Tag: 2024-11-08

5 Attack Reports | 126 Vulnerabilities

Attack reports

New Campaign Uses Remcos RAT to Exploit Victims

A phishing campaign utilizing Remcos RAT has been detected. The attack begins with an email containing a malicious Excel document that exploits CVE-2017-0199. When opened, it downloads and executes an HTA file, which in turn downloads and runs a malicious EXE. This EXE uses PowerShell to load and e…
rat
phishing
powershell
remcos
CVE-2017-0199
process hollowing
2024-11-08
Published: November 8, 2024
Downloadable IOCs: 2

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

The AndroxGh0st malware has expanded its capabilities by incorporating the Mozi botnet to target IoT devices and cloud services. This Python-based tool, known for attacking Laravel applications, now exploits a wider range of vulnerabilities in internet-facing applications. The malware uses remote c…
iot
botnet
wordpress
CVE-2024-4577
CVE-2018-10562
CVE-2018-10561
androxgh0st
remote code execution
cloud services
credential stealing
CVE-2022-1040
2024-11-08
mozi
laravel
CVE-2022-21587
CVE-2024-36401
CVE-2021-41277
CVE-2023-1389
CVE-2021-26086
CVE-2014-2120
Published: November 8, 2024
Downloadable IOCs: 1

CVE-2024-38213: From Crumbs to Full Compromise in a Stealthy Cyber Attack

A targeted email campaign exploiting CVE-2024-38213 has been uncovered, disguised as communication related to the Gas Infrastructure Europe Annual Conference in Munich. The attack bypasses standard security protocols to deploy LummaStealer malware, stealing sensitive data. The vulnerability, known …
xworm
phishing
asyncrat
venomrat
formbook
CVE-2024-38213
2024-11-08
copy2pwn
darkgate rat
lummastealer
Published: November 8, 2024
Downloadable IOCs: 0

QSC: new modular framework in CloudComputating campaigns

Kaspersky researchers discovered QSC, a multi-plugin malware framework used by the CloudComputating group in cyber espionage campaigns. QSC consists of a Loader, Core module, Network module, File Manager module, and Command Shell module, allowing attackers to load specific plugins on demand. The fr…
lateral movement
2024-11-08
quarian backdoor
qsc framework
goclient backdoor
Published: November 8, 2024
Downloadable IOCs: 0

BlueNoroff used macOS malware with novel persistence

SentinelLabs researchers identified a North Korea-linked threat actor targeting crypto businesses with new macOS malware as part of a campaign called 'Hidden Risk'. The attackers, linked to BlueNoroff, used fake cryptocurrency news emails and a malicious app disguised as a PDF to deliver multi-stag…
apt
phishing
north korea
cryptocurrency
persistence
macos
2024-11-08
lessonone
growth
Published: November 8, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2020-8007

9.8
    Circontrol Raption EV Charger
Published: November 8, 2024

CVE-2023-27195

9.8
    Trimble TM4Web
Published: November 8, 2024

CVE-2024-50588

9.8
    Elefant Firebird database
Published: November 8, 2024

CVE-2024-51211

9.8
    OS4ED openSIS-Classic
Published: November 8, 2024

CVE-2024-48073

9.8
    sunniwell HT3300
Published: November 8, 2024

CVE-2024-35426

9.8
    UNKNOWN
Published: November 8, 2024

CVE-2024-7982

9.6
    Events Calendar WordPress plugin
Published: November 8, 2024

CVE-2024-50966

9.3
    dingfanzu CMS
Published: November 8, 2024

CVE-2024-45765

9.1
    Dell
  • Enterprise Sonic Distribution
Published: November 8, 2024

CVE-2024-45763

9.1
    Dell
  • Enterprise Sonic Distribution
Published: November 8, 2024

CVE-2024-50811

9.1
    hopetree izone lts
Published: November 8, 2024

CVE-2024-45764

9.0
    Dell
  • Enterprise Sonic Distribution
Published: November 8, 2024

CVE-2024-24409

8.8
    Zohocorp
  • Manageengine Admanager Plus
Published: November 8, 2024

CVE-2024-50634

8.8
    Sbond
  • Watcharr
Published: November 8, 2024

CVE-2024-50809

8.8
    SDCMS
Published: November 8, 2024

CVE-2024-51998

8.6
    changedetection.io
Published: November 8, 2024

CVE-2024-52007

8.6
    HAPI FHIR
Published: November 8, 2024

CVE-2024-10839

8.5
    Zohocorp
  • Manageengine Sharepoint Manager Plus
Published: November 8, 2024

CVE-2024-27528

8.4
    wasm3
Published: November 8, 2024

CVE-2024-27529

8.4
    wasm3
Published: November 8, 2024

CVE-2024-51997

8.1
    Trustee
Published: November 8, 2024

CVE-2024-52000

8.1
    Combodo iTop
Published: November 8, 2024

CVE-2024-8424

7.8
    WatchGuard EPDR
    Panda AD360
    Panda Dome
Published: November 8, 2024

CVE-2024-50180

7.8
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50203

7.8
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50209

7.8
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50590

7.8
    Elefant
Published: November 8, 2024

CVE-2024-50591

7.8
    Elefant Software Updater
Published: November 8, 2024

CVE-2024-50593

7.8
    Elefant Service tool
Published: November 8, 2024

CVE-2024-25431

7.8
    Bytecodealliance
  • Webassembly Micro Runtime
Published: November 8, 2024

CVE-2024-35423

7.8
    UNKNOWN
Published: November 8, 2024

CVE-2024-52002

7.6
    Combodo iTop
Published: November 8, 2024

CVE-2024-47072

7.5
    XStream
Published: November 8, 2024

CVE-2024-21538

7.5
    cross-spawn
Published: November 8, 2024

CVE-2024-50589

7.5
    UNKNOWN
Published: November 8, 2024

CVE-2024-27527

7.5
    wasm3
Published: November 8, 2024

CVE-2024-27532

7.5
    wasm-micro-runtime
Published: November 8, 2024

CVE-2024-10988

7.3
    Anisha
  • E-Health Care System
Published: November 8, 2024

CVE-2024-10991

7.3
    Codezips
  • Hospital Appointment System
Published: November 8, 2024

CVE-2024-10995

7.3
    Codezips
  • Hospital Appointment System
Published: November 8, 2024

CVE-2024-10996

7.3
    Bookstore Management System Project
  • Bookstore Management System
Published: November 8, 2024

CVE-2024-10998

7.3
    Bookstore Management System Project
  • Bookstore Management System
Published: November 8, 2024

CVE-2024-51152

7.2
    Alexstack
  • Laravel Cms
Published: November 8, 2024

CVE-2024-50193

7.1
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50592

7.0
    Elefant Update Service
Published: November 8, 2024

CVE-2024-45759

6.8
    Dell
  • Data Domain Operating System
Published: November 8, 2024

CVE-2024-40239

6.8
    Hitbytes
  • Life
Published: November 8, 2024

CVE-2024-40240

6.8
    Homeserve
  • Homeserve
Published: November 8, 2024

CVE-2024-48010

6.5
    Dell
  • Data Domain Operating System
Published: November 8, 2024

CVE-2024-46947

6.5
    Northern.tech Mender
Published: November 8, 2024

CVE-2024-51030

6.5
    Oretnom23
  • Cab Management System
Published: November 8, 2024

CVE-2024-44765

6.5
    MGT-COMMERCE GmbH
Published: November 8, 2024

CVE-2024-51055

6.5
    Hoosk
Published: November 8, 2024

CVE-2024-10621

6.4
    Simple Shortcode for Google Maps plugin for WordPress
Published: November 8, 2024

CVE-2024-10269

6.4
    Benjaminzekavica
  • Easy Svg Support
Published: November 8, 2024

CVE-2024-10187

6.4
    Mycred
  • Mycred
Published: November 8, 2024

CVE-2024-10325

6.4
    Brainstormforce
  • Elementor Header \& Footer Builder
Published: November 8, 2024

CVE-2024-10987

6.3
    Anisha
  • E-Health Care System
Published: November 8, 2024

CVE-2024-10989

6.3
    Anisha
  • E-Health Care System
Published: November 8, 2024

CVE-2024-10990

6.3
    Oretnom23
  • Online Veterinary Appointment System
Published: November 8, 2024

CVE-2024-10993

6.3
    Codezips
  • Online Institute Management System
Published: November 8, 2024

CVE-2024-10994

6.3
    Codezips
  • Online Institute Management System
Published: November 8, 2024

CVE-2024-10997

6.3
    Bookstore Management System Project
  • Bookstore Management System
Published: November 8, 2024

CVE-2024-35410

6.2
    UNKNOWN
Published: November 8, 2024

CVE-2024-35418

6.2
    UNKNOWN
Published: November 8, 2024

CVE-2024-35420

6.2
    UNKNOWN
Published: November 8, 2024

CVE-2024-9841

6.1
    Microfocus
  • Arcsight Management Center
  • Arcsight Platform
Published: November 8, 2024

CVE-2024-50173

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50175

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50176

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50178

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50179

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50181

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50182

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50187

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50188

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50189

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50194

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50195

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50196

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50197

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50198

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50201

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50202

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50204

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50205

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50206

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50207

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50208

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50210

5.5
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-35419

5.5
    wac
Published: November 8, 2024

CVE-2024-35421

5.5
    UNKNOWN
Published: November 8, 2024

CVE-2024-35424

5.5
    UNKNOWN
Published: November 8, 2024

CVE-2024-35427

5.5
    UNKNOWN
Published: November 8, 2024

CVE-2024-51987

5.4
    Duende.AccessTokenManagement.OpenIdConnect
Published: November 8, 2024

CVE-2024-51031

5.4
    Oretnom23
  • Cab Management System
Published: November 8, 2024

CVE-2024-51032

5.4
    Oretnom23
  • Toll Tax Management System
Published: November 8, 2024

CVE-2024-50810

5.4
    hopetree izone lts
Published: November 8, 2024

CVE-2024-50378

4.9
    Apache Airflow
Published: November 8, 2024

CVE-2024-50174

4.7
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-50192

4.7
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-10999

4.7
    Surajkumarvishwakarma
  • Real Estate Management System
Published: November 8, 2024

CVE-2024-11000

4.7
    Surajkumarvishwakarma
  • Real Estate Management System
Published: November 8, 2024

CVE-2024-51157

4.7
    07FLYCMS
Published: November 8, 2024

CVE-2024-46948

4.3
    Northern.Tech
  • Mender
Published: November 8, 2024

CVE-2024-21994

4.3
    StorageGRID
Published: November 8, 2024

CVE-2024-52001

4.3
    Combodo iTop
Published: November 8, 2024

CVE-2024-11026

3.7
    Free-Now
  • Freenow
    Google
Published: November 8, 2024

CVE-2024-50211

3.3
    Linux
  • Linux Kernel
Published: November 8, 2024

CVE-2024-48011

3.1
    Dell
  • Data Domain Operating System
Published: November 8, 2024

CVE-2024-47190

2.7
    Northern.tech Hosted Mender
Published: November 8, 2024

CVE-2024-50177

None
    Linux kernel
Published: November 8, 2024

CVE-2024-50183

None
    Linux kernel
Published: November 8, 2024

CVE-2024-50184

None
    Linux kernel
Published: November 8, 2024

CVE-2024-50185

None
    Linux Kernel
Published: November 8, 2024

CVE-2024-50186

None
    Linux kernel
Published: November 8, 2024

CVE-2024-50190

None
    Linux kernel
Published: November 8, 2024

CVE-2024-50191

None
    Linux kernel
Published: November 8, 2024

CVE-2024-50199

None
    Linux kernel
Published: November 8, 2024

CVE-2024-50200

None
    Linux kernel
Published: November 8, 2024

CVE-2024-50808

None
    SeaCMS
Published: November 8, 2024

CVE-2024-27530

None
    wasm3
Published: November 8, 2024

CVE-2024-35422

None
    UNKNOWN
Published: November 8, 2024

CVE-2024-35425

None
    UNKNOWN
Published: November 8, 2024

CVE-2024-52004

None
    MediaCMS
Published: November 8, 2024

CVE-2024-52009

None
    Atlantis
Published: November 8, 2024
Click here to see more Vulnerabilities