Tag: 2024-12-14

1 Attack Reports | 50 Vulnerabilities

Attack reports

Crypted Hearts: Exposing the HeartCrypt Packer-as-a-Service Operation

This analysis examines HeartCrypt, a new packer-as-a-service (PaaS) used to protect malware. Developed since July 2023 and launched in February 2024, HeartCrypt charges $20 per file to pack Windows x86 and .NET payloads. It is primarily used by malware operators of families like LummaStealer, Remco…
xworm
rhadamanthys
remcos
quasar rat
vidar stealer
redline stealer
process hollowing
anti-sandbox
lummastealer
2024-12-14
heartcrypt
packer-as-a-service
Published: December 14, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2023-29476

9.1
    Menlo On-Premise Appliance
Published: December 14, 2024

CVE-2024-11721

8.1
    Frontend Admin by DynamiApps plugin for WordPress
Published: December 14, 2024

CVE-2024-31891

7.8
    IBM Storage Scale GUI
Published: December 14, 2024

CVE-2024-11711

7.5
    WP Job Portal - A Complete Recruitment System
Published: December 14, 2024

CVE-2024-31892

7.5
    IBM Storage Scale GUI
Published: December 14, 2024

CVE-2024-9698

7.2
    Crafthemes Demo Import plugin for WordPress
Published: December 14, 2024

CVE-2024-10646

7.2
    Contact Form Plugin by Fluent Forms
Published: December 14, 2024

CVE-2024-11720

7.2
    Frontend Admin by DynamiApps plugin for WordPress
Published: December 14, 2024

CVE-2024-11095

6.4
    Visualmodo Elements plugin for WordPress
Published: December 14, 2024

CVE-2024-11751

6.4
    TCBD Popover plugin for WordPress
Published: December 14, 2024

CVE-2024-11755

6.4
    IMS Countdown plugin for WordPress
Published: December 14, 2024

CVE-2024-11759

6.4
    WordPress Bukza plugin
Published: December 14, 2024

CVE-2024-11763

6.4
    Plezi plugin for WordPress
Published: December 14, 2024

CVE-2024-11770

6.4
    Post Carousel & Slider plugin for WordPress
Published: December 14, 2024

CVE-2024-11855

6.4
    Koalendar - Events & Appointments Booking Calendar plugin for WordPress
Published: December 14, 2024

CVE-2024-11865

6.4
    Tabs Maker plugin for WordPress
Published: December 14, 2024

CVE-2024-11867

6.4
    Companion Portfolio - Responsive Portfolio Plugin
Published: December 14, 2024

CVE-2024-11869

6.4
    Buk for WordPress plugin
Published: December 14, 2024

CVE-2024-11873

6.4
    WordPress glomex oEmbed plugin
Published: December 14, 2024

CVE-2024-11876

6.4
    Kredeum NFTs plugin for WordPress
Published: December 14, 2024

CVE-2024-11877

6.4
    WordPress Cricket Live Score plugin
Published: December 14, 2024

CVE-2024-11879

6.4
    Stripe Donation plugin for WordPress
Published: December 14, 2024

CVE-2024-11883

6.4
    Connatix Video Embed plugin for WordPress
Published: December 14, 2024

CVE-2024-11884

6.4
    Wp photo text slider 50 plugin for WordPress
Published: December 14, 2024

CVE-2024-11888

6.4
    IDer Login for WordPress plugin
Published: December 14, 2024

CVE-2024-11889

6.4
    My IDX Home Search plugin for WordPress
Published: December 14, 2024

CVE-2024-11894

6.4
    Permalinker plugin for WordPress
Published: December 14, 2024

CVE-2024-12448

6.4
    WooCommerce
Published: December 14, 2024

CVE-2024-12458

6.4
    Smart PopUp Blaster plugin for WordPress
Published: December 14, 2024

CVE-2024-12502

6.4
    My IDX Home Search plugin for WordPress
Published: December 14, 2024

CVE-2024-12517

6.4
    WooCommerce Cart Count Shortcode plugin for WordPress
Published: December 14, 2024

CVE-2024-12523

6.4
    States Map US plugin for WordPress
Published: December 14, 2024

CVE-2024-11752

6.4
    Eveeno plugin for WordPress
Published: December 14, 2024

CVE-2024-12459

6.4
    Ganohrs Toggle Shortcode plugin for WordPress
Published: December 14, 2024

CVE-2024-12474

6.4
    GeoDataSource Country Region DropDown plugin for WordPress
Published: December 14, 2024

CVE-2024-12501

6.4
    Simple Locator plugin for WordPress
Published: December 14, 2024

CVE-2024-12446

6.4
    WordPress Post to Pdf plugin
Published: December 14, 2024

CVE-2024-11462

6.1
    Filestack Official plugin for WordPress
Published: December 14, 2024

CVE-2024-12411

6.1
    WP Ad Guru - Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress
Published: December 14, 2024

CVE-2024-12555

6.1
    SIP Calculator plugin for WordPress
Published: December 14, 2024

CVE-2024-12422

6.1
    Import Eventbrite Events plugin for WordPress
Published: December 14, 2024

CVE-2024-12578

5.3
    Tickera - WordPress Event Ticketing plugin
Published: December 14, 2024

CVE-2024-11712

5.3
    WP Job Portal WordPress plugin
Published: December 14, 2024

CVE-2024-11710

4.9
    WP Job Portal Plugin
Published: December 14, 2024

CVE-2024-11713

4.9
    WP Job Portal - A Complete Recruitment System for Company or Job Board website plugin for WordPress
Published: December 14, 2024

CVE-2024-11714

4.9
    WP Job Portal WordPress plugin
Published: December 14, 2024

CVE-2024-11715

4.8
    WP Job Portal plugin for WordPress
Published: December 14, 2024

CVE-2024-12628

4.4
    bodi0`s Easy cache plugin for WordPress
Published: December 14, 2024

CVE-2024-12447

4.3
    Get Post Content Shortcode plugin for WordPress
Published: December 14, 2024

CVE-2024-10690

4.3
    Shortcodes for Elementor plugin for WordPress
Published: December 14, 2024
Click here to see more Vulnerabilities