Tag: 2025-02-24

5 Attack Reports | 119 Vulnerabilities

Attack reports

Unmasking a Large-Scale Legacy Driver Exploitation Campaign

Check Point Research uncovered an extensive campaign exploiting a vulnerability in the legacy version 2.0.2 of the Truesight.sys driver, part of Adlice's RogueKiller Antirootkit suite. Attackers leveraged this vulnerability to deploy an EDR/AV killer module, effectively disabling security solutions…
phishing
exploitation
driver
2025-02-24
edrbypass
Published: February 24, 2025
Downloadable IOCs: 951

Phishing Campaigns Targeting Higher Education Institutions

Since August 2024, there has been a significant increase in phishing attacks targeting U.S. universities. Three distinct campaigns have emerged, exploiting trust within academic institutions to deceive students, faculty, and staff. One campaign used compromised educational institutions to host Goog…
phishing
social engineering
universities
business email compromise
2025-02-24
google forms
higher education
payment redirection
Published: February 24, 2025
Downloadable IOCs: 4

Fake GitHub projects distribute stealers in GitVenom campaign

The GitVenom campaign involves threat actors creating hundreds of fake repositories on GitHub containing malicious code disguised as legitimate projects. These repositories include well-designed README files and artificially inflated commit numbers to appear genuine. The malicious code, implemented…
cryptocurrency
stealer
asyncrat
open-source
github
quasar
2025-02-24
gitvenom
clipboard-hijacker
fake-projects
Published: February 24, 2025
Downloadable IOCs: 2

New wave of targeted attacks of the Angry Likho APT on Russian organizations

The Angry Likho APT group has launched a new wave of targeted attacks primarily against Russian organizations. The group employs spear-phishing emails with malicious attachments as the initial attack vector. A previously unknown implant was discovered, utilizing a self-extracting archive and AutoIt…
apt
russia
stealer
autoit
targeted attacks
2025-02-24
lumma trojan
Published: February 24, 2025
Downloadable IOCs: 30

Confluence Exploit Leads to LockBit Ransomware

An intrusion began with the exploitation of CVE-2023-22527 on an exposed Windows Confluence server, leading to LockBit ransomware deployment across the environment. The threat actor utilized various tools including Mimikatz, Metasploit, and AnyDesk. They leveraged RDP for lateral movement and deplo…
ransomware
lockbit
exfiltration
credential theft
lateral movement
rdp
CVE-2023-22527
confluence
2025-02-24
Published: February 24, 2025
Linked vulnerabilities : CVE-2017-0199, CVE-2023-22515, CVE-2023-22527, CVE-2023-22518
Downloadable IOCs: 15
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-27364

10.0
    MITRE Caldera
Published: February 24, 2025

CVE-2025-20051

9.9
    Mattermost
Published: February 24, 2025

CVE-2025-25279

9.9
    Mattermost
Published: February 24, 2025

CVE-2024-56897

9.8
    Yitechnology
  • Yi Car Dashcam Firmware
  • Yi Car Dashcam
Published: February 24, 2025

CVE-2024-54820

9.8
    XOne Web Monitor v02.10.2024.530 framework
Published: February 24, 2025

CVE-2025-25513

9.8
    Seacms
  • Seacms
Published: February 24, 2025

CVE-2025-27140

9.8
    Wegia
  • Wegia
Published: February 24, 2025

CVE-2024-53544

9.8
    Smart Time Plus
Published: February 24, 2025

CVE-2024-56525

9.8
    Public Knowledge Project (PKP) OJS
    Public Knowledge Project (PKP) OMP
    Public Knowledge Project (PKP) OPS
Published: February 24, 2025

CVE-2025-22974

9.8
    SeaCMS
Published: February 24, 2025

CVE-2025-24490

9.6
    Mattermost
Published: February 24, 2025

CVE-2025-26201

9.1
    GreaterWMS
Published: February 24, 2025

CVE-2024-12916

8.8
    Life4All
Published: February 24, 2025

CVE-2024-12918

8.8
    Health4All
Published: February 24, 2025

CVE-2025-27276

8.8
    Photo Gallery (Responsive)
Published: February 24, 2025

CVE-2025-27133

8.8
    Wegia
  • Wegia
Published: February 24, 2025

CVE-2025-26525

8.6
    TeX Live
Published: February 24, 2025

CVE-2024-55898

8.5
    IBM i
Published: February 24, 2025

CVE-2025-27312

8.5
    Jenst WP Sitemap
Published: February 24, 2025

CVE-2025-22495

8.4
    Network-M2
Published: February 24, 2025

CVE-2024-12917

8.3
    Health4All
Published: February 24, 2025

CVE-2025-27298

8.3
    WP Video Posts
Published: February 24, 2025

CVE-2025-26529

8.3
    UNKNOWN
Published: February 24, 2025

CVE-2025-26530

8.3
    UNKNOWN
Published: February 24, 2025

CVE-2025-26533

8.1
    UNKNOWN
Published: February 24, 2025

CVE-2023-52926

7.8
    Linux kernel
Published: February 24, 2025

CVE-2025-27297

7.6
    Bravo Search & Replace
Published: February 24, 2025

CVE-2025-27272

7.5
    VG PostCarousel
Published: February 24, 2025

CVE-2025-27296

7.2
    Auto Ad Inserter
Published: February 24, 2025

CVE-2025-27300

7.2
    UNKNOWN
Published: February 24, 2025

CVE-2025-27301

7.2
    NHR Options Table Manager
Published: February 24, 2025

CVE-2025-26200

7.2
    SLIMS
Published: February 24, 2025

CVE-2025-27277

7.1
    tiefpunkt Add Linked Images To Gallery
Published: February 24, 2025

CVE-2025-27321

7.1
    Blighty Blightly Explorer
Published: February 24, 2025

CVE-2025-27332

7.1
    Smart Maintenance & Countdown
Published: February 24, 2025

CVE-2025-27352

7.1
    无觅相关文章插件
Published: February 24, 2025

CVE-2025-27355

7.1
    Woocommerce - Loi Hamon
Published: February 24, 2025

CVE-2025-26883

6.5
    bPlugins Animated Text Block
Published: February 24, 2025

CVE-2025-27265

6.5
    Google Maps for WordPress
Published: February 24, 2025

CVE-2025-27266

6.5
    Hover Image Button
Published: February 24, 2025

CVE-2025-27280

6.5
    Alobaidi Archive Page
Published: February 24, 2025

CVE-2025-27305

6.5
    Achal Jain Table of Contents Block
Published: February 24, 2025

CVE-2025-27306

6.5
    Pathomation
Published: February 24, 2025

CVE-2025-27307

6.5
    Quotes llama
Published: February 24, 2025

CVE-2025-27320

6.5
    Profile Widget Ninja
Published: February 24, 2025

CVE-2025-27323

6.5
    WP About Author
Published: February 24, 2025

CVE-2025-27325

6.5
    Video.js HLS Player
Published: February 24, 2025

CVE-2025-27327

6.5
    Winlin Live Streaming Video Player - by SRS Player
Published: February 24, 2025

CVE-2025-27329

6.5
    EZ InLinkz linkup
Published: February 24, 2025

CVE-2025-27330

6.5
    PlayerJS
Published: February 24, 2025

CVE-2025-27331

6.5
    WooCommerce Display Products by Tags
Published: February 24, 2025

CVE-2025-27341

6.5
    Reactive Mortgage Calculator
Published: February 24, 2025

CVE-2025-27347

6.5
    Direct Checkout Button for WooCommerce
Published: February 24, 2025

CVE-2025-27348

6.5
    WP Social SEO Booster - Knowledge Graph Social Signals SEO
Published: February 24, 2025

CVE-2025-27349

6.5
    nurelm Get Posts
Published: February 24, 2025

CVE-2025-27351

6.5
    ExpertBusinessSearch Local Search SEO Contact Page
Published: February 24, 2025

CVE-2025-27112

6.5
    Navidrome
  • Navidrome
Published: February 24, 2025

CVE-2025-26526

6.5
    Moodle
Published: February 24, 2025

CVE-2024-57608

6.5
    Via Browser
Published: February 24, 2025

CVE-2025-27141

6.5
    Metabase
  • Metabase
Published: February 24, 2025

CVE-2024-53542

6.5
    Smart Time Plus
Published: February 24, 2025

CVE-2025-1598

6.3
    Mayurik
  • Best Church Management Software
Published: February 24, 2025

CVE-2025-1608

6.3
    LB-LINK AC1900 Router
Published: February 24, 2025

CVE-2025-1609

6.3
    LB-LINK AC1900 Router
Published: February 24, 2025

CVE-2025-1610

6.3
    LB-LINK AC1900 Router
Published: February 24, 2025

CVE-2024-13822

6.1
    Photo Contest | Competition | Video Contest WordPress plugin
Published: February 24, 2025

CVE-2025-0690

6.1
    GRUB
Published: February 24, 2025

CVE-2024-57026

6.1
    Tawk
  • Tawk.To
Published: February 24, 2025

CVE-2025-27143

6.1
    Better-Auth
  • Better Auth
Published: February 24, 2025

CVE-2025-23017

6.0
    WorkOS Hosted AuthKit
Published: February 24, 2025

CVE-2025-27303

5.9
    Contact Form 7 Star Rating
Published: February 24, 2025

CVE-2025-27304

5.9
    Contact Form 7 Star Rating with font Awesome
Published: February 24, 2025

CVE-2025-1599

5.4
    Mayurik
  • Best Church Management Software
Published: February 24, 2025

CVE-2024-12308

5.4
    Logo Slider WordPress plugin
Published: February 24, 2025

CVE-2025-27340

5.4
    Marc F12-Profiler
Published: February 24, 2025

CVE-2025-27356

5.4
    Sticky Header On Scroll
Published: February 24, 2025

CVE-2024-53543

5.4
    Smart Time Plus
Published: February 24, 2025

CVE-2025-26803

5.3
    Phusion
  • Passenger
Published: February 24, 2025

CVE-2025-26527

5.3
    UNKNOWN
Published: February 24, 2025

CVE-2024-57685

5.3
    sparkshop
Published: February 24, 2025

CVE-2024-13605

4.8
    Form Maker by 10Web WordPress plugin
Published: February 24, 2025

CVE-2025-27294

4.8
    WP-Asambleas
Published: February 24, 2025

CVE-2025-25460

4.8
    FlatPress
Published: February 24, 2025

CVE-2025-1611

4.7
    ShopXO
Published: February 24, 2025

CVE-2025-1616

4.7
    Fiberhome
  • An5506-01a Firmware
  • An5506-01a
Published: February 24, 2025

CVE-2025-1488

4.7
    WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress
Published: February 24, 2025

CVE-2025-0545

4.7
    T-Soft E-Commerce
Published: February 24, 2025

CVE-2025-27137

4.4
    Dependency-Track
Published: February 24, 2025

CVE-2025-1606

4.3
    Mayurik
  • Best Employee Management System
Published: February 24, 2025

CVE-2025-1607

4.3
    SourceCodester Best Employee Management System
Published: February 24, 2025

CVE-2025-1618

4.3
    vTiger CRM
Published: February 24, 2025

CVE-2025-24526

4.3
    Mattermost
Published: February 24, 2025

CVE-2025-27290

4.3
    Erima Zarinpal Donate
Published: February 24, 2025

CVE-2025-27311

4.3
    Bulk Content Creator
Published: February 24, 2025

CVE-2025-27315

4.3
    All-In-One Cufon
Published: February 24, 2025

CVE-2025-27316

4.3
    JPG, PNG Compression and Optimization
Published: February 24, 2025

CVE-2025-27317

4.3
    RAYS Grid
Published: February 24, 2025

CVE-2025-27318

4.3
    Simple Google Sitemap
Published: February 24, 2025

CVE-2025-27328

4.3
    WP-PostRatings Cheater
Published: February 24, 2025

CVE-2025-27335

4.3
    Free plug in by SEO Roma Auto Tag Links
Published: February 24, 2025

CVE-2025-27336

4.3
    Just Variables
Published: February 24, 2025

CVE-2025-27339

4.3
    Minimum Password Strength
Published: February 24, 2025

CVE-2025-27342

4.3
    WooCommerce Recargo de Equivalencia
Published: February 24, 2025

CVE-2025-27344

4.3
    Phee's LinkPreview
Published: February 24, 2025

CVE-2025-27353

4.3
    Bob Namaste! LMS
Published: February 24, 2025

CVE-2025-27357

4.3
    Musa AVCI Önceki Yazı Link
Published: February 24, 2025

CVE-2025-1612

3.5
    Edimax BR-6288ACL
Published: February 24, 2025

CVE-2025-1629

3.5
    my Excitel App
Published: February 24, 2025

CVE-2025-26528

3.4
    UNKNOWN
Published: February 24, 2025

CVE-2025-1632

3.3
    libarchive
Published: February 24, 2025

CVE-2025-1412

3.1
    Mattermost
Published: February 24, 2025

CVE-2025-26531

3.1
    UNKNOWN
Published: February 24, 2025

CVE-2025-26532

3.1
    Moodle
Published: February 24, 2025

CVE-2025-1613

2.4
    Fiberhome
  • An5506-01-A Firmware
  • An5506-01-A
Published: February 24, 2025

CVE-2025-1614

2.4
    Fiberhome
  • An5506-01-A Firmware
  • An5506-01-A
Published: February 24, 2025

CVE-2025-1615

2.4
    Fiberhome
  • An5506-01-A Firmware
  • An5506-01-A
Published: February 24, 2025

CVE-2025-1617

2.4
    Netis WF2780
Published: February 24, 2025

CVE-2024-5174

None
    Gliffy
Published: February 24, 2025

CVE-2025-27144

None
    Go JOSE
Published: February 24, 2025
Click here to see more Vulnerabilities