Tag: 2024-11-20

2 Attack Reports | 126 Vulnerabilities

Attack reports

Threat Assessment: Distributors of BlackSuit Ransomware

Ignoble Scorpius, previously known as Royal ransomware, has rebranded as BlackSuit ransomware and increased its activity since March 2024. The group has targeted at least 93 victims globally, with a focus on the construction and manufacturing industries. Their initial ransom demands average 1.6% of…
ransomware
extortion
cobalt strike
credential theft
gootloader
lateral movement
mimikatz
data exfiltration
blacksuit
systembc
supply chain attack
2024-11-20
nanodump
Published: November 20, 2024
Downloadable IOCs: 2

Helldown Ransomware: an overview of this emerging threat

Helldown is a new and highly active ransomware group that has claimed 31 victims in three months. It employs custom ransomware for Windows and Linux systems, engages in double extortion, and exploits vulnerabilities in Zyxel firewalls for initial access. The group exfiltrates large volumes of data,…
linux
ransomware
windows
data exfiltration
CVE-2024-42057
double extortion
2024-11-20
helldown
emerging threat
zyxel vulnerability
vmware esx
Published: November 20, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2018-9467

9.8
    Google
  • Android
Published: November 20, 2024

CVE-2024-52439

9.8
    Mark O'Donnell Team Rosters
  • Version(s): n/a, 4.6
Published: November 20, 2024

CVE-2024-52440

9.8
    Bueno Labs Pvt. Ltd. Xpresslane Fast Checkout
  • Version(s): n/a, 1.0.0
Published: November 20, 2024

CVE-2024-52441

9.8
    Quick Learn
  • Version(s): n/a, 1.0.1
Published: November 20, 2024

CVE-2024-52442

9.8
    UserPlus
  • Version(s): n/a - 2.0
Published: November 20, 2024

CVE-2024-52443

9.8
    Geolocator
  • Version(s): from n/a through 1.1
Published: November 20, 2024

CVE-2024-51162

9.8
    Audimex EE
  • Version(s): 15.1.20 and before
Published: November 20, 2024

CVE-2024-52770

9.8
    DedeBIZ
  • Version(s): 6.3.0
Published: November 20, 2024

CVE-2018-9478

9.8
    Google
  • Android
Published: November 20, 2024

CVE-2018-9479

9.8
    Google
  • Android
Published: November 20, 2024

CVE-2024-48984

9.8
    MBed OS
  • Version(s): 6.16.0
Published: November 20, 2024

CVE-2024-49203

9.8
    Querydsl
  • Version(s): 5.1.0
Published: November 20, 2024

CVE-2024-52677

9.8
    Hkcms
  • Hkcms
Published: November 20, 2024

CVE-2024-52765

9.8
    H3c
  • Gr-1800ax Firmware
  • Gr-1800ax
Published: November 20, 2024

CVE-2024-10094

9.1
    Pega Platform
  • Version(s): 6.x - 24.1.1
Published: November 20, 2024

CVE-2024-52771

9.1
    DedeBIZ
  • Version(s): 6.3.0
Published: November 20, 2024

CVE-2024-29292

9.1
    Kasda KW6512 Router Software
  • Version(s): KW6512_Linux_V1.0
Published: November 20, 2024

CVE-2024-33439

9.1
    Kasda LinkSmart Router KW5515
  • Version(s): v1.7 and before
Published: November 20, 2024

CVE-2024-44308

8.8
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
Published: November 20, 2024

CVE-2024-48895

8.8
    Rakuten Turbo 5G firmware
  • Version(s): V1.3.18 and earlier
Published: November 20, 2024

CVE-2024-52437

8.8
    Banner System
  • Version(s): n/a, 1.0.0
Published: November 20, 2024

CVE-2024-52438

8.8
    de:branding
  • Version(s): n/a, 1.0.2
Published: November 20, 2024

CVE-2024-52445

8.8
    QRMenu Restaurant QR Menu Lite
  • Version(s): n/a, 1.0.3
Published: November 20, 2024

CVE-2024-52446

8.8
    Buying Buddy IDX CRM
  • Version(s): n/a - 1.1.12
Published: November 20, 2024

CVE-2024-10913

8.8
    WordPress Clone plugin
  • Version(s): up to 2.4.6
Published: November 20, 2024

CVE-2018-9470

8.8
    Google
  • Android
Published: November 20, 2024

CVE-2018-9472

8.8
    Google
  • Android
Published: November 20, 2024

CVE-2018-9475

8.8
    Google
  • Android
Published: November 20, 2024

CVE-2024-52447

8.6
    Corporate Zen Contact Page With Google Map
  • Version(s): from n/a, 1.6.1
Published: November 20, 2024

CVE-2024-52451

8.2
    Aaron Robbins Post Ideas
  • Version(s): n/a, 2
Published: November 20, 2024

CVE-2024-10855

8.1
    Sirv
  • Sirv
Published: November 20, 2024

CVE-2024-52739

8.0
    D-LINK DI-8400
  • Version(s): 16.07.26A1
Published: November 20, 2024

CVE-2024-44306

7.8
    Apple
  • Macos
Published: November 20, 2024

CVE-2024-44307

7.8
    Apple
  • Macos
Published: November 20, 2024

CVE-2018-9469

7.8
    Google
  • Android
Published: November 20, 2024

CVE-2018-9471

7.8
    Google
  • Android
Published: November 20, 2024

CVE-2018-9474

7.8
    Google
  • Android
Published: November 20, 2024

CVE-2018-9477

7.8
    Google
  • Android
Published: November 20, 2024

CVE-2024-11494

7.5
    Zyxel
  • P6101c Firmware
  • P6101c
Published: November 20, 2024

CVE-2024-10382

7.5
    Car App Android Jetpack Library
  • Version(s): 1.7.0-beta02 and below
Published: November 20, 2024

CVE-2024-45690

7.5
    Moodle
Published: November 20, 2024

CVE-2024-52444

7.5
    Opal Woo Custom Product Variation
  • Version(s): n/a, 1.1.3
Published: November 20, 2024

CVE-2024-52448

7.5
    Ultimate Classified Listings
  • Version(s): from n/a through 1.4
Published: November 20, 2024

CVE-2024-52449

7.5
    Bootscraper
  • Version(s): n/a, 2.1.0
Published: November 20, 2024

CVE-2024-52450

7.5
    Official pro coders nBlocks
  • Version(s): n/a, 1.0.2
Published: November 20, 2024

CVE-2024-11495

7.5
    OllyDbg
  • Version(s): 1.10
Published: November 20, 2024

CVE-2024-52598

7.5
    2FAuth
  • Version(s): 5.4.1
Published: November 20, 2024

CVE-2024-51163

7.5
    Vegam Solutions Vegam 4i
  • Version(s): 6.3.47.0 and earlier
Published: November 20, 2024

CVE-2018-9484

7.5
    Google
  • Android
Published: November 20, 2024

CVE-2024-48981

7.5
    Arm
  • Mbed
Published: November 20, 2024

CVE-2024-48983

7.5
    Arm
  • Mbed
Published: November 20, 2024

CVE-2024-48985

7.5
    Arm
  • Mbed
Published: November 20, 2024

CVE-2024-48530

7.5
    eSoft Planner
  • Version(s): 3.24.08271-USA
Published: November 20, 2024

CVE-2024-48536

7.5
    eSoft Planner
  • Version(s): 3.24.08271-USA
Published: November 20, 2024

CVE-2024-48982

7.5
    Arm
  • Mbed
Published: November 20, 2024

CVE-2024-48986

7.5
    Arm
  • Mbed
Published: November 20, 2024

CVE-2024-52581

7.5
    Litestar
  • Litestar
Published: November 20, 2024

CVE-2024-10899

7.3
    Wcproducttable
  • Woocommerce Product Table
Published: November 20, 2024

CVE-2024-51208

7.2
    Phpgurukul
  • Boat Booking System
Published: November 20, 2024

CVE-2024-52769

7.2
    DedeBIZ
  • Version(s): 6.3.0
Published: November 20, 2024

CVE-2024-52470

7.1
    Brainvireinfo Dynamic URL SEO
  • Version(s): n/a, 1.0
Published: November 20, 2024

CVE-2024-52471

7.1
    Extensions for Elementor
  • Version(s): from n/a through 2.0.37
Published: November 20, 2024

CVE-2024-52472

7.1
    Weather Atlas Widget
  • Version(s): from n/a through 3.0.1
Published: November 20, 2024

CVE-2024-52473

7.1
    HTML5 Lyrics Karaoke Player
  • Version(s): n/a, 2.4
Published: November 20, 2024

CVE-2018-9468

7.1
    Google
  • Android
Published: November 20, 2024

CVE-2024-11406

6.9
    django CMS Association django CMS Attributes Fields
  • Version(s): before 4.0
Published: November 20, 2024

CVE-2024-10900

6.5
    Metagauss
  • Profilegrid
Published: November 20, 2024

CVE-2024-11179

6.5
    Inspireui
  • Mstore Api
Published: November 20, 2024

CVE-2024-45689

6.5
    Moodle
Published: November 20, 2024

CVE-2018-9480

6.5
    Google
  • Android
Published: November 20, 2024

CVE-2018-9481

6.5
    Google
  • Android
    Apache
Published: November 20, 2024

CVE-2018-9482

6.5
    Google
  • Android
Published: November 20, 2024

CVE-2018-9483

6.5
    Google
  • Android
Published: November 20, 2024

CVE-2018-9485

6.5
    Google
  • Android
Published: November 20, 2024

CVE-2018-9486

6.5
    Google
  • Android
Published: November 20, 2024

CVE-2024-10891

6.4
    WordPress Save as PDF Plugin by Pdfcrowd
  • Version(s): up to 4.2.1
Published: November 20, 2024

CVE-2024-10872

6.4
    Motopress
  • Getwid
Published: November 20, 2024

CVE-2024-11484

6.3
    Code4berry
  • Decoration Management System
Published: November 20, 2024

CVE-2024-11485

6.3
    Code4berry
  • Decoration Management System
Published: November 20, 2024

CVE-2024-11487

6.3
    Code4berry
  • Decoration Management System
Published: November 20, 2024

CVE-2024-44309

6.1
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
Published: November 20, 2024

CVE-2024-11278

6.1
    GD bbPress Attachments plugin for WordPress
  • Version(s): up to 4.7.2
Published: November 20, 2024

CVE-2024-9653

6.1
    Oracle
  • Restaurant Menu - Food Ordering System - Table Reservation
Published: November 20, 2024

CVE-2024-11277

6.1
    Ajexperience
  • 404 Solution
Published: November 20, 2024

CVE-2024-8726

6.1
    Mailmunch
  • Mailchimp Forms
Published: November 20, 2024

CVE-2024-9239

6.1
    Booster for WooCommerce plugin for WordPress
  • Version(s): up to 7.2.3
Published: November 20, 2024

CVE-2024-52597

6.1
    2FAuth
  • Version(s): before 5.4.1
Published: November 20, 2024

CVE-2024-11404

5.5
    django Filer
  • Version(s): 3.0, 3.1, 3.2
Published: November 20, 2024

CVE-2018-9487

5.5
    Google
  • Android
Published: November 20, 2024

CVE-2024-10665

5.4
    Yaad Sarig Payment Gateway For WC plugin for WordPress
  • Version(s): up to 2.2.4
Published: November 20, 2024

CVE-2024-45691

5.4
    Moodle
Published: November 20, 2024

CVE-2024-51209

5.4
    Anuj Kumar's Client Management System
  • Version(s): 1.2
Published: November 20, 2024

CVE-2024-45511

5.4
    Zimbra Collaboration (ZCS)
  • Version(s): through 10.1
Published: November 20, 2024

CVE-2024-45510

5.4
    Zimbra Collaboration
  • Version(s): through 10.0
Published: November 20, 2024

CVE-2024-48531

5.4
    eSoft Planner
  • Version(s): 3.24.08271-USA
Published: November 20, 2024

CVE-2024-48534

5.4
    eSoft Planner
  • Version(s): 3.24.08271-USA
Published: November 20, 2024

CVE-2024-48535

5.4
    eSoft Planner
  • Version(s): 3.24.08271-USA
Published: November 20, 2024

CVE-2024-52701

5.4
    Piwigo
  • Version(s): 14.5.0
Published: November 20, 2024

CVE-2024-52702

5.4
    MyBB
  • Version(s): 1.8.38
Published: November 20, 2024

CVE-2024-47865

5.3
    Rakuten Turbo 5G firmware
  • Version(s): V1.3.18 and earlier
Published: November 20, 2024

CVE-2024-52033

5.3
    Rakuten Turbo 5G
  • Version(s): V1.3.18 and earlier
Published: November 20, 2024

CVE-2024-10520

5.3
    WP Project Manager plugin for WordPress
  • Version(s): 2.6.14
Published: November 20, 2024

CVE-2024-52796

5.3
    Password Pusher
  • Version(s): before 1.49.0
Published: November 20, 2024

CVE-2024-48533

5.3
    eSoft Planner
  • Version(s): 3.24.08271-USA
Published: November 20, 2024

CVE-2024-52725

4.9
    SemCms
  • Version(s): 4.8
Published: November 20, 2024

CVE-2024-52754

4.9
    Dlink
  • Di-8003 Firmware
  • Di-8003
Published: November 20, 2024

CVE-2024-52757

4.9
    Dlink
  • Di-8003 Firmware
  • Di-8003
Published: November 20, 2024

CVE-2024-10365

4.3
    Posimyth
  • The Plus Addons For Elementor
Published: November 20, 2024

CVE-2024-48899

4.3
    Moodle
Published: November 20, 2024

CVE-2024-11154

4.3
    PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress
  • Version(s): up to 3.5.15
Published: November 20, 2024

CVE-2024-11486

4.3
    Code4berry
  • Decoration Management System
Published: November 20, 2024

CVE-2024-52614

4.0
    Kura Sushi Official App Produced by EPARK
  • Version(s): before 3.8.5
Published: November 20, 2024

CVE-2024-10515

3.5
    Squirrly SEO WordPress plugin
  • Version(s): before 12.3.21
Published: November 20, 2024

CVE-2024-11488

3.5
    115cms
  • 115cms
Published: November 20, 2024

CVE-2024-11489

3.5
    115cms
  • 115cms
Published: November 20, 2024

CVE-2024-11490

3.5
    115cms
  • 115cms
Published: November 20, 2024

CVE-2024-11491

3.5
    115CMS
  • Version(s): up to 20240807
Published: November 20, 2024

CVE-2024-11492

3.5
    115cms
  • 115cms
Published: November 20, 2024

CVE-2024-11493

3.5
    115cms
  • 115cms
Published: November 20, 2024

CVE-2024-10126

None
    M-Files Server
  • Version(s): before 24.11 (excluding 24.8 SR1, 24.2 SR3 and 23.8 SR7)
Published: November 20, 2024

CVE-2024-10127

None
    M-Files server
  • Version(s): before 24.11
Published: November 20, 2024

CVE-2024-11176

None
    M-Files Aino
  • Version(s): before 24.10
Published: November 20, 2024

CVE-2024-11086

None
    UNKNOWN
Published: November 20, 2024

CVE-2024-9478

None
    upKeeper Instant Privilege Access
  • Version(s): before 1.2
Published: November 20, 2024

CVE-2024-9479

None
    upKeeper Instant Privilege Access
  • Version(s): before 1.2
Published: November 20, 2024

CVE-2024-11081

None
    UNKNOWN
Published: November 20, 2024
Click here to see more Vulnerabilities