Tag: 2025-03-04

5 Attack Reports | 147 Vulnerabilities

Attack reports

Exposing the Deception: Russian EFF Impersonators Behind Stealc & Pyramid C2

A threat group impersonating the Electronic Frontier Foundation (EFF) is targeting Albion Online players through phishing messages and decoy documents. The campaign uses malware such as Stealc stealer and Pyramid C2 to compromise player accounts. Analysis of an exposed directory revealed PowerShell…
phishing
stealc
russian-speaking
gaming
2025-03-04
pyramid c2
Published: March 4, 2025
Downloadable IOCs: 0

Call It What You Want: Threat Actor Delivers Highly Targeted Multistage Polyglot Malware

A highly targeted email-based campaign was identified, focusing on aviation and satellite communications organizations in the United Arab Emirates. The campaign utilized a compromised entity to send customized malicious messages, leading to the discovery of a new backdoor named Sosano. This malware…
backdoor
supply-chain
apt
targeted
2025-03-04
satellite
sosano
Published: March 4, 2025
Downloadable IOCs: 0

Analysis of a JavaScript-based Phishing Campaign Targeting Microsoft 365 Credentials

A sophisticated JavaScript-based credential harvesting campaign has been discovered, utilizing fake voicemail notifications to capture Microsoft 365 credentials. The attackers employ HTML smuggling, obfuscation, and encryption techniques to evade detection. The phishing emails contain PDF attachmen…
phishing
credential harvesting
html smuggling
microsoft 365
2025-03-04
voicemail lure
cryptojs
Published: March 4, 2025
Downloadable IOCs: 0

Booking a Threat: Inside LummaStealer's Fake reCAPTCHA

A new malicious campaign targeting booking websites has been discovered, utilizing LummaStealer, an info-stealer operating under a Malware-as-a-Service model. The attack employs fake CAPTCHAs to trick users into executing malicious PowerShell commands. Initially targeting the Philippines, the campa…
obfuscation
social engineering
malvertising
powershell
clickfix
fake captcha
lummastealer
2025-03-04
emotet
info-stealer
binary padding
booking websites
indirect control flow
Published: March 4, 2025
Downloadable IOCs: 12

Deep Dive Into Allegedly AI-Generated FunkSec Ransomware

A new Rust-based ransomware called FunkSec has emerged, claiming to use artificial intelligence in its development. First appearing in 2024, it demonstrates a mix of sophisticated capabilities and developmental inconsistencies. FunkSec implements advanced features like XChaCha20 encryption and comp…
ransomware
persistence
evasion techniques
anti-vm
funksec
2025-03-04
ai-generated
Published: March 4, 2025
Downloadable IOCs: 1
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-50704

10.0
    Uniguest TriplePlay
  • Version(s): before 24.2.1
Published: March 4, 2025

CVE-2024-50707

10.0
    Uniguest Tripleplay
  • Version(s): before 24.2.1
Published: March 4, 2025

CVE-2025-0912

9.8
    Givewp
  • Givewp
Published: March 4, 2025

CVE-2025-1307

9.8
    Spicethemes
  • Newscrunch
Published: March 4, 2025

CVE-2024-50706

9.8
    Uniguest Tripleplay
  • Version(s): before 24.2.1
Published: March 4, 2025

CVE-2025-26136

9.8
    mysiteforme
  • Version(s): before 2025.01.1
Published: March 4, 2025

CVE-2025-26319

9.8
    FlowiseAI Flowise
  • Version(s): 2.2.6
Published: March 4, 2025

CVE-2025-26318

9.4
    TSplus Remote Access
  • Version(s): 17.30
Published: March 4, 2025

CVE-2025-22224

9.3
    Vmware
  • Esxi
  • Cloud Foundation
  • Telco Cloud Infrastructure
  • Telco Cloud Platform
  • Workstation
Published: March 4, 2025

CVE-2025-1941

9.1
    Firefox
  • Version(s): < 136
Published: March 4, 2025

CVE-2025-1260

9.1
    Arista EOS
Published: March 4, 2025

CVE-2025-27507

9.0
    ZITADEL
  • Version(s): 2.71.0, 2.70.1, 2.69.4, 2.68.4, 2.67.8, 2.66.11, 2.65.6, 2.64.5, 2.63.8
Published: March 4, 2025

CVE-2025-1639

8.8
    Crowdytheme
  • Arolax
Published: March 4, 2025

CVE-2025-1306

8.8
    Spicethemes
  • Newscrunch
Published: March 4, 2025

CVE-2025-1930

8.8
    Firefox
  • Version(s): < 136, < 115.21
Published: March 4, 2025

CVE-2024-48248

8.6
    NAKIVO Backup & Replication
  • Version(s): before 11.0.0.88174
Published: March 4, 2025

CVE-2024-58045

8.6
    Huawei
  • Harmonyos
Published: March 4, 2025

CVE-2024-9149

8.6
    Wind Media E-Commerce Website Template
  • Version(s): before v1.5
Published: March 4, 2025

CVE-2025-0359

8.5
    AXIS OS
Published: March 4, 2025

CVE-2024-58044

8.4
    Huawei
  • Emui
  • Harmonyos
Published: March 4, 2025

CVE-2025-22225

8.2
    Vmware
  • Esxi
  • Cloud Foundation
  • Telco Cloud Infrastructure
  • Telco Cloud Platform
Published: March 4, 2025

CVE-2025-1943

8.2
    Firefox
  • Version(s): < 136
    Thunderbird
  • Version(s): < 136
Published: March 4, 2025

CVE-2025-23368

8.1
    Wildfly Elytron
Published: March 4, 2025

CVE-2025-0360

7.8
    VAPIX Device Configuration framework
Published: March 4, 2025

CVE-2024-41147

7.7
    Miniaudio
  • Version(s): 0.11.21
Published: March 4, 2025

CVE-2025-1259

7.7
    Arista EOS
Published: March 4, 2025

CVE-2025-1894

7.3
    Phpgurukul
  • Restaurant Table Booking System
Published: March 4, 2025

CVE-2025-1900

7.3
    Phpgurukul
  • Restaurant Table Booking System
Published: March 4, 2025

CVE-2025-1901

7.3
    Phpgurukul
  • Restaurant Table Booking System
Published: March 4, 2025

CVE-2025-1902

7.3
    Phpgurukul
  • Student Record System
Published: March 4, 2025

CVE-2025-1903

7.3
    Codezips
  • Online Shopping Website
Published: March 4, 2025

CVE-2024-58043

7.3
    Huawei
  • Emui
  • Harmonyos
Published: March 4, 2025

CVE-2025-1952

7.3
    PHPGurukul Restaurant Table Booking System
  • Version(s): 1.0
Published: March 4, 2025

CVE-2025-1954

7.3
    PHPGurukul Human Metapneumovirus Testing Management System
  • Version(s): 1.0
Published: March 4, 2025

CVE-2025-1956

7.3
    Shopping Portal
  • Version(s): 1.0
Published: March 4, 2025

CVE-2025-1959

7.3
    Codezips Gym Management System
  • Version(s): 1.0
Published: March 4, 2025

CVE-2025-25426

7.2
    yShopMall
  • Version(s): <=v1.9.0
Published: March 4, 2025

CVE-2025-22226

7.1
    Vmware
  • Esxi
  • Cloud Foundation
  • Fusion
  • Telco Cloud Infrastructure
  • Telco Cloud Platform
  • Workstation
Published: March 4, 2025

CVE-2025-1940

7.1
    Firefox
  • Version(s): < 136
Published: March 4, 2025

CVE-2024-50705

7.1
    Uniguest Tripleplay
  • Version(s): before 24.2.1
Published: March 4, 2025

CVE-2025-27521

6.8
    Huawei
  • Harmonyos
Published: March 4, 2025

CVE-2024-58048

6.7
    Huawei
  • Harmonyos
Published: March 4, 2025

CVE-2025-1895

6.5
    Tenda
  • Tx3 Firmware
  • Tx3
Published: March 4, 2025

CVE-2025-1896

6.5
    Tenda
  • Tx3 Firmware
  • Tx3
Published: March 4, 2025

CVE-2025-1897

6.5
    Tenda
  • Tx3 Firmware
  • Tx3
Published: March 4, 2025

CVE-2025-1898

6.5
    Tenda
  • Tx3 Firmware
  • Tx3
Published: March 4, 2025

CVE-2025-1899

6.5
    Tenda
  • Tx3 Firmware
  • Tx3
Published: March 4, 2025

CVE-2025-1321

6.5
    Mtrv
  • Teachpress
Published: March 4, 2025

CVE-2024-47260

6.5
    Axis VAPIX API
  • Version(s): UNKNOWN
Published: March 4, 2025

CVE-2025-1938

6.5
    Firefox
  • Version(s): < 136
    Firefox ESR
  • Version(s): < 128.8
    Thunderbird
  • Version(s): < 136, < 128.8
Published: March 4, 2025

CVE-2025-26320

6.5
    t0mer BroadlinkManager
  • Version(s): 5.9.1
Published: March 4, 2025

CVE-2025-26182

6.5
    Xxyopen Novel Plus
  • Version(s): 4.4.0, before 4.4.0
Published: March 4, 2025

CVE-2024-9618

6.4
    Master-Addons
  • Master Addons
Published: March 4, 2025

CVE-2025-0433

6.4
    Master-Addons
  • Master Addons
Published: March 4, 2025

CVE-2025-0512

6.4
    Wpsc-Plugin
  • Structured Content
Published: March 4, 2025

CVE-2025-0370

6.4
    Vanokhin
  • Shortcodes Ultimate
Published: March 4, 2025

CVE-2025-1890

6.3
    Shishuocms Project
  • Shishuocms
Published: March 4, 2025

CVE-2025-1946

6.3
    hzmanyun Education and Training System
  • Version(s): 2.1
Published: March 4, 2025

CVE-2025-1947

6.3
    hzmanyun Education and Training System
  • Version(s): 2.1.3
Published: March 4, 2025

CVE-2025-1958

6.3
    aaluoxiang oa_system
  • Version(s): 1.0
Published: March 4, 2025

CVE-2025-1961

6.3
    SourceCodester Best Church Management Software
  • Version(s): 1.1
Published: March 4, 2025

CVE-2024-58046

6.2
    Huawei
  • Harmonyos
Published: March 4, 2025

CVE-2024-58050

6.2
    Huawei
  • Harmonyos
Published: March 4, 2025

CVE-2025-27155

6.1
    Pinecone Simulator
  • Version(s): up to commit ea4c337
Published: March 4, 2025

CVE-2025-27219

5.8
    Ruby-Lang
  • Cgi
Published: March 4, 2025

CVE-2025-20042

5.5
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-21098

5.5
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-0958

5.4
    Auctionplugin
  • Ultimate Auction
Published: March 4, 2025

CVE-2025-27426

5.4
    Firefox for iOS
  • Version(s): < 13.6
Published: March 4, 2025

CVE-2025-1695

5.3
    F5
  • Nginx
Published: March 4, 2025

CVE-2024-13685

5.3
    Admin and Site Enhancements (ASE) WordPress plugin
  • Version(s): before 7.6.10
Published: March 4, 2025

CVE-2024-47262

5.3
    Axis Communications Products
  • Version(s): UNKNOWN
Published: March 4, 2025

CVE-2025-1925

5.3
    Open5GS
  • Version(s): up to 2.7.2
Published: March 4, 2025

CVE-2025-27150

5.3
    Tuleap
  • Version(s): 16.4.99.1740492866, 16.4-6, 16.3-11
Published: March 4, 2025

CVE-2019-1815

5.3
    Cisco Meraki MX67 security appliance
    Cisco Meraki MX68 security appliance
Published: March 4, 2025

CVE-2020-3122

5.3
    Cisco Content Security Management Appliance (SMA)
Published: March 4, 2025

CVE-2024-8000

5.3
    Arista EOS
Published: March 4, 2025

CVE-2024-9135

5.3
    Arista EOS
Published: March 4, 2025

CVE-2024-58047

5.0
    Huawei
  • Harmonyos
Published: March 4, 2025

CVE-2024-58049

5.0
    Huawei
  • Harmonyos
Published: March 4, 2025

CVE-2025-1906

4.7
    Phpgurukul
  • Restaurant Table Booking System
Published: March 4, 2025

CVE-2025-27401

4.6
    Tuleap
  • Version(s): Community Edition 16.4.99.1740498975, Enterprise Edition 16.4-6, 16.3-11
Published: March 4, 2025

CVE-2025-27402

4.6
    Tuleap
  • Version(s): 16.4.99.1740414959, 16.4-6, 16.3-11
Published: March 4, 2025

CVE-2025-1891

4.3
    Qzw1210
  • Shishuocms
Published: March 4, 2025

CVE-2025-1893

4.3
    Open5gs
  • Open5gs
Published: March 4, 2025

CVE-2024-13686

4.3
    Vwthemes
  • Vw Storefront
Published: March 4, 2025

CVE-2024-13682

4.3
    Wpswings
  • Wallet System For Woocommerce
Published: March 4, 2025

CVE-2024-13724

4.3
    Wpswings
  • Wallet System For Woocommerce
Published: March 4, 2025

CVE-2025-26849

4.3
    Docusnap
  • Version(s): 13.0.1440.24261, before 13.0.1440.24261, after 13.0.1440.24261
Published: March 4, 2025

CVE-2025-27424

4.3
    Firefox for iOS
  • Version(s): <13.6
Published: March 4, 2025

CVE-2025-27425

4.3
    Firefox for iOS
  • Version(s): < 13.6
Published: March 4, 2025

CVE-2025-1949

4.3
    ZZCMS
  • Version(s): 2025
Published: March 4, 2025

CVE-2025-1969

4.3
    Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
  • Version(s): 1.2.2
Published: March 4, 2025

CVE-2025-26202

4.3
    DZS Router Web Interface
Published: March 4, 2025

CVE-2025-27156

4.1
    Tuleap
  • Version(s): 16.4.99.1740567344, 16.4-6, 16.3-11
Published: March 4, 2025

CVE-2025-27220

4.0
    Ruby-Lang
  • Cgi
  • Ruby
Published: March 4, 2025

CVE-2025-1939

3.9
    Firefox
  • Version(s): < 136
Published: March 4, 2025

CVE-2025-0587

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-20024

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-20081

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-20091

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-20626

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-21084

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-22835

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-23240

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-23409

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-23414

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-23420

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-24301

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-24309

3.8
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-1904

3.5
    Code-Projects
  • Blood Bank System
Published: March 4, 2025

CVE-2025-1905

3.5
    Remyandrade
  • Employee Management System
Published: March 4, 2025

CVE-2024-47259

3.5
    Axis Communications - AXIS OS
Published: March 4, 2025

CVE-2025-1955

3.5
    Online Class and Exam Scheduling System
  • Version(s): 1.0
Published: March 4, 2025

CVE-2025-1957

3.5
    Blood Bank System
  • Version(s): 1.0
Published: March 4, 2025

CVE-2025-20011

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-20021

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-21089

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-21097

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-22443

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-22837

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-22841

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-22847

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-22897

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-23234

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-23418

3.3
    Openatom
  • Openharmony
Published: March 4, 2025

CVE-2025-27221

3.2
    Tal
  • Url
Published: March 4, 2025

CVE-2025-1953

2.6
    Unknown
Published: March 4, 2025

CVE-2025-1892

2.4
    Qzw1210
  • Shishuocms
Published: March 4, 2025

CVE-2025-1931

None
    Firefox
  • Version(s): < 136, < 115.21, < 128.8
Published: March 4, 2025

CVE-2025-1932

None
    Firefox
  • Version(s): < 136
    Firefox ESR
  • Version(s): < 128.8
Published: March 4, 2025

CVE-2025-1933

None
    Firefox
  • Version(s): < 136, < 115.21, < 128.8
Published: March 4, 2025

CVE-2025-1934

None
    Firefox ESR
  • Version(s): < 128.8
    Firefox
  • Version(s): < 136, < 128.8
Published: March 4, 2025

CVE-2025-1935

None
    Firefox
  • Version(s): < 136, < 128.8
Published: March 4, 2025

CVE-2025-1936

None
    Firefox
  • Version(s): < 136, < 128.8
Published: March 4, 2025

CVE-2025-1937

None
    Firefox
  • Version(s): < 136, < 115.21, < 128.8
    Thunderbird
  • Version(s): < 136, < 115.21, < 128.8
Published: March 4, 2025

CVE-2025-1942

None
    Firefox
  • Version(s): < 136
Published: March 4, 2025

CVE-2024-11957

None
    Kingsoft WPS Office
  • Version(s): <=12.1.0.18276
Published: March 4, 2025

CVE-2025-1424

None
    PocketBook InkPad Color 3
  • Version(s): U743k3.6.8.3671
Published: March 4, 2025

CVE-2025-1425

None
    PocketBook InkPad Color 3
  • Version(s): U743k3.6.8.3671
Published: March 4, 2025

CVE-2025-27111

None
    Rack
  • Version(s): 2.2.12, 3.0.13, 3.1.11
Published: March 4, 2025

CVE-2025-26091

None
    TeamPasswordManager
  • Version(s): 12.162.284 and before
Published: March 4, 2025

CVE-2024-10930

None
    UNKNOWN
Published: March 4, 2025

CVE-2025-1080

None
    LibreOffice
  • Version(s): 24.8 - 24.8.5, 25.2 - 25.2.1
Published: March 4, 2025

CVE-2020-23438

None
    Wondershare Filmora
  • Version(s): 9.2.11
Published: March 4, 2025

CVE-2021-41719

None
    Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application
  • Version(s): 16.1
Published: March 4, 2025

CVE-2025-27510

None
    conda-forge-metadata
Published: March 4, 2025
Click here to see more Vulnerabilities