Tag: 2024-10-23

6 Attack Reports | 121 Vulnerabilities

Attack reports

Embargo ransomware: Rock'n'Rust

ESET researchers have uncovered new Rust-based tools used by the Embargo ransomware group. The toolkit includes MDeployer, a loader that deploys MS4Killer and Embargo ransomware, and MS4Killer, an EDR killer that exploits a vulnerable driver. Embargo, first observed in June 2024, is a relatively ne…
ransomware
rust
byovd
raas
2024-10-23
embargo ransomware
edr killer
safe mode abuse
ms4killer
mdeployer
Published: October 23, 2024
Downloadable IOCs: 0

FortiManager fgfmd vulnerability indicators

A critical vulnerability in FortiManager's fgfmd daemon allows remote unauthenticated attackers to execute arbitrary code or commands via specially crafted requests. This vulnerability, classified as CWE-306 (Missing Authentication for Critical Function), has been exploited in the wild. The attack …
vulnerability
exfiltration
authentication
remote code execution
2024-10-23
CVE-2024-47575
fortimanager
Published: October 23, 2024
Linked vulnerabilities : CVE-2024-47575 (CVSS 9.8)
Downloadable IOCs: 3

Unmasking Prometei: A Deep Dive Into MXDR Findings

This analysis examines the Prometei botnet's infiltration of a customer's system through a targeted brute force attack. Leveraging Trend Vision One, the investigation traced the botnet's detailed installation routine and stealthy tactics. Prometei, a modular malware family used for cryptocurrency m…
botnet
credential theft
lateral movement
dga
web shell
tor
cryptocurrency mining
2024-10-23
prometei
CVE-2021-27065
CVE-2021-26858
CVE-2019-0708
Published: October 23, 2024
Downloadable IOCs: 0

DarkComet RAT: Technical Analysis of Attack Chain

This analysis examines the Remote Access Trojan (RAT) DarkComet, detailing its capabilities, distribution methods, and technical operations. The malware alters file attributes, establishes communication with malicious domains, modifies process privileges, and gathers system information. It employs …
rat
evasion
persistence
keylogging
privilege escalation
command and control
remote access trojan
2024-10-23
darkcomet
Published: October 23, 2024
Downloadable IOCs: 1

Triad Nexus: FUNNULL CDN hosting DGA domains for suspect Chinese sites

Silent Push has uncovered a large-scale malicious infrastructure dubbed 'Triad Nexus' hosted on the FUNNULL content delivery network. The investigation revealed over 200,000 unique hostnames, with 95% created using Domain Generation Algorithms. FUNNULL is linked to hosting suspect gambling websites…
phishing
dga
gambling
2024-10-23
supply chain attack
funnull
triad nexus
suncity group
cdn
Published: October 23, 2024
Downloadable IOCs: 70

Lazarus APT steals cryptocurrency and user data via a decoy MOBA game

Lazarus APT launched a sophisticated attack campaign using a decoy MOBA game website to exploit a zero-day vulnerability in Google Chrome. The exploit allowed remote code execution and bypassed the V8 sandbox. The attackers used social engineering tactics on social media to promote the fake game, w…
apt
exploit
social engineering
cryptocurrency
zero-day
CVE-2024-4947
2024-10-23
google chrome
manuscrypt
game
v8 sandbox
Published: October 23, 2024
Linked vulnerabilities : CVE-2024-4947
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-49668

10.0
    Verbalize WP
Published: October 23, 2024

CVE-2024-49652

9.9
    ReneeCussack 3D Work In Progress
Published: October 23, 2024

CVE-2024-49653

9.9
    Portfolleo
Published: October 23, 2024

CVE-2024-49658

9.9
    Woocommerce Custom Profile Picture
Published: October 23, 2024

CVE-2024-49669

9.9
    INK Official
Published: October 23, 2024

CVE-2024-49671

9.9
    AI Image Generator for Your Content & Featured Images - AI Postpix
Published: October 23, 2024

CVE-2024-20329

9.9
    Cisco Adaptive Security Appliance (ASA) Software
Published: October 23, 2024

CVE-2024-20424

9.9
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-9947

9.8
    Properfraction
  • Profilepress
Published: October 23, 2024

CVE-2024-43924

9.8
    Dfactory
  • Responsive Lightbox
Published: October 23, 2024

CVE-2024-10277

9.8
    Esafenet
  • Cdg
Published: October 23, 2024

CVE-2024-10278

9.8
    Esafenet
  • Cdg
Published: October 23, 2024

CVE-2024-10279

9.8
    Esafenet
  • Cdg
Published: October 23, 2024

CVE-2024-47575

9.8
    Fortinet
  • Fortimanager
  • Fortimanager Cloud
Published: October 23, 2024

CVE-2024-47901

9.8
    Siemens
  • Intermesh 7177 Hybrid 2.0 Subscriber
  • Intermesh 7707 Fire Subscriber Firmware
  • Intermesh 7707 Fire Subscriber
Published: October 23, 2024

CVE-2024-47902

9.8
    Siemens
  • Intermesh 7177 Hybrid 2.0 Subscriber
  • Intermesh 7707 Fire Subscriber Firmware
  • Intermesh 7707 Fire Subscriber
Published: October 23, 2024

CVE-2024-10291

9.8
    Zzcms
  • Zzcms
Published: October 23, 2024

CVE-2024-10292

9.8
    Zzcms
  • Zzcms
Published: October 23, 2024

CVE-2024-10293

9.8
    Zzcms
  • Zzcms
Published: October 23, 2024

CVE-2024-48963

9.8
    Snyk
  • Snyk Cli
Published: October 23, 2024

CVE-2024-47903

9.1
    Siemens
  • Intermesh 7177 Hybrid 2.0 Subscriber
  • Intermesh 7707 Fire Subscriber Firmware
  • Intermesh 7707 Fire Subscriber
Published: October 23, 2024

CVE-2024-10281

8.8
    Tenda
  • Rx9 Pro Firmware
  • Rx9 Pro
Published: October 23, 2024

CVE-2024-10282

8.8
    Tenda
  • Rx9 Pro Firmware
  • Rx9 Pro
Published: October 23, 2024

CVE-2024-10283

8.8
    Tenda
  • Rx9 Pro Firmware
  • Rx9 Pro
Published: October 23, 2024

CVE-2024-49675

8.8
    Vitaliibryl
  • Switch User
Published: October 23, 2024

CVE-2024-48964

8.8
    Snyk
  • Snyk Cli
Published: October 23, 2024

CVE-2024-40431

8.8
    Realtek SD card reader driver
Published: October 23, 2024

CVE-2024-20260

8.6
    Cisco Adaptive Security Virtual Appliance (ASAv)
    Cisco Secure Firewall Threat Defense Virtual (FTDv)
Published: October 23, 2024

CVE-2024-20330

8.6
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20339

8.6
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20351

8.6
    Cisco Firepower Threat Defense (FTD) Software
    Cisco FirePOWER Services
Published: October 23, 2024

CVE-2024-20402

8.6
    Cisco Firepower Threat Defense (FTD) Software
    Cisco Adaptive Security Appliance (ASA) Software
Published: October 23, 2024

CVE-2024-20426

8.6
    Cisco
  • Adaptive Security Appliance Software
  • Firepower Threat Defense Software
Published: October 23, 2024

CVE-2024-20494

8.6
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20495

8.6
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20412

8.4
    Cisco
  • Firepower Threat Defense
  • Firepower 1000
  • Firepower 1010
  • Firepower 1020
  • Firepower 1030
  • Firepower 1040
  • Firepower 1120
  • Firepower 1140
  • Firepower 1150
  • Firepower 2100
  • Firepower 2110
  • Firepower 2120
  • Firepower 2130
  • Firepower 2140
  • Firepower 3105
  • Firepower 3110
  • Firepower 3120
  • Firepower 3130
  • Firepower 3140
  • Firepower 4215
  • Firepower 4225
  • Firepower 4245
Published: October 23, 2024

CVE-2024-47904

7.8
    Siemens
  • Intermesh 7177 Hybrid 2.0 Subscriber
  • Intermesh 7707 Fire Subscriber Firmware
  • Intermesh 7707 Fire Subscriber
Published: October 23, 2024

CVE-2024-49657

7.7
    ReneeCussack 3D Work In Progress
Published: October 23, 2024

CVE-2024-20268

7.7
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20408

7.7
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2023-50310

7.5
    Ibm
  • Cics Transaction Gateway
Published: October 23, 2024

CVE-2024-10280

7.5
    Tenda
  • Ac15 Firmware
  • Ac15
  • Ac7 Firmware
  • Ac7
  • Ac10u Firmware
  • Ac10u
  • Ac500 Firmware
  • Ac500
  • Ac18 Firmware
  • Ac18
  • Ac9 Firmware
  • Ac9
  • Ac1206 Firmware
  • Ac1206
  • Ac6 Firmware
  • Ac6
  • Ac10 Firmware
  • Ac10
  • Ac8 Firmware
  • Ac8
Published: October 23, 2024

CVE-2024-10290

7.5
    Zzcms
  • Zzcms
Published: October 23, 2024

CVE-2024-49690

7.5
    Qi Blocks
Published: October 23, 2024

CVE-2024-49701

7.5
    Unknown
Published: October 23, 2024

CVE-2024-9927

7.2
    Wpovernight
  • Woocommerce Order Proposal
Published: October 23, 2024

CVE-2024-49684

7.2
    Backup and Staging by WP Time Capsule
Published: October 23, 2024

CVE-2024-10296

7.2
    Anujkumar
  • Medical Card Generation System
Published: October 23, 2024

CVE-2024-10298

7.2
    Phpgurukul
  • Medical Card Generation System
Published: October 23, 2024

CVE-2024-10299

7.2
    Phpgurukul
  • Medical Card Generation System
Published: October 23, 2024

CVE-2024-10300

7.2
    Phpgurukul
  • Medical Card Generation System
Published: October 23, 2024

CVE-2024-10301

7.2
    Phpgurukul
  • Medical Card Generation System
Published: October 23, 2024

CVE-2024-50066

7.0
    Linux
  • Linux Kernel
Published: October 23, 2024

CVE-2024-20485

6.7
    Cisco
  • Adaptive Security Appliance Software
  • Firepower Threat Defense Software
Published: October 23, 2024

CVE-2024-49676

6.6
    Custom Icons for Elementor
Published: October 23, 2024

CVE-2024-31880

6.5
    Ibm
  • Db2
    Linux
    Microsoft
    Opengroup
Published: October 23, 2024

CVE-2024-9829

6.5
    Metagauss
  • Download Plugin
Published: October 23, 2024

CVE-2024-5764

6.5
    Sonatype
  • Nexus
Published: October 23, 2024

CVE-2024-20340

6.5
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20374

6.5
    Cisco Secure Firewall Management Center (FMC) Software
Published: October 23, 2024

CVE-2024-20379

6.5
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-20471

6.5
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20472

6.5
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20473

6.5
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20474

6.5
    Cisco
  • Anyconnect Secure Mobility Client
  • Secure Client
Published: October 23, 2024

CVE-2024-20482

6.5
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-40432

6.5
    Realtek SD card reader driver
Published: October 23, 2024

CVE-2024-50050

6.3
    Llama Stack
Published: October 23, 2024

CVE-2024-10286

6.1
    Ujangrohidin
  • Localserver
Published: October 23, 2024

CVE-2024-10287

6.1
    Ujangrohidin
  • Localserver
Published: October 23, 2024

CVE-2024-10288

6.1
    Ujangrohidin
  • Localserver
Published: October 23, 2024

CVE-2024-10289

6.1
    Ujangrohidin
  • Localserver
Published: October 23, 2024

CVE-2024-10250

6.1
    Steelthemes
  • Nioland
Published: October 23, 2024

CVE-2024-20273

6.1
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20275

6.1
    Cisco Secure Firewall Management Center (FMC) Software
Published: October 23, 2024

CVE-2024-20341

6.1
    Cisco
  • Adaptive Security Appliance Software
  • Firepower Threat Defense Software
Published: October 23, 2024

CVE-2024-20372

6.1
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-20382

6.1
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20386

6.1
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-20409

6.1
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-20410

6.1
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-20415

6.1
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-20370

6.0
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20331

5.9
    Cisco
  • Adaptive Security Appliance Software
  • Firepower Threat Defense Software
Published: October 23, 2024

CVE-2024-50382

5.9
    Botan
Published: October 23, 2024

CVE-2024-50383

5.9
    Botan
Published: October 23, 2024

CVE-2024-20297

5.8
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20299

5.8
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20342

5.8
    Cisco Snort detection engine
Published: October 23, 2024

CVE-2024-20384

5.8
    Cisco Adaptive Security Appliance (ASA) Software
    Cisco Firepower Threat Defense (FTD) Software
Published: October 23, 2024

CVE-2024-20407

5.8
    Cisco Firepower Threat Defense Software
Published: October 23, 2024

CVE-2024-20431

5.8
    Cisco
  • Firepower Threat Defense
Published: October 23, 2024

CVE-2024-20481

5.8
    Cisco
  • Firepower Threat Defense Software
  • Adaptive Security Appliance Software
Published: October 23, 2024

CVE-2024-20274

5.5
    Cisco Secure Firewall Management Center (FMC) Software
Published: October 23, 2024

CVE-2024-9583

5.4
    Rebelcode
  • Rss Aggregator
Published: October 23, 2024

CVE-2024-8500

5.4
    Getshortcodes
  • Shortcodes Ultimate
Published: October 23, 2024

CVE-2024-20264

5.4
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20269

5.4
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20298

5.4
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20300

5.4
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20364

5.4
    Cisco
  • Secure Firewall Management Center
Published: October 23, 2024

CVE-2024-20377

5.4
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-20387

5.4
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-20403

5.4
    Cisco
  • Firepower Management Center
Published: October 23, 2024

CVE-2024-30122

5.3
    Hcltech
  • Sametime
Published: October 23, 2024

CVE-2024-49756

5.3
    AshPostgres
Published: October 23, 2024

CVE-2024-20388

5.3
    Cisco
  • Firepower Management Center
  • Firepower Threat Defense
Published: October 23, 2024

CVE-2024-20493

5.3
    Cisco
  • Firepower Threat Defense Software
  • Adaptive Security Appliance Software
Published: October 23, 2024

CVE-2024-20526

5.3
    Cisco
  • Adaptive Security Appliance Software
Published: October 23, 2024

CVE-2023-50355

5.3
    Hcltech
  • Sametime
Published: October 23, 2024

CVE-2024-49370

4.9
    Pimcore
  • Pimcore
Published: October 23, 2024

CVE-2024-10041

4.7
    Linux-Pam
  • Linux-Pam
    Redhat
Published: October 23, 2024

CVE-2024-10297

4.7
    PHPGurukul Medical Card Generation System
Published: October 23, 2024

CVE-2024-10045

4.3
    Wpbeginner
  • Transients Manager
Published: October 23, 2024

CVE-2024-9530

4.3
    Qodeinteractive
  • Qi Addons For Elementor
Published: October 23, 2024

CVE-2024-48213

4.3
    Rockoa
  • Xinhu
Published: October 23, 2024

CVE-2024-30124

4.0
    HCL Sametime
Published: October 23, 2024

CVE-2024-10276

3.5
    Tektronix Sentry
Published: October 23, 2024

CVE-2024-49751

None
    Frappe
Published: October 23, 2024

CVE-2024-9949

None
    Forescout SecureConnector
Published: October 23, 2024

CVE-2024-9899

None
    UNKNOWN
Published: October 23, 2024
Click here to see more Vulnerabilities