Tag: 2025-01-23

2 Attack Reports | 111 Vulnerabilities

Attack reports

The J-Magic Show: Magic Packets and Where to find them

Black Lotus Labs has been tracking a backdoor attack targeting enterprise-grade Juniper routers. Dubbed J-magic, this campaign uses a passive agent that monitors for 'magic packets' in TCP traffic. Once activated, it establishes a reverse shell for device control and data theft. The campaign, activ…
2025-01-23
cd00r
juniper routers
j-magic
Published: January 23, 2025
Downloadable IOCs: 4

Two Brands, One Payload as Ransomware Affiliates Drop Identical Code

Recent months have seen increased activity in new ransomware operations, including HellCat and Morpheus. Analysis of payloads from both operations reveals that affiliates are using almost identical code. The ransomware samples, uploaded to VirusTotal in December 2024, share similarities in behavior…
ransomware
raas
2025-01-23
hellcat
morpheus
Published: January 23, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-55971

10.0
    Logitime WebClock application
Published: January 23, 2025

CVE-2025-23006

9.8
    Sonicwall
  • Sma8200v
  • Sma6200 Firmware
  • Sma6200
  • Sma6210 Firmware
  • Sma6210
  • Sma7200 Firmware
  • Sma7200
  • Sma7210 Firmware
  • Sma7210
  • Sra Ex6000 Firmware
  • Sra Ex6000
  • Sra Ex7000 Firmware
  • Sra Ex7000
  • Sra Ex9000 Firmware
  • Sra Ex9000
Published: January 23, 2025

CVE-2025-0637

9.8
    Beta10 software
Published: January 23, 2025

CVE-2023-46400

9.8
    Kwhotel
  • Kwhotel
Published: January 23, 2025

CVE-2023-46401

9.8
    Kwhotel
  • Kwhotel
Published: January 23, 2025

CVE-2024-55192

9.8
    Openimageio
  • Openimageio
Published: January 23, 2025

CVE-2024-55193

9.8
    Openimageio
  • Openimageio
Published: January 23, 2025

CVE-2024-55194

9.8
    Openimageio
  • Openimageio
Published: January 23, 2025

CVE-2024-57328

9.8
    Projectworlds
  • Online Food Ordering System
Published: January 23, 2025

CVE-2024-52325

9.6
    ECOVACS robot lawnmowers
Published: January 23, 2025

CVE-2024-53923

9.1
    Centreon Web
Published: January 23, 2025

CVE-2024-55573

9.1
    Centreon Web
Published: January 23, 2025

CVE-2024-52975

9.0
    Elasticsearch Fleet Server
Published: January 23, 2025

CVE-2025-23011

8.8
    Fedora Repository
Published: January 23, 2025

CVE-2025-0650

8.1
    Open Virtual Network (OVN)
Published: January 23, 2025

CVE-2025-22153

7.9
    CPython
    RestrictedPython
Published: January 23, 2025

CVE-2024-50664

7.8
    Gpac
  • Gpac
Published: January 23, 2025

CVE-2024-53588

7.8
    iTop VPN
Published: January 23, 2025

CVE-2024-43707

7.7
    Kibana
Published: January 23, 2025

CVE-2024-11147

7.6
    ECOVACS robot lawnmowers and vacuums
Published: January 23, 2025

CVE-2024-13593

7.5
    Bmltenabled
  • Meeting Map
Published: January 23, 2025

CVE-2024-13234

7.5
    Woobewoo
  • Product Table
Published: January 23, 2025

CVE-2024-52331

7.5
    ECOVACS robot lawnmowers and vacuums
Published: January 23, 2025

CVE-2025-24033

7.5
    @fastify/multipart
Published: January 23, 2025

CVE-2025-23012

7.5
    Fedora Repository
Published: January 23, 2025

CVE-2024-55195

7.5
    OpenImageIO
Published: January 23, 2025

CVE-2024-52329

7.4
    ECOVACS HOME mobile app
Published: January 23, 2025

CVE-2024-52330

7.4
    ECOVACS lawnmowers and vacuums
Published: January 23, 2025

CVE-2025-24030

7.1
    Envoy Gateway
Published: January 23, 2025

CVE-2025-22264

7.1
    WP Query Creator
Published: January 23, 2025

CVE-2025-22768

7.1
    Rocket Media Library Mime Type
Published: January 23, 2025

CVE-2025-23540

7.1
    WP Front-end login and register
Published: January 23, 2025

CVE-2025-23541

7.1
    Downloads
Published: January 23, 2025

CVE-2025-23544

7.1
    StatPressCN
Published: January 23, 2025

CVE-2025-23545

7.1
    WP Social Broadcast
Published: January 23, 2025

CVE-2025-23624

7.1
    WpDevTool
Published: January 23, 2025

CVE-2025-23626

7.1
    Kumihimo
Published: January 23, 2025

CVE-2025-23628

7.1
    GeoDigs
Published: January 23, 2025

CVE-2025-23629

7.1
    Gallerio
Published: January 23, 2025

CVE-2025-23634

7.1
    Youtube Video Grid
Published: January 23, 2025

CVE-2025-23636

7.1
    My Favorite Car
Published: January 23, 2025

CVE-2025-23722

7.1
    Mind3doM RyeBread Widgets
Published: January 23, 2025

CVE-2025-23723

7.1
    Plestar Directory Listing
Published: January 23, 2025

CVE-2025-23724

7.1
    University Quizzes Online
Published: January 23, 2025

CVE-2025-23725

7.1
    Accessibility Task Manager
Published: January 23, 2025

CVE-2025-23727

7.1
    AZ Content Finder
Published: January 23, 2025

CVE-2025-23729

7.1
    XTRA Settings
Published: January 23, 2025

CVE-2025-23730

7.1
    FLX Dashboard Groups
Published: January 23, 2025

CVE-2025-23733

7.1
    SC Simple Zazzle
Published: January 23, 2025

CVE-2025-23834

7.1
    Links/Problem Reporter
Published: January 23, 2025

CVE-2025-23835

7.1
    Legal +
Published: January 23, 2025

CVE-2025-23836

7.1
    SuryaBhan Custom Coming Soon
Published: January 23, 2025

CVE-2025-23894

7.1
    wp-flickr-press
Published: January 23, 2025

CVE-2025-23960

7.1
    Save & Import Image from URL
Published: January 23, 2025

CVE-2024-55928

6.8
    UNKNOWN
Published: January 23, 2025

CVE-2024-55930

6.6
    UNKNOWN
Published: January 23, 2025

CVE-2024-52972

6.5
    Kibana
Published: January 23, 2025

CVE-2024-53299

6.5
    Apache Wicket
Published: January 23, 2025

CVE-2024-43708

6.5
    Kibana
Published: January 23, 2025

CVE-2024-13236

6.5
    Tainacan
  • Tainacan
Published: January 23, 2025

CVE-2024-52327

6.5
    ECOVACS robot lawnmowers and vacuums
Published: January 23, 2025

CVE-2024-55925

6.5
    UNKNOWN
Published: January 23, 2025

CVE-2023-50309

6.4
    IBM Sterling B2B Integrator
Published: January 23, 2025

CVE-2025-24529

6.4
    phpMyAdmin
Published: January 23, 2025

CVE-2025-24530

6.4
    phpMyAdmin
Published: January 23, 2025

CVE-2024-12043

6.4
    Bdthemes
  • Prime Slider
Published: January 23, 2025

CVE-2024-12118

6.4
    Theeventscalendar
  • The Events Calendar
Published: January 23, 2025

CVE-2024-12504

6.4
    Videowhisper
  • Broadcast Live Video
Published: January 23, 2025

CVE-2024-13340

6.4
    Pluginus
  • Meta Data And Taxonomies Filter
Published: January 23, 2025

CVE-2024-13389

6.4
    Cliptakes
  • Cliptakes
Published: January 23, 2025

CVE-2024-55927

6.4
    UNKNOWN
Published: January 23, 2025

CVE-2025-23227

6.4
    IBM Tivoli Application Dependency Discovery Manager
Published: January 23, 2025

CVE-2024-12078

6.3
    ECOVACS robot lawn mowers and vacuums
Published: January 23, 2025

CVE-2024-55926

6.3
    UNKNOWN
Published: January 23, 2025

CVE-2024-13422

6.1
    SEO Blogger to WordPress Migration using 301 Redirection plugin for WordPress
Published: January 23, 2025

CVE-2024-57326

6.1
    Online Pizza Delivery System
Published: January 23, 2025

CVE-2024-57386

6.1
    Wallosapp
  • Wallos
Published: January 23, 2025

CVE-2024-57556

6.1
    Nbubna
  • Store
Published: January 23, 2025

CVE-2024-45672

6.0
    IBM Security Verify Bridge
Published: January 23, 2025

CVE-2024-10846

5.9
    Docker Compose
Published: January 23, 2025

CVE-2024-10539

5.5
    Uyumsoft ERP
Published: January 23, 2025

CVE-2024-50665

5.5
    Gpac
  • Gpac
Published: January 23, 2025

CVE-2024-57329

5.4
    HortusFox
Published: January 23, 2025

CVE-2024-42187

5.3
    BigFix Patch Download Plug-ins
Published: January 23, 2025

CVE-2025-0693

5.3
    AWS IAM
Published: January 23, 2025

CVE-2024-55929

5.0
    UNKNOWN
Published: January 23, 2025

CVE-2025-24353

5.0
    Directus
Published: January 23, 2025

CVE-2021-42718

4.9
    Replicated Classic
Published: January 23, 2025

CVE-2023-32340

4.6
    IBM Sterling B2B Integrator
Published: January 23, 2025

CVE-2024-43710

4.3
    Kibana
Published: January 23, 2025

CVE-2024-13511

4.3
    Variation Swatches For Woocommerce Project
  • Variation Swatches For Woocommerce
Published: January 23, 2025

CVE-2024-12079

3.3
    ECOVACS robot lawnmowers
Published: January 23, 2025

CVE-2025-24034

3.2
    Himmelblau
Published: January 23, 2025

CVE-2024-42186

2.8
    BigFix Patch Download Plug-ins
Published: January 23, 2025

CVE-2024-42182

2.5
    BigFix Patch Download Plug-ins
Published: January 23, 2025

CVE-2024-42183

2.5
    BigFix Patch Download Plug-ins
Published: January 23, 2025

CVE-2024-42184

2.5
    BigFix Patch Download Plug-ins
Published: January 23, 2025

CVE-2024-42185

2.5
    BigFix Patch Download Plug-ins
Published: January 23, 2025

CVE-2024-52328

2.3
    ECOVACS robot lawnmowers
    ECOVACS vacuums
Published: January 23, 2025

CVE-2024-57719

None
    lunasvg
Published: January 23, 2025

CVE-2024-57720

None
    lunasvg
Published: January 23, 2025

CVE-2024-57721

None
    lunasvg
Published: January 23, 2025

CVE-2024-57722

None
    lunasvg
Published: January 23, 2025

CVE-2024-57723

None
    lunasvg
Published: January 23, 2025

CVE-2024-57724

None
    lunasvg
Published: January 23, 2025

CVE-2024-12957

None
    Armoury Crate
Published: January 23, 2025

CVE-2025-0619

None
    M-Files Server
Published: January 23, 2025

CVE-2025-0635

None
    M-Files Server
Published: January 23, 2025

CVE-2025-0648

None
    M-Files Server
Published: January 23, 2025

CVE-2024-57947

None
    Linux Kernel
Published: January 23, 2025

CVE-2024-53379

None
    SharkSSL
Published: January 23, 2025
Click here to see more Vulnerabilities