Tag: 2024-11-07

5 Attack Reports | 111 Vulnerabilities

Attack reports

WINELOADER Analysis

APT29, also known as Cozy Bear, has targeted European diplomats using a sophisticated multi-stage attack chain involving a new modular backdoor called WINELOADER. The attack begins with a fake PDF invitation to a wine-tasting event, which leads to the download of a malicious HTA file. This file the…
backdoor
wineloader
evasion
modular
diplomats
dll side-loading
apt29
cozy bear
2024-11-07
dll hollowing
Published: November 7, 2024
Downloadable IOCs: 0

2024 Credit Card Theft Season Arrives

As the holiday shopping season approaches, eCommerce website owners need to be vigilant against credit card stealing malware, known as 'MageCart'. Attackers focus their efforts in the last quarter to maximize profits from stolen card details. Analysis of recent malware samples reveals sophisticated…
wordpress
magento
credit card theft
2024-11-07
magecart
websocket skimmer
jquery hex skimmer
holiday shopping season
r.blob skimmer
ecommerce security
Published: November 7, 2024
Downloadable IOCs: 0

Analysis of AsyncRAT's Infection Tactics via Open Directories

This analysis explores two distinct methods used to infect systems with AsyncRAT through open directories. The first technique involves a multi-stage process using various obfuscated scripts (VBS, BAT, PowerShell) and disguised files to download and execute the AsyncRAT payload. The second method e…
obfuscation
powershell
asyncrat
remote access trojan
multi-stage infection
2024-11-07
vbs
scheduled tasks
bat
open directories
Published: November 7, 2024
Downloadable IOCs: 15

Unmasking Phishing: Strategies for identifying 0ktapus domains and beyond

This analysis examines phishing tactics used by threat actors, particularly focusing on the 0ktapus group. It outlines techniques for investigating phishing campaigns by pivoting between landing pages, using 0ktapus as a case study. The methods discussed include application fingerprinting, network …
phishing
social engineering
identity theft
2024-11-07
Published: November 7, 2024
Downloadable IOCs: 239

Unwrapping the emerging Interlock ransomware attack

A new ransomware group called Interlock has emerged, targeting various sectors with big-game hunting and double extortion attacks. The group uses a sophisticated delivery chain including a RAT disguised as a browser updater, PowerShell scripts, credential stealers, and keyloggers. They primarily mo…
rat
ransomware
azure
rdp
keylogger
double-extortion
rhysida
2024-11-07
credential-stealer
interlock
Published: November 7, 2024
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2019-20461

9.8
    Alecto IVM-100
Published: November 7, 2024

CVE-2024-50766

9.8
    SourceCodester Survey Application System
Published: November 7, 2024

CVE-2024-51504

9.1
    ZooKeeper
Published: November 7, 2024

CVE-2019-20457

9.1
    Brother MFC-J491DW
Published: November 7, 2024

CVE-2019-20458

8.8
    Epson Expression Home XP-255
Published: November 7, 2024

CVE-2020-11921

8.8
    Lush 2
Published: November 7, 2024

CVE-2019-20460

8.8
    Epson Expression Home XP-255
Published: November 7, 2024

CVE-2024-46960

8.8
    HD Video Downloader All Format
Published: November 7, 2024

CVE-2024-38286

8.6
    Apache Tomcat
Published: November 7, 2024

CVE-2019-20459

8.4
    Epson Expression Home XP255
Published: November 7, 2024

CVE-2024-45794

8.3
    devtron
Published: November 7, 2024

CVE-2024-43425

8.1
    Moodle
Published: November 7, 2024

CVE-2024-43434

8.1
    Moodle
Published: November 7, 2024

CVE-2024-46961

8.1
    Inshot com.downloader.privatebrowser (Video Downloader - XDownloader) application
Published: November 7, 2024

CVE-2024-24914

8.0
    UNKNOWN
Published: November 7, 2024

CVE-2020-11919

8.0
    Siime Eye
Published: November 7, 2024

CVE-2024-50143

7.8
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50150

7.8
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50151

7.8
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50155

7.8
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50158

7.8
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50159

7.8
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-43428

7.7
    Moodle
Published: November 7, 2024

CVE-2024-40715

7.7
    Veeam Backup & Replication Enterprise Manager
Published: November 7, 2024

CVE-2024-10975

7.7
    Nomad Community Edition
    Nomad Enterprise
Published: November 7, 2024

CVE-2023-1973

7.5
    Undertow
Published: November 7, 2024

CVE-2024-43426

7.5
    pdfTeX
Published: November 7, 2024

CVE-2024-43431

7.5
    Moodle
Published: November 7, 2024

CVE-2024-43438

7.5
    UNKNOWN
Published: November 7, 2024

CVE-2024-43440

7.5
    Moodle
Published: November 7, 2024

CVE-2024-48950

7.5
    Logpoint
Published: November 7, 2024

CVE-2024-48951

7.5
    Logpoint
Published: November 7, 2024

CVE-2024-48953

7.5
    Logpoint
Published: November 7, 2024

CVE-2020-11926

7.5
    Luvion Grand Elite 3 Connect
Published: November 7, 2024

CVE-2024-51428

7.5
    Espressif Esp idf
Published: November 7, 2024

CVE-2024-36063

7.5
    Goodwy com.goodwy.dialer (Right Dialer) application
Published: November 7, 2024

CVE-2024-10963

7.4
    pam_access
Published: November 7, 2024

CVE-2024-10967

7.3
    Anisha
  • E-Health Care System
Published: November 7, 2024

CVE-2024-10968

7.3
    1000 Projects Bookstore Management System
Published: November 7, 2024

CVE-2024-10969

7.3
    1000 Projects Bookstore Management System
Published: November 7, 2024

CVE-2024-43436

7.2
    UNKNOWN
Published: November 7, 2024

CVE-2024-50164

7.1
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-51989

7.1
    Password Pusher
Published: November 7, 2024

CVE-2024-51994

7.1
    Combodo iTop
Published: November 7, 2024

CVE-2024-51995

7.1
    Combodo iTop
Published: November 7, 2024

CVE-2024-10203

7.0
    Zohocorp ManageEngine EndPoint Central
Published: November 7, 2024

CVE-2024-50154

7.0
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-8442

6.4
    Prime Slider – Addons For Elementor plugin for WordPress
Published: November 7, 2024

CVE-2024-48952

6.4
    Logpoint
Published: November 7, 2024

CVE-2024-48954

6.4
    Logpoint
Published: November 7, 2024

CVE-2024-10964

6.3
    Emqx
  • Neuron
Published: November 7, 2024

CVE-2020-11916

6.3
    Siime Eye
Published: November 7, 2024

CVE-2024-10966

6.3
    TOTOLINK X18
Published: November 7, 2024

CVE-2019-20472

6.2
    One2Track
Published: November 7, 2024

CVE-2024-36064

6.2
    ACR Phone application
Published: November 7, 2024

CVE-2024-10922

6.1
    Featured Posts Scroll plugin for WordPress
Published: November 7, 2024

CVE-2023-1932

6.1
    Hibernate Validator
Published: November 7, 2024

CVE-2024-50599

6.1
    Zimbra Collaboration Suite
Published: November 7, 2024

CVE-2024-51434

6.1
    Froala WYSIWYG editor
Published: November 7, 2024

CVE-2024-50139

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50140

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50141

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50142

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50144

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50145

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50146

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50147

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50148

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50149

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50152

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50153

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50156

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50157

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50160

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50161

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50162

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50163

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50165

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50166

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50167

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50168

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50169

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50170

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50171

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-50172

5.5
    Linux
  • Linux Kernel
Published: November 7, 2024

CVE-2024-30140

5.4
    HCL BigFix Compliance
Published: November 7, 2024

CVE-2020-11918

5.4
    Siime Eye
Published: November 7, 2024

CVE-2024-49523

5.4
    Adobe
  • Experience Manager
Published: November 7, 2024

CVE-2024-49524

5.4
    Adobe
  • Experience Manager
Published: November 7, 2024

CVE-2024-10027

4.8
    WP Booking Calendar WordPress plugin
Published: November 7, 2024

CVE-2024-8378

4.8
    Safe SVG WordPress plugin
Published: November 7, 2024

CVE-2024-10946

4.7
    Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System
Published: November 7, 2024

CVE-2024-10947

4.7
    Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System
Published: November 7, 2024

CVE-2024-30141

4.7
    HCL BigFix Compliance
Published: November 7, 2024

CVE-2019-20469

4.6
    One2Track
Published: November 7, 2024

CVE-2024-9926

4.3
    Jetpack WordPress plugin
Published: November 7, 2024

CVE-2024-10965

4.3
    Emqx
  • Neuron
Published: November 7, 2024

CVE-2020-11917

4.3
    Siime Eye
Published: November 7, 2024

CVE-2024-48290

4.3
    Realtek RTL8762E BLE SDK
Published: November 7, 2024

CVE-2024-30142

3.8
    HCL BigFix Compliance
Published: November 7, 2024

CVE-2024-51993

3.4
    Combodo iTop
Published: November 7, 2024

CVE-2024-51990

None
    jj (Jujutsu VCS)
Published: November 7, 2024

CVE-2024-10526

None
    Velociraptor MSI Installer
Published: November 7, 2024

CVE-2024-10668

None
    Google Quickshare
Published: November 7, 2024

CVE-2024-47073

None
    DataEase
Published: November 7, 2024

CVE-2024-51758

None
    Filament
Published: November 7, 2024

CVE-2019-20462

None
    Alecto IVM-100
Published: November 7, 2024

CVE-2024-10007

None
    GitHub Enterprise Server
Published: November 7, 2024

CVE-2024-10824

None
    GitHub Enterprise Server
Published: November 7, 2024

CVE-2024-36062

None
    Unknown
Published: November 7, 2024

CVE-2024-8810

None
    GitHub Enterprise Server
Published: November 7, 2024
Click here to see more Vulnerabilities