Tag: 2025-03-14

6 Attack Reports | 88 Vulnerabilities

Attack reports

Off the Beaten Path: Recent Unusual Malware

The article examines three unusual malware samples: a C++/CLI IIS backdoor enabling stealthy remote command execution, a bootkit leveraging the GRUB 2 bootloader to gain early system control and persistence, and a cross-platform post-exploitation framework developed in C++. These cases highlight ev…
backdoor
apt
post-exploitation
bootkit
2025-03-14
iis backdoor
c++/cli
projectgeass
dixie-playing bootkit
grub
2025-03-17
Published: March 17, 2025
Downloadable IOCs: 7

New Ransomware Operator Exploits Fortinet Vulnerability Duo

A new ransomware operator, dubbed Mora_001, has been exploiting Fortinet firewall vulnerabilities CVE-2024-55591 and CVE-2025-24472 to gain unauthorized access and deploy a modified version of LockBit ransomware. The threat actor creates persistent admin accounts, exfiltrates firewall configuration…
ransomware
lockbit
lateral movement
data exfiltration
fortinet
firewall
CVE-2024-55591
CVE-2025-24472
2025-03-14
superblack
wipeblack
Published: March 14, 2025
Downloadable IOCs: 23

VHDs Used to Distribute VenomRAT and Other Malware

A phishing campaign is utilizing virtual hard disk (VHD) image files to deliver VenomRAT malware. The attack begins with a purchase order-themed email containing a ZIP archive with a VHD file. When opened, the VHD mounts as a drive and executes a heavily obfuscated batch script. This script employs…
obfuscation
phishing
powershell
persistence
venomrat
keylogger
aes encryption
2025-03-14
vhd
Published: March 14, 2025
Downloadable IOCs: 0

SocGholish's Intrusion Techniques Facilitate Distribution of RansomHub Ransomware

SocGholish, a malware-as-a-service framework, is being used to deploy RansomHub ransomware. It compromises legitimate websites, redirecting visitors to fake browser updates that deliver malicious payloads. The highly obfuscated JavaScript loader evades detection and executes various tasks, includin…
backdoor
ransomware
javascript
socgholish
credential theft
ransomhub
compromised websites
2025-03-14
keitaro tds
Published: March 14, 2025
Downloadable IOCs: 0

Ramadan Scams on the Rise: Fake Giveaways, Crypto Traps & Fraudulent Donations

Cybercriminals are exploiting Ramadan's spirit of generosity through various scams targeting unsuspecting individuals. These include wallet-draining schemes disguised as religious incentives, fraudulent crypto tokens, fake e-commerce sales, and deceptive donation campaigns. Scammers utilize social …
phishing
social engineering
cryptocurrency
scams
e-commerce fraud
2025-03-14
charitable fraud
wallet draining
fake giveaways
ramadan
Published: March 14, 2025
Downloadable IOCs: 28

Patch it up: Old vulnerabilities are everyone's problems

This analysis emphasizes the importance of addressing old vulnerabilities in software systems globally. It highlights the end of Windows 10 support in October 2025 and the risks associated with unpatched systems. The article discusses the relevance of vulnerabilities regardless of geographic locati…
CVE-2024-4577
cybersecurity
vulnerabilities
CVE-2025-22224
taowu
2025-03-14
software updates
kev
windows 10
global threats
cve
patching
Published: March 14, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-11284

9.8
    Wordpress
  • Wp Jobhunt
Published: March 14, 2025

CVE-2024-11285

9.8
    Wordpress
  • Wp Jobhunt
Published: March 14, 2025

CVE-2024-11286

9.8
    Wordpress
  • Job Hunt
Published: March 14, 2025

CVE-2024-13824

9.8
    Ciyashop
  • Ciyashop
Published: March 14, 2025

CVE-2024-13771

9.8
    Wordpress
  • Civi Job Board Freelance Marketplace
Published: March 14, 2025

CVE-2025-2232

9.8
    Purethemes
  • Realteo
Published: March 14, 2025

CVE-2025-27595

9.8
    Sick
  • Device
Published: March 14, 2025

CVE-2025-2000

9.8
    Ibm
  • Qiskit
Published: March 14, 2025

CVE-2025-27593

9.3
    Sick
  • Sdd Device Drivers
Published: March 14, 2025

CVE-2024-13376

8.8
    Wordpress
  • Industrial Theme
Published: March 14, 2025

CVE-2024-13913

8.8
    Wordpress
  • Instawp Connect
Published: March 14, 2025

CVE-2025-2103

8.8
    Soundrise
  • Soundrise Music Plugin
    Wordpress
Published: March 14, 2025

CVE-2024-12810

8.8
    Wordpress
  • Jobcareer
Published: March 14, 2025

CVE-2024-46662

8.8
    Fortinet
  • Fortimanager
Published: March 14, 2025

CVE-2023-45588

8.2
    Fortinet
  • Forticlientmac
Published: March 14, 2025

CVE-2025-0952

8.1
    Wordpress
  • Eco Nature Theme
Published: March 14, 2025

CVE-2024-55549

7.8
    Gnome
  • Libxslt
Published: March 14, 2025

CVE-2025-24855

7.8
    Gnome
  • Libxslt
Published: March 14, 2025

CVE-2024-11283

7.5
    Wordpress
  • Wp Jobhunt
Published: March 14, 2025

CVE-2025-2056

7.5
    Wordpress
  • Hide My Wp Ghost
Published: March 14, 2025

CVE-2025-1764

7.5
    wordpress
    loginpress
    loginpress
    loginpress
    loginpress
    loginpress
    loginpress
    loginpress_wp-login_custom_login_page_customizer
    wp-login_custom_login_page_customizer
    loginpress
    loginpress
    custom_login_page_customizer
Published: March 14, 2025

CVE-2025-2221

7.5
    Wordpress
  • Wpcom Member Plugin
Published: March 14, 2025

CVE-2024-13321

7.5
    Wordpress
  • Analyticswp
Published: March 14, 2025

CVE-2024-8176

7.5
    Expat
  • Libexpat
Published: March 14, 2025

CVE-2024-26006

7.5
    Fortinet
  • Fortios
  • Fortiproxy
Published: March 14, 2025

CVE-2025-27594

7.5
    Sick
  • Device
Published: March 14, 2025

CVE-2024-13773

7.3
    Wordpress
  • Civi Job Board And Freelance Marketplace
Published: March 14, 2025

CVE-2025-2320

7.3
    274056675
  • Springboot-Openai-Chatgpt
Published: March 14, 2025

CVE-2025-26626

6.5
    Glpi
  • Glpi Inventory Plugin
Published: March 14, 2025

CVE-2024-47573

6.5
    Fortinet
  • Fortindr
Published: March 14, 2025

CVE-2024-40585

6.5
    Fortinet
  • Fortimanager
  • Fortianalyzer
Published: March 14, 2025

CVE-2025-1526

6.4
    Wordpress
  • Dethemekit
  • Elementor
Published: March 14, 2025

CVE-2025-2166

6.1
    Cm Faq
  • Cm Faq
Published: March 14, 2025

CVE-2024-45643

5.9
    Ibm
  • Qradar
Published: March 14, 2025

CVE-2024-13772

5.6
    Wordpress
  • Civi
Published: March 14, 2025

CVE-2024-55594

5.6
    Fortinet
  • Fortiweb
Published: March 14, 2025

CVE-2025-0955

5.3
    Vidorev
  • Extensions
Published: March 14, 2025

CVE-2025-1285

5.3
    Wordpress
  • Resido
Published: March 14, 2025

CVE-2025-1507

5.3
    Wordpress
  • Sharethis Dashboard For Google Analytics
Published: March 14, 2025

CVE-2023-33300

5.3
    Fortinet
  • Fortinac
Published: March 14, 2025

CVE-2025-2308

5.3
    Hdf5
  • Hdf5
Published: March 14, 2025

CVE-2025-2309

5.3
    Hdf5
  • Hdf5
Published: March 14, 2025

CVE-2025-2310

5.3
    Hdfgroup
  • Hdf5
Published: March 14, 2025

CVE-2025-27606

5.1
    Element
  • Element Android
Published: March 14, 2025

CVE-2024-40590

4.8
    Fortinet
  • Fortiportal
Published: March 14, 2025

CVE-2023-48785

4.8
    Fortinet
  • Fortinac-F
Published: March 14, 2025

CVE-2025-1888

4.6
    Leica
  • Aperio Eslide Manager
Published: March 14, 2025

CVE-2025-1528

4.3
    Wordpress
  • Search Filter Pro
Published: March 14, 2025

CVE-2025-2289

4.3
    wordpress
    plugin
    zegen_church_theme
    zegen_church_wordpress_theme
    theme
    theme_zegen
    church_theme_zegen
    church_wordpress_theme
    theme
    zegen
    zegen_church_wordpress_theme
Published: March 14, 2025

CVE-2024-13407

4.3
    Wordpress
  • Omnipress
Published: March 14, 2025

CVE-2024-45638

4.1
    Ibm
  • Qradar
Published: March 14, 2025

CVE-2025-2295

3.5
    Edk2
  • Efi
Published: March 14, 2025

CVE-2022-29059

2.7
    Fortinet
  • Fortiweb
Published: March 14, 2025

CVE-2025-26163

None
    Cm Soluces
  • Informatica
Published: March 14, 2025

CVE-2025-30022

None
    Cm Soluces Informatica
  • Ltda Auto Atendimento
Published: March 14, 2025

CVE-2025-2304

None
    Camaleon
  • Camaleon Cms
Published: March 14, 2025

CVE-2025-29029

None
    Tenda
  • Ac6
Published: March 14, 2025

CVE-2025-29030

None
    Tenda
  • Ac6
Published: March 14, 2025

CVE-2025-29031

None
    Tenda
  • Ac6
Published: March 14, 2025

CVE-2025-29032

None
    Tenda
  • Ac9
Published: March 14, 2025

CVE-2025-29776

None
    Azle
  • Azle
Published: March 14, 2025

CVE-2025-2268

None
    Hp
  • Laserjet Mfp M232 M237
Published: March 14, 2025

CVE-2023-52927

None
    Linux
  • Linux Kernel
Published: March 14, 2025

CVE-2025-25871

None
    Open Panel
  • Open Panel
Published: March 14, 2025

CVE-2025-25872

None
    Open Panel
  • Open Panel
Published: March 14, 2025

CVE-2025-25873

None
    Openpanel
  • Openadmin
Published: March 14, 2025

CVE-2025-26215

None
Published: March 14, 2025

CVE-2025-26216

None
Published: March 14, 2025

CVE-2025-29384

None
    Tenda
  • Ac9
Published: March 14, 2025

CVE-2025-29385

None
    Tenda
  • Ac9
Published: March 14, 2025

CVE-2025-29386

None
    Tenda
  • Ac9
Published: March 14, 2025

CVE-2025-29387

None
    Tenda
  • Ac9
Published: March 14, 2025

CVE-2025-29774

None
    Nodejs
  • Xml-Crypto
Published: March 14, 2025

CVE-2024-12019

None
    Synopsys
  • Application
Published: March 14, 2025

CVE-2024-12020

None
    Logicaldoc
  • Logicaldoc Enterprise
Published: March 14, 2025

CVE-2024-12245

None
    Unknown
  • Web Application
Published: March 14, 2025

CVE-2024-29409

None
    Nestjs
  • Nest
Published: March 14, 2025

CVE-2024-54445

None
    *
  • *
Published: March 14, 2025

CVE-2024-54446

None
    *
  • *
Published: March 14, 2025

CVE-2024-54447

None
    *
  • *
Published: March 14, 2025

CVE-2024-54448

None
    Logicaldoc
  • Logicaldoc
Published: March 14, 2025

CVE-2024-54449

None
    Logicaldoc
  • Logicaldoc
Published: March 14, 2025

CVE-2025-26312

None
    Sendquick
  • Entera
Published: March 14, 2025

CVE-2025-29775

None
    Xml-Crypto
  • Xml-Crypto
Published: March 14, 2025

CVE-2025-29779

None
    Post-Quantum Secure Feldman
  • Verifiable Secret Sharing
Published: March 14, 2025

CVE-2025-29780

None
    Feldman
  • Feldman Vss
Published: March 14, 2025

CVE-2025-29771

None
    Htmlsanitizer
  • Htmlsanitizer
Published: March 14, 2025

CVE-2025-29782

None
    Wegia
  • Wegia
Published: March 14, 2025
Click here to see more Vulnerabilities