Tag: 2024-10-09

4 Attack Reports | 130 Vulnerabilities

Attack reports

DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware

DPRK-associated threat actors are targeting tech industry job seekers through fake recruitment campaigns, installing malware on their devices. The campaign, named CL-STA-240 Contagious Interview, uses social engineering to lure victims into online interviews where they are convinced to download mal…
social engineering
cryptocurrency theft
beavertail
2024-10-09
python backdoor
Published: October 9, 2024
Downloadable IOCs: 0

Not All Fun and Games: Lua Malware Targets Educational Sector and Student Gaming Engines

Over the past year, the delivery of Lua malware appears to have undergone simplification, possibly to reduce exposure to detection mechanisms. The malware is frequently delivered using obfuscated Lua scripts instead of compiled Lua bytecode, as the latter can trigger suspicion more easily.
ransomware
powershell
redline
lua script
compiler
redline stealer
2024-10-09
morphisec
lua malware
lua loader
c2 lua
windows servers
linux server
prometheus
crypter
Published: October 9, 2024
Downloadable IOCs: 18

From Perfctl to InfoStealer

A new stealthy Linux malware called perfctl has been analyzed. The malware runs two processes: perfctl and a disguised process mimicking known Linux processes. It uses Tor for external communications and local sockets for inter-process communication. After 30 minutes, the attacker drops scripts to …
malware
linux
rootkit
cryptominer
data exfiltration
stealth
perfctl
2024-10-09
trufflehog
Published: October 9, 2024
Downloadable IOCs: 3

LemonDuck Malware Exploiting SMB Vulnerabilities

LemonDuck malware has evolved into a versatile threat, targeting both Windows and Linux systems. It exploits SMB vulnerabilities, particularly EternalBlue, to gain network access. The malware uses brute-force attacks, creates hidden administrative shares, and executes malicious actions via batch fi…
cryptomining
CVE-2017-0144
2024-10-09
lemonduck
eternalblue
smb
Published: October 9, 2024
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-32608

9.8
    Hdfgroup
  • Hdf5
Published: October 9, 2024

CVE-2024-9680

9.8
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
Published: October 9, 2024

CVE-2024-25825

9.8
    FydeOS for PC
  • Version(s): 17.1 R114
    FydeOS for VMware
  • Version(s): 17.0 R114
    FydeOS for You
  • Version(s): 17.1 R114
    OpenFyde
  • Version(s): R114
Published: October 9, 2024

CVE-2024-45746

9.8
    Trusted Firmware-M
  • Version(s): up to 2.1.0
Published: October 9, 2024

CVE-2024-45160

9.1
    LemonLDAP::NG
  • Version(s): 2.18.x, 2.19.x before 2.19.2
Published: October 9, 2024

CVE-2023-46586

9.1
    Weborf
  • Version(s): 0.17, 0.18, 0.19, 0.20
Published: October 9, 2024

CVE-2024-9465

9.1
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-47659

8.8
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-7292

8.8
    Progress
  • Telerik Report Server
Published: October 9, 2024

CVE-2024-7293

8.8
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2024-8014

8.8
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2023-37154

8.4
    Nagios nagios-plugins
  • Version(s): 2.4.5
Published: October 9, 2024

CVE-2024-45720

8.2
    Subversion
  • Version(s): up to 1.14.3
Published: October 9, 2024

CVE-2024-9575

8.1
    pretix Widget WordPress plugin
  • Version(s): 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
Published: October 9, 2024

CVE-2024-3656

8.1
    Keycloak
Published: October 9, 2024

CVE-2024-46316

8.0
    DrayTek Vigor3900
  • Version(s): 1.5.1.6
Published: October 9, 2024

CVE-2024-35288

7.8
    Nitro PDF Pro
  • Version(s): before 13.70.8.82, before 14.26.1.0
Published: October 9, 2024

CVE-2024-45146

7.8
    Adobe
  • Dimension
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45150

7.8
    Adobe
  • Dimension
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47410

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47411

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47412

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47413

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47414

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47415

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47416

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47417

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47418

7.8
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45138

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45139

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45140

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45141

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45142

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45143

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45144

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45152

7.8
    Adobe
  • Substance 3d Stager
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-46871

7.8
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-45136

7.8
    Adobe
  • Incopy
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-45137

7.8
    Adobe
  • Indesign
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47421

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47422

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47423

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47424

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47425

7.8
    Adobe
  • Framemaker
    Microsoft
Published: October 9, 2024

CVE-2024-47670

7.8
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-7840

7.8
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2024-8048

7.8
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2024-9473

7.8
    Paloaltonetworks
  • Globalprotect
Published: October 9, 2024

CVE-2024-47334

7.6
    Zoho Flow
  • Version(s): from n/a through 2.7.1
Published: October 9, 2024

CVE-2024-28168

7.5
    Apache XML Graphics FOP
  • Version(s): 2.9
Published: October 9, 2024

CVE-2024-46292

7.5
    modsecurity
  • Version(s): 3.0.12
Published: October 9, 2024

CVE-2024-46304

7.5
    libcoap
  • Version(s): 4.3.5-rc2 and below
Published: October 9, 2024

CVE-2024-46307

7.5
    Sparkshop
  • Sparkshop
Published: October 9, 2024

CVE-2024-9463

7.5
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-39515

7.5
    Junos OS
  • Version(s): All versions before 21.4R3-S8, 22.2 before 22.2R3-S5, 22.3 before 22.3R3-S4, 22.4 before 22.4R3-S3, 23.2 before 23.2R2-S2, 23.4 before 23.4R2
    Junos OS Evolved
  • Version(s): All versions before 21.4R3-S8-EVO, 22.2-EVO before 22.2R3-S5-EVO, 22.3-EVO before 22.3R3-S4-EVO, 22.4-EVO before 22.4R3-S3-EVO, 23.2-EVO before 23.2R2-S2-EVO, 23.4-EVO before 23.4R2-EVO
Published: October 9, 2024

CVE-2024-39516

7.5
    Junos OS Evolved
  • Version(s): All versions before 21.4R3-S8-EVO, 22.2-EVO before 22.2R3-S5-EVO, 22.3-EVO before 22.3R3-S4-EVO, 22.4-EVO before 22.4R3-S3-EVO, 23.2-EVO before 23.2R2-S2-EVO, 23.4-EVO before 23.4R2-EVO
    Juniper Networks Junos OS
  • Version(s): All versions before 21.4R3-S8, 22.2 before 22.2R3-S5, 22.3 before 22.3R3-S4, 22.4 before 22.4R3-S3, 23.2 before 23.2R2-S2, 23.4 before 23.4R2
Published: October 9, 2024

CVE-2024-39525

7.5
    Juniper Networks Junos OS
  • Version(s): All versions before 21.2R3-S8, from 21.4 before 21.4R3-S8, from 22.2 before 22.2R3-S4, from 22.3 before 22.3R3-S4, from 22.4 before 22.4R3-S3, from 23.2 before 23.2R2-S1, from 23.4 before 23.4R2
    Juniper Networks Junos OS Evolved
  • Version(s): All versions before 21.2R3-S8-EVO, from 21.4-EVO before 21.4R3-S8-EVO, from 22.2-EVO before 22.2R3-S4-EVO, from 22.3-EVO before 22.3R3-S4-EVO, from 22.4-EVO before 22.4R3-S3-EVO, from 23.2-EVO before 23.2R2-S1-EVO, from 23.4-EVO before 23.4R2-EVO
Published: October 9, 2024

CVE-2024-43610

7.4
    Copilot Studio
Published: October 9, 2024

CVE-2024-45179

7.2
    C-MOR Video Surveillance
  • Version(s): 5.2401, 6.00PL01
Published: October 9, 2024

CVE-2024-8015

7.2
    Progress
  • Telerik Report Server
Published: October 9, 2024

CVE-2024-47191

7.1
    oath-toolkit
  • Version(s): 2.6.7 - 2.6.11
Published: October 9, 2024

CVE-2024-39436

6.7
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-39437

6.7
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-39438

6.7
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-38817

6.7
    VMware NSX
Published: October 9, 2024

CVE-2024-38818

6.7
    VMware NSX
Published: October 9, 2024

CVE-2023-45359

6.5
    MediaWiki
  • Version(s): before 1.39.5, 1.40.x before 1.40.1
Published: October 9, 2024

CVE-2024-7294

6.5
    Progress
  • Telerik Reporting
Published: October 9, 2024

CVE-2024-9464

6.5
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-9466

6.5
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-47828

6.5
    Ampache
  • Ampache
Published: October 9, 2024

CVE-2024-47833

6.5
    Avaiga
  • Taipy
Published: October 9, 2024

CVE-2024-7037

6.5
    open-webui/open-webui
  • Version(s): v0.3.8
Published: October 9, 2024

CVE-2024-7041

6.5
    open-webui/open-webui
  • Version(s): v0.3.8
Published: October 9, 2024

CVE-2024-7963

6.4
    CMSMasters Content Composer plugin for WordPress
  • Version(s): up to 1.8.8
Published: October 9, 2024

CVE-2024-9449

6.4
    Auto iFrame plugin for WordPress
  • Version(s): up to 1.7
Published: October 9, 2024

CVE-2024-9451

6.4
    Embed PDF Viewer plugin for WordPress
  • Version(s): up to 2.4.4
Published: October 9, 2024

CVE-2024-47816

6.4
    MediaWiki ImportDump extension
Published: October 9, 2024

CVE-2023-45361

6.1
    MediaWiki
  • Version(s): before 1.39.5, before 1.40.1
Published: October 9, 2024

CVE-2024-9467

6.1
    Paloaltonetworks
  • Expedition
Published: October 9, 2024

CVE-2024-48933

6.1
    Lemonldap-Ng
  • Lemonldap\
Published: October 9, 2024

CVE-2024-47812

6.0
    MediaWiki
  • Version(s): before d054b95
Published: October 9, 2024

CVE-2024-47815

6.0
    MediaWiki IncidentReporting extension
  • Version(s): before commit 43896a4
Published: October 9, 2024

CVE-2024-30118

5.7
    Hcltech
  • Connections
Published: October 9, 2024

CVE-2024-20787

5.5
    Adobe
  • Substance 3d Painter
Published: October 9, 2024

CVE-2024-45145

5.5
    Adobe
  • Lightroom
Published: October 9, 2024

CVE-2024-47419

5.5
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47420

5.5
    Adobe
  • Animate
    Apple
    Microsoft
Published: October 9, 2024

CVE-2024-47658

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47661

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47662

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47663

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47664

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47665

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47666

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47667

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47669

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47671

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47672

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47673

5.5
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-9469

5.5
    Paloaltonetworks
  • Cortex Xdr Agent
    Microsoft
Published: October 9, 2024

CVE-2024-47763

5.5
    Wasmtime
  • Version(s): 21.0.0 - 21.0.2, 22.0.0 - 22.0.1, 23.0.x - 23.0.3, 24.0.x - 24.0.1, 25.0.x - 25.0.2
Published: October 9, 2024

CVE-2024-8264

5.5
    Fortra
  • Robot Schedule
Published: October 9, 2024

CVE-2024-46237

5.4
    Phpgurukul
  • Hospital Management System
Published: October 9, 2024

CVE-2024-9671

5.3
    3Scale
Published: October 9, 2024

CVE-2024-42934

5.0
    OpenIPMI
  • Version(s): before 2.0.36
Published: October 9, 2024

CVE-2024-5968

4.8
    Photo Gallery by 10Web WordPress plugin
  • Version(s): before 1.8.28
Published: October 9, 2024

CVE-2024-46870

4.7
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47660

4.7
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-47668

4.7
    Linux
  • Linux Kernel
Published: October 9, 2024

CVE-2024-9471

4.7
    Paloaltonetworks
  • Pan-Os
Published: October 9, 2024

CVE-2024-39439

4.4
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-39440

4.4
    Google
  • Android
    Unisoc
Published: October 9, 2024

CVE-2024-9675

4.4
    Buildah
Published: October 9, 2024

CVE-2024-39586

4.3
    Dell
  • Emc Appsync
Published: October 9, 2024

CVE-2024-38815

4.3
    VMware NSX
Published: October 9, 2024

CVE-2023-36325

3.7
    I2P
  • Version(s): before 2.3.0
Published: October 9, 2024

CVE-2024-47813

2.9
    Wasmtime
  • Version(s): 21.0.2, 22.0.1, 23.0.3, 24.0.1, 25.0.2
Published: October 9, 2024

CVE-2024-7038

2.7
    Openwebui
  • Open Webui
Published: October 9, 2024

CVE-2024-9286

0.0
    TRtek Software Distant Education Platform
  • Version(s): before 3.2024.11
Published: October 9, 2024

CVE-2024-25282

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2024-25283

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2024-25284

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2024-25285

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2024-25286

None
    3DSecure 2.0
Published: October 9, 2024

CVE-2023-45872

None
    Qt
  • Version(s): before 6.2.11, 6.3.x - 6.6.x before 6.6.1
Published: October 9, 2024

CVE-2024-42988

None
    CTFd
  • Version(s): 2.0.0, 3.7.2
Published: October 9, 2024

CVE-2024-9468

None
    Palo Alto Networks PAN-OS
Published: October 9, 2024

CVE-2024-9470

None
    Cortex XSOAR
Published: October 9, 2024

CVE-2024-47832

None
    ssoready
  • Version(s): 7f92a06 or later
Published: October 9, 2024
Click here to see more Vulnerabilities