.8

CWE-94 security@huntr.dev 2024-07-15 CVE-2024-6345

Published: July 15, 2024

CVE-2024-6737

Electronic Official Document Management System from 2100 TECHNOLOGY

8.8

CWE-284 twcert@cert.org.tw 2024-07-15 CVE-2024-6737

Published: July 15, 2024

CVE-2024-21513

langchain-experimental

8.5

CWE-94 report@snyk.io 2024-07-15 CVE-2024-21513

Published: July 15, 2024

CVE-2024-40631

@udecode/plate-media

8.1

security-advisories@github.com CWE-79 2024-07-15 CVE-2024-40631

Published: July 15, 2024

CVE-2024-5402

ABB Mint Workbench

7.8

CWE-428 cybersecurity@ch.abb.com 2024-07-15 CVE-2024-5402

Published: July 15, 2024

CVE-2024-6689

baramundi Management Agent

7.8

CWE-749 2024-07-15 CVE-2024-6689 a341c0d1-ebf7-493f-a84e-38cf86618674

Published: July 15, 2024

CVE-2024-36432

Supermicro X11DPG-HGX2, X11PDG-QT, X11PDG-OT, X11PDG-SN motherboards

7.5

cve@mitre.org 2024-07-15 CVE-2024-36432

Published: July 15, 2024

CVE-2024-36433

Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards

7.5

cve@mitre.org 2024-07-15 CVE-2024-36433

Published: July 15, 2024

CVE-2024-36434

Supermicro X11DPH-T, X11DPH-Tq, X11DPH-i motherboards

7.5

cve@mitre.org 2024-07-15 CVE-2024-36434

Published: July 15, 2024

CVE-2024-6745

Simple Ticket Booking

7.3

CWE-89 cna@vuldb.com 2024-07-15 CVE-2024-6745

Published: July 15, 2024

CVE-2024-27238

Zoom Apps and SDKs for Windows

7.1

CWE-367 security@zoom.us 2024-07-15 CVE-2024-27238

Published: July 15, 2024

CVE-2024-27240

Zoom Apps for Windows

7.1

CWE-20 security@zoom.us 2024-07-15 CVE-2024-27240

Published: July 15, 2024

CVE-2024-39826

Zoom Workplace Apps and SDKs for Windows

6.8

CWE-367 security@zoom.us 2024-07-15 CVE-2024-39826

Published: July 15, 2024

CVE-2024-39819

Zoom Workplace Apps and SDKs for Windows

6.7

CWE-269 security@zoom.us 2024-07-15 CVE-2024-39819

Published: July 15, 2024

CVE-2024-39820

Zoom Workplace Desktop App for macOS

6.6

CWE-427 security@zoom.us 2024-07-15 CVE-2024-39820

Published: July 15, 2024

CVE-2024-39821

Zoom Workplace App for Windows

6.6

CWE-367 security@zoom.us 2024-07-15 CVE-2024-39821

Published: July 15, 2024

CVE-2024-39736

IBM Datacap Navigator

6.5

psirt@us.ibm.com 2024-07-15 CVE-2024-39736 CWE-644

Published: July 15, 2024

CVE-2024-39728

IBM Datacap Navigator

6.4

CWE-79 psirt@us.ibm.com 2024-07-15 CVE-2024-39728

Published: July 15, 2024

CVE-2024-6734

itsourcecode Tailoring Management System

6.3

CWE-89 cna@vuldb.com 2024-07-15 CVE-2024-6734

Published: July 15, 2024

CVE-2024-6735

itsourcecode Tailoring Management System

6.3

CWE-89 cna@vuldb.com 2024-07-15 CVE-2024-6735

Published: July 15, 2024

CVE-2024-6736

SourceCodester Employee and Visitor Gate Pass Logging System

6.3

CWE-89 cna@vuldb.com 2024-07-15 CVE-2024-6736

Published: July 15, 2024

CVE-2024-6740

Openfind Mail2000

6.1

CWE-79 twcert@cert.org.tw 2024-07-15 CVE-2024-6740

Published: July 15, 2024

CVE-2024-39731

IBM Datacap Navigator

5.9

psirt@us.ibm.com CWE-327 2024-07-15 CVE-2024-39731

Published: July 15, 2024

CVE-2024-6741

Mail2000

5.8

CWE-693 twcert@cert.org.tw 2024-07-15 CVE-2024-6741

Published: July 15, 2024

CVE-2024-40627

Fastapi OPA

5.8

security-advisories@github.com CWE-204 2024-07-15 CVE-2024-40627

Published: July 15, 2024

CVE-2024-6540

OTRS

5.7

2024-07-15 security@otrs.com CVE-2024-6540 CWE-790

Published: July 15, 2024

CVE-2024-39827

Zoom Workplace Desktop App for Windows

5.5

CWE-20 security@zoom.us 2024-07-15 CVE-2024-39827

Published: July 15, 2024

CVE-2024-39737

IBM Datacap Navigator

5.4

psirt@us.ibm.com CWE-209 2024-07-15 CVE-2024-39737

Published: July 15, 2024

CVE-2024-39739

IBM Datacap Navigator

5.4

psirt@us.ibm.com CWE-918 2024-07-15 CVE-2024-39739

Published: July 15, 2024

CVE-2024-39735

IBM Datacap Navigator

5.4

CWE-79 psirt@us.ibm.com 2024-07-15 CVE-2024-39735

Published: July 15, 2024

CVE-2024-6742

AguardNet Technology's Space Management System

5.4

CWE-79 twcert@cert.org.tw 2024-07-15 CVE-2024-6742

Published: July 15, 2024

CVE-2024-6738

Tronclass from WisdomGarden

5.3

CWE-284 twcert@cert.org.tw 2024-07-15 CVE-2024-6738

Published: July 15, 2024

CVE-2024-6739

MailAudit

5.3

twcert@cert.org.tw 2024-07-15 CVE-2024-6739 CWE-1004

Published: July 15, 2024

CVE-2024-27241

Zoom Apps and SDKs

5.3

CWE-20 security@zoom.us 2024-07-15 CVE-2024-27241

Published: July 15, 2024

CVE-2024-39912

web-auth/webauthn-lib

5.3

security-advisories@github.com CWE-204 2024-07-15 CVE-2024-39912

Published: July 15, 2024

CVE-2024-23794

OTRS

5.2

CWE-266 2024-07-15 CVE-2024-23794 security@otrs.com

Published: July 15, 2024

CVE-2024-38360

Discourse

4.9

security-advisories@github.com CWE-400 2024-07-15 CVE-2024-38360

Published: July 15, 2024

CVE-2024-39729

IBM Datacap Navigator

4.3

psirt@us.ibm.com CWE-540 2024-07-15 CVE-2024-39729

Published: July 15, 2024

CVE-2024-39740

IBM Datacap Navigator

4.3

psirt@us.ibm.com CWE-497 2024-07-15 CVE-2024-39740

Published: July 15, 2024

CVE-2024-39741

IBM Datacap Navigator

4.3

psirt@us.ibm.com CWE-22 2024-07-15 CVE-2024-39741

Published: July 15, 2024

CVE-2024-6398

SWG (Secure Web Gateway)

4.3

CWE-200 trellixpsirt@trellix.com 2024-07-15 CVE-2024-6398

Published: July 15, 2024

CVE-2024-6746

NaiboWang EasySpider

4.3

cna@vuldb.com CWE-24 2024-07-15 CVE-2024-6746

Published: July 15, 2024

CVE-2024-6716

libtiff

4.3

secalert@redhat.com CWE-400 2024-07-15 CVE-2024-6716

Published: July 15, 2024

CVE-2024-39918

@jmondi/url-to-png

4.3

security-advisories@github.com CWE-22 2024-07-15 CVE-2024-39918

Published: July 15, 2024

CVE-2024-40630

OpenImageIO

4.3

security-advisories@github.com CWE-125 2024-07-15 CVE-2024-40630

Published: July 15, 2024

CVE-2024-39767

Mattermost Mobile Apps

4.2

CWE-287 responsibledisclosure@mattermost.com 2024-07-15 CVE-2024-39767

Published: July 15, 2024

CVE-2024-40632

Linkerd

3.7

security-advisories@github.com CWE-918 2024-07-15 CVE-2024-40632

Published: July 15, 2024

CVE-2024-39919

@jmondi/url-to-png

3.1

security-advisories@github.com CWE-200 2024-07-15 CVE-2024-39919

Published: July 15, 2024

CVE-2024-32945

Mattermost Mobile Apps

2.6

responsibledisclosure@mattermost.com 2024-07-15 CVE-2024-32945 CWE-909

Published: July 15, 2024

CVE-2024-5630

Insert or Embed Articulate Content into WordPress plugin

None

contact@wpscan.com 2024-07-15 CVE-2024-5630

Published: July 15, 2024

CVE-2024-6072