Tag: 2025-01-24

4 Attack Reports | 199 Vulnerabilities

Attack reports

Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications

The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) are releasing this joint Cybersecurity Advisory in response to exploitation in September 2024 of vulnerabilities in Ivanti Cloud Service Appliances (CSA): CVE-2024-8963, an administrative bypass vu…
ivanti
cisa
2025-01-24
Published: January 24, 2025
Linked vulnerabilities : CVE-2024-8190 (CVSS 7.2), CVE-2024-8963 (CVSS 9.1), CVE-2024-9379 (CVSS 7.2), CVE-2024-9380 (CVSS 7.2), CVE-2024-9381 (CVSS 7.2), CVE-2025-0282 (CVSS 9.0), CVE-2025-0283 (CVSS 7.0)
Downloadable IOCs: 28

Tracking Adversaries: Ghostwriter APT Infrastructure

This analysis examines the infrastructure used by the Ghostwriter APT group, focusing on their phishing campaign targeting Ukrainian military. By pivoting on overlapping indicators of compromise (IOCs) from multiple threat reports, a cluster of malicious domains was identified. These domains share …
apt
belarus
cobalt strike
ukraine
2025-01-24
Published: January 24, 2025
Linked vulnerabilities : CVE-2022-30190
Downloadable IOCs: 25

Suspected KEYPLUG Infrastructure: TLS Certificates and GhostWolf Links

The article analyzes a cluster of network infrastructure associated with KEYPLUG, attributed to a suspected Chinese state-sponsored actor known as RedGolf or APT41. By examining historical TLS certificates and server configurations, researchers uncovered ongoing activity and links to recent operati…
apt41
2025-01-24
keyplug
ghostwolf
wolfssl
Published: January 24, 2025
Downloadable IOCs: 84

Hundreds of fake Reddit sites push Lumma Stealer malware

A widespread campaign involving nearly 1,000 fake web pages mimicking Reddit and WeTransfer has been discovered, aiming to distribute the Lumma Stealer malware. The attackers create convincing fake Reddit discussions and WeTransfer download pages to trick users into downloading the malicious payloa…
lumma stealer
2025-01-24
reddit impersonation
wetransfer impersonation
Published: January 24, 2025
Downloadable IOCs: 936
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-22609

10.0
    Coolify
Published: January 24, 2025

CVE-2025-22612

10.0
    Coolify
Published: January 24, 2025

CVE-2025-22611

9.9
    Coolify
Published: January 24, 2025

CVE-2024-56404

9.9
    One Identity Identity Manager
Published: January 24, 2025

CVE-2024-13545

9.8
    G5plus
  • Ultimate Bootstrap Elements For Elementor
Published: January 24, 2025

CVE-2024-50694

9.8
    SunGrow WiNet-SV
Published: January 24, 2025

CVE-2024-50695

9.8
    SunGrow WiNet-SV200
Published: January 24, 2025

CVE-2024-50698

9.8
    SunGrow WiNet
Published: January 24, 2025

CVE-2025-24650

9.1
    Themefic Tourfic
Published: January 24, 2025

CVE-2024-41739

8.8
    IBM Cognos Dashboards
Published: January 24, 2025

CVE-2019-15690

8.8
    LibVNCServer
Published: January 24, 2025

CVE-2025-0314

8.7
    GitLab CE/EE
Published: January 24, 2025

CVE-2024-9490

8.6
    Silicon Labs (8-bit) IDE
Published: January 24, 2025

CVE-2024-9491

8.6
    Configuration Wizard 2 installer
Published: January 24, 2025

CVE-2024-9492

8.6
    Flash Programming Utility
Published: January 24, 2025

CVE-2024-9493

8.6
    ToolStick
Published: January 24, 2025

CVE-2024-9494

8.6
    CP210 VCP Win 2k installer
Published: January 24, 2025

CVE-2024-9495

8.6
    CP210x VCP Windows installer
Published: January 24, 2025

CVE-2024-9496

8.6
    USBXpress Dev Kit
Published: January 24, 2025

CVE-2024-9497

8.6
    USBXpress 4 SDK
Published: January 24, 2025

CVE-2024-9498

8.6
    Silicon Labs USBXpress SDK
Published: January 24, 2025

CVE-2024-9499

8.6
    USBXpress Win 98SE Dev Kit
Published: January 24, 2025

CVE-2024-52807

8.6
    HL7 FHIR IG publisher
Published: January 24, 2025

CVE-2025-24669

8.5
    SERPed.net
Published: January 24, 2025

CVE-2025-24672

8.5
    CodePeople Form Builder CP
Published: January 24, 2025

CVE-2025-24728

8.5
    Bug Library
Published: January 24, 2025

CVE-2025-23222

8.4
    Deepin dde-api-proxy
Published: January 24, 2025

CVE-2025-24359

8.4
    ASTEVAL
Published: January 24, 2025

CVE-2024-50697

8.1
    SunGrow WiNet-SV200
Published: January 24, 2025

CVE-2024-25034

8.0
    IBM Planning Analytics
Published: January 24, 2025

CVE-2024-40693

8.0
    IBM Planning Analytics
Published: January 24, 2025

CVE-2022-47090

7.8
    GPAC MP4box
Published: January 24, 2025

CVE-2025-0707

7.8
    Rise Group Rise Mode Temp CPU
Published: January 24, 2025

CVE-2025-24587

7.6
    Email Subscription Popup
Published: January 24, 2025

CVE-2025-24659

7.6
    WordPress Download Manager Premium Packages
Published: January 24, 2025

CVE-2025-24663

7.6
    Simple Download Monitor
Published: January 24, 2025

CVE-2025-24683

7.6
    WPChill RSVP and Event Management Plugin
Published: January 24, 2025

CVE-2024-13408

7.5
    Pickplugins
  • Post Grid
Published: January 24, 2025

CVE-2024-13409

7.5
    Wpwax
  • Post Grid\, Slider \& Carousel Ultimate
Published: January 24, 2025

CVE-2025-23422

7.5
    Store Locator
Published: January 24, 2025

CVE-2025-22714

7.1
    MDJM Event Management
Published: January 24, 2025

CVE-2025-23427

7.1
    Dovy Paukstys Redux Converter
Published: January 24, 2025

CVE-2025-23522

7.1
    HM Portfolio
Published: January 24, 2025

CVE-2025-23621

7.1
    Causes - Donation Plugin
Published: January 24, 2025

CVE-2025-23622

7.1
    CBX Accounting & Bookkeeping
Published: January 24, 2025

CVE-2025-23711

7.1
    Quote me
Published: January 24, 2025

CVE-2025-23734

7.1
    Gigaom Sphinx
Published: January 24, 2025

CVE-2025-23737

7.1
    Network-Favorites
Published: January 24, 2025

CVE-2025-23837

7.1
    One Backend Language
Published: January 24, 2025

CVE-2025-23838

7.1
    Bauernregeln
Published: January 24, 2025

CVE-2025-23839

7.1
    Sticky Button
Published: January 24, 2025

CVE-2025-23885

7.1
    MJ Contact us
Published: January 24, 2025

CVE-2025-23888

7.1
    NotFound Custom Page Extensions
Published: January 24, 2025

CVE-2025-23889

7.1
    FooGallery Captions
Published: January 24, 2025

CVE-2025-24355

7.1
    Updatecli
Published: January 24, 2025

CVE-2025-24555

7.1
    Subscription DNA
Published: January 24, 2025

CVE-2025-24561

7.1
    ReviewsTap
Published: January 24, 2025

CVE-2025-24562

7.1
    KBucket
Published: January 24, 2025

CVE-2025-24570

7.1
    Atarim
Published: January 24, 2025

CVE-2025-24636

7.1
    MachForm Shortcode
Published: January 24, 2025

CVE-2025-24756

7.1
    mgplugin Roi Calculator
Published: January 24, 2025

CVE-2024-57095

6.8
    Go-CMS
Published: January 24, 2025

CVE-2024-13680

6.5
    Codepeople
  • Form Builder Cp
Published: January 24, 2025

CVE-2024-13594

6.5
    Neofix
  • Simple Downloads List
Published: January 24, 2025

CVE-2024-13698

6.5
    Astoundify
  • Jobify
Published: January 24, 2025

CVE-2024-45077

6.5
    IBM Maximo Asset Management
Published: January 24, 2025

CVE-2025-22608

6.5
    Coolify
Published: January 24, 2025

CVE-2025-24542

6.5
    Icegram
Published: January 24, 2025

CVE-2025-24547

6.5
    Caching Compatible Cookie Opt-In and JavaScript
Published: January 24, 2025

CVE-2025-24572

6.5
    WP Fast Total Search
Published: January 24, 2025

CVE-2025-24573

6.5
    PageLayer
Published: January 24, 2025

CVE-2025-24575

6.5
    HelloAsso
Published: January 24, 2025

CVE-2025-24578

6.5
    ElementInvader Addons for Elementor
Published: January 24, 2025

CVE-2025-24580

6.5
    12 Step Meeting List
Published: January 24, 2025

CVE-2025-24585

6.5
    N.O.U.S. Open Useful and Simple Event post
Published: January 24, 2025

CVE-2025-24588

6.5
    Patreon WordPress
Published: January 24, 2025

CVE-2025-24594

6.5
    Linet ERP-Woocommerce Integration
Published: January 24, 2025

CVE-2025-24595

6.5
    bPlugins All Embed - Elementor Addons
Published: January 24, 2025

CVE-2025-24610

6.5
    Restrict Anonymous Access
Published: January 24, 2025

CVE-2025-24627

6.5
    Blur Text
Published: January 24, 2025

CVE-2025-24638

6.5
    Create with Code
Published: January 24, 2025

CVE-2025-24673

6.5
    AyeCode Ltd Ketchup Shortcodes
Published: January 24, 2025

CVE-2025-24675

6.5
    WP Visitor Statistics (Real Time Traffic)
Published: January 24, 2025

CVE-2025-24678

6.5
    Listamester
Published: January 24, 2025

CVE-2025-24687

6.5
    Show/Hide Shortcode
Published: January 24, 2025

CVE-2025-24702

6.5
    Xagio SEO
Published: January 24, 2025

CVE-2025-24704

6.5
    Magic the Gathering Card Tooltips
Published: January 24, 2025

CVE-2025-24706

6.5
    WC Marketplace
Published: January 24, 2025

CVE-2025-24709

6.5
    Plethora Plugins Tabs + Accordions
Published: January 24, 2025

CVE-2025-24719

6.5
    wpdevart Widget Countdown
Published: January 24, 2025

CVE-2025-24721

6.5
    Easy YouTube Gallery
Published: January 24, 2025

CVE-2025-24726

6.5
    HT Conctact Form 7
Published: January 24, 2025

CVE-2025-24729

6.5
    ElementInvader Addons for Elementor
Published: January 24, 2025

CVE-2025-24730

6.5
    WP VR
Published: January 24, 2025

CVE-2025-24732

6.5
    Booking & Appointment - Repute Infosystems BookingPress
Published: January 24, 2025

CVE-2025-24733

6.5
    Post Grid Master
Published: January 24, 2025

CVE-2025-24746

6.5
    Popup Maker
Published: January 24, 2025

CVE-2025-24755

6.5
    PDF Invoices for WooCommerce + Drag and Drop Template Builder
Published: January 24, 2025

CVE-2024-50690

6.5
    SunGrow WiNet-SV200
Published: January 24, 2025

CVE-2024-11931

6.4
    GitLab CE/EE
Published: January 24, 2025

CVE-2024-13659

6.4
    Listamester
  • Listamester
Published: January 24, 2025

CVE-2024-12494

6.4
    Bmltenabled
  • Meeting Map
Published: January 24, 2025

CVE-2024-13583

6.4
    Come2theweb
  • Simple Gallery With Filter
Published: January 24, 2025

CVE-2024-13354

6.4
    Cyberchimps
  • Responsive Addons
Published: January 24, 2025

CVE-2024-13542

6.4
    Agenceseo
  • Wp Google Street View
Published: January 24, 2025

CVE-2024-13572

6.4
    Nfusionsolutions
  • Precious Metals Charts And Widgets
Published: January 24, 2025

CVE-2025-0698

6.3
    UNKNOWN
Published: January 24, 2025

CVE-2025-0699

6.3
    joeybling bootplus
Published: January 24, 2025

CVE-2025-0700

6.3
    UNKNOWN
Published: January 24, 2025

CVE-2025-0701

6.3
    JoeyBling bootplus
Published: January 24, 2025

CVE-2025-0702

6.3
    JoeyBling bootplus
Published: January 24, 2025

CVE-2025-24025

6.1
    Coolify
Published: January 24, 2025

CVE-2024-41757

5.9
    IBM Concert Software
Published: January 24, 2025

CVE-2025-24579

5.9
    Nested Pages
Published: January 24, 2025

CVE-2025-24634

5.9
    Orbisius Simple Notice
Published: January 24, 2025

CVE-2025-24644

5.9
    Webtoffee
  • Woocommerce Pdf Invoices\, Packing Slips\, Delivery Notes And Shipping Labels
Published: January 24, 2025

CVE-2025-24657

5.9
    Wishlist for WooCommerce
Published: January 24, 2025

CVE-2025-24658

5.9
    Auction Nudge – Your eBay on Your Site
Published: January 24, 2025

CVE-2025-24666

5.9
    AI Chatbot for WordPress - Hyve Lite
Published: January 24, 2025

CVE-2025-24668

5.9
    PPOM for WooCommerce
Published: January 24, 2025

CVE-2025-24674

5.9
    Teplitsa. Technologies for Social Good ShMapper by Teplitsa
Published: January 24, 2025

CVE-2025-24681

5.9
    Product Carousel Slider & Grid Ultimate for WooCommerce
Published: January 24, 2025

CVE-2025-24722

5.9
    FAQ Builder AYS
Published: January 24, 2025

CVE-2025-24723

5.9
    CodePeople Booking Calendar Contact Form
Published: January 24, 2025

CVE-2025-24727

5.9
    CodePeople Contact Form Email
Published: January 24, 2025

CVE-2025-24731

5.9
    IP2Location Country Blocker
Published: January 24, 2025

CVE-2024-57277

5.7
    InnoShop
Published: January 24, 2025

CVE-2024-57184

5.5
    GPAC
Published: January 24, 2025

CVE-2024-11913

5.4
    Buddydev
  • Activity Plus Reloaded For Buddypress
Published: January 24, 2025

CVE-2025-24546

5.4
    RSTheme Ultimate Coming Soon & Maintenance
Published: January 24, 2025

CVE-2025-24571

5.4
    WP Fast Total Search
Published: January 24, 2025

CVE-2025-24604

5.4
    VForm
Published: January 24, 2025

CVE-2025-24622

5.4
    PickPlugins Job Board Manager
Published: January 24, 2025

CVE-2025-24647

5.4
    WooCommerce Cloak Affiliate Links
Published: January 24, 2025

CVE-2025-24652

5.4
    WP Duplicate - WordPress Migration Plugin
Published: January 24, 2025

CVE-2025-24711

5.4
    Wow-Company Popup Box
Published: January 24, 2025

CVE-2025-24712

5.4
    Radius Blocks
Published: January 24, 2025

CVE-2025-24713

5.4
    Wow-Company Button Generator
Published: January 24, 2025

CVE-2025-24714

5.4
    Bubble Menu - circle floating menu
Published: January 24, 2025

CVE-2025-24715

5.4
    Counter Box
Published: January 24, 2025

CVE-2025-24716

5.4
    Wow-Company Herd Effects
Published: January 24, 2025

CVE-2025-24717

5.4
    Modal Window
Published: January 24, 2025

CVE-2025-24720

5.4
    Wow-Company Sticky Buttons
Published: January 24, 2025

CVE-2025-24724

5.4
    Side Menu Lite
Published: January 24, 2025

CVE-2025-24750

5.4
    ExactMetrics
Published: January 24, 2025

CVE-2025-21262

5.4
    Microsoft
  • Edge Chromium
Published: January 24, 2025

CVE-2024-50692

5.4
    SunGrow WiNet-SV200
Published: January 24, 2025

CVE-2025-0697

5.3
    Telstra Smart Modem Gen 2
Published: January 24, 2025

CVE-2024-40706

5.3
    IBM InfoSphere Information Server
Published: January 24, 2025

CVE-2025-24552

5.3
    David de Boer Paytium
Published: January 24, 2025

CVE-2025-24582

5.3
    Code for Recovery 12 Step Meeting List
Published: January 24, 2025

CVE-2025-24596

5.3
    Wcproducttable
  • Woocommerce Product Table
Published: January 24, 2025

CVE-2025-24633

5.3
    Build Private Store For Woocommerce
Published: January 24, 2025

CVE-2025-24705

5.3
    Arshid WooCommerce Quick View
Published: January 24, 2025

CVE-2025-0704

5.3
    UNKNOWN
Published: January 24, 2025

CVE-2025-24611

4.9
    WP Ultimate Exporter
Published: January 24, 2025

CVE-2024-57041

4.6
    NodeBB
Published: January 24, 2025

CVE-2025-24695

4.4
    Extensions For CF7
Published: January 24, 2025

CVE-2025-24701

4.4
    Chained Quiz
Published: January 24, 2025

CVE-2025-24703

4.4
    DLX Plugins Comment Edit Core - Simple Comment Editing
Published: January 24, 2025

CVE-2024-13683

4.3
    Sperse
  • Automate Hub
Published: January 24, 2025

CVE-2024-13335

4.3
    Templatescoder
  • Spexo Addons For Elementor
Published: January 24, 2025

CVE-2024-10324

4.3
    Rometheme
  • Romethemekit For Elementor
Published: January 24, 2025

CVE-2025-23991

4.3
    theDotstore Product Size Charts Plugin for WooCommerce
Published: January 24, 2025

CVE-2025-24543

4.3
    Ultimate Coming Soon & Maintenance
Published: January 24, 2025

CVE-2025-24568

4.3
    Brainstorm Force Starter Templates
Published: January 24, 2025

CVE-2025-24589

4.3
    JSM Show Post Metadata
Published: January 24, 2025

CVE-2025-24591

4.3
    NinjaTeam GDPR CCPA Compliance Support
Published: January 24, 2025

CVE-2025-24613

4.3
    FV Thoughtful Comments
Published: January 24, 2025

CVE-2025-24618

4.3
    ElementInvader Addons for Elementor
Published: January 24, 2025

CVE-2025-24623

4.3
    Really Simple SSL
Published: January 24, 2025

CVE-2025-24625

4.3
    Taxonomy/Term and Role based Discounts for WooCommerce
Published: January 24, 2025

CVE-2025-24649

4.3
    Admin and Site Enhancements (ASE)
Published: January 24, 2025

CVE-2025-24679

4.3
    Internal Links Manager
Published: January 24, 2025

CVE-2025-24682

4.3
    Super Block Slider
Published: January 24, 2025

CVE-2025-24691

4.3
    People Lists
Published: January 24, 2025

CVE-2025-24693

4.3
    Yehi Advanced Notifications
Published: January 24, 2025

CVE-2025-24696

4.3
    WP Attire Attire Blocks
Published: January 24, 2025

CVE-2025-24698

4.3
    G5Theme Essential Real Estate
Published: January 24, 2025

CVE-2025-24725

4.3
    Thim Elementor Kit
Published: January 24, 2025

CVE-2025-24736

4.3
    Metaphor Creations Post Duplicator
Published: January 24, 2025

CVE-2025-24738

4.3
    Call Now Button
Published: January 24, 2025

CVE-2025-24739

4.3
    FluentSMTP
Published: January 24, 2025

CVE-2025-24751

4.3
    GoDaddy CoBlocks
Published: January 24, 2025

CVE-2025-24753

4.3
    Kadencewp
  • Gutenberg Blocks With Ai
Published: January 24, 2025

CVE-2025-0703

4.3
    UNKNOWN
Published: January 24, 2025

CVE-2025-0705

4.3
    JoeyBling Bootplus
Published: January 24, 2025

CVE-2025-24363

4.2
    HL7 FHIR IG Publisher
Published: January 24, 2025

CVE-2025-0708

3.5
    fumiao opencms
Published: January 24, 2025

CVE-2025-0710

3.5
    CampCodes School Management Software
Published: January 24, 2025

CVE-2024-35122

2.8
    IBM i
Published: January 24, 2025

CVE-2025-0706

2.4
    UNKNOWN
Published: January 24, 2025

CVE-2025-0709

2.4
    Dcat-Admin
Published: January 24, 2025

CVE-2021-30745

None
    UNKNOWN
Published: January 24, 2025

CVE-2025-22605

None
    Coolify
Published: January 24, 2025

CVE-2025-22606

None
    Coolify
Published: January 24, 2025

CVE-2025-22607

None
    Coolify
Published: January 24, 2025

CVE-2025-22610

None
    Coolify
Published: January 24, 2025

CVE-2025-24362

None
    CodeQL Action
    CodeQL CLI
Published: January 24, 2025
Click here to see more Vulnerabilities