Tag: 2024-10-24

4 Attack Reports | 104 Vulnerabilities

Attack reports

Increased Fog and Akira Ransomware Activity Linked to SonicWall SSL VPN

Since early August, there has been a significant increase in Fog and Akira ransomware intrusions targeting SonicWall SSL VPN users across various industries. The attacks appear opportunistic rather than targeting specific sectors. All affected devices lacked patches for CVE-2024-40766. Initial acce…
ransomware
vpn
data exfiltration
akira
CVE-2024-40766
2024-10-24
sonicwall
initial access
fog
Published: October 24, 2024
Linked vulnerabilities : CVE-2024-40766 (CVSS 9.8)
Downloadable IOCs: 16

Operation Cobalt Whisper: Threat Actor Targets Multiple Industries Across Hong Kong and Pakistan

A sophisticated cyber espionage campaign dubbed Operation Cobalt Whisper has been uncovered, targeting various industries in Hong Kong and Pakistan. The threat actor focuses on the defense sector, engineering researchers, and key entities in these regions, using tailored lures related to electrotec…
cobalt strike
pakistan
cyber espionage
vbscript
lnk files
2024-10-24
engineering
hong kong
defense sector
Published: October 24, 2024
Downloadable IOCs: 0

Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575)

A new threat cluster, UNC5820, has been observed exploiting a zero-day vulnerability in FortiManager appliances across multiple industries. The vulnerability allows unauthorized execution of arbitrary code or commands on vulnerable devices. The attackers staged and exfiltrated configuration data fr…
vulnerability
zero-day
exploitation
fortigate
CVE-2024-47575
2024-10-24
fortimanager
cyber-espionage
configuration-exfiltration
network-security
Published: October 24, 2024
Linked vulnerabilities : CVE-2024-47575 (CVSS 9.8)
Downloadable IOCs: 4

Understanding the Initial Stages of Web Shell and VPN Threats: An MXDR Analysis

This analysis examines two cybersecurity incidents: a web shell attack and a VPN compromise. The web shell attack involved uploading malicious files to a server, executing commands, creating a local admin account, and attempting to establish persistence. The VPN compromise led to lateral movement, …
anydesk
persistence
CVE-2020-1472
lateral movement
privilege escalation
web shell
defense evasion
2024-10-24
iis
mxdr
vpn compromise
Published: October 24, 2024
Linked vulnerabilities : CVE-2020-1472
Downloadable IOCs: 1
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-48538

9.8
    Neye3C
Published: October 24, 2024

CVE-2024-48539

9.8
    Neye3C
Published: October 24, 2024

CVE-2024-46478

9.8
    HTMLDOC
Published: October 24, 2024

CVE-2024-48514

9.8
    php-heic-to-jpg
Published: October 24, 2024

CVE-2024-7763

9.8
    Progress
  • Whatsup Gold
Published: October 24, 2024

CVE-2024-41617

9.8
    Money Manager EX WebApp
Published: October 24, 2024

CVE-2024-41618

9.8
    Money Manager EX WebApp
Published: October 24, 2024

CVE-2024-49681

9.3
    WP Sessions Time Monitoring Full Automatic
Published: October 24, 2024

CVE-2024-44206

9.3
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: October 24, 2024

CVE-2024-48548

9.3
    Cloud Smart Lock
Published: October 24, 2024

CVE-2024-48143

9.1
    Digitory Multi Channel Integrated POS
Published: October 24, 2024

CVE-2024-48144

9.1
    Fusion Chat Chat AI Assistant Ask Me Anything
Published: October 24, 2024

CVE-2024-48145

9.1
    ChatNet AI
Published: October 24, 2024

CVE-2024-47883

9.1
    Openrefine
  • Butterfly
Published: October 24, 2024

CVE-2024-48440

8.8
    Shenzhen Tuoshi Network Communications NR500-EA RG500UEAABxCOMSLICv3
Published: October 24, 2024

CVE-2024-48441

8.8
    Wuhan Tianyu Information Industry Co., Ltd Tianyu CPE Router CommonCPExCPETS
Published: October 24, 2024

CVE-2024-48427

8.8
    Oretnom23
  • Packers And Movers Management System
Published: October 24, 2024

CVE-2024-45262

8.8
    GL-iNet devices
Published: October 24, 2024

CVE-2024-45263

8.8
    GL-iNet devices
Published: October 24, 2024

CVE-2024-8312

8.7
    GitLab CE/EE
Published: October 24, 2024

CVE-2024-48208

8.6
    pure-ftpd
Published: October 24, 2024

CVE-2024-48541

8.4
    Ruochan Smart
Published: October 24, 2024

CVE-2024-48542

8.4
    Yamaha Headphones Controller
Published: October 24, 2024

CVE-2024-48544

8.4
    Sylvania Smart Home
Published: October 24, 2024

CVE-2024-48545

8.4
    IVY Smart
Published: October 24, 2024

CVE-2024-48546

8.4
    Wear Sync
Published: October 24, 2024

CVE-2024-48547

8.4
    DreamCatcher Life
Published: October 24, 2024

CVE-2024-5608

8.3
    Zohocorp ManageEngine ADAudit Plus
Published: October 24, 2024

CVE-2024-10327

8.1
    Okta Verify for iOS
Published: October 24, 2024

CVE-2024-47878

8.1
    Openrefine
  • Openrefine
Published: October 24, 2024

CVE-2024-47880

8.1
    Openrefine
  • Openrefine
Published: October 24, 2024

CVE-2024-47881

8.1
    Openrefine
  • Openrefine
Published: October 24, 2024

CVE-2024-10313

8.0
    SpiderControl SCADA PC HMI Editor
Published: October 24, 2024

CVE-2024-45260

8.0
    GL-iNet devices
Published: October 24, 2024

CVE-2024-45261

8.0
    GL-iNet devices
Published: October 24, 2024

CVE-2024-45242

7.8
    EnGenius ENH1350EXT
Published: October 24, 2024

CVE-2024-48423

7.8
    Assimp
  • Assimp
Published: October 24, 2024

CVE-2024-49691

7.6
    Woobewoo Product Filter by WBW
Published: October 24, 2024

CVE-2024-47879

7.6
    OpenRefine
Published: October 24, 2024

CVE-2024-6049

7.5
    Lawo AG vsm LTC Time Sync (vTimeSync)
Published: October 24, 2024

CVE-2024-10295

7.5
    Gateway
Published: October 24, 2024

CVE-2024-48139

7.5
    Blackbox AI
Published: October 24, 2024

CVE-2024-48140

7.5
    Butterfly Effect Limited Monica Your AI Copilot powered by ChatGPT4
Published: October 24, 2024

CVE-2024-48141

7.5
    Zhipu AI CodeGeeX
Published: October 24, 2024

CVE-2024-48142

7.5
    Monica ChatGPT AI Assistant
Published: October 24, 2024

CVE-2024-48931

7.5
    Zimaspace
  • Zimaos
Published: October 24, 2024

CVE-2024-49357

7.5
    Zimaspace
  • Zimaos
Published: October 24, 2024

CVE-2024-49359

7.5
    Zimaspace
  • Zimaos
Published: October 24, 2024

CVE-2024-10335

7.3
    Sadat
  • Garbage Collection Management System
Published: October 24, 2024

CVE-2024-10336

7.3
    Clothes Recommendation System Project
  • Clothes Recommendation System
Published: October 24, 2024

CVE-2024-48454

7.2
    SourceCodester Purchase Order Management System
Published: October 24, 2024

CVE-2024-44141

6.6
    macOS Sonoma
Published: October 24, 2024

CVE-2024-6826

6.5
    GitLab CE/EE
Published: October 24, 2024

CVE-2024-9650

6.5
    WP Recipe Maker plugin for WordPress
Published: October 24, 2024

CVE-2024-49703

6.5
    Event Manager for WooCommerce
Published: October 24, 2024

CVE-2024-49693

6.5
    Kraftplugins
  • Mega Elements
Published: October 24, 2024

CVE-2024-48442

6.5
    Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18
Published: October 24, 2024

CVE-2024-45259

6.5
    GL-iNet devices
Published: October 24, 2024

CVE-2024-10176

6.4
    Compact WP Audio Player plugin for WordPress
Published: October 24, 2024

CVE-2024-8959

6.4
    WP Adminify Custom WordPress Dashboard, Login and Admin Customizer plugin
Published: October 24, 2024

CVE-2024-10180

6.4
    Contact Form 7 - Repeatable Fields plugin for WordPress
Published: October 24, 2024

CVE-2024-9943

6.3
    MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress
Published: October 24, 2024

CVE-2024-10331

6.3
    Phpgurukul
  • Vehicle Record System
Published: October 24, 2024

CVE-2024-10349

6.3
    Mayurik
  • Best House Rental Management System
Published: October 24, 2024

CVE-2024-48540

6.2
    XIAO HE Smart
Published: October 24, 2024

CVE-2024-48426

6.2
    Assimp library
Published: October 24, 2024

CVE-2024-9374

6.1
    WordPress Terms descriptions plugin
Published: October 24, 2024

CVE-2024-9864

6.1
    EventPrime - Events Calendar, Bookings and Tickets plugin for WordPress
Published: October 24, 2024

CVE-2024-9865

6.1
    EventPrime - Events Calendar, Bookings and Tickets plugin for WordPress
Published: October 24, 2024

CVE-2024-8717

6.1
    PDF Flipbook plugin for WordPress
Published: October 24, 2024

CVE-2024-9214

6.1
    Extra Product Options Builder for WooCommerce plugin for WordPress
Published: October 24, 2024

CVE-2024-10332

6.1
    Janto
Published: October 24, 2024

CVE-2024-46995

6.1
    Basercms
  • Basercms
Published: October 24, 2024

CVE-2024-38314

5.9
    IBM Maximo Application Suite - Monitor Component
Published: October 24, 2024

CVE-2024-47882

5.9
    Openrefine
  • Openrefine
Published: October 24, 2024

CVE-2024-40810

5.5
    Apple
  • Macos
Published: October 24, 2024

CVE-2024-44185

5.5
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 24, 2024

CVE-2024-44205

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
Published: October 24, 2024

CVE-2024-47173

5.5
    Aimeos e-commerce framework
Published: October 24, 2024

CVE-2024-48424

5.5
    Assimp library
Published: October 24, 2024

CVE-2024-48425

5.5
    Assimp library
Published: October 24, 2024

CVE-2024-49750

5.5
    Snowflake
  • Snowflake Connector
Published: October 24, 2024

CVE-2024-49695

5.4
    Spiffyplugins
  • Wp Flow Plus
Published: October 24, 2024

CVE-2024-49702

5.4
    Mycred
  • Mycred Elementor
Published: October 24, 2024

CVE-2024-46994

5.4
    Basercms
  • Basercms
Published: October 24, 2024

CVE-2024-46996

5.4
    Basercms
  • Basercms
Published: October 24, 2024

CVE-2024-46998

5.4
    Basercms
  • Basercms
Published: October 24, 2024

CVE-2024-40595

5.3
    One Identity Safeguard for Privileged Sessions (SPS) On Premise
Published: October 24, 2024

CVE-2024-49683

5.3
    Schema & Structured Data for WP & AMP
Published: October 24, 2024

CVE-2024-48932

5.3
    Zimaspace
  • Zimaos
Published: October 24, 2024

CVE-2024-49358

5.3
    Zimaspace
  • Zimaos
Published: October 24, 2024

CVE-2024-49760

5.3
    Openrefine
  • Openrefine
Published: October 24, 2024

CVE-2024-49696

4.8
    Robosoft
  • Robo Gallery
Published: October 24, 2024

CVE-2024-49682

4.7
    Simple Membership
Published: October 24, 2024

CVE-2024-10337

4.7
    Clothes Recommendation System Project
  • Clothes Recommendation System
Published: October 24, 2024

CVE-2024-10338

4.7
    Clothes Recommendation System Project
  • Clothes Recommendation System
Published: October 24, 2024

CVE-2024-10350

4.7
    Fabianros
  • Hospital Management System
Published: October 24, 2024

CVE-2024-49762

4.6
    Pterodactyl
Published: October 24, 2024

CVE-2024-8667

4.3
    WordPress & WooCommerce plugin - HurryTimer
Published: October 24, 2024

CVE-2024-9531

4.3
    MultiVendorX - The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress
Published: October 24, 2024

CVE-2024-10050

4.3
    Elementor Header & Footer Builder plugin for WordPress
Published: October 24, 2024

CVE-2024-10348

3.5
    Mayurik
  • Best House Rental Management System
Published: October 24, 2024

CVE-2024-45031

None
    Syncope
Published: October 24, 2024

CVE-2024-9692

None
    VIMESA VHF/FM Transmitter Blue Plus
Published: October 24, 2024
Click here to see more Vulnerabilities