Tag: 2024-10-16

3 Attack Reports | 186 Vulnerabilities

Attack reports

Beware of phishing emails impersonating major domestic entertainment agencies

ASEC (AhnLab Security Intelligence Center) has recently confirmed that phishing emails impersonating large domestic entertainment agencies are being distributed domestically.
python
infostealer
pdf
2024-10-16
Published: October 16, 2024
Downloadable IOCs: 0

A Website Attacked

This report investigates a watering hole attack on a U.S. apartment website that delivered malware by spoofing a fake browser update. The investigation uncovered dozens of other compromised websites from various industries like healthcare, retail, and consumer sites. The compromised sites loaded ma…
malware
netsupport
spoofing
watering hole
2024-10-16
browser updates
compromised websites
Published: October 16, 2024
Downloadable IOCs: 72

The New Malware Distribution Service

This analysis uncovers a novel malware distribution mechanism utilizing VBE scripts stored in archive files to spread various malware families, including AgentTesla, Remcos, Snake, and NjRat. It details the infection chain, which involves downloading encoded files from a command-and-control server,…
malware
evasion
remcos
injection
njrat
bladabindi
njw0rm
lv
keylogger
2024-10-16
agenttesla
ekans
snakehose
distribution
Published: October 16, 2024
Downloadable IOCs: 7
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-49257

10.0
    Azz Anonim Posting
Published: October 16, 2024

CVE-2024-49216

10.0
    Feed Comments Number
Published: October 16, 2024

CVE-2024-49242

10.0
    Digital Lottery
Published: October 16, 2024

CVE-2024-49254

10.0
    Sunjianle
Published: October 16, 2024

CVE-2020-36837

9.9
    ThemeGrill Demo Importer plugin for WordPress
Published: October 16, 2024

CVE-2023-32191

9.9
    Rancher Kubernetes Engine (RKE)
Published: October 16, 2024

CVE-2024-48027

9.9
    External featured image from bing
Published: October 16, 2024

CVE-2024-48034

9.9
    Creates 3D Flipbook, PDF Flipbook
Published: October 16, 2024

CVE-2024-48035

9.9
    ACF Images Search And Insert
Published: October 16, 2024

CVE-2024-49260

9.9
    Limb Image Gallery Plugin
Published: October 16, 2024

CVE-2024-9105

9.8
    UltimateAI plugin for WordPress
Published: October 16, 2024

CVE-2024-9634

9.8
    GiveWP Donation Plugin and Fundraising Platform
Published: October 16, 2024

CVE-2024-10018

9.8
    UNKNOWN
Published: October 16, 2024

CVE-2016-15040

9.8
    Kento Post View Counter plugin for WordPress
Published: October 16, 2024

CVE-2018-25105

9.8
    Filemanagerpro
  • File Manager
Published: October 16, 2024

CVE-2019-25217

9.8
    SiteGround Optimizer plugin for WordPress
Published: October 16, 2024

CVE-2020-36832

9.8
    Ultimate Membership Pro plugin for WordPress
Published: October 16, 2024

CVE-2021-4443

9.8
    WordPress Mega Menu plugin
Published: October 16, 2024

CVE-2021-4448

9.8
    Kaswara Project
  • Kaswara
Published: October 16, 2024

CVE-2021-4449

9.8
    Digitalzoomstudio
  • Zoomsounds
Published: October 16, 2024

CVE-2016-15042

9.8
    Najeebmedia
  • Frontend File Manager
  • Post Front-End Form
Published: October 16, 2024

CVE-2020-36840

9.8
    Motopress
  • Timetable And Event Schedule
Published: October 16, 2024

CVE-2024-45216

9.8
    Apache Solr
Published: October 16, 2024

CVE-2024-9061

9.8
    Themehunk
  • Wp Popup Builder
Published: October 16, 2024

CVE-2024-10021

9.8
    Code-Projects
  • Pharmacy Management System
Published: October 16, 2024

CVE-2024-10022

9.8
    Code-Projects
  • Pharmacy Management System
Published: October 16, 2024

CVE-2024-49247

9.8
    BuddyPress Better Registration
Published: October 16, 2024

CVE-2024-48026

9.8
    Disc Golf Manager
Published: October 16, 2024

CVE-2024-48028

9.8
    IP Loc8
Published: October 16, 2024

CVE-2024-48030

9.8
    Telecash Ricaricaweb
Published: October 16, 2024

CVE-2024-49218

9.8
    Al Imran Akash Recently
Published: October 16, 2024

CVE-2024-9893

9.8
    Nextend Social Login Pro plugin for WordPress
Published: October 16, 2024

CVE-2024-48180

9.8
    ClassCMS
Published: October 16, 2024

CVE-2024-48042

9.1
    Contact Form by Supsystic
Published: October 16, 2024

CVE-2024-49271

9.1
    Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Published: October 16, 2024

CVE-2024-47649

9.1
    Iconize
Published: October 16, 2024

CVE-2024-49340

8.8
    Ibm
  • Watson Studio Local
Published: October 16, 2024

CVE-2020-36836

8.8
    WP Fastest Cache plugin for WordPress
Published: October 16, 2024

CVE-2021-4447

8.8
    Essential Addons for Elementor plugin
Published: October 16, 2024

CVE-2021-4450

8.8
    Pickplugins
  • Post Grid
Published: October 16, 2024

CVE-2024-8507

8.8
    Filemanagerpro
  • File Manager
Published: October 16, 2024

CVE-2024-8746

8.8
    Filemanagerpro
  • File Manager
Published: October 16, 2024

CVE-2020-36842

8.8
    Wpvivid
  • Migration\, Backup\, Staging
Published: October 16, 2024

CVE-2024-45693

8.8
    Apache
  • Cloudstack
Published: October 16, 2024

CVE-2024-45711

8.8
    Solarwinds
  • Serv-U
Published: October 16, 2024

CVE-2023-22650

8.8
    Rancher
Published: October 16, 2024

CVE-2024-10023

8.8
    Code-Projects
  • Pharmacy Management System
Published: October 16, 2024

CVE-2024-10024

8.8
    Code-Projects
  • Pharmacy Management System </