Tag: 2025-02-19

1 Attack Reports | 121 Vulnerabilities

Attack reports

XWorm Cocktail: A Mix of PE data with PowerShell Code

A malicious file discovered on VirusTotal triggered a PowerShell rule, leading to the investigation of two closely related files identified as 'data files' but named as executables. The files contain a mix of PowerShell code, binary data, and obfuscated text. Analysis revealed characteristics of XW…
obfuscation
xworm
evasion
powershell
persistence
keylogging
virustotal
deobfuscation
2025-02-19
Published: February 19, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2023-46271

9.8
    Extreme Networks IQ Engine
Published: February 19, 2025

CVE-2020-35546

9.1
    Lexmark MX6500 LW75.JD.P296
Published: February 19, 2025

CVE-2025-1132

8.8
    Churchcrm
  • Churchcrm
Published: February 19, 2025

CVE-2024-52902

8.8
    IBM Cognos Controller
Published: February 19, 2025

CVE-2024-28777

8.8
    IBM Cognos Controller
Published: February 19, 2025

CVE-2025-0999

8.8
    Google Chrome
Published: February 19, 2025

CVE-2025-1006

8.8
    Google Chrome
Published: February 19, 2025

CVE-2025-1426

8.8
    Google Chrome on Android
Published: February 19, 2025

CVE-2023-46272

8.8
    Extreme Networks IQ Engine
Published: February 19, 2025

CVE-2023-51302

8.8
    PHPJabbers Hotel Booking System
Published: February 19, 2025

CVE-2024-5705

8.8
    Hitachi Vantara Pentaho Business Analytics Server
Published: February 19, 2025

CVE-2024-5706

8.8
    Hitachi Vantara Pentaho Data Integration & Analytics
Published: February 19, 2025

CVE-2024-37359

8.6
    Hitachi Vantara Pentaho Business Analytics Server
Published: February 19, 2025

CVE-2025-21355

8.6
    Microsoft
  • Bing
Published: February 19, 2025

CVE-2023-47160

8.2
    IBM Cognos Controller
Published: February 19, 2025

CVE-2024-52541

8.2
    Dell Client Platform BIOS
Published: February 19, 2025

CVE-2025-24989

8.2
    Microsoft
  • Power Pages
Published: February 19, 2025

CVE-2020-10095

8.1
    Lexmark devices
Published: February 19, 2025

CVE-2024-45084

8.0
    IBM Cognos Controller
Published: February 19, 2025

CVE-2025-0893

7.8
    Symantec Diagnostic Tool (SymDiag)
Published: February 19, 2025

CVE-2025-25943

7.8
    Bento4
Published: February 19, 2025

CVE-2025-0624

7.6
    GRUB2
Published: February 19, 2025

CVE-2024-13468

7.5
    WordPress Trash Duplicate and 301 Redirect plugin
Published: February 19, 2025

CVE-2024-13592

7.5
    Team Builder For WPBakery Page Builder plugin
Published: February 19, 2025

CVE-2024-13489

7.5
    Eniture
  • Ltl Freight Quotes
Published: February 19, 2025

CVE-2024-13478

7.5
    Eniture
  • Ltl Freight Quotes
Published: February 19, 2025

CVE-2024-13479

7.5
    Eniture
  • Ltl Freight Quotes
Published: February 19, 2025

CVE-2024-13481

7.5
    Eniture
  • Ltl Freight Quotes
Published: February 19, 2025

CVE-2024-13483

7.5
    Eniture
  • Ltl Freight Quotes
Published: February 19, 2025

CVE-2024-13485

7.5
    Eniture
  • Ltl Freight Quotes
Published: February 19, 2025

CVE-2024-13491

7.5
    Eniture
  • Small Package Quotes
Published: February 19, 2025

CVE-2024-13533

7.5
    Eniture
  • Small Package Quotes
Published: February 19, 2025

CVE-2024-13534

7.5
    Eniture
  • Small Package Quotes
Published: February 19, 2025

CVE-2023-51293

7.5
    PHPJabbers Event Booking Calendar
Published: February 19, 2025

CVE-2023-51301

7.5
    PHPJabbers Hotel Booking System
Published: February 19, 2025

CVE-2025-27092

7.5
    Cmu
  • Ghosts
Published: February 19, 2025

CVE-2025-1448

7.3
    Synway SMG Gateway Management Software
Published: February 19, 2025

CVE-2025-1464

7.3
    Baiyi Cloud Asset Management System
Published: February 19, 2025

CVE-2025-25944

7.3
    Bento4
Published: February 19, 2025

CVE-2024-11582

7.2
    Subscribe2 - Form, Email Subscribers & Newsletters plugin for WordPress
Published: February 19, 2025

CVE-2025-1133

7.2
    Churchcrm
  • Churchcrm
Published: February 19, 2025

CVE-2025-1134

7.2
    Churchcrm
  • Churchcrm
Published: February 19, 2025

CVE-2025-1135

7.2
    Churchcrm
  • Churchcrm
Published: February 19, 2025

CVE-2025-0916

7.2
    Yaycommerce
  • Yaysmtp
Published: February 19, 2025

CVE-2024-57261

7.1
    barebox
Published: February 19, 2025

CVE-2024-57262

7.1
    barebox
Published: February 19, 2025

CVE-2024-45777

6.7
    grub2
Published: February 19, 2025

CVE-2024-13676

6.5
    WordPress Categorised Gallery Plugin
Published: February 19, 2025

CVE-2025-0865

6.5
    De-Baat
  • Wp Media Category Management
Published: February 19, 2025

CVE-2024-45081

6.5
    IBM Cognos Controller
Published: February 19, 2025

CVE-2023-51297

6.5
    PHPJabbers Hotel Booking System
Published: February 19, 2025

CVE-2025-25942

6.5
    Bento4
Published: February 19, 2025

CVE-2025-25945

6.5
    Bento4
Published: February 19, 2025

CVE-2024-13443

6.4
    Easypromos Plugin for WordPress
Published: February 19, 2025

CVE-2024-13799

6.4
    User Private Files - File Upload & Download Manager with Secure File Sharing plugin for WordPress
Published: February 19, 2025

CVE-2025-1065

6.4
    The Visualizer: Tables and Charts Manager for WordPress plugin
Published: February 19, 2025

CVE-2024-11335

6.4
    UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included
Published: February 19, 2025

CVE-2024-11753

6.4
    UMich OIDC Login plugin for WordPress
Published: February 19, 2025

CVE-2024-11778

6.4
    CanadaHelps Embedded Donation Form plugin for WordPress
Published: February 19, 2025

CVE-2024-12522

6.4
    Yay! Forms | Embed Custom Forms, Surveys, and Quizzes Easily plugin for WordPress
Published: February 19, 2025

CVE-2024-13390

6.4
    WordPress ADFO - Custom data in admin dashboard plugin
Published: February 19, 2025

CVE-2024-13462

6.4
    WP Wiki Tooltip plugin for WordPress
Published: February 19, 2025

CVE-2024-13589

6.4
    YouTube Playlists with Schema plugin for WordPress
Published: February 19, 2025

CVE-2024-13591

6.4
    Team Builder For WPBakery Page Builder
Published: February 19, 2025

CVE-2024-13657

6.4
    WordPress Store Locator Widget plugin
Published: February 19, 2025

CVE-2024-13660

6.4
    Responsive Flickr Slideshow plugin for WordPress
Published: February 19, 2025

CVE-2024-13663

6.4
    WordPress Coaching Staffs plugin
Published: February 19, 2025

CVE-2024-13674

6.4
    Cosmic Blocks (40+) Content Editor Blocks Collection plugin for WordPress
Published: February 19, 2025

CVE-2024-13679

6.4
    Getbuybox
  • Buybox Widget
Published: February 19, 2025

CVE-2025-0677

6.4
    grub2
Published: February 19, 2025

CVE-2024-13508

6.1
    Booking Package plugin for WordPress
Published: February 19, 2025

CVE-2025-1441

6.1
    Royal-Elementor-Addons
  • Royal Elementor Addons
Published: February 19, 2025

CVE-2025-25054

6.1
    Movable Type
Published: February 19, 2025

CVE-2024-12069

6.1
    Lexicata plugin for WordPress
Published: February 19, 2025

CVE-2024-12339

6.1
    WordPress Digihood HTML Sitemap plugin
Published: February 19, 2025

CVE-2024-13711

6.1
    Bin-Co
  • Pollin
Published: February 19, 2025

CVE-2024-13736

6.1
    Purechat
  • Pure Chat
Published: February 19, 2025

CVE-2024-13339

6.1
    Debounce
  • Email Validator
Published: February 19, 2025

CVE-2024-13363

6.1
    Raptive
  • Raptive Ads
Published: February 19, 2025

CVE-2025-20211

6.1
    Cisco BroadWorks Application Delivery Platform
Published: February 19, 2025

CVE-2020-13481

6.1
    Lexmark products
Published: February 19, 2025

CVE-2023-51296

6.1
    PHPJabbers Event Booking Calendar
Published: February 19, 2025

CVE-2023-51299

6.1
    PHPJabbers Hotel Booking System
Published: February 19, 2025

CVE-2023-51300

6.1
    PHPJabbers Hotel Booking System
Published: February 19, 2025

CVE-2023-51303

6.1
    PHPJabbers Event Ticketing System
Published: February 19, 2025

CVE-2024-28780

5.9
    IBM Cognos Controller
Published: February 19, 2025

CVE-2025-20153

5.8
    Cisco Secure Email Gateway
Published: February 19, 2025

CVE-2025-25946

5.5
    Bento4
Published: February 19, 2025

CVE-2025-25947

5.5
    Bento4
Published: February 19, 2025

CVE-2025-22888

5.4
    Movable Type
Published: February 19, 2025

CVE-2025-24841

5.4
    Movable Type
Published: February 19, 2025

CVE-2024-28776

5.4
    IBM Cognos Controller
Published: February 19, 2025

CVE-2025-27089

5.4
    Monospace
  • Directus
Published: February 19, 2025

CVE-2024-53974

5.4
    Adobe
  • Experience Manager
Published: February 19, 2025

CVE-2023-51305

5.4
    PHPJabbers Car Park Booking System
Published: February 19, 2025

CVE-2024-13719

5.3
    Pepro
  • Peprodev Ultimate Invoice
Published: February 19, 2025

CVE-2024-13231

5.3
    Portfoliohub
  • Portfoliohub
Published: February 19, 2025

CVE-2024-13364

5.3
    Raptive
  • Raptive Ads
Published: February 19, 2025

CVE-2025-0968

5.3
    Wpmet
  • Elementskit Elementor Addons
Published: February 19, 2025

CVE-2025-27090

5.3
    Bishopfox
  • Sliver
Published: February 19, 2025

CVE-2024-13712

4.9
    Bin-Co
  • Pollin
Published: February 19, 2025

CVE-2025-1024

4.8
    Churchcrm
  • Churchcrm
Published: February 19, 2025

CVE-2023-51298

4.7
    PHPJabbers Event Booking Calendar
Published: February 19, 2025

CVE-2025-20158

4.4
    Cisco Desk Phone 9800 Series
    Cisco Video Phone 8875
Published: February 19, 2025

CVE-2025-1118

4.4
    grub2
Published: February 19, 2025

CVE-2024-37360

4.4
    Hitachi Vantara Pentaho Business Analytics Server
Published: February 19, 2025

CVE-2025-1447

4.3
    Pigeon
Published: February 19, 2025

CVE-2025-22622

4.3
    Age Verification for your checkout page
Published: February 19, 2025

CVE-2024-13405

4.3
    Apptivo Business Site CRM plugin for WordPress
Published: February 19, 2025

CVE-2024-13854

4.3
    Nicheaddons
  • Education Addon
Published: February 19, 2025

CVE-2024-13336

4.3
    Exeebit
  • Disable Auto Updates
Published: February 19, 2025

CVE-2025-1465

4.1
    Lmxcms
  • Lmxcms
Published: February 19, 2025

CVE-2024-12173

3.5
    Master Slider WordPress Plugin
Published: February 19, 2025

CVE-2025-0633

None
    iniparser
Published: February 19, 2025

CVE-2025-1007

None
    OpenVSX
Published: February 19, 2025

CVE-2025-1075

None
    Checkmk
Published: February 19, 2025

CVE-2022-46283

None
    UNKNOWN
Published: February 19, 2025

CVE-2025-24965

None
    crun
Published: February 19, 2025

CVE-2025-24806

None
    Authelia
Published: February 19, 2025

CVE-2025-25196

None
    OpenFGA
Published: February 19, 2025

CVE-2024-10339

None
    UNKNOWN
Published: February 19, 2025
Click here to see more Vulnerabilities