Tag: 2025-02-06

5 Attack Reports | 106 Vulnerabilities

Attack reports

Code injection attacks using publicly disclosed ASP.NET machine keys

An unattributed threat actor has been observed exploiting publicly disclosed ASP.NET machine keys to perform ViewState code injection attacks, delivering the Godzilla post-exploitation framework. Over 3,000 publicly disclosed keys have been identified as potentially vulnerable to this attack method…
viewstate
godzilla
post-exploitation
iis
web servers
code injection
2025-02-06
asp.net
machine keys
Published: February 6, 2025
Downloadable IOCs: 0

SparkCat crypto stealer in Google Play and App Store

A new malware campaign dubbed 'SparkCat' has been discovered targeting Android and iOS users through both official and unofficial app stores. The malware, embedded in various apps, uses OCR technology to scan users' image galleries for crypto wallet recovery phrases. Infected Android apps on Google…
ios
android
rust
google play
ocr
sparkcat
crypto stealer
2025-02-06
ml kit
app store
Published: February 6, 2025
Downloadable IOCs: 9

Fake DeepSeek Sites Used for Credential Phishing, Crypto Theft, Scams

Researchers have identified numerous fake DeepSeek websites being used for malicious purposes, including credential phishing, cryptocurrency theft, and various scams. Over 50 active sites and thousands of potentially malicious domains have been observed. These fake sites range from obvious imitatio…
phishing
cryptocurrency
credential theft
scams
2025-02-06
deepseek
qr code scams
wallet drainers
fake websites
Published: February 6, 2025
Downloadable IOCs: 0

When Data Tools Become Dangerous: MS Power BI Links Used in Phishing Campaigns

A sophisticated phishing campaign has been detected that exploits trusted platforms like SharePoint and Power BI to steal user credentials. The scheme uses a seemingly legitimate SharePoint link in an email, which leads to a Power BI report. Users are then prompted to click 'Open Document', redirec…
phishing
social engineering
credential theft
email spoofing
sharepoint
2025-02-06
power bi
microsoft impersonation
Published: February 6, 2025
Downloadable IOCs: 0

Phishing via 'com-' prefix domains

This analysis reveals a new phishing trend using domains with a "com-" prefix to mimic legitimate websites. The scam targets users of Florida's Sunpass toll system, exploiting the similarity between sunpass.com and fraudulent "com-" domains. A surge in "com-" prefix domain registrations has been ob…
phishing
2025-02-06
newly-registered-domains
domain-spoofing
sunpass
dns-monitoring
com-prefix
toll-fraud
Published: February 6, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-24786

10.0
    WhoDB
Published: February 6, 2025

CVE-2024-51547

9.8
    Abb
  • Aspect-Ent-2 Firmware
  • Aspect-Ent-2
  • Aspect-Ent-256 Firmware
  • Aspect-Ent-256
  • Aspect-Ent-96 Firmware
  • Aspect-Ent-96
  • Nexus-2128 Firmware
  • Nexus-2128
  • Nexus-2128-A Firmware
  • Nexus-2128-A
  • Nexus-2128-F Firmware
  • Nexus-2128-F
  • Nexus-2128-G Firmware
  • Nexus-2128-G
  • Nexus-264 Firmware
  • Nexus-264
  • Nexus-264-A Firmware
  • Nexus-264-A
  • Nexus-264-F Firmware
  • Nexus-264-F
  • Nexus-264-G Firmware
  • Nexus-264-G
  • Nexus-3-2128 Firmware
  • Nexus-3-2128
  • Aspect-Ent-12 Firmware
  • Aspect-Ent-12
  • Nexus-3-264 Firmware
  • Nexus-3-264
  • Matrix-11 Firmware
  • Matrix-11
  • Matrix-216 Firmware
  • Matrix-216
  • Matrix-232 Firmware
  • Matrix-232
  • Matrix-264 Firmware
  • Matrix-264
  • Matrix-296 Firmware
  • Matrix-296
Published: February 6, 2025

CVE-2022-40916

9.8
    Tiny File Manager
Published: February 6, 2025

CVE-2024-57430

9.8
    PHPJabbers Cinema Booking System
Published: February 6, 2025

CVE-2024-36554

9.8
    Forever KidsWatch Call Me KW-50
    Forever KidsWatch Call Me KW-60
Published: February 6, 2025

CVE-2024-36555

9.8
    Forever KidsWatch Call Me KW50
    Forever KidsWatch Call Me 2 KW-60
Published: February 6, 2025

CVE-2025-22992

9.8
    Emoncms
Published: February 6, 2025

CVE-2024-57428

9.3
    PHPJabbers Cinema Booking System
Published: February 6, 2025

CVE-2025-24981

9.3
    MDC
Published: February 6, 2025

CVE-2024-51450

9.1
    IBM Security Verify Directory
Published: February 6, 2025

CVE-2024-36556

9.1
    Forever KidsWatch Call Me KW50
    Forever KidsWatch Call Me 2 KW60
Published: February 6, 2025

CVE-2024-39272

9.0
    ClearML Enterprise Server
Published: February 6, 2025

CVE-2025-20094

8.8
    Defense Platform Home Edition
Published: February 6, 2025

CVE-2025-23236

8.8
    Defense Platform Home Edition
Published: February 6, 2025

CVE-2025-0994

8.8
    Trimble
  • Cityworks
Published: February 6, 2025

CVE-2024-57668

8.8
    Fabianros
  • Shopping Portal
Published: February 6, 2025

CVE-2025-23093

8.8
    Mitel OpenScape 4000
    Mitel OpenScape 4000 Manager
Published: February 6, 2025

CVE-2024-55241

8.8
    deep-diver LLM-As-Chatbot
Published: February 6, 2025

CVE-2025-21342

8.8
    Microsoft
  • Edge Chromium
Published: February 6, 2025

CVE-2025-21408

8.8
    Microsoft
  • Edge Chromium
Published: February 6, 2025

CVE-2025-21177

8.7
    Microsoft
  • Dynamics 365 Sales
Published: February 6, 2025

CVE-2024-37358

8.6
    Apache James
Published: February 6, 2025

CVE-2025-24787

8.6
    WhoDB
Published: February 6, 2025

CVE-2024-57609

8.6
    Kanaries Inc Pygwalker
Published: February 6, 2025

CVE-2022-31764

8.5
    Apache ShardingSphere ElasticJob-UI
Published: February 6, 2025

CVE-2024-36553

8.1
    Forever KidsWatch Call Me KW-50
Published: February 6, 2025

CVE-2024-47258

8.1
    2N Access Commander
Published: February 6, 2025

CVE-2024-54909

8.1
    GoldPanKit eva-server
Published: February 6, 2025

CVE-2024-49814

7.8
    IBM Security Verify Access Appliance
Published: February 6, 2025

CVE-2024-57960

7.7
    UNKNOWN
Published: February 6, 2025

CVE-2024-43779

7.7
    ClearML Enterprise Server
Published: February 6, 2025

CVE-2024-39033

7.5
    Newgensoft OmniDocs
Published: February 6, 2025

CVE-2024-57610

7.5
    Sylius
Published: February 6, 2025

CVE-2025-22867

7.5
    Go programming language
Published: February 6, 2025

CVE-2024-57392

7.5
    ProFTPD
Published: February 6, 2025

CVE-2024-13487

7.3
    The CURCY - Multi Currency for WooCommerce plugin
Published: February 6, 2025

CVE-2024-57426

7.3
    NetMod VPN Client
Published: February 6, 2025

CVE-2025-23094

7.3
    Mitel OpenScape 4000
Published: February 6, 2025

CVE-2024-54171

7.1
    IBM EntireX
Published: February 6, 2025

CVE-2024-57961

6.8
    Huawei emcom module
Published: February 6, 2025

CVE-2024-57957

6.6
    UI framework module
Published: February 6, 2025

CVE-2024-36557

6.6
    Forever KidsWatch Call Me KW50
    Forever KidsWatch Call Me 2 KW60
Published: February 6, 2025

CVE-2025-0799

6.5
    IBM App Connect Enterprise
Published: February 6, 2025

CVE-2025-22890

6.5
    Defense Platform Home Edition
Published: February 6, 2025

CVE-2025-22894

6.5
    Defense Platform Home Edition
Published: February 6, 2025

CVE-2025-24483

6.5
    Defense Platform Home Edition
Published: February 6, 2025

CVE-2025-0859

6.5
    WordPress Post and Page Builder by BoldGrid
Published: February 6, 2025

CVE-2024-45626

6.5
    Apache
  • James Server
Published: February 6, 2025

CVE-2025-21279

6.5
    Microsoft
  • Edge Chromium
Published: February 6, 2025

CVE-2025-21283

6.5
    Microsoft
  • Edge Chromium
Published: February 6, 2025

CVE-2024-49791

6.4
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2025-24845

6.3
    Defense Platform Home Edition
Published: February 6, 2025

CVE-2020-36085

6.3
    Egavilan Media Resumes Management and Job Application Website
Published: February 6, 2025

CVE-2024-48589

6.3
    phpABook
Published: February 6, 2025

CVE-2024-12602

6.2
    UNKNOWN
Published: February 6, 2025

CVE-2024-57954

6.2
    UNKNOWN
Published: February 6, 2025

CVE-2024-57955

6.1
    UNKNOWN
Published: February 6, 2025

CVE-2024-57959

6.1
    UNKNOWN
Published: February 6, 2025

CVE-2024-57962

6.1
    Huawei VPN service module
Published: February 6, 2025

CVE-2024-57427

6.1
    PHPJabbers Cinema Booking System
Published: February 6, 2025

CVE-2024-52892

6.1
    IBM Jazz for Service Management
Published: February 6, 2025

CVE-2024-47256

6.0
    2N Access Commander
Published: February 6, 2025

CVE-2024-49797

5.9
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2024-57958

5.7
    UNKNOWN
Published: February 6, 2025

CVE-2025-22936

5.7
    Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1
Published: February 6, 2025

CVE-2025-0158

5.5
    IBM EntireX
Published: February 6, 2025

CVE-2024-49792

5.4
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2024-49793

5.4
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2024-49796

5.4
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2024-57429

5.4
    PHPJabbers Cinema Booking System
Published: February 6, 2025

CVE-2024-24911

5.3
    Check Point Security Gateway
Published: February 6, 2025

CVE-2024-13614

5.3
    Kaspersky Anti-Virus SDK for Windows
    Kaspersky Security for Virtualization Light Agent
    Kaspersky Endpoint Security for Windows
    Kaspersky Small Office Security
    Kaspersky for Windows (Standard, Plus, Premium)
    Kaspersky Free
    Kaspersky Anti-Virus
    Kaspersky Internet Security
    Kaspersky Security Cloud
    Kaspersky Safe Kids
    Kaspersky Anti-Ransomware Tool
Published: February 6, 2025

CVE-2025-1078

5.3
    AppHouseKitchen AlDente Charge Limiter
Published: February 6, 2025

CVE-2024-25883

5.3
    UNKNOWN
Published: February 6, 2025

CVE-2024-53586

5.3
    WebFileSys
Published: February 6, 2025

CVE-2025-21253

5.3
    Microsoft
  • Edge
Published: February 6, 2025

CVE-2025-1076

4.8
    Holded
Published: February 6, 2025

CVE-2022-40490

4.8
    Tiny File Manager
Published: February 6, 2025

CVE-2024-57599

4.8
    DouPHP
Published: February 6, 2025

CVE-2024-13417

4.6
    Axis Communications products
Published: February 6, 2025

CVE-2024-57523

4.5
    SourceCodester Packers and Movers Management System
Published: February 6, 2025

CVE-2025-21267

4.4
    Microsoft
  • Edge Chromium
Published: February 6, 2025

CVE-2024-49794

4.3
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2024-49795

4.3
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2024-49798

4.3
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2024-49800

4.3
    Ibm
  • Applinx
Published: February 6, 2025

CVE-2025-1074

4.3
    Webkul QloApps
Published: February 6, 2025

CVE-2024-13416

4.3
    2N OS device
Published: February 6, 2025

CVE-2025-21404

4.3
    Microsoft
  • Edge Chromium
Published: February 6, 2025

CVE-2025-22866

4.0
    Go programming language
Published: February 6, 2025

CVE-2025-1082

3.5
    Mindskip xzs-mysql 学之思开源考试系统
Published: February 6, 2025

CVE-2024-56467

3.3
    IBM EntireX
Published: February 6, 2025

CVE-2025-1081

3.1
    Bharti Airtel Xstream Fiber
Published: February 6, 2025

CVE-2025-1083

3.1
    Mindskip xzs-mysql 学之思开源考试系统
Published: February 6, 2025

CVE-2024-57956

2.8
    Python Interpreter
Published: February 6, 2025

CVE-2025-1066

None
    OpenPLC_V3
Published: February 6, 2025

CVE-2025-0522

None
    LikeBot WordPress plugin
Published: February 6, 2025

CVE-2025-0982

None
    Google Cloud Application Integration
Published: February 6, 2025

CVE-2023-5878

None
    Honeywell OneWireless Wireless Device Manager (WDM)
Published: February 6, 2025

CVE-2024-43811

None
    UNKNOWN
Published: February 6, 2025

CVE-2024-36558

None
    Forever KidsWatch Call Me KW-50
Published: February 6, 2025

CVE-2025-23217

None
    mitmweb
Published: February 6, 2025

CVE-2024-57672

None
    floodlight
Published: February 6, 2025

CVE-2024-57673

None
    floodlight
Published: February 6, 2025

CVE-2025-1004

None
    HP LaserJet Pro printers
Published: February 6, 2025

CVE-2024-56889

None
    CodeAstro Complaint Management System
Published: February 6, 2025
Click here to see more Vulnerabilities