Tag: 2025-01-02

2 Attack Reports | 232 Vulnerabilities

Attack reports

Cyberhaven’s preliminary analysis of the recent malicious Chrome extension

A phishing attack on December 24th, 2024 compromised a Cyberhaven employee's access to the Google Chrome Web Store, leading to the publication of a malicious version of their Chrome extension. This was part of a larger campaign targeting Chrome Extension developers, primarily aiming at Facebook Ads…
phishing
data exfiltration
chrome extension
command and control
2025-01-02
facebook ads
oauth
Published: January 2, 2025
Downloadable IOCs: 5

Analysis of the attack activities of APT-C-26 (Lazarus) using weaponized IPMsg software

The Lazarus group, a highly active APT organization, has been observed weaponizing the IPMsg installer for attacks. When executed, the malicious installer releases the official IPMsg version 5.6.18.0 to deceive users while activating a malicious DLL in memory. This DLL connects to a remote control …
backdoor
apt
social engineering
data theft
c2 communication
2025-01-02
ipmsg
dll64.dll
loader1.dll
att_loader_dll.dll
weaponized installer
Published: January 2, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-56829

10.0
    Huang Yaoshi Pharmaceutical Management Software
Published: January 2, 2025

CVE-2024-56249

9.1
    WPMasterToolKit
Published: January 2, 2025

CVE-2023-47179

8.8
    ByConsole WooODT Lite
Published: January 2, 2025

CVE-2024-39623

8.8
    Cridio
  • Listingpro
Published: January 2, 2025

CVE-2024-9950

8.5
    Forescout SecureConnector
Published: January 2, 2025

CVE-2024-55540

7.8
    Acronis
  • Cyber Protect
    Microsoft
Published: January 2, 2025

CVE-2024-55543

7.8
    Acronis
  • Cyber Protect
    Microsoft
Published: January 2, 2025

CVE-2024-56247

7.6
    Afthemes
  • Wp Post Author
Published: January 2, 2025

CVE-2024-56250

7.6
    Just Writing Statistics
Published: January 2, 2025

CVE-2023-47224

7.5
    WP Travel
Published: January 2, 2025

CVE-2023-47648

7.5
    EazyDocs
Published: January 2, 2025

CVE-2023-47693

7.5
    Themefic Ultimate Addons for Contact Form 7
Published: January 2, 2025

CVE-2023-45104

7.3
    WPDeveloper BetterLinks
Published: January 2, 2025

CVE-2024-12912

7.2
    ASUS Router AiCloud
Published: January 2, 2025

CVE-2024-13062

7.2
    ASUS Router
Published: January 2, 2025

CVE-2024-56027

7.1
    BizSwoop Leads CRM
Published: January 2, 2025

CVE-2024-56028

7.1
    Lemonade Social Networks Autoposter Pinterest
Published: January 2, 2025

CVE-2024-56029

7.1
    Easy Language Switcher
Published: January 2, 2025

CVE-2024-56030

7.1
    10CentMail
Published: January 2, 2025

CVE-2024-56032

7.1
    FV Descriptions
Published: January 2, 2025

CVE-2024-56033

7.1
    Think201 FAQs
Published: January 2, 2025

CVE-2024-56034

7.1
    Irshad Services updates for customers
Published: January 2, 2025

CVE-2024-56035

7.1
    Upload Scanner
Published: January 2, 2025

CVE-2024-56036

7.1
    odPhotogallery
Published: January 2, 2025

CVE-2024-56037

7.1
    Md Maruf Adnan Sami User Referral
Published: January 2, 2025

CVE-2024-56038

7.1
    SendSMS
Published: January 2, 2025

CVE-2024-56060

7.1
    HTML Forms
Published: January 2, 2025

CVE-2024-56069

7.1
    WP SuperBackup
Published: January 2, 2025

CVE-2023-46632

7.1
    My Shortcodes
Published: January 2, 2025

CVE-2024-56018

7.1
    Boston University (IS&T) BU Section Editing
Published: January 2, 2025

CVE-2024-56022

7.1
    Preloader by WordPress Monsters
Published: January 2, 2025

CVE-2024-56023

7.1
    WP eCommerce Quickpay
Published: January 2, 2025

CVE-2024-56024

7.1
    DuoGeek Custom Dashboard Widget
Published: January 2, 2025

CVE-2024-56025

7.1
    AdWork Media EZ Content Locker
Published: January 2, 2025

CVE-2024-56026

7.1
    Simple Proxy
Published: January 2, 2025

CVE-2024-56267

7.1
    Interactive UK Map
Published: January 2, 2025

CVE-2024-56014

7.1
    Markyis Cool Olivia
Published: January 2, 2025

CVE-2023-48758

7.1
    JetEngine
Published: January 2, 2025

CVE-2024-13102

6.9
    D-Link DIR-816
Published: January 2, 2025

CVE-2024-13103

6.9
    D-Link DIR-816 A2
Published: January 2, 2025

CVE-2024-13104

6.9
    D-Link DIR-816
Published: January 2, 2025

CVE-2024-13105

6.9
    D-Link DIR-816 A2
Published: January 2, 2025

CVE-2024-13106

6.9
    D-Link DIR-816 A2
Published: January 2, 2025

CVE-2024-13107

6.9
    D-Link DIR-816 A2
Published: January 2, 2025

CVE-2024-13108

6.9
    D-Link DIR-816 A2
Published: January 2, 2025

CVE-2024-13109

6.9
    Yunfan Learning Examination System
Published: January 2, 2025

CVE-2024-56137

6.8
    MaxKB
Published: January 2, 2025

CVE-2024-56264

6.6
    ACF City Selector
Published: January 2, 2025

CVE-2024-56019

6.5
    Inline Footnotes
Published: January 2, 2025

CVE-2023-45275

6.5
    Kali Forms Contact Form builder with drag & drop
Published: January 2, 2025

CVE-2023-46195

6.5
    CoSchedule Headline Analyzer
Published: January 2, 2025

CVE-2023-46609

6.5
    FeedFocal
Published: January 2, 2025

CVE-2023-46610

6.5
    Quill Forms
Published: January 2, 2025

CVE-2023-46631

6.5
    Product Recommendation Quiz for eCommerce
Published: January 2, 2025

CVE-2023-46644

6.5
    WP CTA PRO
Published: January 2, 2025

CVE-2023-47180

6.5
    Finale Lite
Published: January 2, 2025

CVE-2023-47689

6.5
    Toast Plugins Animator
Published: January 2, 2025

CVE-2024-38790

6.5
    Smartsupp Smartsupp – live chat, chatbots, AI and lead generation
Published: January 2, 2025

CVE-2024-56239

6.5
    Themify Audio Dock
Published: January 2, 2025

CVE-2024-56240

6.5
    Pronamic Google Maps
Published: January 2, 2025

CVE-2024-56241

6.5
    WPKoi WPKoi Templates for Elementor
Published: January 2, 2025

CVE-2024-56242

6.5
    Tychesoftwares
  • Arconix Shortcodes
Published: January 2, 2025

CVE-2024-56245

6.5
    Premium Blocks - Gutenberg Blocks for WordPress
Published: January 2, 2025

CVE-2024-56246

6.5
    POSIMYTH Nexter Blocks
Published: January 2, 2025

CVE-2024-56252

6.5
    Themelooks
  • Enter Addons
Published: January 2, 2025

CVE-2024-56254

6.5
    Moveaddons
  • Move Addons For Elementor
Published: January 2, 2025

CVE-2024-56258

6.5
    WPBlockArt Magazine Blocks
Published: January 2, 2025

CVE-2024-56259

6.5
    Ayecode
  • Geodirectory
Published: January 2, 2025

CVE-2024-56260

6.5
    StorePlugin ShopElement
Published: January 2, 2025

CVE-2024-56261

6.5
    Project Showcase
Published: January 2, 2025

CVE-2024-56262

6.5
    GS Plugins GS Coaches
Published: January 2, 2025

CVE-2024-56263

6.5
    GS Shots for Dribbble
Published: January 2, 2025

CVE-2024-56302

6.5
    ConvertCalculator for WordPress
Published: January 2, 2025

CVE-2024-56257

6.5
    CoolPlugins Coins MarketCap
Published: January 2, 2025

CVE-2024-56268

6.5
    WP Hait Post Grid Elementor Addon
Published: January 2, 2025

CVE-2022-45830

6.5
    Analytify
Published: January 2, 2025

CVE-2023-40327

6.5
    Putler Connector for WooCommerce
Published: January 2, 2025

CVE-2023-45633

6.5
    IMPress Listings
Published: January 2, 2025

CVE-2024-56266

6.3
    Sonaar
  • Mp3 Audio Player For Music\, Radio \& Podcast
Published: January 2, 2025

CVE-2024-13111

6.3
    Beijing Yunfan Internet Technology Yunfan Learning Examination System
Published: January 2, 2025

CVE-2024-11717

6.3
    CTFd
Published: January 2, 2025

CVE-2024-55541

6.1
    Acronis
  • Cyber Protect
    Linux
    Microsoft
Published: January 2, 2025

CVE-2024-56413

6.1
    Acronis Cyber Protect
Published: January 2, 2025

CVE-2024-11357

5.9
    goodlayers-core WordPress plugin
Published: January 2, 2025

CVE-2024-56237

5.9
    Contest-Gallery
  • Contest Gallery
Published: January 2, 2025

CVE-2024-8447

5.9
    Narayana
Published: January 2, 2025

CVE-2022-49035

5.5
    Linux
  • Linux Kernel
Published: January 2, 2025

CVE-2024-49385

5.5
    Acronis True Image (Windows)
Published: January 2, 2025

CVE-2024-56414

5.5
    Acronis Cyber Protect 16 (Windows)
Published: January 2, 2025

CVE-2002-20002

5.4
    Net::EasyTCP package for Perl
Published: January 2, 2025

CVE-2024-56830

5.4
    Net::EasyTCP package for Perl
Published: January 2, 2025

CVE-2023-45045

5.4
    WP Custom Widget area
Published: January 2, 2025

CVE-2023-45636

5.4
    WebToffee WordPress Backup & Migration
Published: January 2, 2025

CVE-2023-45828

5.4
    RumbleTalk Live Group Chat
Published: January 2, 2025

CVE-2023-46079

5.4
    WP Royal Ashe Extra
Published: January 2, 2025

CVE-2023-46607

5.4
    WP iCal Availability
Published: January 2, 2025

CVE-2023-46616

5.4
    Draw Attention
Published: January 2, 2025

CVE-2023-46633

5.4
    Glossary
Published: January 2, 2025

CVE-2023-47187

5.4
    Animated Rotating Words
Published: January 2, 2025

CVE-2023-47225

5.4
    KaizenCoders Short URL
Published: January 2, 2025

CVE-2023-47661

5.4
    Dragfy Addons for Elementor
Published: January 2, 2025

CVE-2024-37469

5.4
    Creativethemes
  • Blocksy
Published: January 2, 2025

CVE-2024-38729

5.4
    MBE eShip
Published: January 2, 2025

CVE-2024-38789

5.4
    Telegram Bot & Channel
Published: January 2, 2025

CVE-2024-56244

5.4
    Ashe Extra
Published: January 2, 2025

CVE-2024-56253

5.4
    Data Tables Generator by Supsystic
Published: January 2, 2025

CVE-2024-37438

5.4
    Uncanny Toolkit Pro for LearnDash
Published: January 2, 2025

CVE-2024-37925

5.4
    BuddyBoss Theme
Published: January 2, 2025

CVE-2023-32240

5.4
    WoodMart
Published: January 2, 2025

CVE-2023-45272

5.4
    10web
  • Map Builder For Google Maps
Published: January 2, 2025

CVE-2022-45811

5.4
    Post Teaser Plugin
Published: January 2, 2025

CVE-2023-23672

5.4
    Givewp
  • Givewp
Published: January 2, 2025

CVE-2024-13092

5.3
    Code-Projects
  • Job Recruitment
Published: January 2, 2025

CVE-2024-13093

5.3
    Code-Projects
  • Job Recruitment
Published: January 2, 2025

CVE-2023-44258

5.3
    Schema App Structured Data
Published: January 2, 2025

CVE-2023-45061

5.3
    WP Job Openings
Published: January 2, 2025

CVE-2023-45649

5.3
    CodePeople Appointment Hour Booking
Published: January 2, 2025

CVE-2023-45766

5.3
    Poll Maker
Published: January 2, 2025

CVE-2023-46073

5.3
    DX Delete Attached Media
Published: January 2, 2025

CVE-2023-46082

5.3
    Broken Link Checker | Finder
Published: January 2, 2025

CVE-2023-46083

5.3
    Kali Forms Contact Form builder with drag & drop
Published: January 2, 2025

CVE-2023-46206

5.3
    MW WP Form
Published: January 2, 2025

CVE-2023-46309

5.3
    wpDiscuz
Published: January 2, 2025

CVE-2023-46605

5.3
    Convertful – Your Ultimate On-Site Conversion Tool
Published: January 2, 2025

CVE-2023-46606

5.3
    AtomChat
Published: January 2, 2025

CVE-2023-46608

5.3
    DoLogin Security
Published: January 2, 2025

CVE-2023-46611

5.3
    YOP Poll
Published: January 2, 2025

CVE-2023-46635

5.3
    YITH WooCommerce Product Add-Ons
Published: January 2, 2025

CVE-2023-46637

5.3
    Generate Dummy Posts
Published: January 2, 2025

CVE-2023-46639

5.3
    kk Star Ratings
Published: January 2, 2025

CVE-2023-47183

5.3
    Givewp
  • Givewp
Published: January 2, 2025

CVE-2023-47188

5.3
    Presstigers
  • Simple Job Board
Published: January 2, 2025

CVE-2023-47241

5.3
    CoCart - Headless ecommerce
Published: January 2, 2025

CVE-2023-47515

5.3
    Seers
Published: January 2, 2025

CVE-2024-56238

5.3
    QuantumCloud Floating Action Buttons
Published: January 2, 2025

CVE-2024-13110

5.3
    Beijing Yunfan Internet Technology Yunfan Learning Examination System
Published: January 2, 2025

CVE-2023-48739

5.3
    Porto Theme
Published: January 2, 2025

CVE-2025-0171

5.3
    Code-Projects
  • Chat System
Published: January 2, 2025

CVE-2022-47601

5.3
    WP Table Manager
Published: January 2, 2025

CVE-2024-12907

5.3
    Kentico CMS
Published: January 2, 2025

CVE-2025-0172

5.3
    Code-Projects
  • Chat System
Published: January 2, 2025

CVE-2024-11716

5.3
    CTFd
Published: January 2, 2025

CVE-2025-0173

5.3
    Oretnom23
  • Online Eyewear Shop
Published: January 2, 2025

CVE-2024-56199

5.2
    phpMyFAQ
Published: January 2, 2025

CVE-2024-56248

4.9
    WPMasterToolKit
Published: January 2, 2025

CVE-2024-11184

4.8
    WordPress plugin wp-enable-svg
Published: January 2, 2025

CVE-2024-12595

4.7
    AHAthat Plugin WordPress plugin
Published: January 2, 2025

CVE-2024-48197

4.7
    Audiocodes MP-202b
Published: January 2, 2025

CVE-2024-55542

4.4
    Acronis Cyber Protect 16
    Acronis Cyber Protect Cloud Agent
Published: January 2, 2025

CVE-2025-22214

4.3
    Landray EIS
Published: January 2, 2025

CVE-2023-44988

4.3
    WP Custom Admin Interface
Published: January 2, 2025

CVE-2023-45002

4.3
    WP User Frontend
Published: January 2, 2025

CVE-2023-45101

4.3
    Cusrev
  • Customer Reviews For Woocommerce
Published: January 2, 2025

CVE-2023-45110

4.3
    BoldThemes Bold Timeline Lite
Published: January 2, 2025

CVE-2023-45271

4.3
    WowStore Team ProductX - Gutenberg WooCommerce Blocks
Published: January 2, 2025

CVE-2023-45631

4.3
    Wpdevart
  • Gallery
Published: January 2, 2025

CVE-2023-45760

4.3
    wpDiscuz
Published: January 2, 2025

CVE-2023-45765

4.3
    Wedevs
  • Wp Erp
Published: January 2, 2025

CVE-2023-46080

4.3
    Farhan Noor ApplyOnline – Application Form Builder and Manager
Published: January 2, 2025

CVE-2023-46188

4.3
    Freesoul Deactivate Plugins - Plugin manager and cleanup
Published: January 2, 2025

CVE-2023-46196

4.3
    Social proof testimonials and reviews by Repuso
Published: January 2, 2025

CVE-2023-46203

4.3
    Just Custom Fields
Published: January 2, 2025

CVE-2023-46612

4.3
    Mediabay
Published: January 2, 2025

CVE-2023-46628

4.3
    Redlettuce
  • Wp Word Count
Published: January 2, 2025

CVE-2023-47523

4.3
    Ecreate Infotech Auto Tag Creator
Published: January 2, 2025

CVE-2023-47557

4.3
    Visitors Traffic Real Time Statistics
Published: January 2, 2025

CVE-2023-47647

4.3
    BadgeOS
Published: January 2, 2025

CVE-2023-47692

4.3
    FloForms
Published: January 2, 2025

CVE-2024-37093

4.3
    Stylemixthemes
  • Masterstudy Lms
Published: January 2, 2025

CVE-2024-37102

4.3
    Blossom Themes Vilva
Published: January 2, 2025

CVE-2024-37103

4.3
    Rara Theme Education Zone
Published: January 2, 2025

CVE-2024-37104

4.3
    Rara Theme Chic Lite
Published: January 2, 2025

CVE-2024-37235

4.3
    Groundhogg
Published: January 2, 2025

CVE-2024-37236

4.3
    Loco Translate
Published: January 2, 2025

CVE-2024-37238

4.3
    WPAdverts - Classifieds Plugin
Published: January 2, 2025

CVE-2024-37240

4.3
    Faboba Falang multilanguage
Published: January 2, 2025

CVE-2024-37242

4.3
    Automattic Newspack Newsletters
Published: January 2, 2025

CVE-2024-37243

4.3
    Blossom Themes Vandana Lite
Published: January 2, 2025

CVE-2024-37272

4.3
    WP Travel Engine Travel Monster
Published: January 2, 2025

CVE-2024-37274

4.3
    WP Mobile Menu
Published: January 2, 2025

CVE-2024-37412

4.3
    Blossom Themes Blossom Shop
Published: January 2, 2025

CVE-2024-37413

4.3
    Rara Theme Preschool and Kindergarten
Published: January 2, 2025

CVE-2024-37417

4.3
    Coachify
Published: January 2, 2025

CVE-2024-37421

4.3
    JobScout
Published: January 2, 2025

CVE-2024-37426

4.3
    Rara Theme Elegant Pink
Published: January 2, 2025

CVE-2024-37431

4.3
    Mesmerize
Published: January 2, 2025

CVE-2024-37435

4.3
    Rara Theme Perfect Portfolio
Published: January 2, 2025

CVE-2024-37441

4.3
    NewsMash
Published: January 2, 2025

CVE-2024-37448

4.3
    OnePress
Published: January 2, 2025

CVE-2024-37450

4.3
    Rara Theme Benevolent
Published: January 2, 2025

CVE-2024-37451

4.3
    Travel Agency - Rara Theme
Published: January 2, 2025

CVE-2024-37458

4.3
    Highlight
Published: January 2, 2025

CVE-2024-37467

4.3
    Hestia
Published: January 2, 2025

CVE-2024-37473

4.3
    Trendy News
Published: January 2, 2025

CVE-2024-37478

4.3
    WP Royal Ashe
Published: January 2, 2025

CVE-2024-37490

4.3
    WP Royal Bard
Published: January 2, 2025

CVE-2024-37491

4.3
    Apollo13Themes Rife Free
Published: January 2, 2025

CVE-2024-37493

4.3
    SKT Themes Posterity
Published: January 2, 2025

CVE-2024-37503

4.3
    Rara Theme Lawyer Landing Page
Published: January 2, 2025

CVE-2024-37508

4.3
    Rara Theme Construction Landing Page
Published: January 2, 2025

CVE-2024-37511

4.3
    SWTE Swift Performance Lite
Published: January 2, 2025

CVE-2024-37518

4.3
    The Events Calendar
Published: January 2, 2025

CVE-2024-37540

4.3
    Leaky Paywall
Published: January 2, 2025

CVE-2024-37543

4.3
    Ultimate Auction
Published: January 2, 2025

CVE-2024-37937

4.3
    Rara Theme Rara Business
Published: January 2, 2025

CVE-2024-38691

4.3
    Metorik - Reports & Email Automation for WooCommerce
Published: January 2, 2025

CVE-2024-38751

4.3
    Google Adsense & Banner Ads by AdsforWP
Published: January 2, 2025

CVE-2024-38753

4.3
    Animated Rotating Words
Published: January 2, 2025

CVE-2024-38754

4.3
    Taggbox
Published: January 2, 2025

CVE-2024-38762

4.3
    The Events Calendar Event Tickets
Published: January 2, 2025

CVE-2024-38763

4.3
    Themes4WP Popularis Verse
Published: January 2, 2025

CVE-2024-38765

4.3
    Freelancelot Oceanic
Published: January 2, 2025

CVE-2024-38766

4.3
    Matomo Analytics
Published: January 2, 2025

CVE-2024-43927

4.3
    Email Address Encoder
Published: January 2, 2025

CVE-2024-56236

4.3
    Hestia Nginx Cache
Published: January 2, 2025

CVE-2024-56243

4.3
    WPSSO Core
Published: January 2, 2025

CVE-2024-56251

4.3
    Event Espresso Event Espresso 4 Decaf
Published: January 2, 2025

CVE-2024-56255

4.3
    AyeCode Connect
Published: January 2, 2025

CVE-2024-38764

4.3
    i-transform
Published: January 2, 2025

CVE-2024-38778

4.3
    WP Fast Total Search
Published: January 2, 2025

CVE-2024-37237

4.3
    FS Poster
Published: January 2, 2025

CVE-2024-37241

4.3
    Automattic WP Job Manager - Resume Manager
Published: January 2, 2025

CVE-2024-37452

4.3
    Schema Lite
Published: January 2, 2025

CVE-2024-37931

4.3
    Creativthemes Point
Published: January 2, 2025

CVE-2024-38731

4.3
    i-amaze
Published: January 2, 2025

CVE-2024-38732

4.3
    VolThemes Patricia Blog
Published: January 2, 2025

CVE-2022-41995

4.3
    Gallery Images Ape
Published: January 2, 2025

CVE-2022-43476

4.3
    Subscribe to Category
Published: January 2, 2025

CVE-2023-39994

4.3
    ARMember Premium
Published: January 2, 2025

CVE-2023-47778

4.3
    LuckyWP LuckyWP Scripts Control
Published: January 2, 2025

CVE-2023-47807

4.3
    10web
  • 10webanalytics
Published: January 2, 2025

CVE-2024-55538

4.0
    Acronis True Image (Windows)
    Acronis True Image (macOS)
Published: January 2, 2025
Click here to see more Vulnerabilities