Tag: 2024-11-29

1 Attack Reports | 77 Vulnerabilities

Attack reports

Malicious PyPI crypto pay package aiocpa implants infostealer code

ReversingLabs detected a malicious package named 'aiocpa' on PyPI, engineered to compromise cryptocurrency wallets. Unlike typical attacks, the actors published their own crypto client tool to attract users before compromising them through a malicious update. The package appeared legitimate, with m…
obfuscation
infostealer
cryptocurrency
pypi
machine learning
software supply chain
2024-11-29
threat hunting
Published: November 29, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-11979

9.8
    DreamMaker
Published: November 29, 2024

CVE-2024-11482

9.8
    ESM
  • Version(s): 11.6.10
Published: November 29, 2024

CVE-2024-50357

9.8
    FutureNet NXR series routers by Century Systems Co., Ltd.
Published: November 29, 2024

CVE-2024-36671

9.8
    NodeMCU
  • Version(s): before v3.0.0-release_20240225
Published: November 29, 2024

CVE-2024-48406

9.8
    SunBK201 umicat
  • Version(s): 0.3.2
Published: November 29, 2024

CVE-2024-52777

9.8
    UNKNOWN
Published: November 29, 2024

CVE-2024-52778

9.8
    UNKNOWN
Published: November 29, 2024

CVE-2024-52779

9.8
    UNKNOWN
    DCME-320
  • Version(s): <=7.4.12.90
    DCME-520
  • Version(s): <=9.25.5.11
    DCME-720
  • Version(s): <=9.1.5.11
Published: November 29, 2024

CVE-2024-52780

9.8
    DCME-320
  • Version(s): <=7.4.12.90
    DCME-520
  • Version(s): <=9.25.5.11
    DCME-720
  • Version(s): <=9.1.5.11
    DCME-320-L
  • Version(s): <=9.3.5.26
Published: November 29, 2024

CVE-2024-52781

9.8
    UNKNOWN
Published: November 29, 2024

CVE-2024-52782

9.8
    UNKNOWN
Published: November 29, 2024

CVE-2024-49803

9.8
    IBM Security Verify Access Appliance
  • Version(s): 10.0.0, 10.0.8
Published: November 29, 2024

CVE-2024-36622

9.8
    RaspAP raspap-webgui
  • Version(s): 3.0.9, before 3.0.9
Published: November 29, 2024

CVE-2024-35368

9.8
    FFmpeg
  • Version(s): 7.0
Published: November 29, 2024

CVE-2024-53504

9.8
    Siyuan
  • Version(s): 3.1.11
Published: November 29, 2024

CVE-2024-53505

9.8
    Siyuan
  • Version(s): 3.1.11
Published: November 29, 2024

CVE-2024-53506

9.8
    Siyuan
  • Version(s): 3.1.11
Published: November 29, 2024

CVE-2024-53507

9.8
    Siyuan
  • Version(s): 3.1.11
Published: November 29, 2024

CVE-2024-49805

9.4
    IBM Security Verify Access Appliance
  • Version(s): 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8
Published: November 29, 2024

CVE-2024-49806

9.4
    IBM Security Verify Access Appliance
  • Version(s): 10.0.0, 10.0.8
Published: November 29, 2024

CVE-2024-49360

9.2
    Sandboxie
Published: November 29, 2024

CVE-2024-11992

9.1
    Quick.CMS
  • Version(s): 6.7
Published: November 29, 2024

CVE-2024-35366

9.1
    FFmpeg
  • Version(s): 6.1.1
Published: November 29, 2024

CVE-2024-35367

9.1
    FFmpeg
  • Version(s): 6.1.1
Published: November 29, 2024

CVE-2024-54124

8.8
    Click Studios Passwordstate
  • Version(s): before build 9920
Published: November 29, 2024

CVE-2024-11980

8.6
    Billion Electric in-vehicle routers
Published: November 29, 2024

CVE-2024-11481

8.2
    ESM
  • Version(s): 11.6.10
Published: November 29, 2024

CVE-2024-53865

8.2
    zhmcclient
  • Version(s): 1.18.1
Published: November 29, 2024

CVE-2024-53979

8.2
    ibm.ibm_zhmc
  • Version(s): 1.9.3
Published: November 29, 2024

CVE-2024-36623

8.1
    Docker
  • Version(s): 25.0.3
Published: November 29, 2024

CVE-2024-49804

7.8
    IBM Security Verify Access Appliance
  • Version(s): 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8
Published: November 29, 2024

CVE-2024-11978

7.5
    DreamMaker
  • Version(s): UNKNOWN
Published: November 29, 2024

CVE-2024-48651

7.5
    ProFTPD
  • Version(s): 1.3.8b before cec01cc
Published: November 29, 2024

CVE-2024-11981

7.5
    Billion Electric Router
Published: November 29, 2024

CVE-2024-36611

7.5
    Symfony
  • Version(s): 7.07
Published: November 29, 2024

CVE-2024-35371

7.5
    Ant Media Server
  • Version(s): 2.8.2
Published: November 29, 2024

CVE-2024-36612

7.5
    Zulip
  • Version(s): 8.0, 8.1, 8.2, 8.3
Published: November 29, 2024

CVE-2024-53623

7.5
    TP-Link ARCHER-C7
  • Version(s): 5
Published: November 29, 2024

CVE-2024-11013

7.2
    NEC Corporation UNIVERGE IX
  • Version(s): 9.2 - 10.10.21, 10.8 - 10.8.27, 10.9 - 10.9.14
    UNIVERGE IX-R/IX-V
  • Version(s): 1.2.15 and earlier
Published: November 29, 2024

CVE-2024-11982

7.2
    Billion Electric Router
Published: November 29, 2024

CVE-2024-11983

7.2
    Billion Electric routers
Published: November 29, 2024

CVE-2024-53848

7.1
    check-jsonschema
  • Version(s): 0.30.0
Published: November 29, 2024

CVE-2024-36620

6.5
    moby
  • Version(s): 25.0.0 - 26.0.2
Published: November 29, 2024

CVE-2024-36621

6.5
    moby
  • Version(s): 25.0.5
Published: November 29, 2024

CVE-2024-36616

6.5
    FFmpeg
  • Version(s): n6.1.1
Published: November 29, 2024

CVE-2024-36617

6.2
    FFmpeg
  • Version(s): 6.1.1
Published: November 29, 2024

CVE-2024-36618

6.2
    FFmpeg
  • Version(s): 6.1.1
Published: November 29, 2024

CVE-2024-54123

6.1
    Backdrop CMS
  • Version(s): before 1.28.4, 1.29.x before 1.29.2
Published: November 29, 2024

CVE-2024-39162

6.1
    pyspider
  • Version(s): 0.3.10 and prior
Published: November 29, 2024

CVE-2024-36615

5.9
    FFmpeg
  • Version(s): 7.0
Published: November 29, 2024

CVE-2024-47094

5.5
    Checkmk
  • Checkmk
Published: November 29, 2024

CVE-2024-35369

5.5
    FFmpeg
  • Version(s): n6.1.1
Published: November 29, 2024

CVE-2024-47193

5.5
    WithSecure Elements Agent for Mac
  • Version(s): before 24.3
    MDR
  • Version(s): before 24.3
    Elements Client Security for Mac
  • Version(s): before 16.10
Published: November 29, 2024

CVE-2024-10980

5.4
    Element Pack Elementor Addons WordPress plugin
  • Version(s): before 5.10.3
Published: November 29, 2024

CVE-2024-36625

5.4
    Zulip
  • Version(s): 8.3
Published: November 29, 2024

CVE-2024-36624

5.4
    Zulip
  • Version(s): 8.3
Published: November 29, 2024

CVE-2024-53983

5.4
    @backstage/plugin-scaffolder-node
  • Version(s): v0.4.12, v0.5.1, v0.6.1
Published: November 29, 2024

CVE-2024-36619

5.3
    FFmpeg
  • Version(s): n6.1.1
Published: November 29, 2024

CVE-2024-36626

5.3
    PrestaShop
  • Version(s): 8.1.4
Published: November 29, 2024

CVE-2024-35451

4.8
    LinkStack
  • Version(s): 2.7.9, 4.7.7
Published: November 29, 2024

CVE-2024-10704

4.8
    Photo Gallery by 10Web WordPress plugin
  • Version(s): before 1.8.31
Published: November 29, 2024

CVE-2024-11990

4.6
    SurgeMail
  • Version(s): 78c2
Published: November 29, 2024

CVE-2024-45495

4.3
    MSA FieldServer Gateway
  • Version(s): 5.0.0, 6.5.2
Published: November 29, 2024

CVE-2024-11014

4.3
    NEC Corporation UNIVERGE IX
  • Version(s): 9.2 - 10.10.21, 10.8 - 10.8.27, 10.9 - 10.9.14
Published: November 29, 2024

CVE-2024-54159

4.1
    stalld
  • Version(s): through 1.19.7
Published: November 29, 2024

CVE-2024-11995

3.5
    Anisha
  • Farmacia
Published: November 29, 2024

CVE-2024-53701

3.1
    UNKNOWN
Published: November 29, 2024

CVE-2024-53861

2.2
    pyjwt
  • Version(s): 2.10.0
Published: November 29, 2024

CVE-2024-9044

None
    Easy Tax Client Software
  • Version(s): 1.2, earlier
Published: November 29, 2024

CVE-2024-52003

None
    Traefik
  • Version(s): 2.11.14, 3.2.1
Published: November 29, 2024

CVE-2024-52800

None
    veraPDF
Published: November 29, 2024

CVE-2024-52801

None
    sftpgo
  • Version(s): 2.6.4
Published: November 29, 2024

CVE-2024-52809

None
    vue-i18n
  • Version(s): 9.14.2, 10.0.5
Published: November 29, 2024

CVE-2024-52810

None
    @intlify/shared
  • Version(s): 9.14.2, 10.0.5
Published: November 29, 2024

CVE-2024-53864

None
    Ibexa DXP
  • Version(s): 4.6.14
Published: November 29, 2024

CVE-2024-53980

None
    RIOT
  • Version(s): before PR #20998
Published: November 29, 2024

CVE-2024-36610

None
    Symfony
  • Version(s): 7.0.3
Published: November 29, 2024
Click here to see more Vulnerabilities