SecuriTricks - 2024-09-05

Attack Reports

Title	Published	Tags	Description	Number of indicators
BlindEagle Targets Colombian Insurance Sector with BlotchyQuasar	Sept. 5, 2024, 4:47 p.m.	phishing remcosrat asyncrat credential theft banking trojan quasarrat 2024-09-05 blotchyquasar	BlindEagle, an advanced persistent threat actor, has been observed targeting the Colombian insurance sector using the BlotchyQuas…	16
Predator Spyware Infrastructure Returns Following Exposure and Sanctions	Sept. 5, 2024, 4:38 p.m.	python 2024-09-05 predator spyware intellexa alliance zero-click attacks	Predator spyware's infrastructure has resurfaced with modifications to evade detection and anonymize users, despite previous expo…	16
Toneshell Backdoor Used to Target Attendees of the IISS Defence Summit	Sept. 5, 2024, 4:10 p.m.	phishing dll sideloading gh0st rat 2024-09-05 toneshell pif file	A cyber espionage campaign using the ToneShell backdoor, associated with Mustang Panda, has been detected targeting attendees of …	4
Tropic Trooper spies on government entities in the Middle East	Sept. 5, 2024, 3:54 p.m.	fscan china chopper 2024-09-05 web shell swor bypassgodzilla crowdoor umbraco cms neo-regeorg	Tropic Trooper, a Chinese-speaking APT group active since 2011, has expanded its operations to target government entities in the …	7

» Click here to see all Attack Reports «

Vulnerabilities

CVE	CVSS	Published	Product impacted	Tags
CVE-2024-43102	10.0	Sept. 5, 2024, 5:15 a.m.	FreeBSD	CWE-416 secteam@freebsd.org 2024-09-05 CVE-2024-43102
CVE-2024-7591	10.0	Sept. 5, 2024, 6:15 p.m.	Progress LoadMaster	CWE-20 security@progress.com 2024-09-05 CVE-2024-7591
CVE-2024-8463	9.9	Sept. 5, 2024, 1:15 p.m.	PHPGurukul Job Portal	CWE-434 cve-coordination@incibe.es 2024-09-05 CVE-2024-8463
CVE-2024-8464	9.8	Sept. 5, 2024, 1:15 p.m.	UNKNOWN	CWE-89 cve-coordination@incibe.es 2024-09-05 CVE-2024-8464
CVE-2024-8465	9.8	Sept. 5, 2024, 1:15 p.m.	UNKNOWN	CWE-89 cve-coordination@incibe.es 2024-09-05 CVE-2024-8465
CVE-2024-8466	9.8	Sept. 5, 2024, 1:15 p.m.	UNKNOWN	CWE-89 cve-coordination@incibe.es 2024-09-05 CVE-2024-8466
CVE-2024-8467	9.8	Sept. 5, 2024, 1:15 p.m.	Job Portal	CWE-89 cve-coordination@incibe.es 2024-09-05 CVE-2024-8467
CVE-2024-8468	9.8	Sept. 5, 2024, 1:15 p.m.	UNKNOWN	CWE-89 cve-coordination@incibe.es 2024-09-05 CVE-2024-8468
CVE-2024-8469	9.8	Sept. 5, 2024, 1:15 p.m.	UNKNOWN	CWE-89 cve-coordination@incibe.es 2024-09-05 CVE-2024-8469
CVE-2024-8470	9.8	Sept. 5, 2024, 1:15 p.m.	UNKNOWN	CWE-89 cve-coordination@incibe.es 2024-09-05 CVE-2024-8470
CVE-2024-8395	9.8	Sept. 5, 2024, 8:15 p.m.	FlyCASS CASS system	CWE-89 ics-cert@hq.dhs.gov 2024-09-05 CVE-2024-8395
CVE-2024-24759	9.3	Sept. 5, 2024, 5:15 p.m.	MindsDB	security-advisories@github.com CWE-918 2024-09-05 CVE-2024-24759
CVE-2024-45287	9.1	Sept. 5, 2024, 4:15 a.m.	UNKNOWN	CWE-131 secteam@freebsd.org 2024-09-05 CVE-2024-45287
CVE-2024-42885	9.1	Sept. 5, 2024, 4:15 p.m.	ESAFENET CDG	cve@mitre.org CWE-89 2024-09-05 CVE-2024-42885
CVE-2024-42416	8.8	Sept. 5, 2024, 5:15 a.m.	bhyve	CWE-1284 CWE-790 secteam@freebsd.org 2024-09-05 CVE-2024-42416
CVE-2024-43110	8.8	Sept. 5, 2024, 5:15 a.m.	FreeBSD	CWE-125 secteam@freebsd.org 2024-09-05 CVE-2024-43110
CVE-2024-45063	8.8	Sept. 5, 2024, 5:15 a.m.	FreeBSD	CWE-416 secteam@freebsd.org 2024-09-05 CVE-2024-45063
CVE-2024-8178	8.8	Sept. 5, 2024, 5:15 a.m.	bhyve	CWE-908 CWE-909 secteam@freebsd.org 2024-09-05 CVE-2024-8178
CVE-2024-44587	8.8	Sept. 5, 2024, 2:15 p.m.	Alton Management System	cve@mitre.org CWE-89 2024-09-05 CVE-2024-44587
CVE-2024-45173	8.8	Sept. 5, 2024, 3:15 p.m.	C-MOR Video Surveillance	cve@mitre.org CWE-269 2024-09-05 CVE-2024-45173
CVE-2024-45171	8.8	Sept. 5, 2024, 4:15 p.m.	za-internet C-MOR Video Surveillance	cve@mitre.org CWE-434 2024-09-05 CVE-2024-45171
CVE-2024-45175	8.8	Sept. 5, 2024, 4:15 p.m.	C-MOR Video Surveillance	cve@mitre.org CWE-22 2024-09-05 CVE-2024-45175
CVE-2024-45288	8.4	Sept. 5, 2024, 4:15 a.m.	FreeBSD	CWE-170 secteam@freebsd.org 2024-09-05 CVE-2024-45288
CVE-2024-32668	8.2	Sept. 5, 2024, 5:15 a.m.	FreeBSD Bhyve	CWE-787 CWE-193 secteam@freebsd.org 2024-09-05 CVE-2024-32668
CVE-2024-7627	8.1	Sept. 5, 2024, 3:15 a.m.	Bit File Manager plugin for WordPress	security@wordfence.com CWE-94 2024-09-05 CVE-2024-7627
CVE-2024-45392	7.7	Sept. 5, 2024, 5:15 p.m.	SuiteCRM	CWE-284 security-advisories@github.com 2024-09-05 CVE-2024-45392
CVE-2024-44728	7.6	Sept. 5, 2024, 5:15 p.m.	Sourcecodehero Event Management System	cve@mitre.org CWE-79 2024-09-05 CVE-2024-44728
CVE-2024-7884	7.5	Sept. 5, 2024, 1:15 p.m.	ic_cdk	6b35d637-e00f-4228-858c-b20ad6e1d07b CWE-401 2024-09-05 CVE-2024-7884
CVE-2024-45401	7.5	Sept. 5, 2024, 6:15 p.m.	stripe-cli	security-advisories@github.com CWE-22 2024-09-05 CVE-2024-45401
CVE-2024-44727	7.4	Sept. 5, 2024, 5:15 p.m.	Sourcecodehero Event Management System	cve@mitre.org CWE-89 2024-09-05 CVE-2024-44727
CVE-2024-45178	7.1	Sept. 5, 2024, 3:15 p.m.	C-MOR Video Surveillance	cve@mitre.org CWE-22 2024-09-05 CVE-2024-45178
CVE-2024-45098	6.8	Sept. 5, 2024, 4:15 p.m.	IBM Aspera Faspex	psirt@us.ibm.com 2024-09-05 CWE-650 CVE-2024-45098
CVE-2024-6332	6.5	Sept. 5, 2024, 10:15 a.m.	Booking for Appointments and Events Calendar - Amelia Premium plugin for WordPress	security@wordfence.com CWE-862 2024-09-05 CVE-2024-6332
CVE-2024-5956	6.5	Sept. 5, 2024, 11:15 a.m.	Trellix IPS Manager	CWE-305 trellixpsirt@trellix.com 2024-09-05 CVE-2024-5956
CVE-2024-45096	6.5	Sept. 5, 2024, 4:15 p.m.	IBM Aspera Faspex	psirt@us.ibm.com CWE-548 2024-09-05 CVE-2024-45096
CVE-2024-45589	6.5	Sept. 5, 2024, 4:15 p.m.	RapidIdentity	cve@mitre.org CWE-307 2024-09-05 CVE-2024-45589
CVE-2024-8363	6.4	Sept. 5, 2024, 9:15 a.m.	Share This Image plugin for WordPress	CWE-79 security@wordfence.com 2024-09-05 CVE-2024-8363
CVE-2024-6894	6.4	Sept. 5, 2024, 10:15 a.m.	RD Station plugin for WordPress	CWE-79 security@wordfence.com 2024-09-05 CVE-2024-6894
CVE-2024-6929	6.4	Sept. 5, 2024, 10:15 a.m.	Dynamic Featured Image plugin for WordPress	CWE-79 security@wordfence.com 2024-09-05 CVE-2024-6929
CVE-2024-5957	6.3	Sept. 5, 2024, 11:15 a.m.	UNKNOWN	CWE-305 trellixpsirt@trellix.com 2024-09-05 CVE-2024-5957
CVE-2024-8471	6.3	Sept. 5, 2024, 1:15 p.m.	Unknown	CWE-79 cve-coordination@incibe.es 2024-09-05 CVE-2024-8471
CVE-2024-8472	6.3	Sept. 5, 2024, 1:15 p.m.	UNKNOWN	CWE-79 cve-coordination@incibe.es 2024-09-05 CVE-2024-8472
CVE-2024-8473	6.3	Sept. 5, 2024, 1:15 p.m.	jobportal	CWE-79 cve-coordination@incibe.es 2024-09-05 CVE-2024-8473
CVE-2024-45097	5.9	Sept. 5, 2024, 4:15 p.m.	IBM Aspera Faspex	psirt@us.ibm.com 2024-09-05 CVE-2024-45097 CWE-650
CVE-2024-8445	5.7	Sept. 5, 2024, 3:15 p.m.	389-ds-base	secalert@redhat.com CWE-20 2024-09-05 CVE-2024-8445
CVE-2024-42491	5.7	Sept. 5, 2024, 6:15 p.m.	Asterisk	security-advisories@github.com CWE-252 2024-09-05 CVE-2024-42491
CVE-2024-45107	5.5	Sept. 5, 2024, 9:15 a.m.	Acrobat Reader	CWE-416 psirt@adobe.com 2024-09-05 CVE-2024-45107
CVE-2024-5309	5.4	Sept. 5, 2024, 9:15 a.m.	Form Vibes - Database Manager for Forms plugin for WordPress	security@wordfence.com CWE-862 2024-09-05 CVE-2024-5309
CVE-2024-6846	5.3	Sept. 5, 2024, 6:15 a.m.	Chatbot with ChatGPT WordPress plugin	contact@wpscan.com 2024-09-05 CVE-2024-6846
CVE-2024-6835	5.3	Sept. 5, 2024, 7:15 a.m.	Ivory Search - WordPress Search Plugin	CWE-200 security@wordfence.com 2024-09-05 CVE-2024-6835
CVE-2022-4529	5.3	Sept. 5, 2024, 11:15 a.m.	Security, Antivirus, Firewall - S.A.F plugin for WordPress	security@wordfence.com CWE-348 2024-09-05 CVE-2022-4529
CVE-2024-7381	5.3	Sept. 5, 2024, 11:15 a.m.	Geo Controller plugin for WordPress	security@wordfence.com CWE-862 2024-09-05 CVE-2024-7381
CVE-2024-8461	5.3	Sept. 5, 2024, 1:15 p.m.	D-Link DNS-320	CWE-200 cna@vuldb.com 2024-09-05 CVE-2024-8461
CVE-2022-3556	4.4	Sept. 5, 2024, 11:15 a.m.	Cab fare calculator plugin for WordPress	CWE-79 security@wordfence.com 2024-09-05 CVE-2022-3556
CVE-2024-7380	4.3	Sept. 5, 2024, 11:15 a.m.	Geo Controller plugin for WordPress	security@wordfence.com CWE-862 2024-09-05 CVE-2024-7380
CVE-2024-7605	4.3	Sept. 5, 2024, 11:15 a.m.	HelloAsso plugin for WordPress	security@wordfence.com CWE-862 2024-09-05 CVE-2024-7605
CVE-2024-8460	3.7	Sept. 5, 2024, 12:15 p.m.	D-Link DNS-320	CWE-200 cna@vuldb.com 2024-09-05 CVE-2024-8460
CVE-2024-8462	3.7	Sept. 5, 2024, 1:15 p.m.	Windmill	cna@vuldb.com CWE-307 2024-09-05 CVE-2024-8462
CVE-2024-41928	None	Sept. 5, 2024, 4:15 a.m.	bhyve	CWE-125 secteam@freebsd.org 2024-09-05 CVE-2024-41928
CVE-2023-51712	None	Sept. 5, 2024, 4:15 p.m.	Trusted Firmware-M	cve@mitre.org 2024-09-05 CVE-2023-51712
CVE-2024-45176	None	Sept. 5, 2024, 4:15 p.m.	C-MOR Video Surveillance	cve@mitre.org 2024-09-05 CVE-2024-45176
CVE-2024-45157	None	Sept. 5, 2024, 7:15 p.m.	Mbed TLS	cve@mitre.org 2024-09-05 CVE-2024-45157
CVE-2024-45158	None	Sept. 5, 2024, 7:15 p.m.	Mbed TLS	cve@mitre.org 2024-09-05 CVE-2024-45158
CVE-2024-45159	None	Sept. 5, 2024, 7:15 p.m.	Mbed TLS	cve@mitre.org 2024-09-05 CVE-2024-45159

» Click here to see all Vulnerabilities «

Tag : 2024-09-05