Tag: 2025-01-15

1 Attack Reports | 215 Vulnerabilities

Attack reports

Investigating A Web Shell Intrusion With Managed XDR

This analysis details a web shell intrusion incident where attackers exploited an IIS worker to exfiltrate data. The attacker uploaded a web shell, created a new account for persistence, modified an existing user's password, and used encoded PowerShell commands to establish a reverse TCP shell for …
powershell
anydesk
privilege escalation
data exfiltration
web shell
command-and-control
2025-01-15
reverse tcp shell
iis worker
Published: January 15, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-22782

9.9
    Web Ready Now WR Price List Manager For Woocommerce
Published: January 15, 2025

CVE-2024-57726

9.9
    Simple-Help
  • Simplehelp
Published: January 15, 2025

CVE-2024-9636

9.8
    Post Grid and Gutenberg Blocks plugin for WordPress
Published: January 15, 2025

CVE-2024-12084

9.8
    rsync
Published: January 15, 2025

CVE-2025-22968

9.8
    D-Link DWR-M972V
Published: January 15, 2025

CVE-2024-57011

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57012

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57013

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57014

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57015

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57016

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57017

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57018

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57019

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57020

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57021

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57022

9.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-48126

9.8
    HI-SCAN 6040i Hitrax HX-03-19-I
Published: January 15, 2025

CVE-2025-22785

9.3
    ComMotion Course Booking System
Published: January 15, 2025

CVE-2024-57763

9.1
    MSFM
Published: January 15, 2025

CVE-2024-57764

9.1
    MSFM
Published: January 15, 2025

CVE-2024-57766

9.1
    MSFM
Published: January 15, 2025

CVE-2024-44136

9.1
    iOS
    iPadOS
Published: January 15, 2025

CVE-2025-22146

9.1
    Sentry
Published: January 15, 2025

CVE-2025-23061

9.0
    Mongoose
Published: January 15, 2025

CVE-2025-0434

8.8
    Google Chrome
Published: January 15, 2025

CVE-2025-0436

8.8
    Google Chrome
Published: January 15, 2025

CVE-2025-0437

8.8
    Google
  • Chrome
Published: January 15, 2025

CVE-2025-0438

8.8
    Google Chrome
Published: January 15, 2025

CVE-2025-0443

8.8
    Google Chrome
Published: January 15, 2025

CVE-2025-0447

8.8
    Google Chrome
Published: January 15, 2025

CVE-2025-22736

8.8
    User Management
Published: January 15, 2025

CVE-2024-45061

8.7
    Observium CE
Published: January 15, 2025

CVE-2024-47002

8.7
    Observium CE
Published: January 15, 2025

CVE-2024-47140

8.7
    Observium CE
Published: January 15, 2025

CVE-2024-57767

8.6
    MSFM
Published: January 15, 2025

CVE-2025-22784

8.6
    Johan Ström Background Control
Published: January 15, 2025

CVE-2025-22799

8.5
    Neon Product Designer
Published: January 15, 2025

CVE-2024-40771

8.4
    macOS Monterey
    macOS Ventura
    macOS Sonoma
    tvOS
    watchOS
    visionOS
    iOS
Published: January 15, 2025

CVE-2024-48123

8.4
    HI-SCAN 6040i Hitrax HX-03-19-I
Published: January 15, 2025

CVE-2024-57761

8.1
    JeeWMS
Published: January 15, 2025

CVE-2024-11848

8.1
    NitroPack plugin for WordPress
Published: January 15, 2025

CVE-2025-22964

8.1
    DDSN Interactive cm3 Acora CMS
Published: January 15, 2025

CVE-2024-57795

7.8
    Linux kernel
Published: January 15, 2025

CVE-2024-57801

7.8
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57857

7.8
    Linux kernel
Published: January 15, 2025

CVE-2024-57887

7.8
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57892

7.8
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57896

7.8
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57900

7.8
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2020-8094

7.8
    Bitdefender
  • Antivirus 2020
Published: January 15, 2025

CVE-2024-27856

7.8
    macOS Sonoma
    tvOS
    watchOS
    Safari
    iOS
    iPadOS
    visionOS
Published: January 15, 2025

CVE-2024-57757

7.5
    JeeWMS
Published: January 15, 2025

CVE-2024-57762

7.5
    MSFM
Published: January 15, 2025

CVE-2024-57765

7.5
    MSFM
Published: January 15, 2025

CVE-2025-0343

7.5
    Swift ASN.1 library
Published: January 15, 2025

CVE-2024-4227

7.5
    gSOAP
Published: January 15, 2025

CVE-2025-0355

7.5
    NEC Corporation Aterm WG2600HS
    NEC Corporation WF1200CRS
    NEC Corporation WG1200CRS
    NEC Corporation GB1200PE
    NEC Corporation WG2600HP4
    NEC Corporation WG2600HM4
    NEC Corporation WG2600HS2
    NEC Corporation WX3000HP
    NEC Corporation WX4200D5
Published: January 15, 2025

CVE-2024-11322

7.5
    CyberPower PowerPanel Business (PPB)
Published: January 15, 2025

CVE-2024-8603

7.5
    B&R Automation Runtime
    B&R mapp View
Published: January 15, 2025

CVE-2025-22786

7.5
    ElementInvader Addons for Elementor
Published: January 15, 2025

CVE-2024-50953

7.5
    XINJE XL5E-16T
Published: January 15, 2025

CVE-2024-50954

7.5
    XINJE XL5E-16T programmable logic controller
    XINJE XD5E-24R-E programmable logic controller
Published: January 15, 2025

CVE-2025-0500

7.5
    Amazon WorkSpaces
    Amazon AppStream 2.0
    Amazon DCV Clients
Published: January 15, 2025

CVE-2025-0501

7.5
    Amazon WorkSpaces Clients
Published: January 15, 2025

CVE-2024-48125

7.5
    HI-SCAN 6040i Hitrax HX-03-19-I
Published: January 15, 2025

CVE-2025-0492

7.5
    D-Link DIR-823X
Published: January 15, 2025

CVE-2024-57727

7.5
    Simple-Help
  • Simplehelp
Published: January 15, 2025

CVE-2025-0482

7.3
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2025-0484

7.3
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2025-0486

7.3
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2025-0354

7.2
    NEC Corporation Aterm WG2600HS
    NEC Corporation Aterm WX3000HP
    NEC Corporation Aterm WX4200D5
Published: January 15, 2025

CVE-2024-13351

7.2
    WordPress Social proof testimonials and reviews by Repuso plugin
Published: January 15, 2025

CVE-2024-57728

7.2
    Simple-Help
  • Simplehelp
Published: January 15, 2025

CVE-2025-22317

7.1
    Photo Gallery - Image Gallery by Ape
Published: January 15, 2025

CVE-2025-22750

7.1
    Post Carousel & Slider
Published: January 15, 2025

CVE-2025-22751

7.1
    Mighty Digital Partners
Published: January 15, 2025

CVE-2025-22752

7.1
    Gsheetconnector
  • Gsheetconnector For Forminator Forms
Published: January 15, 2025

CVE-2025-22753

7.1
    turboSMTP
Published: January 15, 2025

CVE-2025-22754

7.1
    Amber
Published: January 15, 2025

CVE-2025-22755

7.1
    WP Headmaster
Published: January 15, 2025

CVE-2025-22760

7.1
    CodeBard Help Desk
Published: January 15, 2025

CVE-2025-22764

7.1
    WP Post Corrector
Published: January 15, 2025

CVE-2025-22765

7.1
    WP Order By
Published: January 15, 2025

CVE-2025-22766

7.1
    Masoud Amini Zarinpal Paid Download
Published: January 15, 2025

CVE-2025-22776

7.1
    WP Bulletin Board
Published: January 15, 2025

CVE-2025-22778

7.1
    Lijit Search
Published: January 15, 2025

CVE-2025-22793

7.1
    Bold pagos en linea
Published: January 15, 2025

CVE-2025-22795

7.1
    Multilang Contact Form
Published: January 15, 2025

CVE-2025-22976

7.1
    dingfanzuCMS
Published: January 15, 2025

CVE-2024-55577

7.0
    Linux Ratfor
Published: January 15, 2025

CVE-2024-57023

6.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57024

6.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2024-57025

6.8
    TOTOLINK X5000R
Published: January 15, 2025

CVE-2025-22394

6.7
    Dell
  • Display Manager
Published: January 15, 2025

CVE-2024-48122

6.7
    HI-SCAN 6040i Hitrax HX-03-19-I
Published: January 15, 2025

CVE-2025-21101

6.6
    Dell
  • Display Manager
Published: January 15, 2025

CVE-2025-23040

6.6
    GitHub Desktop
Published: January 15, 2025

CVE-2024-57760

6.5
    JeeWMS
Published: January 15, 2025

CVE-2025-0435

6.5
    Google Chrome on Android
Published: January 15, 2025

CVE-2025-0439

6.5
    Google Chrome
Published: January 15, 2025

CVE-2025-0440

6.5
    Google Chrome
Published: January 15, 2025

CVE-2025-0441

6.5
    Google Chrome
Published: January 15, 2025

CVE-2025-0442

6.5
    Google Chrome
Published: January 15, 2025

CVE-2024-56295

6.5
    Poll Maker Team Poll Maker
Published: January 15, 2025

CVE-2025-21088

6.5
    Mattermost
Published: January 15, 2025

CVE-2025-22329

6.5
    AGILELOGIX Free Google Maps
Published: January 15, 2025

CVE-2025-22587

6.5
    NCiphers SEO Bulk Editor
Published: January 15, 2025

CVE-2025-22724

6.5
    Product Carousel For WooCommerce - WoorouSell
Published: January 15, 2025

CVE-2025-22742

6.5
    WP ViewSTL
Published: January 15, 2025

CVE-2025-22743

6.5
    Mohsin Rasool Twitter Bootstrap Collapse aka Accordian Shortcode
Published: January 15, 2025

CVE-2025-22744

6.5
    S-DEV SEO
Published: January 15, 2025

CVE-2025-22745

6.5
    Navigation Du Lapin Blanc
Published: January 15, 2025

CVE-2025-22746

6.5
    HireHive Job Plugin
Published: January 15, 2025

CVE-2025-22747

6.5
    Foundation Columns
Published: January 15, 2025

CVE-2025-22748

6.5
    SetMore Appointments SetMore Theme – Custom Post Types
Published: January 15, 2025

CVE-2025-22749

6.5
    AwoThemes Social Media Engine
Published: January 15, 2025

CVE-2025-22758

6.5
    Elementor AI Addons
Published: January 15, 2025

CVE-2025-22759

6.5
    BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
Published: January 15, 2025

CVE-2025-22761

6.5
    Olaf Lederer Ajax Contact Form
Published: January 15, 2025

CVE-2025-22769

6.5
    Creative Brahma Multifox
Published: January 15, 2025

CVE-2025-22780

6.5
    wp-pano
Published: January 15, 2025

CVE-2025-22781

6.5
    Nativery Developer
Published: January 15, 2025

CVE-2025-22797

6.5
    Gallery and Lightbox
Published: January 15, 2025

CVE-2025-22798

6.5
    Responsive jQuery Slider
Published: January 15, 2025

CVE-2025-20036

6.5
    Mattermost Mobile Apps
Published: January 15, 2025

CVE-2025-20086

6.5
    Mattermost
Published: January 15, 2025

CVE-2025-20088

6.5
    Mattermost
Published: January 15, 2025

CVE-2025-21083

6.5
    Mattermost Mobile Apps
Published: January 15, 2025

CVE-2024-40854

6.5
    iOS
    iPadOS
    macOS
Published: January 15, 2025

CVE-2024-48121

6.5
    HI-SCAN 6040i Hitrax HX-03-19-I
Published: January 15, 2025

CVE-2024-36751

6.5
    parse-uri
Published: January 15, 2025

CVE-2024-39967

6.5
    UNKNOWN
Published: January 15, 2025

CVE-2024-41454

6.5
    Process Maker pm4core-docker
Published: January 15, 2025

CVE-2024-13394

6.4
    ViewMedica plugin for WordPress
Published: January 15, 2025

CVE-2024-11870

6.4
    Event Registration Calendar By vcita plugin for WordPress
Published: January 15, 2025

CVE-2024-12818

6.4
    WP Smart TV plugin for WordPress
Published: January 15, 2025

CVE-2024-12593

6.4
    WPForms + Drag and Drop Template Builder plugin for WordPress
Published: January 15, 2025

CVE-2025-22346

6.4
    Course Migration for LearnDash
Published: January 15, 2025

CVE-2025-0487

6.3
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2025-0488

6.3
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2025-0489

6.3
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2025-0490

6.3
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2025-0491

6.3
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2024-13334

6.1
    Car Demon plugin for WordPress
Published: January 15, 2025

CVE-2024-12403

6.1
    Image Gallery - Responsive Photo Gallery plugin for WordPress
Published: January 15, 2025

CVE-2024-12423

6.1
    Contact Form 7 Redirect & Thank You Page plugin for WordPress
Published: January 15, 2025

CVE-2025-0215

6.1
    UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress
Published: January 15, 2025

CVE-2025-22734

5.9
    Data443 Posts Footer Manager
Published: January 15, 2025

CVE-2025-22738

5.9
    WP ULike
Published: January 15, 2025

CVE-2025-22762

5.9
    WordPress HelpDesk & Support Ticket System Plugin - Octrace Support
Published: January 15, 2025

CVE-2025-22788

5.9
    CoDesigner WooCommerce Builder for Elementor
Published: January 15, 2025

CVE-2024-7322

5.8
    ZigBee Protocol
Published: January 15, 2025

CVE-2024-11029

5.5
    FreeIPA
Published: January 15, 2025

CVE-2024-36476

5.5
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57802

5.5
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57841

5.5
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57882

5.5
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57890

5.5
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-57895

5.5
    Linux
  • Linux Kernel
Published: January 15, 2025

CVE-2024-54540

5.5
    Apple Music for Windows
Published: January 15, 2025

CVE-2024-35280

5.4
    Fortinet
  • Fortideceptor
Published: January 15, 2025

CVE-2025-22737

5.3
    MagePeople Team WpTravelly
Published: January 15, 2025

CVE-2025-22773

5.3
    WPChill Htaccess File Editor
Published: January 15, 2025

CVE-2025-0481

5.3
    D-Link DIR-878
Published: January 15, 2025

CVE-2024-52783

5.1
    XINJE XDPPro.exe
Published: January 15, 2025

CVE-2025-22996

4.8
    Linksys E5600 Router
Published: January 15, 2025

CVE-2025-22997

4.8
    Linksys E5600 Router
Published: January 15, 2025

CVE-2025-0356

4.8
    NEC Corporation Aterm WX1500HP
    NEC Corporation Aterm WX3600HP
Published: January 15, 2025

CVE-2024-41453

4.8
    Process Maker pm4core-docker
Published: January 15, 2025

CVE-2024-54470

4.6
    iOS
    iPadOS
Published: January 15, 2025

CVE-2024-10775

4.3
    Piotnet Addons For Elementor plugin for WordPress
Published: January 15, 2025

CVE-2025-0446

4.3
    Google Chrome
Published: January 15, 2025

CVE-2025-0448

4.3
    Google Chrome
Published: January 15, 2025

CVE-2024-11851

4.3
    NitroPack plugin for WordPress
Published: January 15, 2025

CVE-2024-13215

4.3
    Webtechstreet
  • Elementor Addon Elements
Published: January 15, 2025

CVE-2025-22729

4.3
    VOD Infomaniak
Published: January 15, 2025

CVE-2025-22731

4.3
    Build Private Store For Woocommerce
Published: January 15, 2025

CVE-2025-22779

4.3
    WP News Sliders
Published: January 15, 2025

CVE-2025-22787

4.3
    Button Block
Published: January 15, 2025

CVE-2025-0480

4.3
    wuzhicms
Published: January 15, 2025

CVE-2024-54535

4.3
    Apple
  • Ipados
  • Iphone Os
  • Visionos
  • Watchos
Published: January 15, 2025

CVE-2025-0483

3.5
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2025-0485

3.5
    Fanli2012 native-php-cms
Published: January 15, 2025

CVE-2024-5198

3.3
    OpenVPN ovpn-dco for Windows
Published: January 15, 2025

CVE-2024-53407

3.3
    Phiewer
  • Phiewer
Published: January 15, 2025

CVE-2024-55503

3.3
    Termius
  • Termius
    Apple
Published: January 15, 2025

CVE-2024-40839

2.4
    iOS
    iPadOS
Published: January 15, 2025

CVE-2025-23013

None
    Yubico pam-u2f
Published: January 15, 2025

CVE-2024-12297

None
    Moxa Ethernet switch EDS-508A Series
Published: January 15, 2025

CVE-2025-0193

None
    MGate 5121/5122/5123 Series firmware
Published: January 15, 2025

CVE-2024-39282

None
    Linux kernel
Published: January 15, 2025

CVE-2024-53681

None
    Linux Kernel
Published: January 15, 2025

CVE-2024-54031

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57844

None
    Linux Kernel
Published: January 15, 2025

CVE-2024-57883

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57884

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57885

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57886

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57888

None
    Linux Kernel
Published: January 15, 2025

CVE-2024-57889

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57891

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57893

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57894

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57897

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57898

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57899

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57901

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57902

None
    Linux kernel
Published: January 15, 2025

CVE-2024-57903

None
    Linux kernel
Published: January 15, 2025

CVE-2025-21629

None
    Linux kernel
Published: January 15, 2025

CVE-2025-21630

None
    Linux kernel
Published: January 15, 2025

CVE-2024-7085

None
    OpenText Solutions Business Manager (SBM)
Published: January 15, 2025

CVE-2024-52005

None
    Git
Published: January 15, 2025

CVE-2025-0502

None
    CrafterCMS Engine
Published: January 15, 2025
Click here to see more Vulnerabilities