Tag: 2024-10-26

3 Attack Reports | 43 Vulnerabilities

Attack reports

Docker Gatling Gun Campaign

Recent research has uncovered a new malicious campaign orchestrated by the notorious hacking group TeamTNT. This campaign exploits exposed Docker daemons to deploy Sliver malware, a cyber worm, and cryptominers, utilizing compromised servers and Docker Hub as infrastructure for spreading their mali…
campaign
sliver
malicious
cryptomining
docker
tsunami
2024-10-26
exposed-daemons
cloud-native
container-security
docker-swarm
docker-hub
2024-10-29
prochider
Published: October 29, 2024
Downloadable IOCs: 11

Unauthorized RDP Connections For Cyberespionage Operations

Cyble Research and Intelligence Labs uncovered an ongoing cyberattack campaign utilizing malicious LNK files to gain unauthorized Remote Desktop access on compromised systems. The sophisticated multi-stage attack chain employs PowerShell and BAT scripts to evade detection, create administrative acc…
powershell
persistence
credential theft
cyberespionage
rdp
multi-stage attack
uac bypass
2024-10-26
bat scripts
chromepass
Published: October 26, 2024
Downloadable IOCs: 0

Malicious RDP Files Identified in Latest Attack on Ukrainian Entities

CERT-UA has uncovered a new malicious email campaign targeting Ukrainian government agencies, enterprises, and military entities. The campaign uses RDP configuration files to establish remote connections, enabling data theft and further malware deployment. Attributed to UAC-0215 and linked to APT29…
phishing
apt28
ukraine
rdp
aws
2024-10-26
uac-0218
uac-0215
domain seizure
homesteel
cert-ua
Published: October 26, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-9930

9.8
    Extensions by HocWP Team plugin for WordPress
Published: October 26, 2024

CVE-2024-9931

9.8
    Wux Blog Editor plugin for WordPress
Published: October 26, 2024

CVE-2024-9932

9.8
    Wux Blog Editor plugin for WordPress
Published: October 26, 2024

CVE-2024-9933

9.8
    WatchTowerHQ plugin for WordPress
Published: October 26, 2024

CVE-2024-9501

9.8
    Wp Social Login and Register Social Counter plugin for WordPress
Published: October 26, 2024

CVE-2024-9890

8.8
    User Toolkit plugin for WordPress
Published: October 26, 2024

CVE-2024-9637

8.8
    School Management System - WPSchoolPress plugin for WordPress
Published: October 26, 2024

CVE-2024-0126

8.2
    NVIDIA GPU Display Driver
Published: October 26, 2024

CVE-2024-0117

7.8
    NVIDIA GPU Display Driver for Windows
Published: October 26, 2024

CVE-2024-0118

7.8
    NVIDIA GPU Display Driver for Windows
Published: October 26, 2024

CVE-2024-0119

7.8
    NVIDIA GPU Display Driver for Windows
Published: October 26, 2024

CVE-2024-0120

7.8
    NVIDIA GPU Display Driver for Windows
Published: October 26, 2024

CVE-2024-0121

7.8
    NVIDIA GPU Display Driver for Windows
Published: October 26, 2024

CVE-2024-0127

7.8
    NVIDIA vGPU software
Published: October 26, 2024

CVE-2024-10402

7.5
    Forminator Forms plugin for WordPress
Published: October 26, 2024

CVE-2020-26303

7.5
    Bevacqua
  • Insane
Published: October 26, 2024

CVE-2020-26304

7.5
    Foundation
  • Foundation
Published: October 26, 2024

CVE-2020-26305

7.5
    Talyssonoc
  • Commonregexjs
Published: October 26, 2024

CVE-2020-26311

7.5
    Useragent Project
  • Useragent
Published: October 26, 2024

CVE-2024-9772

7.3
    Uix Shortcodes – Compatible with Gutenberg plugin for WordPress
Published: October 26, 2024

CVE-2024-8392

7.2
    WordPress Post Grid Layouts with Pagination - Sogrid plugin
Published: October 26, 2024

CVE-2024-0128

7.1
    NVIDIA vGPU software
Published: October 26, 2024

CVE-2024-10091

6.4
    ElementsKit Elementor addons plugin for WordPress
Published: October 26, 2024

CVE-2024-9454

6.4
    PriPre plugin for WordPress
Published: October 26, 2024

CVE-2024-9456

6.4
    WP Awesome Login plugin for WordPress
Published: October 26, 2024

CVE-2024-9642

6.4
    Editor Custom Color Palette plugin for WordPress
Published: October 26, 2024

CVE-2024-9853

6.4
    ID-SK Toolkit plugin for WordPress
Published: October 26, 2024

CVE-2024-9967

6.4
    Jamos
  • Wp Show More
Published: October 26, 2024

CVE-2024-9116

6.4
    Monkee-Boy Essentials plugin for WordPress
Published: October 26, 2024

CVE-2024-10117

6.4
    WP Crowdfunding plugin for WordPress
Published: October 26, 2024

CVE-2024-10406

6.3
    Mayurik
  • Petrol Pump Management
Published: October 26, 2024

CVE-2024-9613

6.1
    FormFacade WordPress plugin for Google Forms
Published: October 26, 2024

CVE-2024-8870

6.1
    Forms for MailChimp by Optin Cat - Grow Your MailChimp List plugin for WordPress
Published: October 26, 2024

CVE-2024-9462

5.5
    Poll Maker - Versus Polls, Anonymous Polls, Image Polls plugin for WordPress
Published: October 26, 2024

CVE-2024-9475

4.9
    Poll Maker - Versus Polls, Anonymous Polls, Image Polls plugin for WordPress
Published: October 26, 2024

CVE-2024-9626

4.3
    Editorial Assistant by Sovrn plugin for WordPress
Published: October 26, 2024

CVE-2024-10092

4.3
    WordPress Download Monitor plugin
Published: October 26, 2024

CVE-2024-10357

4.3
    Clever Addons for Elementor plugin for WordPress
Published: October 26, 2024

CVE-2020-26306

None
    Knwl.js
Published: October 26, 2024

CVE-2020-26307

None
    HTML2Markdown
Published: October 26, 2024

CVE-2020-26308

None
    Validate.js
Published: October 26, 2024

CVE-2020-26309

None
    Validate.js
Published: October 26, 2024

CVE-2020-26310

None
    Validate.js
Published: October 26, 2024
Click here to see more Vulnerabilities