Tag: 2025-02-14

4 Attack Reports | 127 Vulnerabilities

Attack reports

You've Got Malware: FINALDRAFT Hides in Your Drafts

While investigating REF7707, Elastic Security Labs discovered a new family of previously unknown malware that leverages Outlook as a communication channel via the Microsoft Graph API. This post-exploitation kit includes a loader, a backdoor, and multiple submodules that enable advanced post-exploit…
linux
powershell
shell
lsass
mimikatz
finaldraft
ref7707
pathloader
2025-02-14
elf
microsoft graph
outlook
elf variant
ntlm hash
pe
updatetask
Published: February 14, 2025
Downloadable IOCs: 9

Inside a Malware Campaign: A Nigerian Hacker's Perspective

This analysis provides an in-depth look at a Nigerian cybercriminal's malware campaign process. The hacker begins by harvesting email addresses through Google dorking techniques, targeting specific industries and regions. They then configure email campaigns using spoofed domains and bulletproof hos…
phishing
social engineering
redline
redline stealer
chatgpt
2025-02-14
nigerian hacker
google dorking
gammadyne mailer
email harvesting
xlogger
Published: February 14, 2025
Downloadable IOCs: 2

Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

Russian threat actors are conducting social-engineering and spear-phishing campaigns to compromise Microsoft 365 accounts using Device Code Authentication phishing. This method has proven more effective than traditional techniques. Campaigns have targeted organizations with politically-themed lures…
phishing
social engineering
russia
microsoft 365
spear-phishing
oauth
2025-02-14
device code authentication
Published: February 14, 2025
Downloadable IOCs: 0

Technical Analysis of Xloader Versions 6 and 7 P2

The latest versions of the Xloader malware, known as Formbook, use advanced obfuscation techniques to mask critical parts of its code and data, as part of a two-part technical analysis.
c2 server
formbook
base64
xloader
2025-02-14
c2 traffic
dword xor
dwords
decoy c2
pushdo
Published: February 14, 2025
Downloadable IOCs: 261
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-13152

10.0
    Mobuy Online Machinery Monitoring Panel
Published: February 14, 2025

CVE-2025-22630

9.9
    Widget Options
Published: February 14, 2025

CVE-2025-0867

9.9
    UNKNOWN
Published: February 14, 2025

CVE-2025-1298

9.8
    UNKNOWN
Published: February 14, 2025

CVE-2024-56180

9.8
    Apache EventMesh
Published: February 14, 2025

CVE-2024-56973

9.8
    Alvaria Unified IP Unified Director
Published: February 14, 2025

CVE-2024-57778

8.8
    Orbe ONetView Roeador Onet-1200 Orbe
Published: February 14, 2025

CVE-2025-25745

8.8
    D-Link DIR-853 A1
Published: February 14, 2025

CVE-2025-26156

8.8
    PHPGurukul Online Shopping Portal
Published: February 14, 2025

CVE-2025-0592

8.8
    UNKNOWN
Published: February 14, 2025

CVE-2025-0593

8.8
    UNKNOWN
Published: February 14, 2025

CVE-2025-25297

8.6
    Label Studio
Published: February 14, 2025

CVE-2024-12651

8.5
    PTT Inc. HGS Mobile App
Published: February 14, 2025

CVE-2025-26788

8.4
    UNKNOWN
Published: February 14, 2025

CVE-2025-25206

8.3
    eLabFTW
Published: February 14, 2025

CVE-2025-26519

8.1
    musl libc
Published: February 14, 2025

CVE-2025-25994

7.5
    FeMiner wms
Published: February 14, 2025

CVE-2025-25997

7.5
    FeMiner wms
Published: February 14, 2025

CVE-2022-26083

7.5
    Intel IPP Cryptography software library
Published: February 14, 2025

CVE-2024-8893

7.3
    GoodWe Technologies Co., Ltd. GW1500‑XS
Published: February 14, 2025

CVE-2024-55904

7.2
    IBM DevOps Deploy
    IBM UrbanCode Deploy
Published: February 14, 2025

CVE-2024-52500

7.2
    Monetag Official Plugin
Published: February 14, 2025

CVE-2025-22705

7.1
    Disqus Popular Posts
Published: February 14, 2025

CVE-2025-23428

7.1
    QMean - WordPress Did You Mean
Published: February 14, 2025

CVE-2025-23431

7.1
    Envato Affiliater
Published: February 14, 2025

CVE-2025-23474

7.1
    Mike Martel Live Dashboard
Published: February 14, 2025

CVE-2025-23492

7.1
    CantonBolo WordPress 淘宝客插件
Published: February 14, 2025

CVE-2025-23523

7.1
    hoststreamsell HSS Embed Streaming Video
Published: February 14, 2025

CVE-2025-23525

7.1
    Kv Compose Email From Dashboard
Published: February 14, 2025

CVE-2025-23568

7.1
    WP Login Attempt Log
Published: February 14, 2025

CVE-2025-23571

7.1
    Internal Links Generator
Published: February 14, 2025

CVE-2025-23598

7.1
    Recip.ly
Published: February 14, 2025

CVE-2025-23646

7.1
    Library Instruction Recorder
Published: February 14, 2025

CVE-2025-23647

7.1
    WP-Clap
Published: February 14, 2025

CVE-2025-23648

7.1
    AdsMiddle
Published: February 14, 2025

CVE-2025-23650

7.1
    Tidy.ro
Published: February 14, 2025

CVE-2025-23651

7.1
    Scroll Top
Published: February 14, 2025

CVE-2025-23652

7.1
    Add custom content after post
Published: February 14, 2025

CVE-2025-23653

7.1
    Form To Online Booking
Published: February 14, 2025

CVE-2025-23655

7.1
    Contact Form 7 - Paystack Add-on
Published: February 14, 2025

CVE-2025-23657

7.1
    WordPress-to-candidate for Salesforce CRM
Published: February 14, 2025

CVE-2025-23658

7.1
    Advanced Angular Contact Form
Published: February 14, 2025

CVE-2025-23742

7.1
    Podamibe Twilio Private Call
Published: February 14, 2025

CVE-2025-23748

7.1
    Singsys -Awesome Gallery
Published: February 14, 2025

CVE-2025-23750

7.1
    Custom Widget Creator
Published: February 14, 2025

CVE-2025-23751

7.1
    Think201 Data Dash
Published: February 14, 2025

CVE-2025-23786

7.1
    DuoGeek Email to Download
Published: February 14, 2025

CVE-2025-23787

7.1
    Easy Bet
Published: February 14, 2025

CVE-2025-23788

7.1
    Easy Filter
Published: February 14, 2025

CVE-2025-23789

7.1
    URL Shortener
    Conversion Tracking
    AB Testing
    WooCommerce
Published: February 14, 2025

CVE-2025-23790

7.1
    Easy Code Placement
Published: February 14, 2025

CVE-2025-23851

7.1
    Coronavirus (COVID-19) Outbreak Data Widgets
Published: February 14, 2025

CVE-2025-23853

7.1
    michelem NoFollow Free
Published: February 14, 2025

CVE-2025-23857

7.1
    Smartdatasoft
  • Essential Wp Real Estate
Published: February 14, 2025

CVE-2025-23905

7.1
    Admin Options Pages
Published: February 14, 2025

CVE-2025-24554

7.1
    AWcode Toolkit
Published: February 14, 2025

CVE-2025-24558

7.1
    CRM Perks
Published: February 14, 2025

CVE-2025-24564

7.1
    Contact Form With Shortcode
Published: February 14, 2025

CVE-2025-24565

7.1
    WP2LEADS
Published: February 14, 2025

CVE-2025-24566

7.1
    Intro Tour Tutorial DeepPresentation
Published: February 14, 2025

CVE-2025-24592

7.1
    Customize My Account for WooCommerce
Published: February 14, 2025

CVE-2025-24614

7.1
    agileLogix Post Timeline
Published: February 14, 2025

CVE-2025-24615

7.1
    Analytics Cat
Published: February 14, 2025

CVE-2025-24616

7.1
    Uix Page Builder
Published: February 14, 2025

CVE-2025-24617

7.1
    AcyMailing SMTP Newsletter
Published: February 14, 2025

CVE-2025-24641

7.1
    Better WishList API
Published: February 14, 2025

CVE-2025-24688

7.1
    WP Mailster
Published: February 14, 2025

CVE-2025-24692

7.1
    Bulk Menu Edit
Published: February 14, 2025

CVE-2025-24699

7.1
    WP Coder
Published: February 14, 2025

CVE-2025-24700

7.1
    WP Event Aggregator
Published: February 14, 2025

CVE-2024-9601

6.5
    Themeum
  • Qubely
Published: February 14, 2025

CVE-2025-0821

6.5
    Bitapps
  • Bit Assist
Published: February 14, 2025

CVE-2025-23534

6.5
    WPLingo
Published: February 14, 2025

CVE-2025-23766

6.5
    OPSI Israel Domestic Shipments
Published: February 14, 2025

CVE-2025-23771

6.5
    Murali Push Notification for Post and BuddyPress
Published: February 14, 2025

CVE-2025-24567

6.5
    WP Mailster
Published: February 14, 2025

CVE-2024-52895

6.5
    IBM i
Published: February 14, 2025

CVE-2024-56477

6.5
    IBM Power Hardware Management Console
Published: February 14, 2025

CVE-2024-57725

6.5
    Arcadyan Livebox Fibra
Published: February 14, 2025

CVE-2024-13735

6.4
    Hurrytimer
  • Hurrytimer
Published: February 14, 2025

CVE-2025-22698

6.3
    Ability, Inc Accessibility Suite by Online ADA
Published: February 14, 2025

CVE-2025-22702

6.3
    Photography
Published: February 14, 2025

CVE-2025-25204

6.3
    GitHub CLI (gh)
Published: February 14, 2025

CVE-2025-25990

6.1
    hooskcms
Published: February 14, 2025

CVE-2025-25296

6.1
    Label Studio
Published: February 14, 2025

CVE-2024-13641

5.9
    Wpswings
  • Return Refund And Exchange For Woocommerce
Published: February 14, 2025

CVE-2025-26157

5.9
    Beauty Parlour Management System
Published: February 14, 2025

CVE-2025-24607

5.8
    IdeaPush
Published: February 14, 2025

CVE-2025-26158

5.6
    Kashipara Online Attendance Management System
Published: February 14, 2025

CVE-2024-10404

5.5
    Brocade SANnav
Published: February 14, 2025

CVE-2024-13692

5.4
    Wpswings
  • Return Refund And Exchange For Woocommerce
Published: February 14, 2025

CVE-2025-23406

5.3
    CentE middleware TCP/IP Network Series
Published: February 14, 2025

CVE-2025-25285

5.3
    @octokit/endpoint
Published: February 14, 2025

CVE-2025-25288

5.3
    @octokit/plugin-paginate-rest
Published: February 14, 2025

CVE-2025-25289

5.3
    @octokit/request-error
Published: February 14, 2025

CVE-2025-25290

5.3
    @octokit/request
Published: February 14, 2025

CVE-2025-25991

5.1
    hooskcms
Published: February 14, 2025

CVE-2025-25992

5.1
    FeMiner wms
Published: February 14, 2025

CVE-2025-25993

5.1
    FeMiner wms wms
Published: February 14, 2025

CVE-2024-13791

4.9
    Bitapps
  • Bit Assist
Published: February 14, 2025

CVE-2024-13493

4.8
    Sensly Online Presence WordPress plugin
Published: February 14, 2025

CVE-2024-7052

4.8
    Forminator Forms WordPress plugin
Published: February 14, 2025

CVE-2024-56463

4.8
    Ibm
  • Qradar Security Information And Event Manager
Published: February 14, 2025

CVE-2025-25988

4.8
    hooskcms
Published: February 14, 2025

CVE-2022-28693

4.7
    Intel Processors
Published: February 14, 2025

CVE-2025-26791

4.5
    DOMPurify
Published: February 14, 2025

CVE-2024-57969

4.3
    MISP
Published: February 14, 2025

CVE-2024-31144

3.8
    Xapi
Published: February 14, 2025

CVE-2025-0503

3.1
    Mattermost
Published: February 14, 2025

CVE-2025-1053

None
    Brocade SANnav
Published: February 14, 2025

CVE-2024-2240

None
    Brocade SANnav
Published: February 14, 2025

CVE-2025-26789

None
    Logpoint AgentX
Published: February 14, 2025

CVE-2024-52577

None
    Apache Ignite
Published: February 14, 2025

CVE-2025-26522

None
    RupeeWeb trading platform
Published: February 14, 2025

CVE-2025-26523

None
    RupeeWeb trading platform
Published: February 14, 2025

CVE-2025-26524

None
    RupeeWeb trading platform
Published: February 14, 2025

CVE-2025-0178

None
    WatchGuard Fireware OS
Published: February 14, 2025

CVE-2025-1071

None
    WatchGuard Fireware OS
Published: February 14, 2025

CVE-2025-1239

None
    WatchGuard Fireware OS
Published: February 14, 2025

CVE-2025-25740

None
    D-Link DIR-853
Published: February 14, 2025

CVE-2024-3220

None
    CPython
Published: February 14, 2025

CVE-2024-57790

None
    IXON B.V. IXrouter IX2400
Published: February 14, 2025

CVE-2025-25295

None
    Label Studio
Published: February 14, 2025

CVE-2025-26506

None
    HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers
Published: February 14, 2025

CVE-2025-26507

None
    HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers
Published: February 14, 2025

CVE-2025-26508

None
    HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers
Published: February 14, 2025

CVE-2025-25304

None
    Vega
    vega-selections
Published: February 14, 2025
Click here to see more Vulnerabilities