Tag: 2024-10-09

4 Attack Reports | 130 Vulnerabilities

Attack reports

DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware

DPRK-associated threat actors are targeting tech industry job seekers through fake recruitment campaigns, installing malware on their devices. The campaign, named CL-STA-240 Contagious Interview, uses social engineering to lure victims into online interviews where they are convinced to download mal…
social engineering
cryptocurrency theft
beavertail
2024-10-09
python backdoor
Published: October 9, 2024
Downloadable IOCs: 0

Not All Fun and Games: Lua Malware Targets Educational Sector and Student Gaming Engines

Over the past year, the delivery of Lua malware appears to have undergone simplification, possibly to reduce exposure to detection mechanisms. The malware is frequently delivered using obfuscated Lua scripts instead of compiled Lua bytecode, as the latter can trigger suspicion more easily.
ransomware
powershell
redline
lua script
compiler
redline stealer
2024-10-09
morphisec
lua malware
lua loader
c2 lua
windows servers
linux server
prometheus
crypter
Published: October 9, 2024
Downloadable IOCs: 18

From Perfctl to InfoStealer

A new stealthy Linux malware called perfctl has been analyzed. The malware runs two processes: perfctl and a disguised process mimicking known Linux processes. It uses Tor for external communications and local sockets for inter-process communication. After 30 minutes, the attacker drops scripts to …
malware
linux
rootkit
cryptominer
data exfiltration
stealth
perfctl
2024-10-09
trufflehog
Published: October 9, 2024
Downloadable IOCs: 3

LemonDuck Malware Exploiting SMB Vulnerabilities

LemonDuck malware has evolved into a versatile threat, targeting both Windows and Linux systems. It exploits SMB vulnerabilities, particularly EternalBlue, to gain network access. The malware uses brute-force attacks, creates hidden administrative shares, and executes malicious actions via batch fi…
cryptomining
CVE-2017-0144
2024-10-09
lemonduck
eternalblue
smb
Published: October 9, 2024
Linked vulnerabilities : CVE-2017-0144
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-32608

9.8
    Hdfgroup
  • Hdf5
Published: October 9, 2024

CVE-2024-9680

9.8
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
Published: October 9, 2024

CVE-2024-25825

9.8
    FydeOS for PC
    FydeOS for VMware
    FydeOS for You
    OpenFyde
Published: October 9, 2024

CVE-2024-45746

9.8
    Trusted Firmware-M
Published: October 9, 2024

CVE-2024-45160

9.1
    LemonLDAP::NG
Published: October 9, 2024

CVE-2023-46586

9.1
    Weborf
Published: October 9, 2024

CVE-2024-9465

9.1
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-47659

8.8
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-7292

8.8
    Progress
  • Telerik Report Server
Published: October 9, 2024

CVE-2024-7293

8.8
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2024-8014

8.8
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2023-37154

8.4
    Nagios nagios-plugins
Published: October 9, 2024

CVE-2024-45720

8.2
    Subversion
Published: October 9, 2024

CVE-2024-9575

8.1
    pretix Widget WordPress plugin
Published: October 9, 2024

CVE-2024-3656

8.1
    Keycloak
Published: October 9, 2024

CVE-2024-46316

8.0
    DrayTek Vigor3900
Published: October 9, 2024

CVE-2024-35288

7.8
    Nitro PDF Pro
Published: October 9, 2024

CVE-2024-45146

7.8
    Adobe
  • Dimension
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45150

7.8
    Adobe
  • Dimension
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47410

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47411

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47412

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47413

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47414

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47415

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47416

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47417

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47418

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45138

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45139

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45140

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45141

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45142

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45143

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45144

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45152

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-46871

7.8
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-45136

7.8
    Adobe
  • Incopy
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45137

7.8
    Adobe
  • Indesign
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47421

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47422

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47423

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47424

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47425

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47670

7.8
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-7840

7.8
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2024-8048

7.8
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2024-9473

7.8
    Paloaltonetworks
  • Globalprotect
Published: October 9, 2024

CVE-2024-47334

7.6
    Zoho Flow
Published: October 9, 2024

CVE-2024-28168

7.5
    Apache XML Graphics FOP
Published: October 9, 2024

CVE-2024-46292

7.5
    modsecurity
Published: October 9, 2024

CVE-2024-46304

7.5
    libcoap
Published: October 9, 2024

CVE-2024-46307

7.5
    Sparkshop
  • Sparkshop
Published: October 9, 2024

CVE-2024-9463

7.5
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-39515

7.5
    Junos OS
    Junos OS Evolved
Published: October 9, 2024

CVE-2024-39516

7.5
    Junos OS Evolved
    Juniper Networks Junos OS
Published: October 9, 2024

CVE-2024-39525

7.5
    Juniper Networks Junos OS
    Juniper Networks Junos OS Evolved
Published: October 9, 2024

CVE-2024-43610

7.4
    Copilot Studio
Published: October 9, 2024

CVE-2024-45179

7.2
    C-MOR Video Surveillance
Published: October 9, 2024

CVE-2024-8015

7.2
    Progress
  • Telerik Report Server
Published: October 9, 2024

CVE-2024-47191

7.1
    oath-toolkit
Published: October 9, 2024

CVE-2024-39436

6.7
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-39437

6.7
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-39438

6.7
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-38817

6.7
    VMware NSX
Published: October 9, 2024

CVE-2024-38818

6.7
    VMware NSX
Published: October 9, 2024

CVE-2023-45359

6.5
    MediaWiki
Published: October 9, 2024

CVE-2024-7294

6.5
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2024-9464

6.5
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-9466

6.5
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-47828

6.5
    Ampache
  • Ampache
Published: October 9, 2024

CVE-2024-47833

6.5
    Avaiga
  • Taipy
Published: October 9, 2024

CVE-2024-7037

6.5
    open-webui/open-webui
Published: October 9, 2024

CVE-2024-7041

6.5
    open-webui/open-webui
Published: October 9, 2024

CVE-2024-7963

6.4
    CMSMasters Content Composer plugin for WordPress
Published: October 9, 2024

CVE-2024-9449

6.4
    Auto iFrame plugin for WordPress
Published: October 9, 2024

CVE-2024-9451

6.4
    Embed PDF Viewer plugin for WordPress
Published: October 9, 2024

CVE-2024-47816

6.4
    MediaWiki ImportDump extension
Published: October 9, 2024

CVE-2023-45361

6.1
    MediaWiki
Published: October 9, 2024

CVE-2024-9467

6.1
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-48933

6.1
    Lemonldap-Ng
  • Lemonldap\
Published: October 9, 2024

CVE-2024-47812

6.0
    MediaWiki
Published: October 9, 2024

CVE-2024-47815

6.0
    MediaWiki IncidentReporting extension
Published: October 9, 2024

CVE-2024-30118

5.7
    Hcltech
  • Connections
Published: October 9, 2024

CVE-2024-20787

5.5
    Adobe
  • Substance 3d Painter
Published: October 9, 2024

CVE-2024-45145

5.5
    Adobe
  • Lightroom
Published: October 9, 2024

CVE-2024-47419

5.5
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47420

5.5
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47658

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47661

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47662

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47663

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47664

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47665

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47666

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47667

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47669

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47671

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47672

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47673

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-9469

5.5
    Paloaltonetworks
  • Cortex Xdr Agent
    Microsoft
Published: October 9, 2024

CVE-2024-47763

5.5
    Wasmtime
Published: October 9, 2024

CVE-2024-8264

5.5
    Fortra
  • Robot Schedule
Published: October 9, 2024

CVE-2024-46237

5.4
    Phpgurukul
  • Hospital Management System
Published: October 9, 2024

CVE-2024-9671

5.3
    3Scale
Published: October 9, 2024

CVE-2024-42934

5.0
    OpenIPMI
Published: October 9, 2024

CVE-2024-5968

4.8
    Photo Gallery by 10Web WordPress plugin
Published: October 9, 2024

CVE-2024-46870

4.7
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47660

4.7
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47668

4.7
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-9471

4.7
    Paloaltonetworks
  • Pan-Os
Published: October 9, 2024

CVE-2024-39439

4.4
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-39440

4.4
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-9675

4.4
    Buildah
Published: October 9, 2024

CVE-2024-39586

4.3
    Dell
  • Emc Appsync
Published: October 9, 2024

CVE-2024-38815

4.3
    VMware NSX
Published: October 9, 2024

CVE-2023-36325

3.7
    I2P
Published: October 9, 2024

CVE-2024-47813

2.9
    Wasmtime
Published: October 9, 2024

CVE-2024-7038

2.7
    Openwebui
  • Open Webui
Published: October 9, 2024

CVE-2024-9286

0.0
    TRtek Software Distant Education Platform
Published: October 9, 2024

CVE-2024-25282

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2024-25283

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2024-25284

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2024-25285

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2024-25286

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2023-45872

None
    Qt
Published: October 9, 2024

CVE-2024-42988

None
    CTFd
Published: October 9, 2024

CVE-2024-9468

None
    Palo Alto Networks PAN-OS
Published: October 9, 2024

CVE-2024-9470

None
    Cortex XSOAR
Published: October 9, 2024

CVE-2024-47832

None
    ssoready
Published: October 9, 2024
Click here to see more Vulnerabilities