Tag: 2025-03-19

2 Attack Reports | 84 Vulnerabilities

Attack reports

Virtue or Vice? A First Look at Paragon's Proliferating Spyware Operations

The report investigates Paragon Solutions, an Israeli spyware company founded in 2019 that sells a product called Graphite. Through infrastructure analysis, the researchers identified potential Paragon deployments in several countries. They also found evidence linking Paragon to the Canadian Ontari…
surveillance
graphite
spyware
cybersecurity
human rights
law enforcement
2025-03-19
canada
italy
zero-click exploit
Published: March 19, 2025
Downloadable IOCs: 22

Dragon RaaS | Pro-Russian Hacktivist Group Aims to Build on "The Five Families" Cybercrime Reputation

Dragon RaaS is a ransomware group that emerged in July 2024 as an offshoot of Stormous, part of a larger cybercrime syndicate known as 'The Five Families'. The group markets itself as a sophisticated Ransomware-as-a-Service operation but often conducts defacements and opportunistic attacks rather t…
ransomware
cybercrime
CVE-2024-3806
CVE-2024-3807
CVE-2024-3808
CVE-2024-3809
hacktivism
webshell
vulnerability exploitation
CVE-2024-47374
2025-03-19
defacement
stormcry
CVE-2022-0073
CVE-2023-2359
CVE-2023-6925
dragon raas
CVE-2023-47784
CVE-2022-0074
pro-russian
Published: March 19, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-10442

10.0
    Synology
  • Replication Service
  • Synology Unified Controller
Published: March 19, 2025

CVE-2025-29783

10.0
    *
  • Vllm
Published: March 19, 2025

CVE-2024-10441

9.8
    Synology
  • Bee Station Manager
  • Disk Station Manager
  • Unified Controller
Published: March 19, 2025

CVE-2024-11131

9.8
    Synology
  • Camera Firmware
  • Bc500
  • Cc400w
  • Tc500
Published: March 19, 2025

CVE-2024-12922

9.8
    Wordpress
  • Altair Theme
Published: March 19, 2025

CVE-2024-13410

9.8
    Cozystay
  • Cozystay
    Tinysalt
Published: March 19, 2025

CVE-2024-13790

9.8
    Minimogwp
  • Minimogwp
Published: March 19, 2025

CVE-2024-13442

9.8
    Wordpress
  • Service Finder Bookings Plugin
Published: March 19, 2025

CVE-2025-2512

9.8
    Wordpress
  • Plugin
Published: March 19, 2025

CVE-2025-29137

9.8
    Tenda
  • Ac7
Published: March 19, 2025

CVE-2025-27778

8.9
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27779

8.9
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27780

8.9
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27781

8.9
    Applio
  • Applio
Published: March 19, 2025

CVE-2024-12295

8.8
    Boombox
  • Boombox Theme Extensions
Published: March 19, 2025

CVE-2025-1232

8.8
    Wordpress
  • Site Reviews
Published: March 19, 2025

CVE-2024-12920

8.8
    Wordpress
  • Foodbakery
Published: March 19, 2025

CVE-2024-13933

8.8
    Foodbakery
  • Foodbakery
Published: March 19, 2025

CVE-2025-27774

8.8
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27775

8.8
    Applio
  • Voice Conversion Tool
Published: March 19, 2025

CVE-2025-27776

8.8
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-29924

8.7
    Xwiki
  • Xwiki Platform
Published: March 19, 2025

CVE-2025-29925

8.7
    Xwiki
  • Xwiki Platform
Published: March 19, 2025

CVE-2025-30236

8.6
    Shearwater
  • Securenvoy Securaccess
Published: March 19, 2025

CVE-2025-30154

8.6
    Reviewdog
  • Action-Setup
  • Action-Shellcheck
  • Action-Composite-Template
  • Action-Staticcheck
  • Action-Ast-Grep
  • Action-Typos
Published: March 19, 2025

CVE-2024-51459

8.4
    Ibm
  • Infosphere Information Server
Published: March 19, 2025

CVE-2025-30234

8.3
    Smartos
  • Smartos
Published: March 19, 2025

CVE-2025-29926

7.9
    Xwiki
  • Xwiki Platform
Published: March 19, 2025

CVE-2025-27786

7.8
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27787

7.8
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27777

7.7
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27782

7.7
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27783

7.7
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27784

7.7
    Applio
  • Applio
Published: March 19, 2025

CVE-2025-27785

7.7
    Applio
  • Applio
Published: March 19, 2025

CVE-2024-12137

7.6
    Elfatek Elektonics
  • Anka Jpd-00028
Published: March 19, 2025

CVE-2024-10444

7.5
    Synology
  • Diskstation Manager
Published: March 19, 2025

CVE-2024-50630

7.5
    Synology
  • Drive Server
Published: March 19, 2025

CVE-2024-50631

7.5
    Synology
  • Drive Server
Published: March 19, 2025

CVE-2024-13412

7.5
    Wordpress
  • Cozystay
Published: March 19, 2025

CVE-2024-55551

7.5
    Exasol
  • Jdbc Driver
Published: March 19, 2025

CVE-2025-30153

7.5
    Kin
  • Openapi
Published: March 19, 2025

CVE-2025-27415

7.5
    Nuxt
  • Nuxt
Published: March 19, 2025

CVE-2024-12136

6.9
    Elfatek
  • Anka Jpd-00028
Published: March 19, 2025

CVE-2025-29770

6.5
    Vllm
  • Vllm
Published: March 19, 2025

CVE-2025-30144

6.5
    Fast-Jwt
  • Fast-Jwt
Published: March 19, 2025

CVE-2025-30152

6.5
    Sylius
  • Sylius Paypal Plugin
Published: March 19, 2025

CVE-2025-30196

6.5
    Jenkins
  • Anchorchain Plugin
Published: March 19, 2025

CVE-2025-26816

6.5
    Intrexx
  • Portal Server
Published: March 19, 2025

CVE-2025-26486

6.0
    Beta80
  • Life 1st
Published: March 19, 2025

CVE-2025-2324

5.9
    Progress
  • Moveit Transfer
Published: March 19, 2025

CVE-2025-26485

5.8
    Beta80
  • Life 1st Identity Manager
Published: March 19, 2025

CVE-2025-0431

5.8
    Proofpoint
  • Enterprise Protection
Published: March 19, 2025

CVE-2025-29405

5.7
    Emlog
  • Emlog Pro
Published: March 19, 2025

CVE-2025-23382

5.5
    Dell
  • Secure Connect Gateway
Published: March 19, 2025

CVE-2025-26475

5.5
    Dell
  • Secure Connect Gateway
Published: March 19, 2025

CVE-2025-29118

5.5
    Tenda
  • Ac8
Published: March 19, 2025

CVE-2025-27704

5.5
    Netmotionsoftware
  • Absolute Secure Access
Published: March 19, 2025

CVE-2025-27705

5.5
    Netmotion
  • Absolute Secure Access
Published: March 19, 2025

CVE-2024-53967

5.4
    Adobe
  • Experience Manager
Published: March 19, 2025

CVE-2024-53968

5.4
    Adobe
  • Experience Manager
Published: March 19, 2025

CVE-2024-53969

5.4
    Adobe
  • Experience Manager
Published: March 19, 2025

CVE-2024-53970

5.4
    Adobe
  • Experience Manager
Published: March 19, 2025

CVE-2025-2290

5.3
    Lifterlms
  • Lifterlms
Published: March 19, 2025

CVE-2024-50629

5.3
    Synology
  • Beestation Manager
  • Diskstation Manager
  • Unified Controller
Published: March 19, 2025

CVE-2025-2536

5.1
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: March 19, 2025

CVE-2025-2511

4.9
    Wordpress
  • Ahathat Plugin
Published: March 19, 2025

CVE-2024-45644

4.7
    Ibm
  • Security Reaqta
Published: March 19, 2025

CVE-2024-10445

4.3
    Synology
  • Bee Station Manager
  • Diskstation Manager
  • Unified Controller
Published: March 19, 2025

CVE-2025-1472

4.3
    Mattermost
  • Mattermost
Published: March 19, 2025

CVE-2025-1758

4.3
    Progress
  • Loadmaster
  • Ecs
  • Multi-Tenancy
Published: March 19, 2025

CVE-2024-25132

4.3
    Redhat
  • Openshift
Published: March 19, 2025

CVE-2024-7631

4.3
    Redhat
  • Openshift Console
Published: March 19, 2025

CVE-2025-30235

3.5
    Shearwater
  • Securenvoy Securaccess
Published: March 19, 2025

CVE-2025-30258

2.7
    Gnupg
  • Gnupg
Published: March 19, 2025

CVE-2024-42176

2.6
    Hcl
  • Myxalytics
Published: March 19, 2025

CVE-2025-27018

None
    Apache
  • Airflow Mysql Provider
Published: March 19, 2025

CVE-2025-29401

None
    Emlog
  • Emlog Pro
Published: March 19, 2025

CVE-2025-30197

None
    Jenkins
  • Zoho Qengine Plugin
Published: March 19, 2025

CVE-2024-57061

None
    Termius
  • Termius
Published: March 19, 2025

CVE-2025-2476

None
    Google
  • Chrome
Published: March 19, 2025

CVE-2024-55009

None
    Autobib
  • Autobib
Published: March 19, 2025

CVE-2025-30092

None
    Intrexx
  • Portal Server
Published: March 19, 2025

CVE-2025-1628

None
Published: March 19, 2025
Click here to see more Vulnerabilities