Tag: 2025-02-22

2 Attack Reports | 36 Vulnerabilities

Attack reports

SPYLEND: The Android App Available on Google Play Store: Enabling Financial Cyber Crime & Extortion

A sophisticated Android malware called SpyLend, disguised as a 'Finance Simplified' app, is targeting Indian users through the Google Play Store. The app leverages location-based targeting to display unauthorized loan applications, enabling predatory lending, blackmail, and extortion. It has rapidl…
malware
android
data theft
extortion
india
financial
2025-02-22
google play store
spylend
loan apps
Published: February 22, 2025
Downloadable IOCs: 0

Lumma Stealer Malware Thrives as Unique Patterns Uncovered in the Infostealer's Domain Clusters

Recent research reveals Lumma Stealer command and control domain clusters share specific technical characteristics, enabling mapping of entire infrastructure clusters. The infostealer's logs are being shared for free on Leaky[.]pro, a new hacking forum, offering billions of stolen credential record…
malvertising
infostealer
lumma stealer
credential theft
youtube
malspam
sectoprat
c2 infrastructure
2025-02-22
domain clusters
Published: February 22, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-26776

10.0
    Chaty Pro
  • Version(s): n/a, 3.3.3
Published: February 22, 2025

CVE-2025-26763

9.8
    MetaSlider Responsive Slider by MetaSlider
  • Version(s): n/a, 3.94.0
Published: February 22, 2025

CVE-2025-27012

8.8
    a1post A1POST.BG Shipping for Woo
  • Version(s): n/a through 1.5.1
Published: February 22, 2025

CVE-2024-46975

7.9
    UNKNOWN
Published: February 22, 2025

CVE-2024-52939

7.8
    UNKNOWN
Published: February 22, 2025

CVE-2024-13474

7.5
    LTL Freight Quotes - Purolator Edition plugin for WordPress
  • Version(s): up to 2.2.3
Published: February 22, 2025

CVE-2025-1361

7.5
    Ip2location
  • Country Blocker
Published: February 22, 2025

CVE-2025-26757

7.5
    FULL Customer
  • Version(s): from n/a through 3.1.26
Published: February 22, 2025

CVE-2025-26760

7.5
    Wow-Company Calculator Builder
  • Version(s): n/a, 1.6.2
Published: February 22, 2025

CVE-2025-1509

7.3
    Wpguru
  • Show Me The Cookies
Published: February 22, 2025

CVE-2025-1510

7.3
    Keesiemeijer
  • Custom Post Type Date Archives
Published: February 22, 2025

CVE-2022-28339

7.3
    Trend Micro HouseCall for Home Networks
  • Version(s): 5.3.1302 and below
Published: February 22, 2025

CVE-2024-13899

7.2
    Misterpah
  • Mambo Joomla Importer
Published: February 22, 2025

CVE-2024-13869

7.2
    Wpvivid
  • Wpvivid Backup \& Migration
Published: February 22, 2025

CVE-2025-0918

7.2
    Yaycommerce
  • Yaysmtp
Published: February 22, 2025

CVE-2025-0953

7.2
    Yaycommerce
  • Yaysmtp
Published: February 22, 2025

CVE-2025-0957

7.2
    Amazon SES – YaySMTP plugin for WordPress
  • Version(s): up to 1.7.1
Published: February 22, 2025

CVE-2025-26756

7.1
    Magic the Gathering Card Tooltips
  • Version(s): from n/a, through 3.5.0
Published: February 22, 2025

CVE-2025-26774

7.1
    Rock Solid Responsive Modal Builder for High Conversion – Easy Popups
  • Version(s): n/a, 1.5.0
Published: February 22, 2025

CVE-2025-26750

6.5
    Vitepos
  • Version(s): n/a, 3.1.3
Published: February 22, 2025

CVE-2025-26764

6.5
    Distance Based Shipping Calculator
  • Version(s): n/a, 2.0.22
Published: February 22, 2025

CVE-2025-26973

6.5
    Social Warfare
  • Version(s): from n/a through 4.5.4
Published: February 22, 2025

CVE-2024-12038

6.4
    Themekraft
  • Buddyforms
Published: February 22, 2025

CVE-2024-13564

6.4
    Apollo13
  • Rife Elementor Extensions \\& Templates
Published: February 22, 2025

CVE-2024-12467

6.1
    Grafreak
  • Payment By Redsys
Published: February 22, 2025

CVE-2024-22341

5.3
    IBM Watson Query on Cloud Pak for Data
  • Version(s): 4.0.0 - 4.0.9, 4.5.0 - 4.5.3, 4.6.0 - 4.6.6, 4.7.0 - 4.7.4, 4.8.0 - 4.8.7
Published: February 22, 2025

CVE-2024-13798

5.3
    Pickplugins
  • Comboblocks
Published: February 22, 2025

CVE-2025-1556

4.7
    westboy CicadasCMS
  • Version(s): 1.0
Published: February 22, 2025

CVE-2024-13873

4.3
    Wpjobportal
  • Wp Job Portal
Published: February 22, 2025

CVE-2025-1557

4.3
    OFCMS
  • Version(s): 1.1.3
Published: February 22, 2025

CVE-2025-1553

3.5
    UNKNOWN
Published: February 22, 2025

CVE-2024-45674

3.3
    IBM Security Verify Bridge Directory Sync
  • Version(s): 1.0.1 - 1.0.12
    IBM Security Verify Gateway for Windows Login
  • Version(s): 1.0.1 - 1.0.10
    IBM Security Verify Gateway for Radius
  • Version(s): 1.0.1 - 1.0.11
Published: February 22, 2025

CVE-2024-47896

3.3
    Linux Kernel
Published: February 22, 2025

CVE-2023-4261

None
    UNKNOWN
Published: February 22, 2025

CVE-2025-21704

None
    Linux kernel
Published: February 22, 2025

CVE-2024-12577

None
    Unknown
Published: February 22, 2025
Click here to see more Vulnerabilities