Tag: 2024-12-06

3 Attack Reports | 171 Vulnerabilities

Attack reports

End-of-Year PTO: Days Off and Data Exfiltration with Formbook

A phishing campaign disguised as an end-of-year leave approval notice has been intercepted by the Cofense Phishing Defense Center. The malicious email, masquerading as HR communication, tricks recipients into clicking a link that leads to the deployment of FormBook malware. The email contains red f…
phishing
autoit
credential harvesting
formbook
keylogging
data exfiltration
process injection
2024-12-06
holiday-themed
Published: December 6, 2024
Downloadable IOCs: 0

U.S. Organization in China Targeted by Attackers

A large U.S. entity with significant operations in China faced a four-month-long cyber intrusion, likely conducted by a China-based threat actor. The attackers obtained persistent network access, laterally moved across systems, compromised Exchange servers to harvest emails, and deployed exfiltrati…
apt
espionage
exfiltration
lateral movement
credential access
2024-12-06
textinputhost.dat
Published: December 6, 2024
Downloadable IOCs: 13

The adventures of an extroverted cyber nerd and the people who help to fight the good fight

The article describes the experiences of a Senior Security Strategist at Talos, highlighting the unique blend of technical expertise and communication skills required for the role. It emphasizes the importance of supporting NGOs in cybersecurity, detailing the author's involvement with the NGO-ISAC…
phishing
cybersecurity
2024-12-06
qr code attacks
ngo
communication skills
water systems vulnerabilities
Published: December 6, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-54214

10.0
    Revy
Published: December 6, 2024

CVE-2024-12155

9.8
    WordPress SV100 Companion plugin
Published: December 6, 2024

CVE-2024-53908

9.8
    Django
Published: December 6, 2024

CVE-2024-52335

9.8
    syngo.plaza
Published: December 6, 2024

CVE-2024-54135

9.8
    ClipBucket
Published: December 6, 2024

CVE-2024-54136

9.8
    ClipBucket
Published: December 6, 2024

CVE-2024-54745

9.8
    WAVLINK WN701AE M01AE_V240305
Published: December 6, 2024

CVE-2024-54747

9.8
    WAVLINK WN531P3
Published: December 6, 2024

CVE-2024-54750

9.8
    Ubiquiti U6-LR
Published: December 6, 2024

CVE-2024-48871

9.8
    UNKNOWN
Published: December 6, 2024

CVE-2024-52320

9.8
    UNKNOWN
Published: December 6, 2024

CVE-2024-48874

9.8
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-52324

9.8
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-38921

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-38922

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-38923

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-38924

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-38925

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-38926

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-38927

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-41644

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-41645

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-41646

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-41647

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-41648

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-41649

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-41650

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-44852

9.8
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-47547

9.4
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-51615

9.3
    WordPress Auction Plugin
Published: December 6, 2024

CVE-2024-53810

9.1
    Simple User Registration
Published: December 6, 2024

CVE-2024-10773

9.0
    UNKNOWN
Published: December 6, 2024

CVE-2024-51815

9.0
    s2Member Pro
Published: December 6, 2024

CVE-2024-10578

8.8
    WordPress Pubnews theme
Published: December 6, 2024

CVE-2024-11323

8.8
    AI Quiz | Quiz Maker plugin for WordPress
Published: December 6, 2024

CVE-2024-10771

8.8
    UNKNOWN
Published: December 6, 2024

CVE-2024-10772

8.8
    UNKNOWN
Published: December 6, 2024

CVE-2024-0130

8.8
    NVIDIA UFM Enterprise
    NVIDIA UFM Appliance
    NVIDIA UFM CyberAI
Published: December 6, 2024

CVE-2024-54141

8.6
    phpMyFAQ
Published: December 6, 2024

CVE-2024-53807

8.5
    WP Mailster
Published: December 6, 2024

CVE-2024-53808

8.5
    Basix NEX-Forms - Ultimate Form Builder
Published: December 6, 2024

CVE-2024-53815

8.5
    Pinpoint Booking System
Published: December 6, 2024

CVE-2024-10776

8.2
    UNKNOWN
Published: December 6, 2024

CVE-2024-11178

8.1
    Login With OTP plugin for WordPress
Published: December 6, 2024

CVE-2024-11289

8.1
    Soledad theme for WordPress
Published: December 6, 2024

CVE-2024-10516

8.1
    Swift Performance Lite plugin for WordPress
Published: December 6, 2024

CVE-2024-21571

8.1
    Code Agent
Published: December 6, 2024

CVE-2024-46874

8.1
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-11149

7.9
    OpenBSD
Published: December 6, 2024

CVE-2024-53141

7.8
    Linux
  • Linux Kernel
Published: December 6, 2024

CVE-2024-53142

7.8
    Linux
  • Linux Kernel
Published: December 6, 2024

CVE-2024-11220

7.8
    OAS
Published: December 6, 2024

CVE-2024-54216

7.7
    ARForms
Published: December 6, 2024

CVE-2024-53817

7.6
    Acowebs Product Labels For Woocommerce
Published: December 6, 2024

CVE-2024-11585

7.5
    WP Hide & Security Enhancer plugin for WordPress
Published: December 6, 2024

CVE-2024-11460

7.5
    Verowa Connect plugin for WordPress
Published: December 6, 2024

CVE-2024-11728

7.5
    KiviCare - Clinic & Patient Management System (EHR) plugin for WordPress
Published: December 6, 2024

CVE-2024-53907

7.5
    Django
Published: December 6, 2024

CVE-2024-53804

7.5
    WP Mailster
Published: December 6, 2024

CVE-2024-53805

7.5
    WP Mailster
Published: December 6, 2024

CVE-2024-53824

7.5
    AREOI All Bootstrap Blocks
Published: December 6, 2024

CVE-2024-54749

7.5
    Ubiquiti U7-Pro
Published: December 6, 2024

CVE-2024-47043

7.5
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-45722

7.5
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-47791

7.5
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-44853

7.5
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-44854

7.5
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-44855

7.5
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-44856

7.5
    Openrobotics
  • Robot Operating System
Published: December 6, 2024

CVE-2024-54137

7.4
    liboqs
Published: December 6, 2024

CVE-2024-10774

7.3
    CROWN web application
Published: December 6, 2024

CVE-2024-10247

7.2
    Video Gallery - Best WordPress YouTube Gallery Plugin
Published: December 6, 2024

CVE-2024-53812

7.1
    WP GeoNames
Published: December 6, 2024

CVE-2024-53821

7.1
    Pie Register Premium
Published: December 6, 2024

CVE-2024-54205

7.1
    Paloma Widget
Published: December 6, 2024

CVE-2024-54208

7.1
    Block Controller
Published: December 6, 2024

CVE-2024-54209

7.1
    WPFactory Awesome Shortcodes
Published: December 6, 2024

CVE-2024-53811

6.6
    WDesignkit
Published: December 6, 2024

CVE-2024-11729

6.5
    KiviCare - Clinic & Patient Management System (EHR) plugin for WordPress
Published: December 6, 2024

CVE-2024-11730

6.5
    KiviCare - Clinic & Patient Management System (EHR) plugin for WordPress
Published: December 6, 2024

CVE-2024-53794

6.5
    Arkhe Blocks
Published: December 6, 2024

CVE-2024-53796

6.5
    Themesflat Addons For Elementor
Published: December 6, 2024

CVE-2024-53797

6.5
    Beaver Builder
Published: December 6, 2024

CVE-2024-53801

6.5
    BoldThemes Bold Page Builder
Published: December 6, 2024

CVE-2024-53802

6.5
    FuturioWP Futurio Extra
Published: December 6, 2024

CVE-2024-53803

6.5
    WP Mailster
Published: December 6, 2024

CVE-2024-53813

6.5
    WP Travel
Published: December 6, 2024

CVE-2024-53820

6.5
    Captivate Sync
Published: December 6, 2024

CVE-2024-53823

6.5
    The Plus Addons for Elementor Page Builder Lite
Published: December 6, 2024

CVE-2024-54210

6.5
    CodexShaper Advanced Element Bucket Addons for Elementor
Published: December 6, 2024

CVE-2024-54212

6.5
    Noor alam Magical Addons For Elementor
Published: December 6, 2024

CVE-2024-54213

6.5
    WordPress Page Builder - Zion Builder
Published: December 6, 2024

CVE-2024-42494

6.5
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-51727

6.5
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-47146

6.5
    Ruijienetworks
  • Reyee Os
Published: December 6, 2024

CVE-2024-11201

6.4
    myCred - Loyalty Points and Rewards plugin for WordPress
Published: December 6, 2024

CVE-2024-10320

6.4
    Cookielay plugin for WordPress
Published: December 6, 2024

CVE-2024-10849

6.4
    WordPress NewsMash theme
Published: December 6, 2024

CVE-2024-11339

6.4
    Smart PopUp Blaster plugin for WordPress
Published: December 6, 2024

CVE-2024-11352

6.4
    TwentyTwenty plugin for WordPress
Published: December 6, 2024

CVE-2024-11450

6.4
    ONLYOFFICE Docs plugin for WordPress
Published: December 6, 2024

CVE-2024-4633

6.4
    Slider and Carousel slider by Depicter plugin for WordPress
Published: December 6, 2024

CVE-2024-10681

6.3
    ARMember Membership Plugin for WordPress
Published: December 6, 2024

CVE-2024-10909

6.3
    Pojo Forms plugin for WordPress
Published: December 6, 2024

CVE-2024-42196

6.2
    UNKNOWN
Published: December 6, 2024

CVE-2024-10836

6.1
    WordPress Flixita theme
Published: December 6, 2024

CVE-2024-11379

6.1
    WordPress Broadcast plugin
Published: December 6, 2024

CVE-2024-10879

6.1
    ForumWP - Forum & Discussion Board plugin for WordPress
Published: December 6, 2024

CVE-2024-11204

6.1
    ForumWP - Forum & Discussion Board plugin for WordPress
Published: December 6, 2024

CVE-2024-11276

6.1
    WordPress PDF Builder for WooCommerce plugin
Published: December 6, 2024

CVE-2024-11336

6.1
    Clickbank WordPress Plugin (Storefront) plugin
Published: December 6, 2024

CVE-2024-11368

6.1
    Splash Sync plugin for WordPress
Published: December 6, 2024

CVE-2024-11687

6.1
    Next-Cart Store to WooCommerce Migration plugin for WordPress
Published: December 6, 2024

CVE-2024-11823

6.1
    Folder Gallery plugin for WordPress
Published: December 6, 2024

CVE-2024-12003

6.1
    WP System plugin for WordPress
Published: December 6, 2024

CVE-2024-12060

6.1
    WP Media Optimizer plugin
Published: December 6, 2024

CVE-2024-50677

6.1
    OroPlatform CMS
Published: December 6, 2024

CVE-2024-55268

6.1
    Phpgurukul
  • Covid 19 Testing Management System
Published: December 6, 2024

CVE-2024-12326

6.1
    Jirafeau
Published: December 6, 2024

CVE-2024-54206

5.9
    URBAN BASE Z-Downloads
Published: December 6, 2024

CVE-2024-54207

5.9
    WordPress Auction Plugin
Published: December 6, 2024

CVE-2024-54211

5.9
    Visualmodo Borderless
Published: December 6, 2024

CVE-2024-11022

5.6
    UNKNOWN
Published: December 6, 2024

CVE-2024-9866

5.4
    Event Tickets with Ticket Scanner plugin for WordPress
Published: December 6, 2024

CVE-2024-9872

5.4
    Online Booking & Scheduling Calendar for WordPress by vcita plugin
Published: December 6, 2024

CVE-2024-11321

5.4
    Hi e-learning Learning Management System (LMS)
Published: December 6, 2024

CVE-2024-53806

5.4
    Maspik - Spam Blacklist
Published: December 6, 2024

CVE-2024-11292

5.3
    WP Private Content Plus plugin for WordPress
Published: December 6, 2024

CVE-2024-12028

5.3
    WordPress Friends plugin
Published: December 6, 2024

CVE-2024-9706

5.3
    Ultimate Coming Soon & Maintenance plugin for WordPress
Published: December 6, 2024

CVE-2024-53795

5.3
    Andy Moyle Church Admin
Published: December 6, 2024

CVE-2024-53826

5.3
    WPCasa
Published: December 6, 2024

CVE-2024-11738

5.3
    Rustls
Published: December 6, 2024

CVE-2024-30129

5.3
    UNKNOWN
Published: December 6, 2024

CVE-2024-52558

5.3
    Unknown
Published: December 6, 2024

CVE-2024-10551

4.8
    Sticky Social Icons WordPress plugin
Published: December 6, 2024

CVE-2024-48703

4.8
    Anujk305
  • Medical Card Generation System
Published: December 6, 2024

CVE-2024-53825

4.7
    Filebird
Published: December 6, 2024

CVE-2024-9769

4.4
    Video Gallery - Best WordPress YouTube Gallery plugin
Published: December 6, 2024

CVE-2024-0139

4.4
    NVIDIA Base Command Manager
    Bright Cluster Manager
Published: December 6, 2024

CVE-2024-49041

4.3
    Microsoft Edge (Chromium-based)
Published: December 6, 2024

CVE-2024-10480

4.3
    3DPrint Lite WordPress plugin
Published: December 6, 2024

CVE-2024-10689

4.3
    XLTab - Accordions and Tabs for Elementor Page Builder plugin for WordPress
Published: December 6, 2024

CVE-2024-10692

4.3
    PowerPack Elementor Addons plugin for WordPress
Published: December 6, 2024

CVE-2024-11444

4.3
    CLUEVO LMS, E-Learning Platform plugin for WordPress
Published: December 6, 2024

CVE-2024-12027

4.3
    Contact Form 7 plugin for WordPress
Published: December 6, 2024

CVE-2024-12110

4.3
    Gold Addons for Elementor plugin for WordPress
Published: December 6, 2024

CVE-2024-9705

4.3
    The Ultimate Coming Soon & Maintenance plugin for WordPress
Published: December 6, 2024

CVE-2024-53799

4.3
    FloristPress
Published: December 6, 2024

CVE-2024-53809

4.3
    Namaste! LMS
Published: December 6, 2024

CVE-2024-6156

3.8
    LXD
Published: December 6, 2024

CVE-2024-6219

3.8
    LXD
Published: December 6, 2024

CVE-2024-12254

None
    Python
Published: December 6, 2024

CVE-2024-48859

None
    QNAP QTS
    QNAP QuTS hero
Published: December 6, 2024

CVE-2024-48863

None
    License Center
Published: December 6, 2024

CVE-2024-48865

None
    QNAP QTS
    QNAP QuTS hero
Published: December 6, 2024

CVE-2024-48866

None
    QNAP QTS
Published: December 6, 2024

CVE-2024-48867

None
    QNAP QTS
    QNAP QuTS hero
Published: December 6, 2024

CVE-2024-48868

None
    QNAP QTS
    QNAP QuTS hero
Published: December 6, 2024

CVE-2024-50387

None
    QNAP Operating System
Published: December 6, 2024

CVE-2024-50388

None
    HBS 3 Hybrid Backup Sync
Published: December 6, 2024

CVE-2024-50389

None
    QuRouter
Published: December 6, 2024

CVE-2024-50393

None
    QNAP QTS
    QNAP QuTS hero
Published: December 6, 2024

CVE-2024-50402

None
    QNAP Operating System
Published: December 6, 2024

CVE-2024-50403

None
    QNAP QTS
    QNAP QuTS hero
Published: December 6, 2024

CVE-2024-50404

None
    Qsync Central
Published: December 6, 2024

CVE-2024-53691

None
    QNAP QTS
    QNAP QuTS hero
Published: December 6, 2024

CVE-2024-54143

None
    openwrt/asu
Published: December 6, 2024

CVE-2024-7874

None
    Tungsten Automation (Kofax) TotalAgility
Published: December 6, 2024

CVE-2024-7875

None
    Kofax TotalAgility
Published: December 6, 2024

CVE-2024-54138

None
    NuGet Gallery
Published: December 6, 2024
Click here to see more Vulnerabilities