Tag: 2025-02-13

5 Attack Reports | 132 Vulnerabilities

Attack reports

Changing the narrative on pig butchering scams

Interpol is advocating for a linguistic shift in describing romance scams, proposing to replace the term 'pig butchering' with 'romance baiting'. This change aims to prioritize respect and empathy for victims, encouraging more people to come forward and report these crimes. The article also highlig…
vulnerability research
2025-02-13
romance scams
compiler features
interpol
linguistic shift
cybersecurity news
Published: February 13, 2025
Downloadable IOCs: 5

Russian Influence Operations Target German Elections

The upcoming German federal elections on February 23, 2025 are being targeted by Russian influence operations. While these efforts have not significantly altered voter behavior or public opinion as of mid-February, they aim to exacerbate German sociopolitical divisions, spread manipulated content, …
disinformation
ai-generated content
deepfakes
2025-02-13
media impersonation
social media manipulation
influence operations
german elections
Published: February 13, 2025
Downloadable IOCs: 0

Inside the Scam: North Korea's IT Worker Threat

North Korea has exploited remote work opportunities to infiltrate international companies with fraudulent IT workers, generating revenue and posing cybersecurity risks. The group PurpleBravo targets cryptocurrency firms using malware like BeaverTail and InvisibleFerret. At least seven suspected Nor…
malware
espionage
north korea
cryptocurrency
beavertail
invisibleferret
remote work
2025-02-13
ottercookie
front companies
it workers
Published: February 13, 2025
Downloadable IOCs: 43

Tracking Pyramid C2: Identifying Post-Exploitation Servers in Hunt

Pyramid, an open-source post-exploitation framework in Python, is being used by threat actors for malicious purposes. The tool features a lightweight HTTP/S server for encrypted payload delivery, blending with legitimate Python activity. This analysis examines Pyramid's server, outlines network sig…
python
c2
ransomhub
open-source
more_eggs
post-exploitation
2025-02-13
http server
network signatures
detection
pyramid
Published: February 13, 2025
Downloadable IOCs: 0

Magento Credit Card Stealer Disguised in an <img> Tag

A sophisticated credit card stealing malware, disguised within an <img> tag, was discovered on a Magento-based eCommerce website. The malware uses Base64 encoding to hide its malicious JavaScript code, making it difficult to detect. It activates on the checkout page, waiting for user interaction be…
magento
credit card theft
magecart
ecommerce
javascript injection
2025-02-13
base64 encoding
<img> tag
web security
Published: February 13, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-24865

10.0
    Myscada
  • Mypro
Published: February 13, 2025

CVE-2025-25286

9.8
    Islandora Crayfish
Published: February 13, 2025

CVE-2025-0896

9.8
    Orthanc server
Published: February 13, 2025

CVE-2024-10763

9.8
    Apuswp
  • Campress
Published: February 13, 2025

CVE-2024-13182

9.8
    WP Directorybox Manager plugin for WordPress
Published: February 13, 2025

CVE-2025-25388

9.8
    PHPGurukul Land Record System
Published: February 13, 2025

CVE-2025-25389

9.8
    Phpgurukul Land Record System
Published: February 13, 2025

CVE-2025-1283

9.8
    Dingtian-Tech
  • Dt-R002 Firmware
  • Dt-R002
  • Dt-R008 Firmware
  • Dt-R008
  • Dt-R016 Firmware
  • Dt-R016
  • Dt-R032 Firmware
  • Dt-R032
Published: February 13, 2025

CVE-2025-25067

9.8
    Myscada
  • Mypro
Published: February 13, 2025

CVE-2024-7102

9.6
    GitLab CE/EE
Published: February 13, 2025

CVE-2025-1270

9.1
    h6web
Published: February 13, 2025

CVE-2025-1127

9.1
    UNKNOWN
Published: February 13, 2025

CVE-2025-26511

8.8
    Apache Cassandra
    Stratio's Cassandra-Lucene-Index plugin
Published: February 13, 2025

CVE-2025-22896

8.6
    Myscada
  • Mypro
Published: February 13, 2025

CVE-2025-24903

8.5
    libsignal-service-rs
Published: February 13, 2025

CVE-2025-24904

8.5
    libsignal-service-rs
Published: February 13, 2025

CVE-2025-1247

8.3
    Quarkus REST
Published: February 13, 2025

CVE-2024-13770

8.1
    Themerex
  • Puzzles
Published: February 13, 2025

CVE-2025-1058

8.1
    UNKNOWN
Published: February 13, 2025

CVE-2025-1070

8.1
    UNKNOWN
Published: February 13, 2025

CVE-2025-1094

8.1
    PostgreSQL
Published: February 13, 2025

CVE-2025-24888

8.1
    SecureDrop Client
Published: February 13, 2025

CVE-2025-0327

7.8
    Windows Services
Published: February 13, 2025

CVE-2025-21700

7.8
    Linux kernel
Published: February 13, 2025

CVE-2024-12011

7.6
    130.8005 TCP/IP Gateway
Published: February 13, 2025

CVE-2024-12013

7.6
    130.8005 TCP/IP Gateway
Published: February 13, 2025

CVE-2025-1059

7.5
    UNKNOWN
Published: February 13, 2025

CVE-2025-1060

7.5
    UNKNOWN
Published: February 13, 2025

CVE-2024-13606

7.5
    Wiselyhub
  • Js Help Desk
Published: February 13, 2025

CVE-2025-25897

7.5
    Tp-Link
  • Tl-Wr841nd Firmware
  • Tl-Wr841nd
Published: February 13, 2025

CVE-2025-25898

7.5
    Tp-Link
  • Tl-Wr841nd Firmware
  • Tl-Wr841nd
Published: February 13, 2025

CVE-2025-25901

7.5
    Tp-Link
  • Tl-Wr841nd Firmware
  • Tl-Wr841nd
Published: February 13, 2025

CVE-2025-24861

7.5
    Outbackpower
  • Mojave Inverter Oghi8048a Firmware
  • Mojave Inverter Oghi8048a
Published: February 13, 2025

CVE-2025-25281

7.5
    Outbackpower
  • Mojave Inverter Oghi8048a Firmware
  • Mojave Inverter Oghi8048a
Published: February 13, 2025

CVE-2025-26473

7.5
    Mojave Inverter
Published: February 13, 2025

CVE-2024-13345

7.3
    Theme-Fusion
  • Avada
Published: February 13, 2025

CVE-2024-13346

7.3
    Theme-Fusion
  • Avada
Published: February 13, 2025

CVE-2024-11344

7.3
    Lexmark devices
Published: February 13, 2025

CVE-2024-11345

7.3
    Lexmark Postscript interpreter
Published: February 13, 2025

CVE-2024-11346

7.3
    Lexmark International CX, XC, CS
Published: February 13, 2025

CVE-2024-11347

7.3
    Lexmark International CX, XC, CS
Published: February 13, 2025

CVE-2025-25352

7.2
    Phpgurukul
  • Land Record System
Published: February 13, 2025

CVE-2025-25354

7.2
    Phpgurukul
  • Land Record System
Published: February 13, 2025

CVE-2025-25355

7.2
    Phpgurukul
  • Land Record System
Published: February 13, 2025

CVE-2025-25356

7.2
    Phpgurukul
  • Land Record System
Published: February 13, 2025

CVE-2025-25357

7.2
    Phpgurukul
  • Land Record System
Published: February 13, 2025

CVE-2025-25387

7.2
    PHPGurukul Land Record System
Published: February 13, 2025

CVE-2025-22962

7.2
    GatesAir Maxiva UAXT, VAXT transmitters
Published: February 13, 2025

CVE-2024-46910

7.1
    Apache Atlas
Published: February 13, 2025

CVE-2025-26543

7.1
    Simple Responsive Menu
Published: February 13, 2025

CVE-2025-26545

7.1
    shisuh Related Posts Line-up-Exactly by Milliard
Published: February 13, 2025

CVE-2025-26547

7.1
    My Login Logout Plugin
Published: February 13, 2025

CVE-2025-26549

7.1
    WP Html Page Sitemap
Published: February 13, 2025

CVE-2025-26550

7.1
    Global Meta Keyword & Description
Published: February 13, 2025

CVE-2025-26551

7.1
    Bootstrap collapse
Published: February 13, 2025

CVE-2025-26552

7.1
    Naver Syndication V2
Published: February 13, 2025

CVE-2025-26562

7.1
    Shambhu Patnaik RSS Filter
Published: February 13, 2025

CVE-2025-26568

7.1
    Easy Amazon Product Information
Published: February 13, 2025

CVE-2025-26569

7.1
    Post Thumbs
Published: February 13, 2025

CVE-2025-26570

7.1
    Glance That
Published: February 13, 2025

CVE-2025-26571

7.1
    Wibiya Toolbar
Published: February 13, 2025

CVE-2025-26572

7.1
    WP PHPList
Published: February 13, 2025

CVE-2025-26577

7.1
    DX-auto-publish
Published: February 13, 2025

CVE-2025-26578

7.1
    Simple Documentation
Published: February 13, 2025

CVE-2025-26580

7.1
    Page/Post Specific Social Share Buttons
Published: February 13, 2025

CVE-2025-26582

7.1
    TinyMCE Advanced qTranslate fix editor problems
Published: February 13, 2025

CVE-2025-24836

7.1
    UNKNOWN
Published: February 13, 2025

CVE-2025-22480

7.0
    Dell
  • Supportassist
Published: February 13, 2025

CVE-2024-37600

6.8
    Mercedes Benz NTG 6
Published: February 13, 2025

CVE-2024-47265

6.5
    Synology Active Backup for Business
Published: February 13, 2025

CVE-2025-0815

6.5
    Unknown
Published: February 13, 2025

CVE-2025-0816

6.5
    UNKNOWN
Published: February 13, 2025

CVE-2025-26538

6.5
    Dan Rossiter Prezi Embedder
Published: February 13, 2025

CVE-2025-26539

6.5
    Embed Google Map
Published: February 13, 2025

CVE-2025-26558

6.5
    mkkmail Aparat Responsive
Published: February 13, 2025

CVE-2025-26567

6.5
    Font Awesome WP
Published: February 13, 2025

CVE-2025-26574

6.5
    Google Drive WP Media
Published: February 13, 2025

CVE-2024-13644

6.4
    Detheme
  • Dethemekit For Elementor
Published: February 13, 2025

CVE-2024-13227

6.4
    Rankmath
  • Seo
Published: February 13, 2025

CVE-2025-0837

6.4
    Themerex
  • Puzzles
Published: February 13, 2025

CVE-2024-3303

6.4
    GitLab EE
Published: February 13, 2025

CVE-2025-23421

6.4
    Qardio iOS and Android applications
Published: February 13, 2025

CVE-2025-23411

6.3
    Myscada
  • Mypro
Published: February 13, 2025

CVE-2025-0426

6.2
    Kubernetes
Published: February 13, 2025

CVE-2025-20615

6.2
    Qardio Arm iOS application
Published: February 13, 2025

CVE-2024-13867

6.1
    Tangiblewp
  • Listivo
Published: February 13, 2025

CVE-2025-1271

6.1
    h6web
Published: February 13, 2025

CVE-2025-26561

5.9
    Elfsight Yottie Lite
Published: February 13, 2025

CVE-2024-12012

5.7
    130.8005 TCP/IP Gateway
Published: February 13, 2025

CVE-2024-10083

5.5
    Engineering Workstation Software
Published: February 13, 2025

CVE-2024-12054

5.4
    ZF Roll Stability Support Plus (RSSPlus)
Published: February 13, 2025

CVE-2024-54951

5.4
    Monica
Published: February 13, 2025

CVE-2025-0814

5.3
    UNKNOWN
Published: February 13, 2025

CVE-2024-47264

4.9
    Synology Active Backup for Business
Published: February 13, 2025

CVE-2025-25900

4.9
    TP-Link TL-WR841ND
Published: February 13, 2025

CVE-2024-13119

4.8
    Paid Membership Plugin
Published: February 13, 2025

CVE-2025-25287

4.7
    MediaWiki - Lakeus skin
Published: February 13, 2025

CVE-2024-37601

4.6
    Mercedes Benz NTG 6
Published: February 13, 2025

CVE-2024-37602

4.6
    Mercedes Benz NTG 6 head units
Published: February 13, 2025

CVE-2024-37603

4.6
    Mercedes Benz NTG 6
Published: February 13, 2025

CVE-2025-24889

4.5
    SecureDrop Client
Published: February 13, 2025

CVE-2024-8266

4.4
    GitLab CE/EE
Published: February 13, 2025

CVE-2024-13229

4.3
    Rankmath
  • Seo
Published: February 13, 2025

CVE-2025-0661

4.3
    Detheme
  • Dethemekit For Elementor
Published: February 13, 2025

CVE-2024-13639

4.3
    Edmonsoft
  • Read More \& Accordion
Published: February 13, 2025

CVE-2025-25195

4.3
    Zulip
Published: February 13, 2025

CVE-2025-1198

4.2
    GitLab CE/EE
Published: February 13, 2025

CVE-2024-13121

3.5
    Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin
Published: February 13, 2025

CVE-2024-13125

3.5
    Everest Forms WordPress plugin
Published: February 13, 2025

CVE-2025-0692

3.5
    Simple Video Management System WordPress plugin
Published: February 13, 2025

CVE-2025-25899

3.5
    TP-Link TL-WR841ND
Published: February 13, 2025

CVE-2024-47266

2.7
    Synology Active Backup for Business
Published: February 13, 2025

CVE-2024-12586

None
    WordPress plugin Chalet-Montagne.com Tools
Published: February 13, 2025

CVE-2024-13120

None
    Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress plugin
Published: February 13, 2025

CVE-2025-21701

None
    Linux kernel
Published: February 13, 2025

CVE-2023-34397

None
    Mercedes Benz head-unit NTG 6
Published: February 13, 2025

CVE-2023-34398

None
    Mercedes-Benz head-unit NTG6
Published: February 13, 2025

CVE-2023-34399

None
    Mercedes-Benz head-unit NTG6
Published: February 13, 2025

CVE-2023-34400

None
    Mercedes-Benz head-unit NTG6
Published: February 13, 2025

CVE-2024-57378

None
    Wazuh SIEM
Published: February 13, 2025

CVE-2023-34401

None
    Mercedes-Benz head-unit NTG6
Published: February 13, 2025

CVE-2023-34402

None
    Mercedes-Benz head-unit NTG6
Published: February 13, 2025

CVE-2023-34403

None
    Mercedes-Benz head-unit NTG6
Published: February 13, 2025

CVE-2023-34404

None
    Mercedes-Benz head-unit NTG6
Published: February 13, 2025

CVE-2023-34406

None
    Mercedes Benz NTG 6
Published: February 13, 2025

CVE-2024-53309

None
    Effectmatrix Total Video Converter Command Line (TVCC)
Published: February 13, 2025

CVE-2024-53310

None
    Effectmatrix Total Video Converter Command Line (TVCC)
Published: February 13, 2025

CVE-2024-53311

None
    Immunity Debugger
Published: February 13, 2025

CVE-2024-56908

None
    Perfex Crm
Published: February 13, 2025

CVE-2024-57782

None
    Docker
Published: February 13, 2025

CVE-2025-22960

None
    GatesAir Maxiva UAXT transmitter
    GatesAir Maxiva VAXT transmitter
Published: February 13, 2025

CVE-2025-22961

None
    GatesAir Maxiva UAXT
Published: February 13, 2025
Click here to see more Vulnerabilities