Tag: 2025-03-10

4 Attack Reports | 83 Vulnerabilities

Attack reports

Malicious Packages Identified in the Wild: Insights and Trends from November 2024 Onward

FortiGuard Labs has analyzed malicious software packages detected from November 2024 to March 2025, revealing various attack techniques used to exploit system vulnerabilities. Key findings include 1,082 packages with low file counts, 1,052 packages with suspicious install scripts, and 1,043 package…
obfuscation
python
typosquatting
node.js
backdoors
data exfiltration
vulnerability exploitation
2025-03-10
install scripts
software packages
Published: March 10, 2025
Downloadable IOCs: 11

Blind Eagle: …And Justice for All

Check Point Research uncovered ongoing campaigns by Blind Eagle targeting Colombian institutions since November 2024. The group exploits a variant of CVE-2024-43451, using malicious .url files to deliver malware. Their attack chain includes HeartCrypt-packed executables, a .NET RAT, and Remcos RAT …
phishing
remcos
purecrypter
remcos rat
CVE-2024-43451
heartcrypt
2025-03-10
Published: March 10, 2025
Downloadable IOCs: 16

Highway Robbery 2.0: How Attackers Are Exploiting Toll Systems in Phishing Scams

A massive SMS phishing campaign targeting U.S. drivers exploits various toll systems, including E-ZPass, SunPass, and TxTag. The scam uses fake payment alerts sent via iMessage and SMS from foreign numbers to lure victims to fraudulent websites. Analysis reveals a pattern in domain names and infras…
infrastructure analysis
domain spoofing
sms phishing
sunpass
2025-03-10
nginx
toll systems
txtag
imessage
chinese asns
e-zpass
Published: March 10, 2025
Downloadable IOCs: 0

SideWinder targets the maritime and nuclear sectors with an updated toolset

The SideWinder APT group intensified its activities in the second half of 2024, targeting maritime infrastructures, logistics companies, and nuclear sectors across Asia, the Middle East, and Africa. The group updated its toolset, including improvements to its RTF exploit, JavaScript loader, and Bac…
apt
javascript
africa
CVE-2017-11882
maritime
spear-phishing
south asia
stealerbot
rtf exploit
nuclear
2025-03-10
downloader module
backdoor loader
module installer
Published: March 10, 2025
Downloadable IOCs: 38
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-26936

10.0
    Fresh Framework
  • Version(s): n/a - 1.70.0
Published: March 10, 2025

CVE-2025-25306

9.3
    Misskey
  • Version(s): 2025.2.1
Published: March 10, 2025

CVE-2025-26916

9.0
    EPC Massive Dynamic
  • Version(s): n/a - 8.2
Published: March 10, 2025

CVE-2024-11638

8.8
    Gtbabel WordPress plugin
  • Version(s): before 6.6.9
Published: March 10, 2025

CVE-2025-25614

8.8
    Unifiedtransform
  • Version(s): 2.0
Published: March 10, 2025

CVE-2025-1920

8.8
    Google Chrome
  • Version(s): before 134.0.6998.88
Published: March 10, 2025

CVE-2025-2135

8.8
    Google Chrome
  • Version(s): prior to 134.0.6998.88
Published: March 10, 2025

CVE-2025-2136

8.8
    Google Chrome
  • Version(s): before 134.0.6998.88
Published: March 10, 2025

CVE-2025-2137

8.8
    Google Chrome
  • Version(s): before 134.0.6998.88
Published: March 10, 2025

CVE-2025-25907

8.8
    tianti
  • Version(s): 2.3
Published: March 10, 2025

CVE-2024-41724

8.7
    Gallagher Command Centre SALTO integration
  • Version(s): before 9.20.1043
Published: March 10, 2025

CVE-2025-27616

8.5
    Vela
  • Version(s): before 0.25.3, before 0.26.3
Published: March 10, 2025

CVE-2025-27925

8.5
    Nintex Automation
  • Version(s): 5.6, 5.7 before 5.8
Published: March 10, 2025

CVE-2024-56191

8.4
    UNKNOWN
Published: March 10, 2025

CVE-2025-27256

8.3
    GE Vernova Enervista UR Setup application
Published: March 10, 2025

CVE-2025-27615

8.2
    umatiGateway
Published: March 10, 2025

CVE-2025-27254

8.0
    GE Vernova EnerVista UR Setup
Published: March 10, 2025

CVE-2025-27255

8.0
    GE Vernova EnerVista UR Setup
Published: March 10, 2025

CVE-2024-13918

8.0
    Laravel
  • Version(s): 11.9.0 - 11.35.1
Published: March 10, 2025

CVE-2024-13919

8.0
    Laravel framework
  • Version(s): 11.9.0 - 11.35.1
Published: March 10, 2025

CVE-2025-27910

8.0
    tianti
  • Version(s): 2.3
Published: March 10, 2025

CVE-2022-43454

7.8
    macOS Ventura
  • Version(s): 13.1
    watchOS
  • Version(s): 9.2
    iOS
  • Version(s): 16.2
    iPadOS
  • Version(s): 16.2
    tvOS
  • Version(s): 16.2
Published: March 10, 2025

CVE-2024-56192

7.8
    UNKNOWN
Published: March 10, 2025

CVE-2025-26933

7.5
    WC Place Order Without Payment
  • Version(s): from n/a, 2.6.7
Published: March 10, 2025

CVE-2024-44227

7.5
    macOS Sequoia
  • Version(s): 15
    iOS
  • Version(s): 18
    iPadOS
  • Version(s): 18
Published: March 10, 2025

CVE-2024-54546

7.5
    macOS Sequoia
  • Version(s): 15
Published: March 10, 2025

CVE-2024-54558

7.5
    macOS Sequoia
  • Version(s): 15
    iOS
  • Version(s): 18
    iPadOS
  • Version(s): 18
Published: March 10, 2025

CVE-2025-27913

7.5
    Passbolt API
  • Version(s): before 5
Published: March 10, 2025

CVE-2025-27610

7.5
    Rack gem
  • Version(s): < 2.2.13, < 3.0.14, < 3.1.12
Published: March 10, 2025

CVE-2024-12604

7.3
    Tap&Sign App
  • Version(s): before V.1.025
Published: March 10, 2025

CVE-2024-43107

7.2
    Gallagher Milestone Integration Plugin (MIP)
  • Version(s): 4.0.32, 3.0 and prior
Published: March 10, 2025

CVE-2025-26910

7.1
    WPBookit
  • Version(s): n/a, 1.0.1
Published: March 10, 2025

CVE-2025-26696

7.0
    Thunderbird
  • Version(s): < 136, < 128.8
Published: March 10, 2025

CVE-2024-56187

6.6
    UNKNOWN
Published: March 10, 2025

CVE-2025-1296

6.5
    Nomad Community Edition
  • Version(s): 1.9.7
    Nomad Enterprise
  • Version(s): 1.9.7, 1.8.11, 1.7.19
Published: March 10, 2025

CVE-2024-44192

6.5
    macOS Sequoia
  • Version(s): 15
    iOS
  • Version(s): 18
    iPadOS
  • Version(s): 18
    visionOS
  • Version(s): 2
    watchOS
  • Version(s): 11
    tvOS
  • Version(s): 18
    Safari
  • Version(s): 18
Published: March 10, 2025

CVE-2024-54467

6.5
    macOS Sequoia
  • Version(s): 15
    iOS
  • Version(s): 18
    iPadOS
  • Version(s): 18
    visionOS
  • Version(s): 2
    watchOS
  • Version(s): 11
    tvOS
  • Version(s): 18
    Safari
  • Version(s): 18
Published: March 10, 2025

CVE-2025-2151

6.3
    Open Asset Import Library Assimp
  • Version(s): 5.4.3
Published: March 10, 2025

CVE-2025-2152

6.3
    Open Asset Import Library Assimp
  • Version(s): 5.4.3
Published: March 10, 2025

CVE-2025-27253

6.1
    GE Vernova UR IED family devices
  • Version(s): 7.0 up to 8.60
Published: March 10, 2025

CVE-2025-27257

6.1
    GE Vernova UR IED family devices
  • Version(s): UNKNOWN
Published: March 10, 2025

CVE-2024-54463

5.5
    macOS Sequoia
  • Version(s): 15
Published: March 10, 2025

CVE-2024-54469

5.5
    macOS Sequoia
  • Version(s): 15
    iOS
  • Version(s): 18
    iPadOS
  • Version(s): 18
    visionOS
  • Version(s): 2
    macOS Sonoma
  • Version(s): 14.7
    macOS Ventura
  • Version(s): 13.7
Published: March 10, 2025

CVE-2024-54473

5.5
    macOS Sequoia
  • Version(s): 15
Published: March 10, 2025

CVE-2024-54560

5.5
    macOS Sequoia
  • Version(s): 15
    iOS
  • Version(s): 18
    iPadOS
  • Version(s): 18
    watchOS
  • Version(s): 11
    tvOS
  • Version(s): 18
Published: March 10, 2025

CVE-2022-48610

5.5
    macOS Ventura
  • Version(s): 13.1
    watchOS
  • Version(s): 9.2
    iOS
  • Version(s): 16.2
    iPadOS
  • Version(s): 16.2
Published: March 10, 2025

CVE-2025-2150

5.4
    C&Cm@il from HGiga
Published: March 10, 2025

CVE-2025-25620

5.4
    Unifiedtransform
  • Version(s): 2.0
Published: March 10, 2025

CVE-2024-52812

5.4
    LF Edge eKuiper
  • Version(s): before 2.0.8
Published: March 10, 2025

CVE-2024-53307

5.4
    Evisions MAPS
  • Version(s): 6.10.2.267
Published: March 10, 2025

CVE-2024-55199

5.4
    Celk Sistemas Celk Saude
  • Version(s): 3.1.252.1
Published: March 10, 2025

CVE-2025-25908

5.4
    tianti
  • Version(s): 2.3
Published: March 10, 2025

CVE-2025-27924

5.4
    Nintex Automation
  • Version(s): 5.6, 5.7 before 5.8
Published: March 10, 2025

CVE-2025-2147

5.3
    Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System
  • Version(s): 1.0
Published: March 10, 2025

CVE-2024-47109

5.3
    IBM Sterling File Gateway
  • Version(s): 6.0.0.0 - 6.1.2.6, 6.2.0.0 - 6.2.0.3
Published: March 10, 2025

CVE-2024-56184

5.1
    UNKNOWN
Published: March 10, 2025

CVE-2024-56185

5.1
    UNKNOWN
Published: March 10, 2025

CVE-2024-56186

5.1
    UNKNOWN
Published: March 10, 2025

CVE-2024-56188

5.1
    UNKNOWN
Published: March 10, 2025

CVE-2025-2148

5.0
    PyTorch
  • Version(s): 2.6.0+cu124
Published: March 10, 2025

CVE-2025-2153

5.0
    HDF5
  • Version(s): 1.14.6
Published: March 10, 2025

CVE-2025-24387

4.8
    OTRS Application Server
  • Version(s): 7.0.X, 8.0.X, 2023.X, 2024.X, 2025.x
Published: March 10, 2025

CVE-2025-1926

4.3
    Page Builder: Pagelayer - Drag and Drop website builder plugin for WordPress
  • Version(s): up to 1.9.8
Published: March 10, 2025

CVE-2025-27926

4.3
    Nintex Automation
  • Version(s): 5.6, 5.7 before 5.8
Published: March 10, 2025

CVE-2025-26865

3.5
    Apache OFBiz
  • Version(s): 18.12.17, 18.12.18
Published: March 10, 2025

CVE-2024-52905

2.7
    IBM Sterling B2B Integrator Standard Edition
  • Version(s): 6.0.0.0 - 6.1.2.6, 6.2.0.0 - 6.2.0.3
Published: March 10, 2025

CVE-2025-2149

2.5
    PyTorch
  • Version(s): 2.6.0+cu124
Published: March 10, 2025

CVE-2025-2133

2.4
    Ftcms
  • Ftcms
Published: March 10, 2025

CVE-2024-44179

2.4
    macOS Sequoia
  • Version(s): 15
    iOS
  • Version(s): 17.7, 18
    iPadOS
  • Version(s): 17.7, 18
Published: March 10, 2025

CVE-2025-1944

None
    pickle-scan
  • Version(s): before 0.0.23
Published: March 10, 2025

CVE-2025-1945

None
    PyTorch
Published: March 10, 2025

CVE-2024-57492

None
    redoxOS relibc
  • Version(s): before commit 98aa4ea5
Published: March 10, 2025

CVE-2025-1497

None
    PlotAI
Published: March 10, 2025

CVE-2025-25615

None
    Unifiedtransform
  • Version(s): 2.0
Published: March 10, 2025

CVE-2025-25616

None
    Unifiedtransform
  • Version(s): 2.0
Published: March 10, 2025

CVE-2025-25382

None
    Information Kerala Mission SANCHAYA
  • Version(s): 3.0.4
Published: March 10, 2025

CVE-2025-25940

None
    VisiCut
  • Version(s): 2.1
Published: March 10, 2025

CVE-2025-25977

None
    canvg
  • Version(s): 4.0.2
Published: March 10, 2025

CVE-2025-24813

None
    Apache Tomcat
  • Version(s): 11.0.0-M1 - 11.0.2, 10.1.0-M1 - 10.1.34, 9.0.0.M1 - 9.0.98
Published: March 10, 2025

CVE-2025-22603

None
    AutoGPT
  • Version(s): beta-v0.4.2, before autogpt-platform-beta-v0.4.2
Published: March 10, 2025

CVE-2025-26695

None
    Thunderbird
  • Version(s): < 136, < 128.8
Published: March 10, 2025

CVE-2025-27136

None
    LocalS3
  • Version(s): < 1.21
Published: March 10, 2025

CVE-2025-0660

None
    Concrete CMS
  • Version(s): 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.2.5, 9.2.6, 9.2.7, 9.2.8, 9.2.9, 9.3.0, 9.3.1, 9.3.2, 9.3.3, 9.3.4, 9.3.5, 9.3.6, 9.3.7, 9.3.8, 9.3.9
Published: March 10, 2025
Click here to see more Vulnerabilities