Tag: 2025-02-18

6 Attack Reports | 167 Vulnerabilities

Attack reports

Malicious Signal, Line, and Gmail Installers Target Chinese-Speaking Users with Backdoors

A malicious campaign is targeting Chinese-speaking users by distributing backdoored executables through fake download pages for popular apps like Signal, Line, and Gmail. The attackers use seemingly unrelated domain names and rely on search engine manipulation to lure victims. The malware follows a…
backdoor
infostealer
search engine manipulation
2025-02-18
signal
line
chinese-speaking
microclip
gmail
fake download
Published: February 18, 2025
Downloadable IOCs: 0

Amazon Phish Hunts for Security Answers and Payment Information

A phishing scheme targeting Amazon Prime users has been identified, aiming to steal login credentials, verification information, and payment data. The attack begins with a spoofed email claiming the user's payment method has expired. Clicking the update button redirects to a fake Amazon security al…
phishing
social engineering
credential theft
email spoofing
2025-02-18
payment fraud
fake login page
amazon prime
Published: February 18, 2025
Downloadable IOCs: 3

Zhong Stealer Analysis: New Malware Targeting Fintech and Cryptocurrency

A new malware called Zhong Stealer has been identified targeting the cryptocurrency and fintech sectors through a phishing campaign. The attackers exploited chat support platforms, posing as customers to trick agents into downloading the malware. Zhong Stealer's execution flow involves multiple sta…
phishing
cryptocurrency
persistence
credential theft
data exfiltration
fintech
2025-02-18
zhong stealer
Published: February 18, 2025
Downloadable IOCs: 5

An Update on Fake Updates: Two New Actors, and New Mac Malware

Proofpoint has identified two new cybercriminal threat actors, TA2726 and TA2727, operating web inject campaigns. TA2726 acts as a traffic distribution service for TA569 and TA2727, while TA2727 delivers various malware payloads including a new MacOS information stealer called FrigidStealer. The la…
lumma stealer
socgholish
deerstealer
2025-02-18
fake updates
macos malware
frigidstealer
traffic distribution
gholoader
doiloader
marcher
web inject
Published: February 18, 2025
Downloadable IOCs: 10

StaryDobry campaign targets gamers with XMRig miner

A cybercriminal campaign launched on December 31 exploited reduced vigilance during the holiday season by distributing trojanized versions of popular games via torrent sites. The attack, which lasted a month, affected users worldwide by spreading the XMRig cryptominer. The sophisticated infection c…
xmrig
cryptomining
defense evasion
gaming
multi-stage
2025-02-18
torrents
resource spoofing
Published: February 18, 2025
Downloadable IOCs: 15

Vgod RANSOMWARE

A new ransomware strain called Vgod has been observed targeting Windows systems. It encrypts files, appending the '.Vgod' extension, and leaves a ransom note titled 'Decryption Instructions.txt'. The ransomware changes the desktop wallpaper and employs a double extortion model, threatening data exp…
ransomware
evasion
windows
persistence
encryption
double extortion
2025-02-18
file extension
vgod
Published: February 18, 2025
Downloadable IOCs: 1
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-22654

10.0
    Simplified
  • Version(s): n/a, 1.0.6
Published: February 18, 2025

CVE-2025-26615

10.0
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2024-39327

9.9
    Atos Eviden IDRA
  • Version(s): before 2.6.1
Published: February 18, 2025

CVE-2021-46686

9.8
    acmailer CGI
  • Version(s): 4.0.3 and earlier
    acmailer DB
  • Version(s): 1.1.5 and earlier
Published: February 18, 2025

CVE-2024-13725

9.8
    Keap
  • Keap Official Opt In Forms
Published: February 18, 2025

CVE-2024-12860

9.8
    Carspot Project
  • Carspot
Published: February 18, 2025

CVE-2025-1023

9.8
    Churchcrm
  • Churchcrm
Published: February 18, 2025

CVE-2024-57045

9.8
    D-Link DIR-859 router
  • Version(s): A3 1.05 and earlier
Published: February 18, 2025

CVE-2024-57049

9.8
    TP-Link Archer c20 router
  • Version(s): V6.6_230412 and earlier
Published: February 18, 2025

CVE-2024-57050

9.8
    TP-Link WR840N Router
  • Version(s): v6 with firmware version 0.9.1 4.16 and earlier
Published: February 18, 2025

CVE-2024-55460

9.8
    BoardRoom Limited Dividend Distribution Tax Election System
  • Version(s): v2.0
Published: February 18, 2025

CVE-2022-41545

9.8
    Netgear C7800 Router
  • Version(s): 6.01.07
Published: February 18, 2025

CVE-2024-56000

9.8
    K Elements
  • Version(s): n/a - n/a
Published: February 18, 2025

CVE-2025-26606

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-26607

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-26608

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-26609

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-26610

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-26611

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-26612

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-26613

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-26617

9.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-25467

9.8
    libx264
  • Version(s): git master
Published: February 18, 2025

CVE-2025-24894

9.1
    SPID.AspNetCore.Authentication
  • Version(s): 3.4.0 and above
Published: February 18, 2025

CVE-2025-24895

9.1
    CIE.AspNetCore.Authentication
  • Version(s): before 2.1.0
Published: February 18, 2025

CVE-2024-13677

8.8
    Istmoplugins
  • Get Bookings Wp
Published: February 18, 2025

CVE-2024-13852

8.8
    Backie
  • Option Editor
Published: February 18, 2025

CVE-2024-13315

8.8
    Shopwarden
  • Shopwarden
Published: February 18, 2025

CVE-2024-57046

8.8
    Netgear DGN2200 router
  • Version(s): v1.0.0.46 and earlier
Published: February 18, 2025

CVE-2025-26614

8.8
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-22663

8.6
    Paid Videochat Turnkey Site
  • Version(s): from n/a through 7.2.12
Published: February 18, 2025

CVE-2025-22639

8.5
    Distance Rate Shipping for WooCommerce
  • Version(s): n/a, 1.3.4
Published: February 18, 2025

CVE-2025-26604

8.3
    Discord-Bot-Framework-Kernel
  • Version(s): before commit f0d9e70841a0e3170b88c4f8d562018ccd8e8b14
Published: February 18, 2025

CVE-2024-13684

8.1
    Smartzminds
  • Reset
Published: February 18, 2025

CVE-2024-13556

8.1
    Wecantrack
  • Affiliate Links
Published: February 18, 2025

CVE-2024-56883

8.1
    Sage DPW
  • Version(s): before 2024_12_001
Published: February 18, 2025

CVE-2025-22656

8.1
    Cookie Monster
  • Version(s): n/a, 1.2.2
Published: February 18, 2025

CVE-2024-51505

8.0
    Atos Eviden IDRA
  • Version(s): before 2.7.1
Published: February 18, 2025

CVE-2025-25893

8.0
    D-Link DSL-3782 Router
  • Version(s): 1.01
Published: February 18, 2025

CVE-2025-25894

8.0
    D-Link DSL-3782
  • Version(s): 1.01
Published: February 18, 2025

CVE-2025-25895

8.0
    D-Link DSL-3782
  • Version(s): v1.01
Published: February 18, 2025

CVE-2025-21703

7.8
    Linux Kernel
Published: February 18, 2025

CVE-2024-56171

7.8
    libxml2
  • Version(s): before 2.12.10, 2.13.x before 2.13.6
Published: February 18, 2025

CVE-2025-24928

7.8
    libxml2
  • Version(s): before 2.12.10, 2.13.x before 2.13.6
Published: February 18, 2025

CVE-2024-13622

7.5
    Imaginate-Solutions
  • File Uploads Addon For Woocommerce
Published: February 18, 2025

CVE-2024-13681

7.5
    Undsgn
  • Uncode
Published: February 18, 2025

CVE-2024-50608

7.5
    Fluent Bit
  • Version(s): 3.1.9
Published: February 18, 2025

CVE-2024-50609

7.5
    Fluent Bit
  • Version(s): 3.1.9
Published: February 18, 2025

CVE-2025-22657

7.5
    Atarim
  • Version(s): n/a - 4.0.9
Published: February 18, 2025

CVE-2025-26616

7.5
    Wegia
  • Wegia
Published: February 18, 2025

CVE-2025-25475

7.5
    DCMTK
  • Version(s): 3.6.9+
Published: February 18, 2025

CVE-2025-25221

7.3
    LuxCal Web Calendar
  • Version(s): before 5.3.3M (MySQL version), before 5.3.3L (SQLite version)
Published: February 18, 2025

CVE-2025-25222

7.3
    LuxCal Web Calendar
  • Version(s): before 5.3.3M (MySQL version), before 5.3.3L (SQLite version)
Published: February 18, 2025

CVE-2024-57963

7.3
    USB-CONVERTERCABLE DRIVER
Published: February 18, 2025

CVE-2024-57964

7.3
    HVAC Energy Saving Program
Published: February 18, 2025

CVE-2024-13797

7.3
    Presslayouts
  • Pressmart
Published: February 18, 2025

CVE-2025-20075

7.2
    FileMegane
  • Version(s): 3.0.0.0 - 3.3.9.9
Published: February 18, 2025

CVE-2024-12314

7.2
    Megaoptim
  • Rapid Cache
Published: February 18, 2025

CVE-2024-13704

7.2
    Themepoints
  • Super Testimonials
Published: February 18, 2025

CVE-2025-0521

7.2
    Wpexperts
  • Post Smtp
Published: February 18, 2025

CVE-2025-0817

7.2
    Ncrafts
  • Formcraft
Published: February 18, 2025

CVE-2024-57254

7.1
    Das U-Boot
  • Version(s): before 2025.01-rc1
Published: February 18, 2025

CVE-2024-57255

7.1
    Das U-Boot
  • Version(s): before 2025.01-rc1
Published: February 18, 2025

CVE-2024-57256

7.1
    Das U-Boot
  • Version(s): before 2025.01-rc1
Published: February 18, 2025

CVE-2024-57258

7.1
    Das U-Boot
  • Version(s): before 2025.01-rc1
Published: February 18, 2025

CVE-2024-57259

7.1
    Das U-Boot
  • Version(s): before 2025.01-rc1
Published: February 18, 2025

CVE-2025-25305

7.0
    Home Assistant Core
  • Version(s): 2024.1.6
Published: February 18, 2025

CVE-2024-39328

6.8
    Atos Eviden IDRA and IDCA
  • Version(s): before 2.7.0
Published: February 18, 2025

CVE-2025-26465

6.8
    Openbsd
  • Openssh
    Netapp
    Redhat
    Debian
Published: February 18, 2025

CVE-2024-45774

6.7
    grub2
Published: February 18, 2025

CVE-2024-45776

6.7
    Grub2
Published: February 18, 2025

CVE-2024-45781

6.7
    GRUB2
Published: February 18, 2025

CVE-2024-13595

6.5
    Modalsurvey
  • Simple Signup Form
Published: February 18, 2025

CVE-2024-45320

6.5
    DocuPrint CP225w
  • Version(s): 01.22.01 and earlier
    DocuPrint CP228w
  • Version(s): 01.22.01 and earlier
    DocuPrint CM225fw
  • Version(s): 01.10.01 and earlier
    DocuPrint CM228fw
  • Version(s): 01.10.01 and earlier
Published: February 18, 2025

CVE-2024-13369

6.5
    Goodlayers
  • Tour Master
Published: February 18, 2025

CVE-2024-13691

6.5
    Undsgn
  • Uncode
Published: February 18, 2025

CVE-2025-1414

6.5
    Firefox
  • Version(s): < 135.0.1
Published: February 18, 2025

CVE-2024-49589

6.5
    Foundry Artifacts
Published: February 18, 2025

CVE-2025-22650

6.5
    Smartarget
  • Version(s): n/a, 1.4
Published: February 18, 2025

CVE-2025-27016

6.5
    Drivr Lite – Google Drive Plugin
  • Version(s): n/a, 1.0.1
Published: February 18, 2025

CVE-2025-22921

6.5
    FFmpeg
  • Version(s): git-master,N-113007-g8d24a28d06
Published: February 18, 2025

CVE-2025-25468

6.5
    FFmpeg
  • Version(s): git-master before commit d5873b
Published: February 18, 2025

CVE-2025-25469

6.5
    FFmpeg
  • Version(s): git-master before commit d5873b
Published: February 18, 2025

CVE-2025-22919

6.5
    FFmpeg
  • Version(s): git-master commit N-113007-g8d24a28d06
Published: February 18, 2025

CVE-2025-25474

6.5
    DCMTK
  • Version(s): 3.6.9+
Published: February 18, 2025

CVE-2024-12525

6.4
    Homeasap
  • Easy Mls Listings Import
Published: February 18, 2025

CVE-2024-12813

6.4
    Pixelgrade
  • Open Hours
Published: February 18, 2025

CVE-2024-13464

6.4
    Photonicgnostic
  • Library Bookshelves
Published: February 18, 2025

CVE-2024-13501

6.4
    Formassembly
  • Wp-Formassembly
Published: February 18, 2025

CVE-2024-13565

6.4
    Shaonback2
  • Simple Map No Api
Published: February 18, 2025

CVE-2024-13573

6.4
    Softdiscover
  • Zigaform
Published: February 18, 2025

CVE-2024-13576

6.4
    Adityapatadia
  • Gumlet Video
Published: February 18, 2025

CVE-2024-13577

6.4
    Catsone
  • Cats Job Listings
Published: February 18, 2025

CVE-2024-13578

6.4
    Haozhexie
  • Wp-Bibtex
Published: February 18, 2025

CVE-2024-13579

6.4
    Platcom
  • Wp-Asambleas
Published: February 18, 2025

CVE-2024-13581

6.4
    Supporthost
  • Simple Charts
Published: February 18, 2025

CVE-2024-13582

6.4
    Webdevocean
  • Pricing Tables
Published: February 18, 2025

CVE-2024-13587

6.4
    Softdiscover
  • Zigaform
Published: February 18, 2025

CVE-2024-13588

6.4
    Simplebooklet
  • Simplebooklet
Published: February 18, 2025

CVE-2025-0805

6.4
    Mlcalc
  • Mortgage Loan Calculator
Published: February 18, 2025

CVE-2024-11895

6.4
    Vcita
  • Online Payments - Get Paid With Paypal\, Square \& Stripe
Published: February 18, 2025

CVE-2024-13465

6.4
    Tusharimran
  • Ablocks
Published: February 18, 2025

CVE-2024-13575

6.4
    Magazine3
  • Web Stories Enhancer
Published: February 18, 2025

CVE-2024-13395

6.4
    Kerryoco
  • Threepress
Published: February 18, 2025

CVE-2025-0622

6.4
    grub2
Published: February 18, 2025

CVE-2024-13743

6.4
    Wonder Video Embed plugin for WordPress
  • Version(s): up to 2.2
Published: February 18, 2025

CVE-2024-13689

6.3
    Uncode Core plugin for WordPress
  • Version(s): up to 2.9.1.6
Published: February 18, 2025

CVE-2025-1390

6.1
    UNKNOWN
Published: February 18, 2025

CVE-2024-13522

6.1
    Magayo
  • Magayo Lottery Results
Published: February 18, 2025

CVE-2024-13523

6.1
    Shenyanzhi
  • Memorialday
Published: February 18, 2025

CVE-2024-11376

6.1
    Clavaque
  • S2member
Published: February 18, 2025

CVE-2025-0864

6.1
    Pluginus
  • Active Products Tables For Woocommerce
Published: February 18, 2025

CVE-2025-0981

6.1
    Churchcrm
  • Churchcrm
Published: February 18, 2025

CVE-2024-13609

5.9
    1clickmigration
  • 1 Click Migration
Published: February 18, 2025

CVE-2025-25223

5.8
    LuxCal Web Calendar
  • Version(s): before 5.3.3M, before 5.3.3L
Published: February 18, 2025

CVE-2025-1035

5.7
    KLog Server
  • Version(s): before 3.1.1
Published: February 18, 2025

CVE-2025-25891

5.7
    D-Link DSL-3782
  • Version(s): 1.01
Published: February 18, 2025

CVE-2025-25892

5.7
    D-Link DSL-3782
  • Version(s): v1.01
Published: February 18, 2025

CVE-2025-25896

5.7
    D-Link DSL-3782
  • Version(s): v1.01
Published: February 18, 2025

CVE-2024-13848

5.5
    Jakob42
  • Reaction Buttons
Published: February 18, 2025

CVE-2024-13741

5.4
    Metagauss
  • Profilegrid
Published: February 18, 2025

CVE-2024-13667

5.4
    Undsgn
  • Uncode
Published: February 18, 2025

CVE-2024-56882

5.4
    Sage DPW
  • Version(s): before 2024_12_000
Published: February 18, 2025

CVE-2024-57056

5.4
    WombatDialer
  • Version(s): before 25.02
Published: February 18, 2025

CVE-2025-25055

5.3
    FileMegane
  • Version(s): 1.0.0.0 - 3.4.0.0
Published: February 18, 2025

CVE-2025-25224

5.3
    LuxCal Web Calendar
  • Version(s): before 5.3.3M (MySQL version), before 5.3.3L (SQLite version)
Published: February 18, 2025

CVE-2024-13535

5.3
    Marcoingraiti
  • Actionwear Products Sync
Published: February 18, 2025

CVE-2024-13538

5.3
    Bigbuy
  • Dropshipping Connector For Woocommerce
Published: February 18, 2025

CVE-2024-13540

5.3
    Byconsole
  • Wooodt Lite
Published: February 18, 2025

CVE-2024-13555

5.3
    1clickmigration
  • 1 Click Migration
Published: February 18, 2025

CVE-2024-13316

5.3
    Akashmalik
  • Scracth \& Win
Published: February 18, 2025

CVE-2025-22645

5.3
    Real Estate Manager
  • Version(s): from n/a through 7.3
Published: February 18, 2025

CVE-2025-27013

5.3
    MediCenter - Health Medical Clinic WordPress Theme
Published: February 18, 2025

CVE-2025-22920

5.3
    FFmpeg
  • Version(s): before commit 4bf784c
Published: February 18, 2025

CVE-2025-25472

5.3
    DCMTK
  • Version(s): 3.6.9+
Published: February 18, 2025

CVE-2025-25473

5.3
    FFmpeg
  • Version(s): git master before commit c08d30
Published: February 18, 2025

CVE-2024-45775

5.2
    GRUB2
Published: February 18, 2025

CVE-2024-57055

5.0
    WombatDialer
  • Version(s): before 25.02
Published: February 18, 2025

CVE-2025-1269

4.8
    HAVELSAN Liman MYS
  • Version(s): before 2.1.1 - 1010
Published: February 18, 2025

CVE-2024-45783

4.4
    GRUB2
Published: February 18, 2025

CVE-2024-13740

4.3
    Metagauss
  • Profilegrid
Published: February 18, 2025

CVE-2024-13687

4.3
    Webdevocean
  • Team Builder
Published: February 18, 2025

CVE-2025-0796

4.3
    Kevinbrent
  • Wprequal
Published: February 18, 2025

CVE-2024-13438

4.3
    Speedsize
  • Speedsize Image \& Video Ai-Optimizer
Published: February 18, 2025

CVE-2024-13795

4.3
    Lightspeedhq
  • Ecwid Ecommerce Shopping Cart
Published: February 18, 2025

CVE-2024-13718

4.3
    Wpdesk
  • Flexible Wishlist For Woocommerce
Published: February 18, 2025

CVE-2024-13783

4.3
    Ncrafts
  • Formcraft
Published: February 18, 2025

CVE-2025-25471

4.3
    FFmpeg
  • Version(s): git master before commit fd1772
Published: February 18, 2025

CVE-2025-26058

4.2
    QloApps
  • Version(s): 1.6.1
Published: February 18, 2025

CVE-2025-26603

4.2
    Vim
  • Version(s): pre 9.1.1115
Published: February 18, 2025

CVE-2024-4028

3.8
    Keycloak
Published: February 18, 2025

CVE-2025-27113

2.9
    Xmlsoft
  • Libxml2
Published: February 18, 2025

CVE-2024-57257

2.0
    Das U-Boot
  • Version(s): before 2025.01-rc1
Published: February 18, 2025

CVE-2025-0422

None
    bestinformed Web
Published: February 18, 2025

CVE-2025-0423

None
    bestinformed Web
Published: February 18, 2025

CVE-2025-0424

None
    bestinformed Web application
Published: February 18, 2025

CVE-2025-0425

None
    bestinformed Web
    bestinformed Infoclient
    bestinformed Server
Published: February 18, 2025

CVE-2024-13636

None
    WordPress Brooklyn theme
  • Version(s): up to 4.9.9.2
    brooklyn
  • Version(s):
Published: February 18, 2025

CVE-2025-21702

None
    Linux kernel
Published: February 18, 2025

CVE-2025-22207

None
    com_scheduler
Published: February 18, 2025

CVE-2025-25300

None
    smartbanner.js
  • Version(s): before 1.14.1
Published: February 18, 2025

CVE-2025-26620

None
    Duende.AccessTokenManagement
Published: February 18, 2025

CVE-2025-21608

None
    Meshtastic
  • Version(s): 2.5.19
Published: February 18, 2025

CVE-2025-25284

None
    ZOO-Project
Published: February 18, 2025

CVE-2025-26623

None
    Exiv2
  • Version(s): 0.28.0 - 0.28.4
Published: February 18, 2025

CVE-2025-26605

None
    WeGIA Web Manager
  • Version(s): 3.2.13
Published: February 18, 2025

CVE-2025-26624

None
    Rufus
  • Version(s): 4.6.2208, before 4.6.2208
Published: February 18, 2025
Click here to see more Vulnerabilities