Tag: 2025-03-28

4 Attack Reports | 173 Vulnerabilities

Attack reports

Apache Tomcat: CVE-2025-24813: Active Exploitation

A critical path equivalence vulnerability in Apache Tomcat, CVE-2025-24813, allows unauthenticated attackers to execute arbitrary code on vulnerable servers under specific conditions. The vulnerability affects Tomcat versions 11.0.0-M1 to 11.0.2, 10.1.0-M1 to 10.1.34, 9.0.0.M1 to 9.0.98, and certai…
vulnerability
exploitation
remote code execution
CVE-2025-24813
patching
2025-03-28
path equivalence
apache tomcat
Published: March 28, 2025
Downloadable IOCs: 0

Gamaredon campaign abuses LNK files to distribute Remcos backdoor

A campaign targeting users in Ukraine with malicious LNK files has been observed since November 2024. The files, using Russian words related to troop movements as lures, run a PowerShell downloader contacting geo-fenced servers in Russia and Germany. The second stage payload uses DLL side loading t…
phishing
powershell
ukraine
remcos
dll sideloading
lnk files
2025-03-28
gthost
hyperhosting
Published: March 28, 2025
Downloadable IOCs: 0

Money Laundering 101, and why there is concern

This newsletter discusses the process of money laundering in the context of cybercrime, particularly ransomware attacks. It explains the three basic steps of money laundering: placement, layering, and integration. The author expresses concern about regulatory changes that might facilitate easier mo…
malware
ransomware
cryptocurrency
spam
cybercrime
email security
w32.file.malparent
coinminer:mbt.26mw.in14.talos
2025-03-28
trojan.generickd.33515991
money laundering
simple_custom_detection
regulatory changes
Published: March 28, 2025
Downloadable IOCs: 0

When Getting Phished Puts You in Mortal Danger

The article discusses a network of phishing domains targeting Russians searching for anti-Putin organizations. These domains mimic recruitment websites of Ukrainian paramilitary groups and intelligence agencies. The scam aims to collect personal information from potential recruits, likely for Russi…
phishing
russia
ukraine
recruitment
search engine manipulation
2025-03-28
paramilitary
russian volunteer corps
freedom of russia legion
Published: March 28, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-22398

9.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-2294

9.8
    Kubio
  • Ai Page Builder
Published: March 28, 2025

CVE-2025-22526

9.8
    Notfound
  • Notfound Php Mysql Cpu Performance Statistics
Published: March 28, 2025

CVE-2025-22523

9.3
    Notfound
  • Schedule
Published: March 28, 2025

CVE-2025-24383

9.1
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-24381

8.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-2328

8.8
    Wordpress
  • Drag And Drop Multiple File Upload For Contact Form 7
Published: March 28, 2025

CVE-2025-27718

8.8
    *
  • Hgw-Bl1500hm
Published: March 28, 2025

CVE-2025-2815

8.8
    Wordpress
  • Administrator Z
Published: March 28, 2025

CVE-2024-11504

8.6
    Streamsoft
  • Prestiż
Published: March 28, 2025

CVE-2024-54291

8.6
    Notfound
  • Pluginpass
Published: March 28, 2025

CVE-2025-31466

8.5
    Falcon Solutions
  • Duplicate Page And Post
Published: March 28, 2025

CVE-2025-2908

8.5
    Meetme
  • Meetme
Published: March 28, 2025

CVE-2025-2858

8.5
    Satech
  • Bcu
Published: March 28, 2025

CVE-2025-1781

8.4
    W3css
  • W3css Validator
Published: March 28, 2025

CVE-2024-7407

8.2
    Streamsoft
  • Prestiż
Published: March 28, 2025

CVE-2025-30232

8.1
    Exim
  • Exim
Published: March 28, 2025

CVE-2025-27932

8.1
    Hgw
  • Hgw-Bl1500hm
Published: March 28, 2025

CVE-2024-54362

8.1
    Getshop
  • Getshop Ecommerce
Published: March 28, 2025

CVE-2025-29928

8.0
    Authentik
  • Authentik
Published: March 28, 2025

CVE-2024-49563

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2024-49564

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2024-49565

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-23383

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-24377

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-24378

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-24379

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-24380

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-24385

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-24386

7.8
    Dell
  • Unity
Published: March 28, 2025

CVE-2025-30372

7.7
    Emlog
  • Emlog Pro
Published: March 28, 2025

CVE-2025-31099

7.6
    Bestwebsoft
  • Slider
Published: March 28, 2025

CVE-2024-13939

7.5
    Perl
  • Perl
Published: March 28, 2025

CVE-2025-2485

7.5
    Wordpress
  • Drag And Drop Multiple File Upload For Contact Form 7
Published: March 28, 2025

CVE-2025-31432

7.5
    Chop Chop
  • Pop-Up Chop Chop
Published: March 28, 2025

CVE-2025-30211

7.5
    Erlang
  • Otp
Published: March 28, 2025

CVE-2025-24382

7.3
    Dell
  • Unity
Published: March 28, 2025

CVE-2024-49601

7.3
    Dell
  • Unity
Published: March 28, 2025

CVE-2024-58130

7.2
    Misp
  • Misp
Published: March 28, 2025

CVE-2025-31102

7.1
    Hostel
  • Hostel
Published: March 28, 2025

CVE-2025-31435

7.1
    Efficient Scripts
  • Microblog Poster
Published: March 28, 2025

CVE-2025-31440

7.1
    Strategy11
  • Team Terms Of Use
Published: March 28, 2025

CVE-2025-31443

7.1
    Krzysztof Furtak
  • Kk I Like It
Published: March 28, 2025

CVE-2025-31444

7.1
    Youtag
  • Showtime Slideshow
Published: March 28, 2025

CVE-2025-31449

7.1
    Erich
  • The Visitor Counter
Published: March 28, 2025

CVE-2025-31458

7.1
    Forsgren
  • Video Embedder
Published: March 28, 2025

CVE-2025-31459

7.1
    Pasqualepuzio
  • Login Alert
Published: March 28, 2025

CVE-2025-31460

7.1
    Danielmuldernl
  • Omnileads Scripts And Tags Manager
Published: March 28, 2025

CVE-2024-51624

7.1
    Jajapagamentos
  • Já-Já Pagaementos
Published: March 28, 2025

CVE-2025-22356

7.1
    Stencies
  • Stencies
Published: March 28, 2025

CVE-2025-22360

7.1
    Notfound
  • Wp Azure Offload
Published: March 28, 2025

CVE-2025-22501

7.1
    Improve My City
  • Improve My City
Published: March 28, 2025

CVE-2025-22566

7.1
    Notfound
  • Ultimate Video Gallery
Published: March 28, 2025

CVE-2025-22575

7.1
    Extendyourweb
  • Super Responsive Slider
Published: March 28, 2025

CVE-2025-22767

7.1
    Globalpayments
  • Woocommerce
Published: March 28, 2025

CVE-2025-2919

7.0
    Netis
  • Wf-2404
Published: March 28, 2025

CVE-2025-2909

6.9
    Duoxme
  • Duoxme
Published: March 28, 2025

CVE-2025-2910

6.9
    Meetme
  • Authentication Service
Published: March 28, 2025

CVE-2025-2859

6.9
    *
  • *
Published: March 28, 2025

CVE-2025-2860

6.9
    Satech
  • Bcu
Published: March 28, 2025

CVE-2025-2861

6.9
    Satech
  • Bcu
Published: March 28, 2025

CVE-2025-2862

6.9
    Satech
  • Bcus
Published: March 28, 2025

CVE-2025-2927

6.9
    Esafenet
  • Cdg
Published: March 28, 2025

CVE-2025-2713

6.8
    Google
  • Gvisor
Published: March 28, 2025

CVE-2025-2894

6.6
    Takeonme
  • Go1
Published: March 28, 2025

CVE-2025-31162

6.6
    Fig2dev
  • Fig2dev
Published: March 28, 2025

CVE-2025-31163

6.6
    Fig2dev
  • Fig2dev
Published: March 28, 2025

CVE-2025-31164

6.6
    Fig2dev
  • Fig2dev
Published: March 28, 2025

CVE-2025-31092

6.5
    Ninja Team
  • Click To Chat Wp Support All-In-One Floating Widget
Published: March 28, 2025

CVE-2025-27716

6.5
    Unknown
  • Hgw-Bl1500hm
Published: March 28, 2025

CVE-2025-27001

6.5
    Shipmondo
  • Shipmondo
Published: March 28, 2025

CVE-2025-31073

6.5
    Compete Themes
  • Unlimited
Published: March 28, 2025

CVE-2025-31075

6.5
    Videowhisper
  • Micropayments
Published: March 28, 2025

CVE-2025-31077

6.5
    Ultimate Blocks
  • Ultimate Blocks
Published: March 28, 2025

CVE-2025-31083

6.5
    Zeen101
  • Leaky Paywall
Published: March 28, 2025

CVE-2025-31088

6.5
    Cozmoslabs
  • Paid Member Subscriptions
Published: March 28, 2025

CVE-2025-31090

6.5
    Alordiel
  • Dropdown Multisite Selector
Published: March 28, 2025

CVE-2025-31093

6.5
    Redpixelstudios
  • Rps Include Content
Published: March 28, 2025

CVE-2025-31094

6.5
    Teastudio
  • Wp Posts Carousel
Published: March 28, 2025

CVE-2025-31096

6.5
    Postx
  • Postx
Published: March 28, 2025

CVE-2025-31433

6.5
    Miguel Sirvent
  • Magic Embeds
Published: March 28, 2025

CVE-2025-31434

6.5
    Adrian Tobey
  • Formlift
Published: March 28, 2025

CVE-2025-31450

6.5
    Phantom.Omaga
  • Toggle Box
Published: March 28, 2025

CVE-2025-31451

6.5
    Kevinweber
  • Wbounce
Published: March 28, 2025

CVE-2025-31452

6.5
    Mindshare Labs
  • Wp Ultimate Search
Published: March 28, 2025

CVE-2025-31453

6.5
    Stian Andreassen
  • Youtube Simplegallery
Published: March 28, 2025

CVE-2025-31465

6.5
    Cornershop
  • Better Section Navigation Widget
Published: March 28, 2025

CVE-2025-2877

6.5
    Redhat
  • Ansible Automation Platform
Published: March 28, 2025

CVE-2024-6875

6.5
    Redhat
  • Data Grid
  • Infinispan
Published: March 28, 2025

CVE-2025-2781

6.3
    Watchguard
  • Mobile Vpn With Ssl Client
Published: March 28, 2025

CVE-2025-2782

6.3
    Watchguard
  • Terminal Services Agent
Published: March 28, 2025

CVE-2025-2804

6.1
    Tagdiv
  • Tagdiv Composer
    Wordpress
Published: March 28, 2025

CVE-2025-1705

6.1
    Wordpress
  • Tagdiv Composer
Published: March 28, 2025

CVE-2025-2027

5.9
    Asus
  • System Analysis Service
Published: March 28, 2025

CVE-2025-31437

5.9
    David Miller
  • Wp-Ogp
Published: March 28, 2025

CVE-2025-31463

5.9
    Preetinder Singh
  • Tgg Wp Optimizer
Published: March 28, 2025

CVE-2025-31464

5.9
    Nazmur Rahman
  • Text Selection Color
Published: March 28, 2025

CVE-2025-31470

5.9
    Fancyt
  • Page Takeover
Published: March 28, 2025

CVE-2025-31471

5.9
    Falcon Solutions
  • Duplicate Page And Post
Published: March 28, 2025

CVE-2025-31472

5.9
    Michele Marri
  • Flatty
Published: March 28, 2025

CVE-2025-31473

5.9
    Matthewprice1178
  • Wp Database Optimizer
Published: March 28, 2025

CVE-2025-2863

5.7
    Satech
  • Bcu Firmware
Published: March 28, 2025

CVE-2019-16149

5.5
    Fortinet
  • Forticlientems
Published: March 28, 2025

CVE-2024-58128

5.5
    Misp
  • Misp
Published: March 28, 2025

CVE-2024-58129

5.5
    Misp
  • Misp
Published: March 28, 2025

CVE-2025-27567

5.4
    Hgw
  • Hgw-Bl1500hm
Published: March 28, 2025

CVE-2025-31439

5.4
    Tobias
  • Merz Browser Caching
Published: March 28, 2025

CVE-2025-31447

5.4
    Nertworks
  • Nertworks All In One Social Share Tools
Published: March 28, 2025

CVE-2025-31448

5.4
    Misteraon
  • Simple Trackback Disabler
Published: March 28, 2025

CVE-2025-31457

5.4
    Aurelien Lws
  • Lws Sms
Published: March 28, 2025

CVE-2025-2921

5.4
    Netis
  • Wf-2404
Published: March 28, 2025

CVE-2025-2074

5.3
    Wordpress
  • Advanced Google Recaptcha
Published: March 28, 2025

CVE-2025-2578

5.3
    Ameliasplugins
  • Amelia
Published: March 28, 2025

CVE-2021-24008

5.3
    Fortinet
  • Fortiddos
  • Fortiddos-Cm
  • Fortivoice
  • Fortirecorder
  • Fortimail
Published: March 28, 2025

CVE-2025-31469

5.3
    Webrangers
  • Clear Sucuri Cache
Published: March 28, 2025

CVE-2025-2911

5.3
    Meetme
  • Meetme
Published: March 28, 2025

CVE-2025-2916

5.3
    Aishida
  • Aishida Call Center System
Published: March 28, 2025

CVE-2025-2917

5.3
    Chestnutcms
  • Chestnutcms
Published: March 28, 2025

CVE-2024-12619

5.2
    Gitlab
  • Gitlab
Published: March 28, 2025

CVE-2025-31076

4.9
    Wp Compress
  • Wp Compress
Published: March 28, 2025

CVE-2025-2868

4.8
    Clinic Queuing System
  • Clinic Queuing System
Published: March 28, 2025

CVE-2025-2869

4.8
    Clinic
  • Queuing System
Published: March 28, 2025

CVE-2025-2870

4.8
    *
  • Clinic Queuing System
Published: March 28, 2025

CVE-2025-2912

4.8
    Hdf5
  • Hdf5
Published: March 28, 2025

CVE-2025-2913

4.8
    Hdf5
  • Hdf5
Published: March 28, 2025

CVE-2025-2914

4.8
    Hdf Group
  • Hdf5
Published: March 28, 2025

CVE-2025-2915

4.8
    Hdf5
  • Hdf5
Published: March 28, 2025

CVE-2025-2923

4.8
    Hdf5
  • Hdf5
Published: March 28, 2025

CVE-2025-2924

4.8
    Hdf5
  • Hdf5
Published: March 28, 2025

CVE-2025-2925

4.8
    Hdf Group
  • Hdf5
Published: March 28, 2025

CVE-2025-2926

4.8
    Hdf5
  • Hdf5
Published: March 28, 2025

CVE-2025-2901

4.6
    Jboss
  • Jboss Eap
Published: March 28, 2025

CVE-2025-0986

4.5
    Ibm
  • Powervm Hypervisor
Published: March 28, 2025

CVE-2025-1762

4.3
    Wordpress
  • Event Tickets With Ticket Scanner
Published: March 28, 2025

CVE-2024-10307

4.3
    Gitlab
  • Gitlab
Published: March 28, 2025

CVE-2025-31079

4.3
    Usermaven
  • Usermaven
Published: March 28, 2025

CVE-2025-31438

4.3
    Benoit De Boeck
  • Wp Supersized
Published: March 28, 2025

CVE-2025-31456

4.3
    Bsndev
  • Ultimate Security Checker
Published: March 28, 2025

CVE-2025-31474

4.3
    Matthewprice1178
  • Wp Database Optimizer
Published: March 28, 2025

CVE-2025-31010

4.3
    Reichertbrothers
  • Simplyrets
Published: March 28, 2025

CVE-2025-31335

4.0
    Opensaml
  • Opensaml Cpp
Published: March 28, 2025

CVE-2025-27574

3.6
    Hgw
  • Hgw-Bl1500hm
Published: March 28, 2025

CVE-2025-2865

2.4
    Sa-Tech
  • Bcu
Published: March 28, 2025

CVE-2025-27726

2.1
    *
  • Hgw-Bl1500hm
Published: March 28, 2025

CVE-2025-30371

2.1
    Metabase
  • Metabase
Published: March 28, 2025

CVE-2025-2864

2.0
    Satech
  • Bcu
Published: March 28, 2025

CVE-2024-39311

1.8
    Publify
  • Publify
  • Publify Core
Published: March 28, 2025

CVE-2025-2920

1.0
    Netis
  • Wf-2404
Published: March 28, 2025

CVE-2025-2922

1.0
    Netis
  • Wf-2404
    Busybox
Published: March 28, 2025

CVE-2025-1860

None
    Perl
  • Data
Published: March 28, 2025

CVE-2025-28219

None
    Netgear
  • Dc112a
Published: March 28, 2025

CVE-2025-28220

None
    Tenda
  • W6 S
Published: March 28, 2025

CVE-2025-28221

None
    Tenda
  • W6 S
Published: March 28, 2025

CVE-2024-48615

None
    Libarchive
  • Libarchive
Published: March 28, 2025

CVE-2024-24292

None
    Aliconnect
  • Sdk
Published: March 28, 2025

CVE-2024-38985

None
    Janrywang
  • Depath
  • Cool-Path
Published: March 28, 2025

CVE-2024-38988

None
    Alizeait
  • Unflatto
Published: March 28, 2025

CVE-2024-56975

None
    Invoiceplane
  • Invoiceplane
Published: March 28, 2025

CVE-2024-57083

None
    Redoc
  • Redoc
Published: March 28, 2025

CVE-2025-22953

None
    Epicor
  • Hcm
Published: March 28, 2025

CVE-2025-28254

None
    Leantime
  • Leantime
Published: March 28, 2025

CVE-2025-28256

None
    Totolink
  • A3100r
Published: March 28, 2025

CVE-2024-23338

None
    *
  • *
Published: March 28, 2025

CVE-2025-25579

None
    Totolink
  • A3002r
Published: March 28, 2025

CVE-2025-28087

None
    Sourcecodester
  • Online Exam System
Published: March 28, 2025

CVE-2025-28089

None
    Maccms
  • Maccms10
Published: March 28, 2025

CVE-2025-28090

None
    Maccms10
  • Maccms10
Published: March 28, 2025

CVE-2025-28091

None
    Maccms
  • Maccms10
Published: March 28, 2025

CVE-2025-28092

None
    Shopxo
  • Shopxo
Published: March 28, 2025

CVE-2025-28093

None
    Shopxo
  • Shopxo
Published: March 28, 2025

CVE-2025-28094

None
    Shopxo
  • Shopxo
Published: March 28, 2025

CVE-2025-28096

None
    Onenav
  • Onenav
Published: March 28, 2025

CVE-2025-28097

None
    Onelabs
  • Onelabs
Published: March 28, 2025
Click here to see more Vulnerabilities