Tag: 2024-12-25

1 Attack Reports | 27 Vulnerabilities

Attack reports

Espionage cluster Paper Werewolf engages in destructive behavior

The Paper Werewolf cluster, also known as GOFFEE, has increased its activity, targeting Russian organizations in government, energy, finance, and media sectors. Their primary method involves phishing emails with malicious Microsoft Word attachments containing macros. The group has evolved from cybe…
phishing
powershell
powerrat
2024-12-25
qwakmyagent
goffee
powertaskel
freyja
owowa
Published: December 25, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-8950

9.9
    Arne Informatics Piramit Automation
  • Version(s): before 27.09.2024
Published: December 25, 2024

CVE-2024-11281

9.8
    WooCommerce Point of Sale plugin for WordPress
  • Version(s): up to 6.1.0
Published: December 25, 2024

CVE-2024-56431

9.8
    libtheora
  • Version(s): through 1.0 7180717
Published: December 25, 2024

CVE-2024-12272

8.8
    WP Travel Engine - Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin
  • Version(s): up to 1.3.7
Published: December 25, 2024

CVE-2024-47978

7.8
    Dell NativeEdge
  • Version(s): 2.1.0.0
Published: December 25, 2024

CVE-2024-12428

7.5
    WP Data Access – App, Table, Form and Chart Builder plugin for WordPress
  • Version(s): 5.5.22
Published: December 25, 2024

CVE-2024-53291

7.5
    Dell NativeEdge
  • Version(s): 2.1.0.0
Published: December 25, 2024

CVE-2024-12927

7.3
    1000 Projects Attendance Tracking Management System
  • Version(s): 1.0
Published: December 25, 2024

CVE-2024-52535

7.1
    Dell SupportAssist for Home PCs
  • Version(s): 4.6.1 and prior
    Dell SupportAssist for Business PCs
  • Version(s): 4.5.0 and prior
Published: December 25, 2024

CVE-2024-12032

6.5
    Tourfic - Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress
  • Version(s): up to 2.15.3
Published: December 25, 2024

CVE-2024-52543

6.5
    Dell NativeEdge
  • Version(s): 2.1.0.0
Published: December 25, 2024

CVE-2024-56430

6.5
    OpenFHE
  • Version(s): 1.0, 1.2.3
Published: December 25, 2024

CVE-2024-12926

6.3
    Codezips Project Management System
  • Version(s): 1.0
Published: December 25, 2024

CVE-2024-10858

6.1
    Jetpack WordPress plugin
  • Version(s): before 14.1
Published: December 25, 2024

CVE-2024-39727

6.1
    Ibm
  • Engineering Lifecycle Optimization - Engineering Insights
Published: December 25, 2024

CVE-2024-47102

5.5
    IBM AIX
  • Version(s): 7.2, 7.3
Published: December 25, 2024

CVE-2024-52906

5.5
    IBM AIX
  • Version(s): 7.2, 7.3
    VIOS
  • Version(s): 3.1, 4.1
Published: December 25, 2024

CVE-2024-52534

5.4
    Dell
  • Elastic Cloud Storage
Published: December 25, 2024

CVE-2024-12413

5.3
    MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress
  • Version(s): up to 2.0.00
Published: December 25, 2024

CVE-2024-39725

5.3
    Ibm
  • Engineering Lifecycle Optimization - Engineering Insights
Published: December 25, 2024

CVE-2024-10862

4.9
    Basixonline
  • Nex-Forms
Published: December 25, 2024

CVE-2024-12190

4.3
    Contact Form by Bit Form plugin for WordPress
  • Version(s): up to 2.17.3
Published: December 25, 2024

CVE-2024-12636

4.3
    WP Legal Pages plugin for WordPress
  • Version(s): up to 3.2.6
Published: December 25, 2024

CVE-2024-12335

4.3
    Avada (Fusion) Builder plugin for WordPress
  • Version(s): up to 3.11.12
Published: December 25, 2024

CVE-2023-5117

3.7
    GitLab CE/EE
  • Version(s): < 17.6.0
Published: December 25, 2024

CVE-2024-1609

None
    OPPOStore iOS App
Published: December 25, 2024

CVE-2024-52046

None
    Apache MINA
  • Version(s): 2.0.x, 2.1.x, 2.2.x
Published: December 25, 2024
Click here to see more Vulnerabilities