Tag: 2025-02-24

5 Attack Reports | 119 Vulnerabilities

Attack reports

Unmasking a Large-Scale Legacy Driver Exploitation Campaign

Check Point Research uncovered an extensive campaign exploiting a vulnerability in the legacy version 2.0.2 of the Truesight.sys driver, part of Adlice's RogueKiller Antirootkit suite. Attackers leveraged this vulnerability to deploy an EDR/AV killer module, effectively disabling security solutions…
phishing
exploitation
driver
2025-02-24
edrbypass
Published: February 24, 2025
Downloadable IOCs: 951

Phishing Campaigns Targeting Higher Education Institutions

Since August 2024, there has been a significant increase in phishing attacks targeting U.S. universities. Three distinct campaigns have emerged, exploiting trust within academic institutions to deceive students, faculty, and staff. One campaign used compromised educational institutions to host Goog…
phishing
social engineering
universities
business email compromise
2025-02-24
google forms
higher education
payment redirection
Published: February 24, 2025
Downloadable IOCs: 4

Fake GitHub projects distribute stealers in GitVenom campaign

The GitVenom campaign involves threat actors creating hundreds of fake repositories on GitHub containing malicious code disguised as legitimate projects. These repositories include well-designed README files and artificially inflated commit numbers to appear genuine. The malicious code, implemented…
cryptocurrency
stealer
asyncrat
open-source
github
quasar
2025-02-24
gitvenom
clipboard-hijacker
fake-projects
Published: February 24, 2025
Downloadable IOCs: 2

New wave of targeted attacks of the Angry Likho APT on Russian organizations

The Angry Likho APT group has launched a new wave of targeted attacks primarily against Russian organizations. The group employs spear-phishing emails with malicious attachments as the initial attack vector. A previously unknown implant was discovered, utilizing a self-extracting archive and AutoIt…
apt
russia
stealer
autoit
targeted attacks
2025-02-24
lumma trojan
Published: February 24, 2025
Downloadable IOCs: 30

Confluence Exploit Leads to LockBit Ransomware

An intrusion began with the exploitation of CVE-2023-22527 on an exposed Windows Confluence server, leading to LockBit ransomware deployment across the environment. The threat actor utilized various tools including Mimikatz, Metasploit, and AnyDesk. They leveraged RDP for lateral movement and deplo…
ransomware
lockbit
exfiltration
credential theft
lateral movement
rdp
CVE-2023-22527
confluence
2025-02-24
Published: February 24, 2025
Downloadable IOCs: 15
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-27364

10.0
    MITRE Caldera
  • Version(s): 4.2.0, 5.0.0 before 35bc06e
Published: February 24, 2025

CVE-2025-20051

9.9
    Mattermost
  • Version(s): 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2
Published: February 24, 2025

CVE-2025-25279

9.9
    Mattermost
  • Version(s): 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2
Published: February 24, 2025

CVE-2024-56897

9.8
    Yitechnology
  • Yi Car Dashcam Firmware
  • Yi Car Dashcam
Published: February 24, 2025

CVE-2024-54820

9.8
    XOne Web Monitor v02.10.2024.530 framework
  • Version(s): 1.0.4.9
Published: February 24, 2025

CVE-2025-25513

9.8
    Seacms
  • Seacms
Published: February 24, 2025

CVE-2025-27140

9.8
    Wegia
  • Wegia
Published: February 24, 2025

CVE-2024-53544

9.8
    Smart Time Plus
  • Version(s): 8.x, 8.0 - 8.6
Published: February 24, 2025

CVE-2024-56525

9.8
    Public Knowledge Project (PKP) OJS
  • Version(s): before 3.3.0.21, 3.4.x before 3.4.0.8
    Public Knowledge Project (PKP) OMP
  • Version(s): before 3.3.0.21, 3.4.x before 3.4.0.8
    Public Knowledge Project (PKP) OPS
  • Version(s): before 3.3.0.21, 3.4.x before 3.4.0.8
Published: February 24, 2025

CVE-2025-22974

9.8
    SeaCMS
  • Version(s): v.13.2 and before
Published: February 24, 2025

CVE-2025-24490

9.6
    Mattermost
  • Version(s): 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2
Published: February 24, 2025

CVE-2025-26201

9.1
    GreaterWMS
  • Version(s): <= 2.1.49
Published: February 24, 2025

CVE-2024-12916

8.8
    Life4All
  • Version(s): before 10.01.2025
Published: February 24, 2025

CVE-2024-12918

8.8
    Health4All
  • Version(s): before 10.01.2025
Published: February 24, 2025

CVE-2025-27276

8.8
    Photo Gallery (Responsive)
  • Version(s): n/a, 4.0
Published: February 24, 2025

CVE-2025-27133

8.8
    Wegia
  • Wegia
Published: February 24, 2025

CVE-2025-26525

8.6
    TeX Live
Published: February 24, 2025

CVE-2024-55898

8.5
    IBM i
  • Version(s): 7.2, 7.3, 7.4, 7.5
Published: February 24, 2025

CVE-2025-27312

8.5
    Jenst WP Sitemap
  • Version(s): UNKNOWN
Published: February 24, 2025

CVE-2025-22495

8.4
    Network-M2
  • Version(s): 3.0.4
Published: February 24, 2025

CVE-2024-12917

8.3
    Health4All
  • Version(s): before 10.01.2025
Published: February 24, 2025

CVE-2025-27298

8.3
    WP Video Posts
  • Version(s): n/a, 3.5.1
Published: February 24, 2025

CVE-2025-26529

8.3
    UNKNOWN
Published: February 24, 2025

CVE-2025-26530

8.3
    UNKNOWN
Published: February 24, 2025

CVE-2025-26533

8.1
    UNKNOWN
Published: February 24, 2025

CVE-2023-52926

7.8
    Linux kernel
Published: February 24, 2025

CVE-2025-27297

7.6
    Bravo Search & Replace
  • Version(s): n/a - 1.0
Published: February 24, 2025

CVE-2025-27272

7.5
    VG PostCarousel
  • Version(s): n/a, 1.1
Published: February 24, 2025

CVE-2025-27296

7.2
    Auto Ad Inserter
  • Version(s): n/a - 1.5
Published: February 24, 2025

CVE-2025-27300

7.2
    UNKNOWN
Published: February 24, 2025

CVE-2025-27301

7.2
    NHR Options Table Manager
  • Version(s): n/a, 1.1.2
Published: February 24, 2025

CVE-2025-26200

7.2
    SLIMS
  • Version(s): 9.6.1
Published: February 24, 2025

CVE-2025-27277

7.1
    tiefpunkt Add Linked Images To Gallery
  • Version(s): n/a, 1.4
Published: February 24, 2025

CVE-2025-27321

7.1
    Blighty Blightly Explorer
  • Version(s): n/a, 2.3.0
Published: February 24, 2025

CVE-2025-27332

7.1
    Smart Maintenance & Countdown
  • Version(s): n/a, 1.2
Published: February 24, 2025

CVE-2025-27352

7.1
    无觅相关文章插件
  • Version(s): n/a, 1.0.5.7
Published: February 24, 2025

CVE-2025-27355

7.1
    Woocommerce - Loi Hamon
  • Version(s): n/a, 1.1.0
Published: February 24, 2025

CVE-2025-26883

6.5
    bPlugins Animated Text Block
  • Version(s): n/a, 1.0.7
Published: February 24, 2025

CVE-2025-27265

6.5
    Google Maps for WordPress
  • Version(s): n/a, 1.0.3
Published: February 24, 2025

CVE-2025-27266

6.5
    Hover Image Button
  • Version(s): n/a, 1.1.2
Published: February 24, 2025

CVE-2025-27280

6.5
    Alobaidi Archive Page
  • Version(s): n/a, 1.0.1
Published: February 24, 2025

CVE-2025-27305

6.5
    Achal Jain Table of Contents Block
  • Version(s): n/a, 1.0.2
Published: February 24, 2025

CVE-2025-27306

6.5
    Pathomation
  • Version(s): n/a, 2.5.1
Published: February 24, 2025

CVE-2025-27307

6.5
    Quotes llama
  • Version(s): n/a, 3.0.1
Published: February 24, 2025

CVE-2025-27320

6.5
    Profile Widget Ninja
  • Version(s): n/a, 4.3
Published: February 24, 2025

CVE-2025-27323

6.5
    WP About Author
  • Version(s): n/a, 1.5
Published: February 24, 2025

CVE-2025-27325

6.5
    Video.js HLS Player
  • Version(s): n/a, 1.0.2
Published: February 24, 2025

CVE-2025-27327

6.5
    Winlin Live Streaming Video Player - by SRS Player
  • Version(s): n/a, 1.0.18
Published: February 24, 2025

CVE-2025-27329

6.5
    EZ InLinkz linkup
  • Version(s): n/a, 0.18
Published: February 24, 2025

CVE-2025-27330

6.5
    PlayerJS
  • Version(s): n/a, 2.23
Published: February 24, 2025

CVE-2025-27331

6.5
    WooCommerce Display Products by Tags
  • Version(s): n/a, 1.0.0
Published: February 24, 2025

CVE-2025-27341

6.5
    Reactive Mortgage Calculator
  • Version(s): n/a, 1.1
Published: February 24, 2025

CVE-2025-27347

6.5
    Direct Checkout Button for WooCommerce
  • Version(s): n/a, 1.0
Published: February 24, 2025

CVE-2025-27348

6.5
    WP Social SEO Booster - Knowledge Graph Social Signals SEO
  • Version(s): n/a, 1.2.0
Published: February 24, 2025

CVE-2025-27349

6.5
    nurelm Get Posts
  • Version(s): n/a, 0.6
Published: February 24, 2025

CVE-2025-27351

6.5
    ExpertBusinessSearch Local Search SEO Contact Page
  • Version(s): n/a, 4.0.1
Published: February 24, 2025

CVE-2025-27112

6.5
    Navidrome
  • Navidrome
Published: February 24, 2025

CVE-2025-26526

6.5
    Moodle
  • Version(s): before 3.7.14, 3.8.7, 3.9.4, 3.10.1, 3.11
Published: February 24, 2025

CVE-2024-57608

6.5
    Via Browser
  • Version(s): 6.1.0
Published: February 24, 2025

CVE-2025-27141

6.5
    Metabase
  • Metabase
Published: February 24, 2025

CVE-2024-53542

6.5
    Smart Time Plus
  • Version(s): 8.x, 8.0 - 8.6
Published: February 24, 2025

CVE-2025-1598

6.3
    Mayurik
  • Best Church Management Software
Published: February 24, 2025

CVE-2025-1608

6.3
    LB-LINK AC1900 Router
  • Version(s): 1.0.2
Published: February 24, 2025

CVE-2025-1609

6.3
    LB-LINK AC1900 Router
  • Version(s): 1.0.2
Published: February 24, 2025

CVE-2025-1610

6.3
    LB-LINK AC1900 Router
  • Version(s): 1.0.2
Published: February 24, 2025

CVE-2024-13822

6.1
    Photo Contest | Competition | Video Contest WordPress plugin
  • Version(s): 2.8.1 and prior
Published: February 24, 2025

CVE-2025-0690

6.1
    GRUB
  • Version(s): UNKNOWN
Published: February 24, 2025

CVE-2024-57026

6.1
    Tawk
  • Tawk.To
Published: February 24, 2025

CVE-2025-27143

6.1
    Better-Auth
  • Better Auth
Published: February 24, 2025

CVE-2025-23017

6.0
    WorkOS Hosted AuthKit
  • Version(s): before 2025-01-07
Published: February 24, 2025

CVE-2025-27303

5.9
    Contact Form 7 Star Rating
  • Version(s): from n/a, 1.10
Published: February 24, 2025

CVE-2025-27304

5.9
    Contact Form 7 Star Rating with font Awesome
  • Version(s): n/a, 1.3
Published: February 24, 2025

CVE-2025-1599

5.4
    Mayurik
  • Best Church Management Software
Published: February 24, 2025

CVE-2024-12308

5.4
    Logo Slider WordPress plugin
  • Version(s): before 4.6.0
Published: February 24, 2025

CVE-2025-27340

5.4
    Marc F12-Profiler
  • Version(s): n/a, 1.3.9
Published: February 24, 2025

CVE-2025-27356

5.4
    Sticky Header On Scroll
  • Version(s): n/a, 1.0
Published: February 24, 2025

CVE-2024-53543

5.4
    Smart Time Plus
  • Version(s): 8.0 - 8.6
Published: February 24, 2025

CVE-2025-26803

5.3
    Phusion
  • Passenger
Published: February 24, 2025

CVE-2025-26527

5.3
    UNKNOWN
Published: February 24, 2025

CVE-2024-57685

5.3
    sparkshop
  • Version(s): 1.1.7, before 1.1.7
Published: February 24, 2025

CVE-2024-13605

4.8
    Form Maker by 10Web WordPress plugin
  • Version(s): before 1.15.33
Published: February 24, 2025

CVE-2025-27294

4.8
    WP-Asambleas
  • Version(s): n/a, 2.85.0
Published: February 24, 2025

CVE-2025-25460

4.8
    FlatPress
  • Version(s): 1.3.1
Published: February 24, 2025

CVE-2025-1611

4.7
    ShopXO
  • Version(s): up to 6.4.0
Published: February 24, 2025

CVE-2025-1616

4.7
    Fiberhome
  • An5506-01a Firmware
  • An5506-01a
Published: February 24, 2025

CVE-2025-1488

4.7
    WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress
  • Version(s): up to 3.2
Published: February 24, 2025

CVE-2025-0545

4.7
    T-Soft E-Commerce
  • Version(s): before v5
Published: February 24, 2025

CVE-2025-27137

4.4
    Dependency-Track
  • Version(s): < 4.12.6
Published: February 24, 2025

CVE-2025-1606

4.3
    Mayurik
  • Best Employee Management System
Published: February 24, 2025

CVE-2025-1607

4.3
    SourceCodester Best Employee Management System
  • Version(s): 1.0
Published: February 24, 2025

CVE-2025-1618

4.3
    vTiger CRM
  • Version(s): 6.4.0
Published: February 24, 2025

CVE-2025-24526

4.3
    Mattermost
  • Version(s): 10.1.x <= 10.1.3, 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2
Published: February 24, 2025

CVE-2025-27290

4.3
    Erima Zarinpal Donate
  • Version(s): n/a, 1.0
Published: February 24, 2025

CVE-2025-27311

4.3
    Bulk Content Creator
  • Version(s): from n/a, 1.2.1
Published: February 24, 2025

CVE-2025-27315

4.3
    All-In-One Cufon
  • Version(s): n/a, 1.3.0
Published: February 24, 2025

CVE-2025-27316

4.3
    JPG, PNG Compression and Optimization
  • Version(s): n/a, 1.7.35
Published: February 24, 2025

CVE-2025-27317

4.3
    RAYS Grid
  • Version(s): n/a - 1.3.1
Published: February 24, 2025

CVE-2025-27318

4.3
    Simple Google Sitemap
  • Version(s): n/a, 1.6
Published: February 24, 2025

CVE-2025-27328

4.3
    WP-PostRatings Cheater
  • Version(s): n/a - 1.5
Published: February 24, 2025

CVE-2025-27335

4.3
    Free plug in by SEO Roma Auto Tag Links
  • Version(s): n/a, 1.0.13
Published: February 24, 2025

CVE-2025-27336

4.3
    Just Variables
  • Version(s): n/a, 1.2.3
Published: February 24, 2025

CVE-2025-27339

4.3
    Minimum Password Strength
  • Version(s): n/a, 1.2.0
Published: February 24, 2025

CVE-2025-27342

4.3
    WooCommerce Recargo de Equivalencia
  • Version(s): n/a - 1.6.24
Published: February 24, 2025

CVE-2025-27344

4.3
    Phee's LinkPreview
  • Version(s): n/a - 1.6.7
Published: February 24, 2025

CVE-2025-27353

4.3
    Bob Namaste! LMS
  • Version(s): n/a, 2.6.5
Published: February 24, 2025

CVE-2025-27357

4.3
    Musa AVCI Önceki Yazı Link
  • Version(s): n/a, 1.3
Published: February 24, 2025

CVE-2025-1612

3.5
    Edimax BR-6288ACL
  • Version(s): 1.30
Published: February 24, 2025

CVE-2025-1629

3.5
    my Excitel App
  • Version(s): 3.13.0
Published: February 24, 2025

CVE-2025-26528

3.4
    UNKNOWN
Published: February 24, 2025

CVE-2025-1632

3.3
    libarchive
  • Version(s): up to 3.7.7
Published: February 24, 2025

CVE-2025-1412

3.1
    Mattermost
  • Version(s): 9.11.x <= 9.11.6, 10.4.x <= 10.4.1
Published: February 24, 2025

CVE-2025-26531

3.1
    UNKNOWN
Published: February 24, 2025

CVE-2025-26532

3.1
    Moodle
  • Version(s): 3.10.1, 3.9.4
Published: February 24, 2025

CVE-2025-1613

2.4
    Fiberhome
  • An5506-01-A Firmware
  • An5506-01-A
Published: February 24, 2025

CVE-2025-1614

2.4
    Fiberhome
  • An5506-01-A Firmware
  • An5506-01-A
Published: February 24, 2025

CVE-2025-1615

2.4
    Fiberhome
  • An5506-01-A Firmware
  • An5506-01-A
Published: February 24, 2025

CVE-2025-1617

2.4
    Netis WF2780
  • Version(s): 2.1.41925
Published: February 24, 2025

CVE-2024-5174

None
    Gliffy
Published: February 24, 2025

CVE-2025-27144

None
    Go JOSE
  • Version(s): 4.0.5
Published: February 24, 2025
Click here to see more Vulnerabilities