Tag: 2025-01-30

5 Attack Reports | 143 Vulnerabilities

Attack reports

Tria stealer targets Android users for SMS exfiltration and financial gain

Since mid-2024, a malicious Android campaign dubbed 'Tria Stealer' has been targeting users in Malaysia and Brunei using wedding invitation lures. The malware collects SMS data, call logs, messages from apps like WhatsApp, and email data from Gmail and Outlook. It exfiltrates this information to Te…
android
stealer
telegram
2025-01-30
tria stealer
brunei
Published: January 30, 2025
Downloadable IOCs: 3

Operation Phantom Circuit: North Korea's Global Data Exfiltration Campaign

In December 2024, the Lazarus Group, a North Korean threat actor, launched a sophisticated global campaign targeting cryptocurrency and technology developers. The operation, code-named 'Phantom Circuit,' involved embedding malware into trusted development tools, compromising hundreds of victims wor…
north korea
cryptocurrency
data exfiltration
software supply chain
command-and-control
2025-01-30
phantom circuit
Published: January 30, 2025
Downloadable IOCs: 13

A closer look at the Tria stealer campaign

A malicious Android campaign named Tria Stealer has been targeting users in Malaysia and Brunei since mid-2024. The campaign uses wedding invitation lures to trick victims into installing a malicious app that collects SMS data, tracks call logs, and steals messages from apps like WhatsApp and email…
phishing
android
2025-01-30
telegram bots
tria stealer
Published: January 30, 2025
Downloadable IOCs: 3

HTTP Client Tools Exploitation for Account Takeover Attacks

This analysis reveals a growing trend of attackers repurposing legitimate HTTP client tools to compromise Microsoft 365 environments. The report highlights two main attack campaigns: one using Axios client with a 43% success rate in compromising user accounts, and another using Node Fetch client fo…
adversary-in-the-middle
microsoft 365
account takeover
2025-01-30
brute force
node fetch
okhttp
axios
http client tools
Published: January 30, 2025
Downloadable IOCs: 6

CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia

A sophisticated cyberespionage campaign targeting high-value entities in South Asia, particularly a telecommunications organization, has been identified. The threat actor, tracked as CL-STA-0048, employed rare techniques like 'Hex Staging' for payload delivery and DNS-based data exfiltration. The o…
apt
plugx
cobalt strike
south asia
2025-01-30
Published: January 30, 2025
Linked vulnerabilities : CVE-2025-0282 (CVSS 9.0), CVE-2025-0283 (CVSS 7.0)
Downloadable IOCs: 21
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-12822

9.8
    Userproplugin
  • Media Manager
Published: January 30, 2025

CVE-2024-13742

9.8
    Icontrolwp
  • Icontrolwp
Published: January 30, 2025

CVE-2024-12248

9.8
    UNKNOWN
Published: January 30, 2025

CVE-2025-0680

9.8
    Unknown
Published: January 30, 2025

CVE-2024-10591

8.8
    Makewebbetter
  • Hubspot For Woocommerce
Published: January 30, 2025

CVE-2024-12129

8.8
    Wp-Royal-Themes
  • Royal Core
Published: January 30, 2025

CVE-2024-12821

8.8
    Userproplugin
  • Media Manager
Published: January 30, 2025

CVE-2024-13707

8.8
    Ivanm
  • Wp Image Uploader
Published: January 30, 2025

CVE-2024-13720

8.8
    Ivanm
  • Wp Image Uploader
Published: January 30, 2025

CVE-2025-0147

8.8
    Zoom Workplace App for Linux
Published: January 30, 2025

CVE-2025-0739

8.6
    EmbedAI
Published: January 30, 2025

CVE-2025-0740

8.6
    EmbedAI
Published: January 30, 2025

CVE-2025-0747

8.6
    EmbedAI
Published: January 30, 2025

CVE-2025-24802

8.6
    Plonky2
Published: January 30, 2025

CVE-2025-22218

8.5
    VMware Aria Operations for Logs
Published: January 30, 2025

CVE-2024-13646

8.1
    Aakashbhagat
  • Single User Chat
Published: January 30, 2025

CVE-2025-23374

8.0
    Dell
  • Enterprise Sonic Distribution
Published: January 30, 2025

CVE-2025-0834

7.8
    Wondershare Dr.Fone
Published: January 30, 2025

CVE-2025-21107

7.8
    Dell
  • Networker
    Linux
    Microsoft
Published: January 30, 2025

CVE-2024-44142

7.8
    GarageBand
Published: January 30, 2025

CVE-2024-11609

7.8
    AutomationDirect C-More EA9
Published: January 30, 2025

CVE-2024-11610

7.8
    AutomationDirect C-More EA9
Published: January 30, 2025

CVE-2024-11611

7.8
    AutomationDirect C-More EA9
Published: January 30, 2025

CVE-2025-22222

7.7
    VMware Aria Operations
Published: January 30, 2025

CVE-2025-24886

7.7
    CTFd
Published: January 30, 2025

CVE-2025-24885

7.6
    pwn.college
Published: January 30, 2025

CVE-2024-13694

7.5
    Moreconvert
  • Woocommerce Wishlist
Published: January 30, 2025

CVE-2025-0744

7.5
    EmbedAI
Published: January 30, 2025

CVE-2025-0745

7.5
    EmbedAI
Published: January 30, 2025

CVE-2024-12269

7.5
    Wpmessiah
  • Safe Ai Malware Protection For Wp
Published: January 30, 2025

CVE-2024-13671

7.5
    Partitionnumerique
  • Music Sheet Viewer
Published: January 30, 2025

CVE-2025-0626

7.5
    UNKNOWN
Published: January 30, 2025

CVE-2025-0568

7.5
    Santesoft
  • Sante Pacs Server
Published: January 30, 2025

CVE-2025-0569

7.5
    Santesoft
  • Sante Pacs Server
Published: January 30, 2025

CVE-2025-0574

7.5
    Santesoft
  • Sante Pacs Server
Published: January 30, 2025

CVE-2025-0846

7.3
    1000projects
  • Employee Task Management System
Published: January 30, 2025

CVE-2025-0847

7.3
    1000projects
  • Employee Task Management System
Published: January 30, 2025

CVE-2024-13453

7.3
    WordPress Contact Form & SMTP Plugin by PirateForms
Published: January 30, 2025

CVE-2024-11600

7.2
    Visualmodo
  • Borderless
Published: January 30, 2025

CVE-2024-12400

7.1
    WordPress TourMaster plugin
Published: January 30, 2025

CVE-2024-12638

7.1
    Bulk Me Now! WordPress plugin
Published: January 30, 2025

CVE-2024-12708

7.1
    Bulk Me Now! WordPress plugin
Published: January 30, 2025

CVE-2022-43916

6.8
    IBM App Connect Enterprise Certified Container
Published: January 30, 2025

CVE-2025-22219

6.8
    VMware Aria Operations for Logs
Published: January 30, 2025

CVE-2025-23216

6.8
    Argo CD
Published: January 30, 2025

CVE-2025-0848

6.5
    Tenda A18
Published: January 30, 2025

CVE-2025-0374

6.5
    FreeBSD
Published: January 30, 2025

CVE-2024-12163

6.5
    goodlayers-core WordPress plugin
Published: January 30, 2025

CVE-2024-13758

6.5
    Dwbooster
  • Cp Contact Form
Published: January 30, 2025

CVE-2024-12861

6.5
    Villatheme
  • W2s
Published: January 30, 2025

CVE-2024-13596

6.5
    Modalsurvey
  • Wordpress Survey And Poll
Published: January 30, 2025

CVE-2024-53615

6.5
    files.gallery
Published: January 30, 2025

CVE-2025-23367

6.5
    Wildfly Server
Published: January 30, 2025

CVE-2025-24376

6.5
    kubewarden-controller
Published: January 30, 2025

CVE-2025-0367

6.5
    Splunk Supporting Add-on for Active Directory
Published: January 30, 2025

CVE-2025-0570

6.5
    Santesoft
  • Sante Pacs Server
Published: January 30, 2025

CVE-2025-0571

6.5
    Santesoft
  • Sante Pacs Server
Published: January 30, 2025

CVE-2024-12921

6.4
    WordPress EthereumICO plugin
Published: January 30, 2025

CVE-2024-13642

6.4
    Motopress
  • Stratum
Published: January 30, 2025

CVE-2024-13470

6.4
    Ninjaforms
  • Ninja Forms
Published: January 30, 2025

CVE-2024-13732

6.4
    Cyberchimps
  • Responsive Blocks
Published: January 30, 2025

CVE-2024-12524

6.4
    Clinked Client Portal plugin for WordPress
Published: January 30, 2025

CVE-2024-13380

6.4
    Alex Reservations: Smart Restaurant Booking plugin for WordPress
Published: January 30, 2025

CVE-2024-13466

6.4
    WordPress Automatically Hierarchic Categories in Menu plugin
Published: January 30, 2025

CVE-2024-10847

6.4
    Sellerthemes
  • Storely
Published: January 30, 2025

CVE-2024-12444

6.4
    Wpdispensary
  • Wp Dispensary
Published: January 30, 2025

CVE-2024-12451

6.4
    Proxymis
  • Html5 Chat
Published: January 30, 2025

CVE-2024-13349

6.4
    Stockdio
  • Stockdio Historical Chart
Published: January 30, 2025

CVE-2024-13400

6.4
    Gubbigubbi
  • Kona Gallery Block
Published: January 30, 2025

CVE-2024-13460

6.4
    Wordpresteem
  • We - Testimonial Slide
Published: January 30, 2025

CVE-2024-13549

6.4
    Areoi
  • All Bootstrap Blocks
Published: January 30, 2025

CVE-2024-13661

6.4
    Wptableeditor
  • Table Editor
Published: January 30, 2025

CVE-2024-13664

6.4
    Wpbean
  • Wp Post List Table
Published: January 30, 2025

CVE-2024-13670

6.4
    Partitionnumerique
  • Music Sheet Viewer
Published: January 30, 2025

CVE-2024-13700

6.4
    Vinayjain
  • Embed Swagger Ui
Published: January 30, 2025

CVE-2025-0849

6.3
    Campcodes
  • School Management Software
Published: January 30, 2025

CVE-2025-0872

6.3
    Angeljudesuarez
  • Tailoring Management System
Published: January 30, 2025

CVE-2025-0873

6.3
    Angeljudesuarez
  • Tailoring Management System
Published: January 30, 2025

CVE-2025-0874

6.3
    Fabianros
  • Simple Car Rental System
Published: January 30, 2025

CVE-2025-0880

6.3
    Codezips
  • Gym Management System
Published: January 30, 2025

CVE-2025-0881

6.3
    Codezips Gym Management System
Published: January 30, 2025

CVE-2025-0882

6.3
    Fabianros
  • Chat System
Published: January 30, 2025

CVE-2025-0681

6.2
    Cloud MQTT service
Published: January 30, 2025

CVE-2025-0860

6.1
    Vruiz
  • Vr-Frases
Published: January 30, 2025

CVE-2024-12409

6.1
    Simple:Press Forum plugin for WordPress
Published: January 30, 2025

CVE-2024-13706

6.1
    WP Image Uploader plugin for WordPress
Published: January 30, 2025

CVE-2025-0746

6.1
    EmbedAI
Published: January 30, 2025

CVE-2024-12177

6.1
    Wpmessiah
  • Ai Image Alt Text Generator For Wp
Published: January 30, 2025

CVE-2024-12299

6.1
    Bowo
  • System Dashboard
Published: January 30, 2025

CVE-2024-12320

6.1
    Shoalsummitsolutions
  • Team Rosters
Published: January 30, 2025

CVE-2024-13512

6.1
    Wonderjarcreative
  • Wonder Fontawesome
Published: January 30, 2025

CVE-2024-13705

6.1
    Stageshow Project
  • Stageshow
Published: January 30, 2025

CVE-2025-0373

6.0
    FreeBSD
Published: January 30, 2025

CVE-2024-10309

5.9
    Tracking Code Manager WordPress plugin
Published: January 30, 2025

CVE-2025-0683

5.9
    UNKNOWN
Published: January 30, 2025

CVE-2025-0741

5.8
    EmbedAI
Published: January 30, 2025

CVE-2025-0742

5.8
    EmbedAI
Published: January 30, 2025

CVE-2024-55415

5.7
    DevDojo Voyager
Published: January 30, 2025

CVE-2025-0870

5.6
    Axiosys
  • Bento4
Published: January 30, 2025

CVE-2024-13457

5.3
    Liquidweb
  • Event Tickets
Published: January 30, 2025

CVE-2025-0743

5.3
    EmbedAI
Published: January 30, 2025

CVE-2025-0573

5.3
    Santesoft
  • Sante Pacs Server
Published: January 30, 2025

CVE-2025-22221

5.2
    VMware Aria Operation for Logs
Published: January 30, 2025

CVE-2025-24099

5.1
    macOS Ventura
    macOS Sonoma
    macOS Sequoia
Published: January 30, 2025

CVE-2025-0662

4.9
    FreeBSD kernel
Published: January 30, 2025

CVE-2025-0861

4.9
    Vruiz
  • Vr-Frases
Published: January 30, 2025

CVE-2025-0145

4.6
    Zoom Workplace Apps for Windows
Published: January 30, 2025

CVE-2025-0844

4.3
    Needyamin
  • Library Card System
Published: January 30, 2025

CVE-2024-12709

4.3
    Bulk Me Now! WordPress plugin
Published: January 30, 2025

CVE-2025-0869

4.3
    Cianet ONU GW24AC
Published: January 30, 2025

CVE-2024-11583

4.3
    Visualmodo
  • Borderless
Published: January 30, 2025

CVE-2024-12102

4.3
    Seventhqueen
  • Typer Core
Published: January 30, 2025

CVE-2024-13652

4.3
    Ecpay
  • Ecpay Ecommerce For Woocommerce
Published: January 30, 2025

CVE-2024-13715

4.3
    Ikjweb
  • Zstore Manager Basic
Published: January 30, 2025

CVE-2024-8494

4.3
    Elementor
  • Website Builder
Published: January 30, 2025

CVE-2024-55417

4.3
    DevDojo Voyager
Published: January 30, 2025

CVE-2025-22220

4.3
    VMware Aria Operations for Logs
Published: January 30, 2025

CVE-2025-24784

4.3
    kubewarden-controller
Published: January 30, 2025

CVE-2025-0142

4.3
    Zoom Jenkins Marketplace plugin
Published: January 30, 2025

CVE-2025-0143

4.3
    Zoom Workplace App for Linux
Published: January 30, 2025

CVE-2025-0572

4.3
    Santesoft
  • Sante Pacs Server
Published: January 30, 2025

CVE-2025-0146

3.9
    Zoom Workplace App for macOS
Published: January 30, 2025

CVE-2024-55416

3.5
    DevDojo Voyager
Published: January 30, 2025

CVE-2025-0871

3.5
    Maybecms
Published: January 30, 2025

CVE-2025-0144

3.1
    Zoom Workplace Apps
Published: January 30, 2025

CVE-2025-23007

None
    SonicWall NetExtender
Published: January 30, 2025

CVE-2025-24883

None
    go-ethereum
Published: January 30, 2025

CVE-2024-2658

None
    FlexNet Publisher
Published: January 30, 2025

CVE-2023-29080

None
    InstallShield
Published: January 30, 2025

CVE-2025-0477

None
    Rockwell Automation FactoryTalk AssetCentre
Published: January 30, 2025

CVE-2025-0497

None
    Rockwell Automation FactoryTalk® AssetCentre
Published: January 30, 2025

CVE-2025-0498

None
    Rockwell Automation FactoryTalk® AssetCentre
Published: January 30, 2025

CVE-2025-24500

None
    UNKNOWN
Published: January 30, 2025

CVE-2025-24501

None
    UNKNOWN
Published: January 30, 2025

CVE-2025-24502

None
    UNKNOWN
Published: January 30, 2025

CVE-2025-24503

None
    PAM
Published: January 30, 2025

CVE-2025-24504

None
    Symantec
Published: January 30, 2025

CVE-2025-24505

None
    UNKNOWN
Published: January 30, 2025

CVE-2025-24506

None
    UNKNOWN
Published: January 30, 2025

CVE-2025-24507

None
    UNKNOWN
Published: January 30, 2025

CVE-2024-10026

None
    gVisor
Published: January 30, 2025

CVE-2024-10603

None
    gVisor
Published: January 30, 2025

CVE-2024-10604

None
    Fuchsia
Published: January 30, 2025
Click here to see more Vulnerabilities