Tag: 2025-02-11

2 Attack Reports | 391 Vulnerabilities

Attack reports

ClickFix Scam Exposed! Protect Your Data Before It's Too Late

Cybercriminals are exploiting DeepSeek's popularity to launch ClickFix phishing campaigns, tricking users into clicking fake CAPTCHA links that steal credentials and install malware like Vidar and Lumma Stealer. These attacks impersonate DeepSeek's branding to appear legitimate and bypass security …
phishing
social engineering
lumma stealer
credential theft
vidar stealer
clickfix
captcha
deepseek
2025-02-11
Published: February 11, 2025
Downloadable IOCs: 7

Further insights into Ivanti CSA 4.6 vulnerabilities exploitation

This analysis examines the exploitation of critical vulnerabilities in Ivanti Cloud Service Appliance (CSA) 4.6 between October 2024 and January 2025. It confirms widespread exploitation leading to webshell deployments in September and October 2024. The report provides details on malicious activiti…
vulnerability
ivanti
exploitation
webshell
infrastructure
remote code execution
CVE-2024-8190
CVE-2024-8963
CVE-2024-9379
CVE-2024-9381
2025-02-11
reversessh
nhas reverse_ssh
csa
Published: February 11, 2025
Linked vulnerabilities : CVE-2024-8190 (CVSS 7.2), CVE-2024-8963 (CVSS 9.1), CVE-2024-9379 (CVSS 7.2), CVE-2024-9381 (CVSS 7.2), CVE-2020-1472, CVE-2022-1388, CVE-2023-3519, CVE-2021-4034, CVE-2021-44529
Downloadable IOCs: 19
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-22467

9.9
    Ivanti
  • Connect Secure
Published: February 11, 2025

CVE-2025-1144

9.8
    School Affairs System from Quanxun
Published: February 11, 2025

CVE-2025-0180

9.8
    WP Foodbakery plugin for WordPress
Published: February 11, 2025

CVE-2025-0181

9.8
    WP Foodbakery plugin for WordPress
Published: February 11, 2025

CVE-2024-12366

9.8
    PandasAI
Published: February 11, 2025

CVE-2025-1044

9.8
    Logsign
  • Unified Secops Platform
Published: February 11, 2025

CVE-2025-25530

9.8
    Digital China DCBI-Netlog-LAB Gateway
Published: February 11, 2025

CVE-2025-24973

9.3
    Concorde
Published: February 11, 2025

CVE-2025-1126

9.3
    Lexmark Print Management Client
Published: February 11, 2025

CVE-2024-10644

9.1
    Ivanti Connect Secure
    Ivanti Policy Secure
Published: February 11, 2025

CVE-2024-47908

9.1
    Ivanti
  • Cloud Services Appliance
Published: February 11, 2025

CVE-2025-24434

9.1
    Adobe
  • Commerce
  • Commerce B2b
  • Magento
Published: February 11, 2025

CVE-2025-21198

9.0
    Microsoft
  • Hpc Pack 2016
  • Hpc Pack 2019
Published: February 11, 2025

CVE-2024-13643

8.8
    Zox News - Professional WordPress News & Magazine Theme
Published: February 11, 2025

CVE-2024-45386

8.8
    UNKNOWN
Published: February 11, 2025

CVE-2024-40591

8.8
    Fortinet FortiOS
Published: February 11, 2025

CVE-2025-21190

8.8
    Microsoft
  • Windows 10 1507
  • Windows 10 1607
  • Windows 10 1809
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21200

8.8
    Microsoft
  • Windows 10 1507
  • Windows 10 1607
  • Windows 10 1809
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21201

8.8
    Microsoft
  • Windows 10 1507
  • Windows 10 1607
  • Windows 10 1809
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21208

8.8
    Microsoft
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21368

8.8
    Microsoft
  • Windows 10 1507
  • Windows 10 1607
  • Windows 10 1809
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21369

8.8
    Microsoft
  • Windows 10 1507
  • Windows 10 1607
  • Windows 10 1809
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21371

8.8
    Microsoft
  • Windows 10 1507
  • Windows 10 1607
  • Windows 10 1809
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21406

8.8
    Microsoft
  • Windows 10 1507
  • Windows 10 1607
  • Windows 10 1809
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21407

8.8
    Microsoft
  • Windows 10 1507
  • Windows 10 1607
  • Windows 10 1809
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2025-21410

8.8
    Microsoft
  • Windows Server 2008
  • Windows Server 2012
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Windows Server 2022 23h2
  • Windows Server 2025
Published: February 11, 2025

CVE-2024-12547

8.8
    Tungstenautomation
  • Power Pdf
Published: February 11, 2025

CVE-2025-0899

8.8
    Pdf-Xchange
  • Pdf-Xchange Editor
Published: February 11, 2025

CVE-2025-0901

8.8
    Pdf-Xchange
  • Pdf-Xchange Editor
Published: February 11, 2025

CVE-2025-0902

8.8
    Pdf-Xchange
  • Pdf-Xchange Editor
Published: February 11, 2025

CVE-2025-0903

8.8