Tag: 2024-10-16

3 Attack Reports | 186 Vulnerabilities

Attack reports

Beware of phishing emails impersonating major domestic entertainment agencies

ASEC (AhnLab Security Intelligence Center) has recently confirmed that phishing emails impersonating large domestic entertainment agencies are being distributed domestically.
python
infostealer
pdf
2024-10-16
Published: October 16, 2024
Downloadable IOCs: 0

A Website Attacked

This report investigates a watering hole attack on a U.S. apartment website that delivered malware by spoofing a fake browser update. The investigation uncovered dozens of other compromised websites from various industries like healthcare, retail, and consumer sites. The compromised sites loaded ma…
malware
netsupport
spoofing
watering hole
2024-10-16
browser updates
compromised websites
Published: October 16, 2024
Downloadable IOCs: 72

The New Malware Distribution Service

This analysis uncovers a novel malware distribution mechanism utilizing VBE scripts stored in archive files to spread various malware families, including AgentTesla, Remcos, Snake, and NjRat. It details the infection chain, which involves downloading encoded files from a command-and-control server,…
malware
evasion
remcos
injection
njrat
bladabindi
njw0rm
lv
keylogger
2024-10-16
agenttesla
ekans
snakehose
distribution
Published: October 16, 2024
Downloadable IOCs: 7
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-49257

10.0
    Azz Anonim Posting
Published: October 16, 2024

CVE-2024-49216

10.0
    Feed Comments Number
Published: October 16, 2024

CVE-2024-49242

10.0
    Digital Lottery
Published: October 16, 2024

CVE-2024-49254

10.0
    Sunjianle
Published: October 16, 2024

CVE-2020-36837

9.9
    ThemeGrill Demo Importer plugin for WordPress
Published: October 16, 2024

CVE-2023-32191

9.9
    Rancher Kubernetes Engine (RKE)
Published: October 16, 2024

CVE-2024-48027

9.9
    External featured image from bing
Published: October 16, 2024

CVE-2024-48034

9.9
    Creates 3D Flipbook, PDF Flipbook
Published: October 16, 2024

CVE-2024-48035

9.9
    ACF Images Search And Insert
Published: October 16, 2024

CVE-2024-49260

9.9
    Limb Image Gallery Plugin
Published: October 16, 2024

CVE-2024-9105

9.8
    UltimateAI plugin for WordPress
Published: October 16, 2024

CVE-2024-9634

9.8
    GiveWP Donation Plugin and Fundraising Platform
Published: October 16, 2024

CVE-2024-10018

9.8
    UNKNOWN
Published: October 16, 2024

CVE-2016-15040

9.8
    Kento Post View Counter plugin for WordPress
Published: October 16, 2024

CVE-2018-25105

9.8
    Filemanagerpro
  • File Manager
Published: October 16, 2024

CVE-2019-25217

9.8
    SiteGround Optimizer plugin for WordPress
Published: October 16, 2024

CVE-2020-36832

9.8
    Ultimate Membership Pro plugin for WordPress
Published: October 16, 2024

CVE-2021-4443

9.8
    WordPress Mega Menu plugin
Published: October 16, 2024

CVE-2021-4448

9.8
    Kaswara Project
  • Kaswara
Published: October 16, 2024

CVE-2021-4449

9.8
    Digitalzoomstudio
  • Zoomsounds
Published: October 16, 2024

CVE-2016-15042

9.8
    Najeebmedia
  • Frontend File Manager
  • Post Front-End Form
Published: October 16, 2024

CVE-2020-36840

9.8
    Motopress
  • Timetable And Event Schedule
Published: October 16, 2024

CVE-2024-45216

9.8
    Apache Solr
Published: October 16, 2024

CVE-2024-9061

9.8
    Themehunk
  • Wp Popup Builder
Published: October 16, 2024

CVE-2024-10021

9.8
    Code-Projects
  • Pharmacy Management System
Published: October 16, 2024

CVE-2024-10022

9.8
    Code-Projects
  • Pharmacy Management System
Published: October 16, 2024

CVE-2024-49247

9.8
    BuddyPress Better Registration
Published: October 16, 2024

CVE-2024-48026

9.8
    Disc Golf Manager
Published: October 16, 2024

CVE-2024-48028

9.8
    IP Loc8
Published: October 16, 2024

CVE-2024-48030

9.8
    Telecash Ricaricaweb
Published: October 16, 2024

CVE-2024-49218

9.8
    Al Imran Akash Recently
Published: October 16, 2024

CVE-2024-9893

9.8
    Nextend Social Login Pro plugin for WordPress
Published: October 16, 2024

CVE-2024-48180

9.8
    ClassCMS
Published: October 16, 2024

CVE-2024-48042

9.1
    Contact Form by Supsystic
Published: October 16, 2024

CVE-2024-49271

9.1
    Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Published: October 16, 2024

CVE-2024-47649

9.1
    Iconize
Published: October 16, 2024

CVE-2024-49340

8.8
    Ibm
  • Watson Studio Local
Published: October 16, 2024

CVE-2020-36836

8.8
    WP Fastest Cache plugin for WordPress
Published: October 16, 2024

CVE-2021-4447

8.8
    Essential Addons for Elementor plugin
Published: October 16, 2024

CVE-2021-4450

8.8
    Pickplugins
  • Post Grid
Published: October 16, 2024

CVE-2024-8507

8.8
    Filemanagerpro
  • File Manager
Published: October 16, 2024

CVE-2024-8746

8.8
    Filemanagerpro
  • File Manager
Published: October 16, 2024

CVE-2020-36842

8.8
    Wpvivid
  • Migration\, Backup\, Staging
Published: October 16, 2024

CVE-2024-45693

8.8
    Apache
  • Cloudstack
Published: October 16, 2024

CVE-2024-45711

8.8
    Solarwinds
  • Serv-U
Published: October 16, 2024

CVE-2023-22650

8.8
    Rancher
Published: October 16, 2024

CVE-2024-10023

8.8
    Code-Projects
  • Pharmacy Management System
Published: October 16, 2024

CVE-2024-10024

8.8
    Code-Projects
  • Pharmacy Management System
Published: October 16, 2024

CVE-2024-47637

8.8
    LiteSpeed Cache
Published: October 16, 2024

CVE-2024-49226

8.8
    TAKETIN To WP Membership
Published: October 16, 2024

CVE-2024-49227

8.8
    Free Stock Photos Foter
Published: October 16, 2024

CVE-2024-20420

8.8
    Cisco
  • Ata 191 Firmware
  • Ata 191
  • Ata 192 Firmware
  • Ata 192
Published: October 16, 2024

CVE-2024-38814

8.8
    Vmware
  • Vmware Hcx
Published: October 16, 2024

CVE-2024-6380

8.7
    ENOVIA Collaborative Industry Innovator
Published: October 16, 2024

CVE-2024-49253

8.6
    Analyse Uploads
Published: October 16, 2024

CVE-2024-45219

8.5
    Apache CloudStack
Published: October 16, 2024

CVE-2012-10018

8.3
    WordPress Mapplic plugin
    WordPress Mapplic Lite plugin
Published: October 16, 2024

CVE-2017-20192

8.3
    Formidable Form Builder plugin for WordPress
Published: October 16, 2024

CVE-2020-36839

8.3
    WP Lead Plus X plugin for WordPress
Published: October 16, 2024

CVE-2023-32192

8.3
    UNKNOWN
Published: October 16, 2024

CVE-2023-32193

8.3
    Norman Antivirus
Published: October 16, 2024

CVE-2024-20458

8.2
    Cisco
  • Ata 191 Firmware
  • Ata 191
  • Ata 192 Firmware
  • Ata 192
Published: October 16, 2024

CVE-2024-9305

8.1
    AppPresser - Mobile App Framework plugin for WordPress
Published: October 16, 2024

CVE-2023-7291

8.1
    Paytium
  • Paytium
Published: October 16, 2024

CVE-2024-45217

8.1
    Apache Solr
Published: October 16, 2024

CVE-2024-22030

8.0
    Rancher
Published: October 16, 2024

CVE-2024-4184

8.0
    Microfocus
  • Application Automation Tools
Published: October 16, 2024

CVE-2024-4189

8.0
    Microfocus
  • Application Automation Tools
Published: October 16, 2024

CVE-2024-4690

8.0
    Microfocus
  • Application Automation Tools
Published: October 16, 2024

CVE-2024-45710

7.8
    Solarwinds
  • Solarwinds Platform
Published: October 16, 2024

CVE-2024-9858

7.8
    Google Cloud Migrate to containers
Published: October 16, 2024

CVE-2023-32190

7.8
    mlocate
Published: October 16, 2024

CVE-2024-22029

7.8
    Apache Tomcat
Published: October 16, 2024

CVE-2024-7993

7.8
    Autodesk
  • Revit
Published: October 16, 2024

CVE-2024-7994

7.8
    Autodesk
  • Revit
Published: October 16, 2024

CVE-2024-8040

7.7
    3DSwym
Published: October 16, 2024

CVE-2019-25213

7.5
    Vasyltech
  • Advanced Access Manager
Published: October 16, 2024

CVE-2022-4972

7.5
    Wpchill
  • Download Monitor
Published: October 16, 2024

CVE-2024-47351

7.5
    MaxSlider
Published: October 16, 2024

CVE-2024-47645

7.5
    Top Bar - PopUps - by WPOptin
Published: October 16, 2024

CVE-2024-48029

7.5
    SB Random Posts Widget
Published: October 16, 2024

CVE-2024-49245

7.5
    Ahime Image Printer
Published: October 16, 2024

CVE-2024-49251

7.5
    Maan Addons For Elementor
Published: October 16, 2024

CVE-2024-45795

7.5
    Oisf
  • Suricata
Published: October 16, 2024

CVE-2024-45797

7.5
    LibHTP
Published: October 16, 2024

CVE-2024-47187

7.5
    Oisf
  • Suricata
Published: October 16, 2024

CVE-2024-47188

7.5
    Oisf
  • Suricata
Published: October 16, 2024

CVE-2024-47522

7.5
    Oisf
  • Suricata
Published: October 16, 2024

CVE-2020-36838

7.4
    Facebook Chat Plugin for WordPress
Published: October 16, 2024

CVE-2019-25215

7.3
    ARI-Adminer plugin for WordPress
Published: October 16, 2024

CVE-2021-4444

7.3
    Product Filter by WooBeWoo plugin for WordPress
Published: October 16, 2024

CVE-2016-15041

7.2
    MainWP Dashboard Plugin
Published: October 16, 2024

CVE-2019-25214

7.2
    ShopWP plugin for WordPress
Published: October 16, 2024

CVE-2019-25216

7.2
    Rich Review plugin for WordPress
Published: October 16, 2024

CVE-2021-4451

7.2
    Nintechnet
  • Ninjafirewall
Published: October 16, 2024

CVE-2023-32194

7.2
    Kubernetes
Published: October 16, 2024

CVE-2024-45844

7.2
    BIG-IP
Published: October 16, 2024

CVE-2024-20459

7.2
    Cisco
  • Ata 191 Firmware
  • Ata 191
  • Ata 192 Firmware
  • Ata 192
Published: October 16, 2024

CVE-2024-46213

7.2
    REDAXO CMS
Published: October 16, 2024

CVE-2024-45462

7.1
    Apache
  • Cloudstack
Published: October 16, 2024

CVE-2024-20463

7.1
    Cisco
  • Ata 191 Firmware
  • Ata 191
  • Ata 192 Firmware
  • Ata 192
Published: October 16, 2024

CVE-2024-47139

6.8
    BIG-IQ Configuration utility
Published: October 16, 2024

CVE-2023-32196

6.6
    UNKNOWN
Published: October 16, 2024

CVE-2021-4445

6.5
    Premium Addons for Elementor plugin for WordPress
Published: October 16, 2024

CVE-2023-7286

6.5
    ACF Quick Edit Fields for WordPress
Published: October 16, 2024

CVE-2023-7294

6.5
    Paytium
  • Paytium
Published: October 16, 2024

CVE-2023-22649

6.5
    Suse
  • Rancher
Published: October 16, 2024

CVE-2024-22032

6.5
    Rancher Kubernetes Engine (RKE)
Published: October 16, 2024

CVE-2024-49258

6.5
    WordPress Gallery Plugin - Limb Image Gallery
Published: October 16, 2024

CVE-2024-49270

6.5
    HashThemes Smart Blocks
Published: October 16, 2024

CVE-2024-49267

6.5
    nayon46 Unlimited Addon For Elementor
Published: October 16, 2024

CVE-2024-20421

6.5
    Cisco
  • Ata 191 Firmware
  • Ata 191
  • Ata 192 Firmware
  • Ata 192
Published: October 16, 2024

CVE-2024-9521

6.4
    SEO Manager plugin for WordPress
Published: October 16, 2024

CVE-2024-9582

6.4
    Accordion Slider plugin for WordPress
Published: October 16, 2024

CVE-2023-7296

6.4
    BigBlueButton plugin for WordPress
Published: October 16, 2024

CVE-2024-9444

6.4
    ElementsReady Addons for Elementor plugin for WordPress
Published: October 16, 2024

CVE-2024-8921

6.4
    Zita Elementor Site Library plugin for WordPress
Published: October 16, 2024

CVE-2020-36833

6.3
    Indeed Membership Pro plugin for WordPress
Published: October 16, 2024

CVE-2020-36834

6.3
    Discount Rules for WooCommerce plugin for WordPress
Published: October 16, 2024

CVE-2021-4446

6.3
    Essential Addons for Elementor plugin for WordPress
Published: October 16, 2024

CVE-2022-4974

6.3
    Freemius SDK
Published: October 16, 2024

CVE-2024-45461

6.3
    Apache
  • Cloudstack
Published: October 16, 2024

CVE-2024-22033

6.3
    openSUSE Build Service
Published: October 16, 2024

CVE-2024-20280

6.3
    Cisco UCS Central Software
Published: October 16, 2024

CVE-2024-8541

6.1
    Flycart
  • Discount Rules For Woocommerce
Published: October 16, 2024

CVE-2024-8787

6.1
    Smart Online Order for Clover plugin for WordPress
Published: October 16, 2024

CVE-2024-9647

6.1
    Kama SpamBlock plugin for WordPress
Published: October 16, 2024

CVE-2024-9652

6.1
    Locatoraid Store Locator plugin for WordPress
Published: October 16, 2024

CVE-2024-9937

6.1
    Woo Manage Fraud Orders plugin for WordPress
Published: October 16, 2024

CVE-2022-4971

6.1
    Heateor
  • Sassy Social Share
Published: October 16, 2024

CVE-2017-20193

6.1
    Woo
  • Product Vendors
Published: October 16, 2024

CVE-2023-7295

6.1
    Video Grid plugin for WordPress
Published: October 16, 2024

CVE-2024-45715

6.1
    Solarwinds
  • Solarwinds Platform
Published: October 16, 2024

CVE-2024-48744

6.1
    PHPGurukul Teachers Record Management System
Published: October 16, 2024

CVE-2024-49268

6.1
    Sunburntkamel
  • Disconnected
Published: October 16, 2024

CVE-2024-10033

6.1
    Redhat
  • Ansible Automation Platform
  • Ansible Developer
  • Ansible Inside
  • Enterprise Linux
Published: October 16, 2024

CVE-2024-20460

6.1
    Cisco
  • Ata 191 Firmware
  • Ata 191
  • Ata 192 Firmware
  • Ata 192
Published: October 16, 2024

CVE-2024-20512

6.1
    Cisco Unified Contact Center Management Portal
Published: October 16, 2024

CVE-2024-46605

6.1
    Piwigo
Published: October 16, 2024

CVE-2024-48758

6.1
    dingfanzu CMS
Published: October 16, 2024

CVE-2024-20461

6.0
    Cisco
  • Ata 191 Firmware
  • Ata 191
  • Ata 192 Firmware
  • Ata 192
Published: October 16, 2024

CVE-2023-32189

5.9
    UNKNOWN
Published: October 16, 2024

CVE-2024-49266

5.9
    WP-Spreadplugin
Published: October 16, 2024

CVE-2024-9104

5.6
    UltimateAI plugin for WordPress
Published: October 16, 2024

CVE-2024-22034

5.5
    UNKNOWN
Published: October 16, 2024

CVE-2024-20462

5.5
    Cisco
  • Ata 191 Firmware
  • Ata 191
  • Ata 192 Firmware
  • Ata 192
Published: October 16, 2024

CVE-2024-45072

5.5
    Ibm
  • Websphere Application Server
  • Aix
  • I
  • Z\/Os
    Hp
    Linux
    Microsoft
    Oracle
Published: October 16, 2024

CVE-2024-9873

5.4
    The Community by PeepSo - Social Network, Membership, Registration, User Profiles, Premium - Mobile App plugin for WordPress
Published: October 16, 2024

CVE-2024-9888

5.4
    ElementInvader Addons for Elementor plugin for WordPress
Published: October 16, 2024

CVE-2022-4973

5.4
    Wordpress
  • Wordpress
Published: October 16, 2024

CVE-2023-7287

5.4
    Paytium
  • Paytium
Published: October 16, 2024

CVE-2024-8918

5.4
    Filemanagerpro
  • File Manager
Published: October 16, 2024

CVE-2021-4452

5.4
    Gtranslate
  • Google Language Translator
Published: October 16, 2024

CVE-2024-49265

5.4
    Booking
  • Banner Creator
Published: October 16, 2024

CVE-2024-46606

5.4
    Piwigo
Published: October 16, 2024

CVE-2017-20194

5.3
    Strategy11
  • Formidable Form Builder
Published: October 16, 2024

CVE-2020-36841

5.3
    WooCommerce Smart Coupons plugin for WordPress
Published: October 16, 2024

CVE-2024-49252

5.3
    Teplitsa of social technologies Leyka
Published: October 16, 2024

CVE-2024-45796

5.3
    Oisf
  • Suricata
Published: October 16, 2024

CVE-2024-44762

5.3
    Webmin Usermin
Published: October 16, 2024

CVE-2020-36831

5.0
    NextScripts: Social Networks Auto-Poster plugin for WordPress
Published: October 16, 2024

CVE-2020-36835

4.9
    WPvivid plugin for WordPress
Published: October 16, 2024

CVE-2024-46212

4.9
    REDAXO CMS
Published: October 16, 2024

CVE-2024-45071

4.8
    Ibm
  • Websphere Application Server
  • Aix
  • I
  • Z\/Os
    Hp
    Linux
    Microsoft
    Oracle
Published: October 16, 2024

CVE-2024-9649

4.3
    WP ULike - The Ultimate Engagement Toolkit for Websites plugin
Published: October 16, 2024

CVE-2024-9891

4.3
    Multiline files upload for contact form 7 plugin for WordPress
Published: October 16, 2024

CVE-2023-7288

4.3
    Paytium
  • Paytium
Published: October 16, 2024

CVE-2023-7289

4.3
    Paytium
  • Paytium
Published: October 16, 2024

CVE-2023-7290

4.3
    Paytium
  • Paytium
Published: October 16, 2024

CVE-2023-7292

4.3
    Paytium
  • Paytium
Published: October 16, 2024

CVE-2023-7293

4.3
    Paytium
  • Paytium
Published: October 16, 2024

CVE-2024-9540

4.3
    Sinaextra
  • Sina Extension For Elementor
Published: October 16, 2024

CVE-2024-29155

4.3
    Microchip RN4870 devices
Published: October 16, 2024

CVE-2024-9143

4.3
    OpenSSL
Published: October 16, 2024

CVE-2024-45714

4.1
    Solarwinds
  • Serv-U
Published: October 16, 2024

CVE-2024-47836

3.5
    Admidio
Published: October 16, 2024

CVE-2024-4211

2.4
    Microfocus
  • Application Automation Tools
Published: October 16, 2024

CVE-2024-4692

2.4
    Microfocus
  • Application Automation Tools
Published: October 16, 2024

CVE-2023-32188

None
    NeuVector
Published: October 16, 2024

CVE-2024-9348

None
    Docker Desktop
Published: October 16, 2024

CVE-2023-32266

None
    OpenText Application Lifecycle Management (ALM),Quality Center
Published: October 16, 2024

CVE-2024-41128

None
    Ruby on Rails
Published: October 16, 2024

CVE-2024-47887

None
    Action Pack
Published: October 16, 2024

CVE-2024-47888

None
    Action Text
Published: October 16, 2024

CVE-2024-47889

None
    Action Mailer
Published: October 16, 2024

CVE-2024-48918

None
    RDS Light
Published: October 16, 2024
Click here to see more Vulnerabilities