Tag: 2025-02-25

6 Attack Reports | 143 Vulnerabilities

Attack reports

DeepSeek Lure Used To Spread Malware

Cybercriminals are exploiting DeepSeek's popularity by creating fake look-alike domains to deliver the Vidar information stealer. The attack chain involves a deceptive website that prompts users to complete a fake partner registration, leading to a malicious CAPTCHA page. This page injects a PowerS…
cryptocurrency
vidar
captcha
brand impersonation
deepseek
2025-02-25
clipboard injection
Published: February 25, 2025
Downloadable IOCs: 40

Fake CAPTCHA Lures Victims: Lumma Stealer Abuses Clipboard and PowerShell

A new malware campaign using fake CAPTCHA pages to deliver Lumma Stealer has been identified. The attack leverages ClickFix, a deceptive tactic involving phishing and fake reCAPTCHA pages impersonating Cloudflare verification. The infection chain begins with a fake CAPTCHA page tricking victims int…
lumma stealer
clickfix
fake captcha
2025-02-25
Published: February 25, 2025
Downloadable IOCs: 11

GhostSocks - Partner In Proxy

GhostSocks is a Golang-based SOCKS5 backconnect proxy malware first identified in October 2023. It is primarily deployed alongside the LummaC2 information stealer and offered as Malware-as-a-Service. GhostSocks uses a relay-based C2 implementation with HTTP API, allowing attackers to route traffic …
lummac2
malware-as-a-service
golang
c2 infrastructure
socks5
ghostsocks
2025-02-25
credential abuse
anti-fraud bypass
backconnect proxy
vdsina
Published: February 25, 2025
Downloadable IOCs: 17

PolarEdge: Unveiling an uncovered ORB network

An analysis of the PolarEdge backdoor and its associated botnet reveals a sophisticated cyber threat targeting various edge devices. The botnet exploits vulnerabilities in Cisco, Asus, QNAP, and Synology devices, using a TLS backdoor to establish control. Active since at least late 2023, PolarEdge …
botnet
vulnerability exploitation
asus
infrastructure analysis
edge devices
2025-02-25
qnap
cisco
polaredge
CVE-2023-20118
tls backdoor
synology
cipher_log
Published: February 25, 2025
Linked vulnerabilities : CVE-2023-20118
Downloadable IOCs: 31

Healthcare Malware Hunt, Part 1: Silver Fox APT Targets Philips DICOM Viewers

Forescout reportead a cyber attack by the Silver Fox APT group on Philips DICOM medical imaging software. The attackers exploited vulnerabilities in the software to gain unauthorized access to sensitive patient data and hospital networks.
apt
healthcare
valleyrat
ics
ot
2025-02-25
silverfox
Published: February 25, 2025
Downloadable IOCs: 53

Auto-Color: An Emerging and Evasive Linux Backdoor

Auto-color is a newly discovered Linux malware that employs sophisticated evasion techniques. It renames itself to benign-looking filenames, hides remote C2 connections using advanced methods similar to Symbiote malware, and uses proprietary encryption for communication. The malware installs a mali…
linux
backdoor
evasion
encryption
government
c2
proxy
universities
reverse shell
2025-02-25
auto-color
library implant
symbiote
Published: February 25, 2025
Downloadable IOCs: 10
Click here to see more Attack Reports

Vulnerabilities

CVE-2023-25574

10.0
    jupyterhub-ltiauthenticator
Published: February 25, 2025

CVE-2025-1128

9.8
    Wpeverest
  • Everest Forms
Published: February 25, 2025

CVE-2025-26900

9.8
    flexmls Flexmls® IDX
Published: February 25, 2025

CVE-2025-26966

9.8
    PrivateContent
Published: February 25, 2025

CVE-2025-25516

9.8
    Seacms
Published: February 25, 2025

CVE-2025-25517

9.8
    Seacms
Published: February 25, 2025

CVE-2025-25519

9.8
    Seacms
Published: February 25, 2025

CVE-2025-25520

9.8
    Seacms
Published: February 25, 2025

CVE-2025-25521

9.8
    Seacms
Published: February 25, 2025

CVE-2025-26943

9.3
    Easy Quotes
Published: February 25, 2025

CVE-2025-26974

9.3
    WP Multi Store Locator
Published: February 25, 2025

CVE-2025-27142

8.8
    Localsend
  • Localsend
Published: February 25, 2025

CVE-2025-27148

8.8
    Gradle
Published: February 25, 2025

CVE-2025-25515

8.8
    Seacms
Published: February 25, 2025

CVE-2025-26752

8.6
    VideoWhisper Live Streaming Integration
Published: February 25, 2025

CVE-2025-26915

8.5
    PickPlugins Wishlist
Published: February 25, 2025

CVE-2024-45421

8.5
    Zoom
  • Meeting Software Development Kit
  • Rooms
  • Rooms Controller
  • Video Software Development Kit
  • Workplace
  • Workplace Desktop
  • Workplace Virtual Desktop Infrastructure
Published: February 25, 2025

CVE-2025-1673

8.2
    Zephyrproject
  • Zephyr
Published: February 25, 2025

CVE-2025-1674

8.2
    Zephyrproject
  • Zephyr
Published: February 25, 2025

CVE-2025-1675

8.2
    Zephyrproject
  • Zephyr
Published: February 25, 2025

CVE-2025-26985

8.1
    Majestic Support
Published: February 25, 2025

CVE-2024-12368

8.1
    Odoo
  • Odoo
Published: February 25, 2025

CVE-2025-26594

7.8
    Tigervnc
  • Tigervnc
    X.Org
    Redhat
Published: February 25, 2025

CVE-2025-26595

7.8
    Tigervnc
  • Tigervnc
    X.Org
    Redhat
Published: February 25, 2025

CVE-2025-26596

7.8
    Tigervnc
  • Tigervnc
    X.Org
    Redhat
Published: February 25, 2025

CVE-2025-26597

7.8
    Tigervnc
  • Tigervnc
    X.Org
    Redhat
Published: February 25, 2025

CVE-2025-26598

7.8
    Tigervnc
  • Tigervnc
    X.Org
    Redhat
Published: February 25, 2025

CVE-2025-26599

7.8
    Tigervnc
  • Tigervnc
    X.Org
    Redhat
Published: February 25, 2025

CVE-2025-26600

7.8
    Tigervnc
  • Tigervnc
    X.Org
    Redhat
Published: February 25, 2025

CVE-2025-26601

7.8
    Tigervnc
  • Tigervnc
    X.Org
    Redhat
Published: February 25, 2025

CVE-2025-26946

7.6
    WP Yelp Review Slider
Published: February 25, 2025

CVE-2025-26971

7.6
    ays-pro Poll Maker
Published: February 25, 2025

CVE-2024-0148

7.6
    NVIDIA Jetson Linux
    IGX OS image
Published: February 25, 2025

CVE-2025-1648

7.5
    Yawave
  • Yawave
Published: February 25, 2025

CVE-2025-26753

7.5
    VideoWhisper Live Streaming Integration
Published: February 25, 2025

CVE-2025-26905

7.5
    Estatik
Published: February 25, 2025

CVE-2025-26907

7.5
    Mortgage Calculator Estatik
Published: February 25, 2025

CVE-2025-26932

7.5
    QuantumCloud ChatBot
Published: February 25, 2025

CVE-2025-26935

7.5
    WP Job Portal
Published: February 25, 2025

CVE-2025-26957

7.5
    Affiliate Coupons
Published: February 25, 2025

CVE-2025-26964

7.5
    Eventin
Published: February 25, 2025

CVE-2025-26979

7.5
    Funnel Builder by FunnelKit
Published: February 25, 2025

CVE-2025-23046

7.5
    Glpi-Project
  • Glpi
Published: February 25, 2025

CVE-2024-36259

7.5
    Odoo
  • Odoo
Published: February 25, 2025

CVE-2025-27110

7.5
    Trustwave
  • Modsecurity
Published: February 25, 2025

CVE-2025-1640

7.3
    Modernasistemas
  • Modernanet
Published: February 25, 2025

CVE-2025-1641

7.3
    Modernasistemas
  • Modernanet
Published: February 25, 2025

CVE-2025-1646

7.3
    Lumsoft ERP
Published: February 25, 2025

CVE-2025-1067

7.3
    Esri
  • Arcgis Allsource
  • Arcgis Pro
Published: February 25, 2025

CVE-2025-1068

7.3
    Esri
  • Arcgis Allsource
  • Arcgis Pro
Published: February 25, 2025

CVE-2025-22210

7.2
    Hikashop for Joomla
Published: February 25, 2025

CVE-2025-26751

7.1
    Alphabetic Pagination
Published: February 25, 2025

CVE-2025-26868

7.1
    Fast Flow
Published: February 25, 2025

CVE-2025-26931

7.1
    Tribulant Gallery Voting
Published: February 25, 2025

CVE-2025-26981

7.1
    Web Accessibility By accessiBe
Published: February 25, 2025

CVE-2025-26987

7.1
    Frontend Admin by DynamiApps
Published: February 25, 2025

CVE-2025-26991

7.1
    WPPizza
Published: February 25, 2025

CVE-2025-26993

7.1
    Atarim
Published: February 25, 2025

CVE-2025-26876

6.8
    Search with Typesense
Published: February 25, 2025

CVE-2025-27139

6.8
    Combodo
  • Itop
Published: February 25, 2025

CVE-2024-54444

6.5
    Elementor Website Builder
Published: February 25, 2025

CVE-2025-26877

6.5
    Rustaurius Front End Users
Published: February 25, 2025

CVE-2025-26878

6.5
    Autoship Cloud for WooCommerce Subscription Products
Published: February 25, 2025

CVE-2025-26881

6.5
    bPlugins Sticky Content
Published: February 25, 2025

CVE-2025-26882

6.5
    Popup Builder
Published: February 25, 2025

CVE-2025-26884

6.5
    Greenshift
Published: February 25, 2025

CVE-2025-26887

6.5
    EZ SQL Reports Shortcode Widget
    DB Backup
Published: February 25, 2025

CVE-2025-26891

6.5
    VW THEMES Ibtana
Published: February 25, 2025

CVE-2025-26893

6.5
    Easy Charts
Published: February 25, 2025

CVE-2025-26896

6.5
    PiwigoPress
Published: February 25, 2025

CVE-2025-26897

6.5
    List Related Attachments
Published: February 25, 2025

CVE-2025-26904

6.5
    WP Responsive Auto Fit Text
Published: February 25, 2025

CVE-2025-26912

6.5
    Easy Elementor Addons
Published: February 25, 2025

CVE-2025-26913

6.5
    AR For WordPress
Published: February 25, 2025

CVE-2025-26937

6.5
    bPlugins Icon List Block
Published: February 25, 2025

CVE-2025-26938

6.5
    bPlugins Countdown Timer
Published: February 25, 2025

CVE-2025-26939

6.5
    bPlugins Counters Block
Published: February 25, 2025

CVE-2025-26945

6.5
    Info Cards - Gutenberg block for creating Beautiful Cards
Published: February 25, 2025

CVE-2025-26947

6.5
    bPlugins Services Section block
Published: February 25, 2025

CVE-2025-26949

6.5
    bPlugins Team Section Block
Published: February 25, 2025

CVE-2025-26952

6.5
    bPlugins Business Card Block
Published: February 25, 2025

CVE-2025-26960

6.5
    Small Package Quotes - Unishippers Edition
Published: February 25, 2025

CVE-2025-26962

6.5
    GhozyLab Easy Contact Form Lite
Published: February 25, 2025

CVE-2025-26980

6.5
    Wired Impact Volunteer Management
Published: February 25, 2025

CVE-2025-21627

6.5
    Glpi-Project
  • Glpi
Published: February 25, 2025

CVE-2025-25192

6.5
    Glpi-Project
  • Glpi
Published: February 25, 2025

CVE-2025-25514

6.5
    Seacms
Published: February 25, 2025

CVE-2024-13695

6.4
    Kriesi
  • Enfold
Published: February 25, 2025

CVE-2025-1645

6.3
    Benner Connecta
Published: February 25, 2025

CVE-2025-1676

6.3
    hzmanyun Education and Training System
Published: February 25, 2025

CVE-2024-45417

6.0
    Zoom
  • Meeting Software Development Kit
  • Rooms
  • Video Software Development Kit
  • Workplace Desktop
Published: February 25, 2025

CVE-2025-21626

5.8
    Glpi-Project
  • Glpi
Published: February 25, 2025

CVE-2024-34034

5.7
    FlexRIC
Published: February 25, 2025

CVE-2024-34035

5.7
    O-RAN Near Realtime RIC H-Release
Published: February 25, 2025

CVE-2025-26963

5.4
    ClickWhale
Published: February 25, 2025

CVE-2025-26995

5.4
    Anton Vanyukov Market Exporter
Published: February 25, 2025

CVE-2025-27000

5.4
    Simple Photo Feed
Published: February 25, 2025

CVE-2024-45418

5.4
    Zoom
  • Meeting Software Development Kit
  • Rooms
  • Video Software Development Kit
  • Workplace Desktop
Published: February 25, 2025

CVE-2025-1063

5.3
    Radiustheme
  • Classified Listing
Published: February 25, 2025

CVE-2024-13693

5.3
    Kriesi
  • Enfold
Published: February 25, 2025

CVE-2025-1262

5.3
    Webfactoryltd
  • Advanced Google Recaptcha
Published: February 25, 2025

CVE-2025-26965

5.3
    Amelia
Published: February 25, 2025

CVE-2025-26975

5.3
    WP Chill Strong Testimonials
Published: February 25, 2025

CVE-2024-45424

5.3
    Zoom
  • Meeting Software Development Kit
  • Rooms
  • Rooms Controller
  • Workplace
  • Workplace Desktop
  • Workplace Virtual Desktop Infrastructure
Published: February 25, 2025

CVE-2024-30150

5.3
    HCL MyCloud
Published: February 25, 2025

CVE-2024-45425

4.9
    Zoom
  • Meeting Software Development Kit
  • Rooms
  • Rooms Controller
  • Workplace
  • Workplace Desktop
  • Workplace Virtual Desktop Infrastructure
Published: February 25, 2025

CVE-2024-45426

4.9
    Zoom
  • Meeting Software Development Kit
  • Rooms
  • Rooms Controller
  • Workplace
  • Workplace Desktop
  • Workplace Virtual Desktop Infrastructure
Published: February 25, 2025

CVE-2025-1642

4.3
    Modernasistemas
  • Modernanet
Published: February 25, 2025

CVE-2025-1643

4.3
    Modernasistemas
  • Modernanet
Published: February 25, 2025

CVE-2025-1644

4.3
    Modernasistemas
  • Modernanet
Published: February 25, 2025

CVE-2024-13494

4.3
    Iptanus
  • Wordpress File Upload
Published: February 25, 2025

CVE-2024-34036

4.3
    O-RAN Near Realtime RIC I-Release
Published: February 25, 2025

CVE-2025-26871

4.3
    WPDeveloper Essential Blocks for Gutenberg
Published: February 25, 2025

CVE-2025-26911

4.3
    Bowo System Dashboard
Published: February 25, 2025

CVE-2025-26926

4.3
    Booknetic
Published: February 25, 2025

CVE-2025-26928

4.3
    Order Limit for WooCommerce
Published: February 25, 2025

CVE-2025-26948

4.3
    Pie Register Premium
Published: February 25, 2025

CVE-2025-26983

4.3
    WPZOOM Recipe Card Blocks for Gutenberg & Elementor
Published: February 25, 2025

CVE-2024-11955

4.3
    Glpi-Project
  • Glpi
Published: February 25, 2025

CVE-2025-23024

4.3
    Glpi-Project
  • Glpi
Published: February 25, 2025

CVE-2024-27239

4.3
    Zoom Workplace Apps
    Zoom SDKs
Published: February 25, 2025

CVE-2024-27245

4.3
    Zoom Workplace Apps
    Zoom SDKs
Published: February 25, 2025

CVE-2024-27246

4.3
    Zoom Workplace Apps
    Zoom SDKs
Published: February 25, 2025

CVE-2025-26977

3.8
    Filebird
Published: February 25, 2025

CVE-2025-27145

3.6
    copyparty
Published: February 25, 2025

CVE-2024-10545

3.5
    Photo Gallery, Sliders, Proofing and WordPress plugin
Published: February 25, 2025

CVE-2025-22211

3.4
    JoomShopping component for Joomla
Published: February 25, 2025

CVE-2024-53870

3.3
    NVIDIA CUDA Toolkit
Published: February 25, 2025

CVE-2024-53871

3.3
    NVIDIA CUDA toolkit
Published: February 25, 2025

CVE-2024-53872

3.3
    NVIDIA CUDA toolkit
Published: February 25, 2025

CVE-2024-53873

3.3
    NVIDIA CUDA toolkit for Windows
Published: February 25, 2025

CVE-2024-53874

3.3
    NVIDIA CUDA toolkit
Published: February 25, 2025

CVE-2024-53875

3.3
    NVIDIA CUDA toolkit
Published: February 25, 2025

CVE-2024-53876

3.3
    NVIDIA CUDA toolkit
Published: February 25, 2025

CVE-2024-53877

3.3
    NVIDIA CUDA toolkit
Published: February 25, 2025

CVE-2024-53878

2.8
    NVIDIA CUDA toolkit
Published: February 25, 2025

CVE-2024-53879

2.8
    NVIDIA CUDA toolkit
Published: February 25, 2025

CVE-2025-27146

2.7
    Matrix
  • Matrix Irc Bridge
Published: February 25, 2025

CVE-2024-51539

2.3
    Dell Secure Connect Gateway (SCG) Application and Appliance
Published: February 25, 2025

CVE-2024-12424

None
    UNKNOWN
Published: February 25, 2025

CVE-2025-1204

None
    UNKNOWN
Published: February 25, 2025

CVE-2025-27135

None
    RAGFlow
Published: February 25, 2025

CVE-2025-0514

None
    LibreOffice
Published: February 25, 2025
Click here to see more Vulnerabilities