Tag: 2024-10-10

5 Attack Reports | 123 Vulnerabilities

Attack reports

Malware by the (Bit)Bucket: Uncovering AsyncRAT

A sophisticated attack campaign using Bitbucket as a legitimate platform to deliver AsyncRAT has been uncovered. The multi-stage approach involves a VBScript obfuscation layer, followed by a PowerShell payload delivery mechanism, and culminates in the execution of AsyncRAT. The attackers exploit Bi…
obfuscation
rat
powershell
asyncrat
vbscript
.net
2024-10-10
bitbucket
Published: October 10, 2024
Downloadable IOCs: 0

DarkVision RAT

DarkVision RAT is a customizable remote access trojan that first appeared in 2020, offered on Hack Forums for $60. Written in C/C++ and assembly, it offers features like keylogging, screenshots, file manipulation, process injection, remote code execution, and password theft. The analysis reveals a …
purecrypter
c2 communication
multi-stage attack
2024-10-10
remote access trojan
darkvision rat
Published: October 10, 2024
Downloadable IOCs: 0

Analyzing Recent Cyber Attacks in the United States Coinciding with Columbus Day Celebration

The United States has experienced a significant increase in cyber attacks from June to October 2024, with over 800 organizations affected by ransomware across various sectors. Play, RansomHub, Lockbit, Qilin, and Meow have emerged as the most active ransomware groups. Notable incidents include the …
espionage
ransomware
lockbit
hacktivism
ransomhub
qilin
data breach
2024-10-10
rhysida
critical infrastructure
united states
Published: October 10, 2024
Downloadable IOCs: 0

Operation MiddleFloor: Disinformation campaign targets Moldova ahead of presidential elections and EU membership referendum

A cyber-enabled disinformation campaign called Operation MiddleFloor is targeting Moldova's government and education sectors ahead of crucial elections and an EU membership referendum. The campaign, attributed to a Russian-speaking group named Lying Pigeon, uses spoofed emails and documents to spre…
phishing
disinformation
elections
2024-10-10
moldova
eu referendum
email spoofing
lumma infostealer
Published: October 10, 2024
Downloadable IOCs: 69

Rhysida Ransomware: Multi-Tiered Infrastructure and Early Detection Analysis

Insikt Group unveiled Rhysida's complex infrastructure, comprising typo-squatted domains for SEO poisoning, payload servers, CleanUpLoader C2 infrastructure, and higher-tier components including an admin panel and Zabbix monitoring server. This multi-tiered setup enables early victim identification…
backdoor
ransomware
seo poisoning
extortion
multi-tiered
infrastructure
2024-10-10
rhysida
chrgetpdsi
portstarter
cleanuploader
early detection
Published: October 10, 2024
Downloadable IOCs: 106
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-9518

9.8
    Wpuserplus
  • Userplus
Published: October 10, 2024

CVE-2024-9796

9.8
    Internet-Formation
  • Wp-Advanced-Search
Published: October 10, 2024

CVE-2024-45115

9.8
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-9201

9.8
    Seur
  • Seur
Published: October 10, 2024

CVE-2024-9793

9.8
    Tenda
  • Ac1206 Firmware
  • Ac1206
Published: October 10, 2024

CVE-2024-9794

9.8
    Codezips
  • Online Shopping Portal
Published: October 10, 2024

CVE-2024-47636

9.8
    Eyecix
  • Jobsearch
Published: October 10, 2024

CVE-2024-9811

9.8
    Code-Projects
  • Restaurant Reservation System
Published: October 10, 2024

CVE-2024-9812

9.8
    Code-Projects
  • Crud Operation System
Published: October 10, 2024

CVE-2024-9813

9.8
    Codezips
  • Pharmacy Management System
Published: October 10, 2024

CVE-2024-47167

9.8
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-9814

9.8
    Codezips
  • Pharmacy Management System
Published: October 10, 2024

CVE-2024-9818

9.8
    Oretnom23
  • Online Veterinary Appointment System
Published: October 10, 2024

CVE-2024-48949

9.1
    Indutny
  • Elliptic
Published: October 10, 2024

CVE-2024-47871

9.1
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-9798

9.0
    UNKNOWN
Published: October 10, 2024

CVE-2024-9522

8.8
    Lagunaisw
  • Wp Users Masquerade
Published: October 10, 2024

CVE-2024-45148

8.8
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-9782

8.8
    Dlink
  • Dir-619l Firmware
  • Dir-619l
Published: October 10, 2024

CVE-2024-9783

8.8
    Dlink
  • Dir-619l Firmware
  • Dir-619l
Published: October 10, 2024

CVE-2024-9784

8.8
    Dlink
  • Dir-619l Firmware
  • Dir-619l
Published: October 10, 2024

CVE-2024-9785

8.8
    Dlink
  • Dir-619l Firmware
  • Dir-619l
Published: October 10, 2024

CVE-2024-9786

8.8
    Dlink
  • Dir-619l Firmware
  • Dir-619l
Published: October 10, 2024

CVE-2024-9817

8.8
    Blood Bank System Project
  • Blood Bank System
Published: October 10, 2024

CVE-2024-47084

8.3
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-45116

8.1
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-8977

8.1
    Gitlab
  • Gitlab
Published: October 10, 2024

CVE-2024-47870

8.1
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-48957

7.8
    Libarchive
  • Libarchive
Published: October 10, 2024

CVE-2024-48958

7.8
    Libarchive
  • Libarchive
Published: October 10, 2024

CVE-2024-9781

7.8
    Wireshark
  • Version(s): 4.4.0, 4.2.0 - 4.2.7
Published: October 10, 2024

CVE-2024-47962

7.8
    Deltaww
  • Cncsoft-G2
Published: October 10, 2024

CVE-2024-47963

7.8
    Deltaww
  • Cncsoft-G2
Published: October 10, 2024

CVE-2024-47964

7.8
    Deltaww
  • Cncsoft-G2
Published: October 10, 2024

CVE-2024-47965

7.8
    Deltaww
  • Cncsoft-G2
Published: October 10, 2024

CVE-2024-47966

7.8
    Deltaww
  • Cncsoft-G2
Published: October 10, 2024

CVE-2024-45117

7.6
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-9156

7.5
    Templateinvaders
  • Ti Woocommerce Wishlist
Published: October 10, 2024

CVE-2024-6747

7.5
    Checkmk
  • Checkmk
Published: October 10, 2024

CVE-2024-35202

7.5
    Bitcoin Core
  • Version(s): before 25.0
Published: October 10, 2024

CVE-2024-9312

7.5
    Authd
  • Version(s): up to 0.3.6
Published: October 10, 2024

CVE-2024-9797

7.5
    Code-Projects
  • Blood Bank System
Published: October 10, 2024

CVE-2024-47868

7.5
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-9581

7.3
    Happyplugins
  • Shortcodes Anywhere
Published: October 10, 2024

CVE-2024-9519

7.2
    Wpuserplus
  • Userplus
Published: October 10, 2024

CVE-2024-9022

7.2
    Total-Soft
  • Ts Poll
Published: October 10, 2024

CVE-2024-9788

7.2
    Lylme
  • Lylme Spage
Published: October 10, 2024

CVE-2024-9789

7.2
    Lylme
  • Lylme Spage
Published: October 10, 2024

CVE-2024-9790

7.2
    Lylme
  • Lylme Spage
Published: October 10, 2024

CVE-2024-9180

7.2
    Hashicorp
  • Vault
Published: October 10, 2024

CVE-2024-9815

7.2
    Codezips
  • Tourist Management System
Published: October 10, 2024

CVE-2024-9816

7.2
    Codezips
  • Tourist Management System
Published: October 10, 2024

CVE-2024-45118

6.5
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45132

6.5
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-9623

6.5
    Gitlab
  • Gitlab
Published: October 10, 2024

CVE-2024-9808

6.5
    Oretnom23
  • Online Eyewear Shop
Published: October 10, 2024

CVE-2024-9809

6.5
    Oretnom23
  • Online Eyewear Shop
Published: October 10, 2024

CVE-2024-47164

6.5
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-45119

6.4
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-7048

6.3
    open-webui
  • Version(s): v0.3.8
Published: October 10, 2024

CVE-2024-8729

6.1
    Idiom
  • Easy Social Share Buttons
Published: October 10, 2024

CVE-2024-9205

6.1
    Wpfactory
  • Maximum Products Per User For Woocommerce
Published: October 10, 2024

CVE-2024-9377

6.1
    Wpfactory
  • Products\, Order \& Customers Export For Woocommerce
Published: October 10, 2024

CVE-2024-45123

6.1
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-9799

6.1
    Rems
  • Profile Registration Without Reload\/Refresh
Published: October 10, 2024

CVE-2024-9810

6.1
    Jkev
  • Record Management System
Published: October 10, 2024

CVE-2024-22068

6.0
    ZTE ZXR10
  • Version(s): V4.00.10 and earlier
Published: October 10, 2024

CVE-2024-48942

5.9
    Syracom
  • Secure Login
Published: October 10, 2024

CVE-2024-9780

5.5
    Wireshark
  • Wireshark
Published: October 10, 2024

CVE-2024-48941

5.4
    Syracom
  • Secure Login
Published: October 10, 2024

CVE-2024-8987

5.4
    Kainelabs
  • Youzify
Published: October 10, 2024

CVE-2024-9057

5.4
    Curator
  • Curator.Io
Published: October 10, 2024

CVE-2024-9064

5.4
    Namogo
  • Elementor Inline Svg
Published: October 10, 2024

CVE-2024-9066

5.4
    Secretlab
  • Marketing And Seo Booster
Published: October 10, 2024

CVE-2024-9072

5.4
    Gdpr-Extensions
  • Consent Manager
Published: October 10, 2024

CVE-2024-9457

5.4
    Cssjockey
  • Wp Builder
Published: October 10, 2024

CVE-2024-9074

5.4
    Essamamdani
  • Advanced Blocks Pro
Published: October 10, 2024

CVE-2024-9520

5.4
    Wpuserplus
  • Userplus
Published: October 10, 2024

CVE-2024-7049

5.4
    Openwebui
  • Open Webui
Published: October 10, 2024

CVE-2024-45128

5.4
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45131

5.4
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-48902

5.4
    Jetbrains
  • Youtrack
Published: October 10, 2024

CVE-2024-6530

5.4
    Gitlab
  • Gitlab
Published: October 10, 2024

CVE-2024-9803

5.4
    Code-Projects
  • Blood Bank System
Published: October 10, 2024

CVE-2024-9805

5.4
    Code-Projects
  • Blood Bank System
Published: October 10, 2024

CVE-2024-47165

5.4
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-47872

5.4
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-8513

5.3
    Quarka
  • Qa Analytics
Published: October 10, 2024

CVE-2024-9065

5.3
    Matbao
  • Wp Helper Premium
Published: October 10, 2024

CVE-2024-9802

5.3
    Zowe
Published: October 10, 2024

CVE-2024-45124

5.3
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-9596

5.3
    Gitlab
  • Gitlab
Published: October 10, 2024

CVE-2024-9787

5.3
    Contemporary Control System BASrouter BACnet BASRT-B
  • Version(s): 2.7.2
Published: October 10, 2024

CVE-2024-47166

5.3
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-6157

5.1
    ABB IRC5 RobotWare
  • Version(s): 6 < 6.15.06 except 6.10.10, and 6.13.07
Published: October 10, 2024

CVE-2024-9804

4.9
    Code-Projects
  • Blood Bank System
Published: October 10, 2024

CVE-2024-45127

4.8
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-9806

4.8
    Classroombookings
  • Classroombookings
Published: October 10, 2024

CVE-2024-9807

4.8
    Classroombookings
  • Classroombookings
Published: October 10, 2024

CVE-2024-47354

4.7
    Simple Membership After Login Redirection
  • Version(s): n/a, 1.6
Published: October 10, 2024

CVE-2024-47648

4.7
    EventPrime
  • Version(s): n/a - 4.0.4.5
Published: October 10, 2024

CVE-2024-9685

4.3
    Andreamarinucci
  • Notification For Telegram
Published: October 10, 2024

CVE-2024-8477

4.3
    Brevo
  • Newsletter\, Smtp\, Email Marketing And Subscribe
Published: October 10, 2024

CVE-2024-9067

4.3
    Kainelabs
  • Youzify
Published: October 10, 2024

CVE-2024-45121

4.3
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45122

4.3
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45125

4.3
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45129

4.3
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45130

4.3
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45149

4.3
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-47168

4.3
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-47869

3.7
    Gradio Project
  • Gradio
Published: October 10, 2024

CVE-2024-45120

3.1
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45133

2.7
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45134

2.7
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-45135

2.7
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: October 10, 2024

CVE-2024-9792

2.4
    D-Link DSL-2750U
  • Version(s): R5B017
Published: October 10, 2024

CVE-2024-36051

None
    btcd
  • Version(s): before 0.24.2
Published: October 10, 2024

CVE-2024-44711

None
    UNKNOWN
Published: October 10, 2024

CVE-2024-4658

None
    Nova CMS
  • Version(s): before 5.0
Published: October 10, 2024

CVE-2023-25581

None
    pac4j
  • Version(s): before 4.0.0
Published: October 10, 2024

CVE-2024-9487

None
    GitHub Enterprise Server
  • Version(s): 3.11.16, 3.12.10, 3.13.5, 3.14.2
Published: October 10, 2024

CVE-2024-47867

None
    Gradio
Published: October 10, 2024
Click here to see more Vulnerabilities