Tag: 2024-10-28

4 Attack Reports | 196 Vulnerabilities

Attack reports

Evasive Panda scouting cloud services

CloudScout is a post-compromise toolset used by Evasive Panda to target a Taiwanese government entity and religious organization between 2022 and 2023. The toolset can retrieve data from various cloud services using stolen web session cookies. It works with MgBot, Evasive Panda's malware framework,…
apt
china
cyberespionage
taiwan
mgbot
cloud services
2024-10-28
nightdoor
cookie theft
cloudscout
Published: October 28, 2024
Downloadable IOCs: 17

Hybrid Russian Espionage and Influence Campaign Aims to Compromise Ukrainian Military Recruits and Deliver Anti-Mobilization Narratives

A Russian hybrid espionage and influence operation, dubbed UNC5812, targets potential Ukrainian military recruits through a Telegram persona called 'Civil Defense'. The campaign delivers Windows and Android malware, including SUNSPINNER, PURESTEALER, and CRAXSRAT, while simultaneously spreading ant…
espionage
ukraine
influence
telegram
russian
recruitment
2024-10-28
military
pronsis loader
sunspinner
craxsrat
purestealer
Published: October 28, 2024
Linked vulnerabilities : CVE-2024-47575 (CVSS 9.8)
Downloadable IOCs: 3

Chinese Hackers Toolkit Uncovered And Activity History Uncovered

A Chinese hacking group called 'You Dun' was discovered through an exposed open directory, revealing their comprehensive attack infrastructure. The group utilized sophisticated reconnaissance tools and exploited Zhiyuan OA software via SQL injection attacks, targeting South Korean pharmaceutical or…
sql injection
ransomware
cobalt strike
privilege escalation
lockbit 3.0
2024-10-28
c2 infrastructure
CVE-2021-25003
chinese hackers
viper framework
reconnaissance tools
Published: October 28, 2024
Linked vulnerabilities : CVE-2021-25003
Downloadable IOCs: 7

Inside the Open Directory of the “You Dun” Threat Group

An open directory exposed a Chinese-speaking threat actor's toolkit and operational history. The actor conducted extensive scanning and exploitation targeting organizations in South Korea, China, Thailand, Taiwan, and Iran using tools like WebLogicScan, Vulmap, and Xray. The Viper C2 framework and …
ransomware
lockbit
cobalt strike
2024-10-28
weblogic exploitation
viper c2
chinese threat actor
Published: October 28, 2024
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-50498

10.0
    Lubus
  • Wp Query Console
Published: October 28, 2024

CVE-2024-50495

10.0
    Widgilabs
  • Plugin Propagator
Published: October 28, 2024

CVE-2024-50496

10.0
    Webandprint
  • Ar
Published: October 28, 2024

CVE-2024-10440

9.8
    Sun.Net
  • Ehdr Ctms
Published: October 28, 2024

CVE-2024-50477

9.8
    Stacksmarket
  • Stacks Mobile App Builder
Published: October 28, 2024

CVE-2024-50486

9.8
    Acnoo
  • Flutter Api
Published: October 28, 2024

CVE-2024-50487

9.8
    Maantheme
  • Maanstore Api
Published: October 28, 2024

CVE-2024-50489

9.8
    Realtyworkstation
  • Realty Workstation
Published: October 28, 2024

CVE-2024-50478

9.8
    Swoopnow
  • 1-Click Login\
Published: October 28, 2024

CVE-2024-50483

9.8
    Tareqhasan
  • Meetup
Published: October 28, 2024

CVE-2024-39205

9.8
    pyload-ng
Published: October 28, 2024

CVE-2024-48357

9.8
    LyLme Spage
Published: October 28, 2024

CVE-2024-48465

9.8
    MRBS
Published: October 28, 2024

CVE-2024-48356

9.8
    LyLme Spage
Published: October 28, 2024

CVE-2024-40867

9.6
    Apple
  • Ipados
  • Iphone Os
Published: October 28, 2024

CVE-2024-50479

9.3
    Mansurahamed
  • Woocommerce Quote Calculator
Published: October 28, 2024

CVE-2024-50491

9.3
    Micahblu
  • Rsvp Me
Published: October 28, 2024

CVE-2024-44256

9.3
    macOS Ventura
    macOS Sonoma
Published: October 28, 2024

CVE-2024-38821

9.1
    Spring Framework
Published: October 28, 2024

CVE-2024-44217

9.1
    iOS
    iPadOS
Published: October 28, 2024

CVE-2024-50623

8.8
    Cleo Harmony
    VLTrader
    LexiCom
Published: October 28, 2024

CVE-2024-10434

8.8
    Tenda
  • Ac1206 Firmware
  • Ac1206
Published: October 28, 2024

CVE-2024-50408

8.8
    Kibokolabs
  • Namaste\! Lms
Published: October 28, 2024

CVE-2024-50416

8.8
    Wpclever
  • Wpc Shop As A Customer For Woocommerce
Published: October 28, 2024

CVE-2024-50488

8.8
    Priyabratasarkar
  • Token Login
Published: October 28, 2024

CVE-2024-42028

8.8
    UniFi Network Server
Published: October 28, 2024

CVE-2024-44122

8.8
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44259

8.8
    visionOS
    iOS
    iPadOS
Published: October 28, 2024

CVE-2024-48177

8.8
    MRCMS
Published: October 28, 2024

CVE-2024-48594

8.8
    Prison Management System
Published: October 28, 2024

CVE-2024-44270

8.6
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-50492

8.3
    Scottpaterson
  • Scottcart
Published: October 28, 2024

CVE-2024-50497

8.1
    Buynowdepot
  • Advanced Online Ordering And Delivery Platform
Published: October 28, 2024

CVE-2024-48178

8.1
    newbee-mall
Published: October 28, 2024

CVE-2024-48074

8.0
    DrayTek Vigor2960 router
Published: October 28, 2024

CVE-2024-48825

8.0
    Tenda AC7
Published: October 28, 2024

CVE-2024-48826

8.0
    Tenda AC7
Published: October 28, 2024

CVE-2024-50067

7.8
    Linux
  • Linux Kernel
Published: October 28, 2024

CVE-2024-44126

7.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
Published: October 28, 2024

CVE-2024-44218

7.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
Published: October 28, 2024

CVE-2024-44255

7.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-44285

7.8
    Apple
  • Ipados
  • Iphone Os
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-44277

7.7
    iOS
    iPadOS
    visionOS
    tvOS
Published: October 28, 2024

CVE-2024-44280

7.7
    macOS
Published: October 28, 2024

CVE-2024-44295

7.7
    macOS Ventura
    macOS Sonoma
Published: October 28, 2024

CVE-2024-10438

7.5
    Sun.Net
  • Ehdr Ctms
Published: October 28, 2024

CVE-2024-50574

7.5
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-10455

7.5
    UNKNOWN
Published: October 28, 2024

CVE-2024-45802

7.5
    Squid-Cache
  • Squid
Published: October 28, 2024

CVE-2024-49761

7.5
    Ruby-Lang
  • Rexml
Published: October 28, 2024

CVE-2024-48196

7.5
    eyouCMS
Published: October 28, 2024

CVE-2024-50434

7.5
    NewsCard
Published: October 28, 2024

CVE-2024-50435

7.5
    Meta News
Published: October 28, 2024

CVE-2024-50436

7.5
    Theme Horse Clean Retina
Published: October 28, 2024

CVE-2024-50453

7.5
    The Pack Elementor addons
Published: October 28, 2024

CVE-2024-50457

7.5
    Qode Essential Addons
Published: October 28, 2024

CVE-2024-42011

7.5
    Spotify app for iOS
Published: October 28, 2024

CVE-2024-44203

7.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44208

7.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44228

7.5
    Apple
  • Xcode
Published: October 28, 2024

CVE-2024-44289

7.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-6245

7.4
    Maruti Suzuki SmartPlay
Published: October 28, 2024

CVE-2024-10432

7.3
    Projectworlds
  • Simple Web-Based Chat Application
Published: October 28, 2024

CVE-2024-50450

7.3
    Pluginus
  • Wordpress Meta Data And Taxonomies Filter
Published: October 28, 2024

CVE-2024-10449

7.3
    Codezips
  • Hospital Appointment System
Published: October 28, 2024

CVE-2024-9162

7.2
    All-in-One WP Migration and Backup plugin for WordPress
Published: October 28, 2024

CVE-2024-50442

7.2
    Royal-Elementor-Addons
  • Royal Elementor Addons
Published: October 28, 2024

CVE-2024-44156

7.1
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44159

7.1
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44252

7.1
    Apple
  • Ipados
  • Iphone Os
  • Tvos
  • Visionos
Published: October 28, 2024

CVE-2024-44258

7.1
    Apple
  • Ipados
  • Iphone Os
  • Tvos
  • Visionos
Published: October 28, 2024

CVE-2024-44260

6.7
    macOS Ventura
    macOS Sonoma
Published: October 28, 2024

CVE-2024-50465

6.5
    Squirrly
  • Premium Seo Pack
Published: October 28, 2024

CVE-2024-10448

6.5
    Fabianros
  • Blood Bank Management System
Published: October 28, 2024

CVE-2024-50443

6.5
    Post Grid Team by WPXPO PostX
Published: October 28, 2024

CVE-2024-10469

6.5
    Cert
  • Vince
Published: October 28, 2024

CVE-2024-50462

6.5
    Interactive World Map
Published: October 28, 2024

CVE-2024-50464

6.5
    Kodex Posts likes
Published: October 28, 2024

CVE-2024-50467

6.5
    Scrollbar by webxapp
Published: October 28, 2024

CVE-2024-50468

6.5
    Raptor Editor
Published: October 28, 2024

CVE-2024-50469

6.5
    Team Bright Vessel Textboxes
Published: October 28, 2024

CVE-2024-50429

6.5
    WPBlockArt Magazine Blocks
Published: October 28, 2024

CVE-2024-50432

6.5
    PickPlugins Post Grid
Published: October 28, 2024

CVE-2024-50433

6.5
    Sky Addons for Elementor
Published: October 28, 2024

CVE-2024-50437

6.5
    GeoDirectory
Published: October 28, 2024

CVE-2024-44155

6.5
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Watchos
Published: October 28, 2024

CVE-2024-44279

6.5
    macOS
Published: October 28, 2024

CVE-2024-44294

6.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44297

6.5
    Apple
  • Ipad Os
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-48107

6.5
    SparkShop
Published: October 28, 2024

CVE-2024-44237

6.5
    macOS
Published: October 28, 2024

CVE-2024-44240

6.5
    macOS Ventura
    macOS Sonoma
    watchOS
    visionOS
    tvOS
    iOS
    iPadOS
Published: October 28, 2024

CVE-2024-44283

6.5
    macOS Ventura
    macOS Sonoma
Published: October 28, 2024

CVE-2024-10435

6.3
    didi Super-Jacoco
Published: October 28, 2024

CVE-2024-10446

6.3
    Projectworlds
  • Online Time Table Generator
Published: October 28, 2024

CVE-2024-10447

6.3
    Projectworlds
  • Online Time Table Generator
Published: October 28, 2024

CVE-2024-48191

6.3
    dingfanzu CMS
Published: October 28, 2024

CVE-2024-10450

6.3
    Mayurik
  • Advocate Office Management System
Published: October 28, 2024

CVE-2024-48291

6.3
    dingfanzu CMS
Published: October 28, 2024

CVE-2024-44261

6.2
    iOS
    iPadOS
Published: October 28, 2024

CVE-2024-44216

6.2
    macOS
Published: October 28, 2024

CVE-2024-44257

6.2
    macOS
Published: October 28, 2024

CVE-2024-50463

6.1
    Sunshinephotocart
  • Sunshine Photo Cart
Published: October 28, 2024

CVE-2024-50575

6.1
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-50579

6.1
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-50438

6.1
    Themoyles
  • Church Admin
Published: October 28, 2024

CVE-2024-50448

6.1
    Yithemes
  • Yith Woocommerce Product Add-Ons
Published: October 28, 2024

CVE-2024-42930

6.1
    PbootCMS
Published: October 28, 2024

CVE-2024-48195

6.1
    eyouCMS
Published: October 28, 2024

CVE-2024-50624

5.9
    KDE Kmail
Published: October 28, 2024

CVE-2024-50431

5.9
    Cloudways Breeze
Published: October 28, 2024

CVE-2024-44213

5.9
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44145

5.7
    iOS
    iPadOS
    macOS
Published: October 28, 2024

CVE-2024-50307

5.5
    Chatwork Desktop Application (Windows)
Published: October 28, 2024

CVE-2024-40855

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44144

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Watchos
Published: October 28, 2024

CVE-2024-44174

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44175

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44194

5.5
    Apple
  • Ipados
  • Iphone Os
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-44196

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44197

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44215

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-44236

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44239

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-44247

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44253

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44254

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Watchos
Published: October 28, 2024

CVE-2024-44262

5.5
    Apple
  • Visionos
Published: October 28, 2024

CVE-2024-44264

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44267

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44269

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-44273

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-44278

5.5
    macOS Ventura
    macOS Sonoma
    watchOS
    visionOS
    iOS
    iPadOS
Published: October 28, 2024

CVE-2024-44281

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44282

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-44284

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44287

5.5
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44301

5.5
    macOS
Published: October 28, 2024

CVE-2024-44302

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-50470

5.4
    Themes4wp
  • Youtube External Subtitles
Published: October 28, 2024

CVE-2024-50471

5.4
    Checklist
  • Trip Plan
Published: October 28, 2024

CVE-2024-50472

5.4
    Amilia
  • Store
Published: October 28, 2024

CVE-2024-50501

5.4
    Climaxthemes
  • Kata Plus
Published: October 28, 2024

CVE-2024-50502

5.4
    Cozythemes
  • Cozy Blocks
Published: October 28, 2024

CVE-2024-50573

5.4
    Jetbrains
  • Hub
Published: October 28, 2024

CVE-2024-50576

5.4
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-50577

5.4
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-50578

5.4
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-50580

5.4
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-50581

5.4
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-50582

5.4
    Jetbrains
  • Youtrack
Published: October 28, 2024

CVE-2024-50439

5.4
    Brainstormforce
  • Astra Widgets
Published: October 28, 2024

CVE-2024-50440

5.4
    Codepen
  • Codepen
Published: October 28, 2024

CVE-2024-50441

5.4
    Cozythemes
  • Cozy Blocks
Published: October 28, 2024

CVE-2024-50445

5.4
    Merkulove
  • Selection Lite
Published: October 28, 2024

CVE-2024-50446

5.4
    Futuriowp
  • Futurio Extra
Published: October 28, 2024

CVE-2024-50447

5.4
    Envothemes
  • Envo\'S Elementor Templates \& Widgets For Woocommerce
Published: October 28, 2024

CVE-2024-50449

5.4
    Redefiningtheweb
  • Pdf Generator Addon For Elementor Page Builder
Published: October 28, 2024

CVE-2024-50451

5.4
    Pluginus
  • Meta Data And Taxonomies Filter
Published: October 28, 2024

CVE-2024-50458

5.4
    Wpcodeus
  • Advanced Sermons
Published: October 28, 2024

CVE-2024-50461

5.4
    Wpdeveloper
  • Embedpress
Published: October 28, 2024

CVE-2024-9629

5.4
    Contact Form 7 + Telegram plugin for WordPress
Published: October 28, 2024

CVE-2024-9825

5.4
    Chef Habitat builder-api
Published: October 28, 2024

CVE-2024-44296

5.4
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-10439

5.3
    Sun.Net
  • Ehdr Ctms
Published: October 28, 2024

CVE-2024-49771

5.3
    MPXJ
Published: October 28, 2024

CVE-2024-44229

5.3
    Apple
  • Ipados
  • Iphone Os
  • Visionos
Published: October 28, 2024

CVE-2024-48936

5.0
    Slurm
Published: October 28, 2024

CVE-2024-34537

4.9
    TYPO3
Published: October 28, 2024

CVE-2024-47827

4.8
    Argo Workflows Project
  • Argo Workflows
Published: October 28, 2024

CVE-2024-50460

4.8
    Firelightwp
  • Firelight Lightbox
Published: October 28, 2024

CVE-2024-51506

4.8
    Tiki
Published: October 28, 2024

CVE-2024-51507

4.8
    Tiki Wiki CMS Groupware
Published: October 28, 2024

CVE-2024-51508

4.8
    Tiki
Published: October 28, 2024

CVE-2024-51509

4.8
    Tiki
Published: October 28, 2024

CVE-2024-44137

4.6
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44235

4.6
    Apple
  • Ipados
  • Iphone Os
Published: October 28, 2024

CVE-2024-44274

4.6
    Apple
  • Ipados
  • Iphone Os
  • Watchos
Published: October 28, 2024

CVE-2024-44244

4.3
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Safari
  • Tvos
  • Visionos
  • Watchos
Published: October 28, 2024

CVE-2024-30106

4.3
    Hcltech
  • Connections
Published: October 28, 2024

CVE-2024-44263

4.0
    iOS
    iPadOS
Published: October 28, 2024

CVE-2024-10433

3.5
    Projectworlds
  • Simple Web-Based Chat Application
Published: October 28, 2024

CVE-2024-10214

3.5
    Mattermost
  • Mattermost
Published: October 28, 2024

CVE-2024-8013

3.3
    Mongodb
  • Mongo Crypt V1.So
  • Mongocryptd
Published: October 28, 2024

CVE-2024-27849

3.3
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-40792

3.3
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-40853

3.3
    Apple
  • Ipados
  • Iphone Os
Published: October 28, 2024

CVE-2024-44222

3.3
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44275

3.3
    macOS
Published: October 28, 2024

CVE-2024-49755

3.1
    Duende IdentityServer
Published: October 28, 2024

CVE-2024-40851

2.4
    Apple
  • Ipados
  • Iphone Os
Published: October 28, 2024

CVE-2024-44251

2.4
    Apple
  • Ipados
  • Iphone Os
Published: October 28, 2024

CVE-2024-44265

2.4
    Apple
  • Macos
Published: October 28, 2024

CVE-2024-44123

2.3
    Apple
  • Ipados
  • Iphone Os
  • Macos
Published: October 28, 2024

CVE-2024-23843

2.2
    Genians Genian NAC
Published: October 28, 2024

CVE-2024-5532

None
    OpenText Operations Agent
Published: October 28, 2024
Click here to see more Vulnerabilities