Tag: 2025-04-03

9 Attack Reports | 174 Vulnerabilities

Attack reports

Outlaw Linux Malware: Persistent, Unsophisticated, and Surprisingly Effective

OUTLAW is a persistent Linux malware that uses basic techniques like SSH brute-forcing, SSH key manipulation, and cron-based persistence to maintain a long-lasting botnet. Despite its lack of sophistication, it remains active by leveraging simple but impactful tactics. The malware deploys modified …
linux
xmrig
worm
persistence
botnet
irc
ssh
cryptocurrency mining
brute-force
2025-04-03
outlaw
stealth shellbot
blitz
Published: April 3, 2025
Downloadable IOCs: 87

Gootloader Returns: Malware Hidden in Google Ads for Legal Documents

The Gootloader malware campaign has evolved its tactics, now using Google Ads to target victims seeking legal templates. The threat actor advertises legal documents, primarily agreements, through compromised ad accounts. Users searching for templates are directed to a malicious website where they a…
social engineering
powershell
javascript
google ads
gootloader
scheduled tasks
2025-04-03
email phishing
wordpress blogs
legal templates
Published: April 3, 2025
Downloadable IOCs: 0

Stripe API Skimming Campaign: Additional Victims & Insights

A sophisticated web skimming campaign has been discovered, utilizing a legacy Stripe API to validate stolen payment details before exfiltration. The attack involves multiple stages, including malicious loader injection, decoding, and skimming. Jscrambler's research team identified 49 affected merch…
wordpress
e-commerce
javascript injection
web skimming
payment fraud
stripe api
woocommerce
2025-04-03
client-side security
Published: April 3, 2025
Downloadable IOCs: 2

BeaverTail and Tropidoor Malware Distributed via Recruitment Emails

A sophisticated malware campaign has been uncovered, involving the distribution of BeaverTail and Tropidoor malware through fake recruitment emails. The attackers, suspected to be of North Korean origin, impersonated a developer community to lure victims into downloading malicious code. The campaig…
backdoor
phishing
north korea
infostealer
cryptocurrency
downloader
beavertail
recruitment
invisibleferret
2025-04-03
lightlesscan
tropidoor
Published: April 3, 2025
Downloadable IOCs: 6

Cyber Espionage using PowerShell stealer WRECKSTEEL

Ukrainian government's CERT-UA has identified a series of cyberattacks against government agencies and critical infrastructure facilities in Ukraine during March 2025. The attacks, aimed at information theft, utilize compromised accounts to distribute emails with links to public file services. Thes…
powershell
ukraine
cyber espionage
government
vbscript
critical infrastructure
2025-04-03
file stealing
wrecksteel
Published: April 3, 2025
Downloadable IOCs: 71

Threat actors leverage tax season to deploy tax-themed phishing campaigns

Microsoft has observed several phishing campaigns using tax-related themes to steal credentials and deploy malware as Tax Day approaches in the United States. These campaigns use redirection methods like URL shorteners and QR codes in malicious attachments, and abuse legitimate services to avoid de…
malware
phishing
social engineering
remcos
credential theft
latrodectus
guloader
redirection
qr codes
remote access trojans
2025-04-03
tax season
ahkbot
bruteratel c4
Published: April 3, 2025
Downloadable IOCs: 0

Thunderstruck! Malicious ads for RVTools lead to ThunderShell payload

A security incident involving malicious sponsored ads distributing backdoored administrative tools was detected. Users searching for RVTools were served a tampered version containing ThunderShell, a PowerShell-based remote access tool. The malicious ads, appearing in Google search results, led to a…
malvertising
powershell
icedid
google ads
c2
remote access tool
2025-04-03
thundershell
rvtools
trojanized software
Published: April 3, 2025
Downloadable IOCs: 0

Amateur Hacker Leverages Bulletproof Hosting Server to Spread Malware

A novice cybercriminal, known as 'Coquettte', has been discovered using a Russian bulletproof hosting provider, Proton66, to distribute malware. The hacker's activities include deploying the Rugmi malware loader through a fake cybersecurity product website and selling guides for illegal substances …
amadey
lumma stealer
vidar
rugmi
2025-04-03
rescoms
amateur hacker
proton66
cybercrime incubator
bulletproof hosting
fake antivirus
raccoon stealer v2
illegal guides
horrid collective
Published: April 3, 2025
Downloadable IOCs: 6

TookPS distributed under the guise of UltraViewer, AutoCAD, and Ableton

A malware campaign is distributing the TookPS downloader by impersonating popular software like UltraViewer, AutoCAD, SketchUp, Ableton, and Quicken. The malware establishes an SSH tunnel for remote access and deploys additional payloads like TeviRat and Lapmon backdoors. The attackers gain full sy…
backdoor
remote access
downloader
2025-04-03
tookps
lapmon
ssh tunnel
tevirat
software impersonation
Published: April 3, 2025
Downloadable IOCs: 17
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-2945

9.9
    Pgadmin
  • Pgadmin
Published: April 3, 2025

CVE-2025-31161

9.8
    Crushftp
  • Crushftp
Published: April 3, 2025

CVE-2025-31911

9.3
    Notfound
  • Social Share And Social Locker
Published: April 3, 2025

CVE-2025-2946

9.1
    Pgadmin
  • Pgadmin
Published: April 3, 2025

CVE-2025-22457

9.0
    Ivanti
  • Connect Secure
  • Policy Secure
  • Zta Gateways
Published: April 3, 2025

CVE-2025-30889

8.8
    Pickplugins
  • Testimonial Slider
Published: April 3, 2025

CVE-2025-29987

8.8
    Dell
  • Powerprotect Data Domain
  • Data Domain Operating System
Published: April 3, 2025

CVE-2025-3161

8.7
    Tenda
  • Ac10
Published: April 3, 2025

CVE-2025-31115

8.7
    Tukaani
  • Xz
Published: April 3, 2025

CVE-2025-31489

8.7
    Minio
  • Minio
Published: April 3, 2025

CVE-2025-21999

7.8
    Linux
  • Linux Kernel
Published: April 3, 2025

CVE-2025-22004

7.8
    Linux
  • Linux Kernel
Published: April 3, 2025

CVE-2025-31487

7.7
    Xwiki
  • Jira Extension
Published: April 3, 2025

CVE-2025-31119

7.6
    Jhipster
  • Generator-Jhipster-Entity-Audit
Published: April 3, 2025

CVE-2025-31098

7.5
    Debounce
  • Email Validator
Published: April 3, 2025

CVE-2025-31909

7.5
    Apptivo
  • Business Site Crm
Published: April 3, 2025

CVE-2025-32049

7.5
    Libsoup
  • Libsoup
Published: April 3, 2025

CVE-2025-31481

7.5
    Api Platform
  • Api Platform Core
Published: April 3, 2025

CVE-2025-31485

7.5
    Api Platform
  • Api Platform
Published: April 3, 2025

CVE-2025-30370

7.4
    Jupyterlab
  • Jupyterlab-Git
Published: April 3, 2025

CVE-2025-30611

7.1
    Notfound
  • Wptobe-Signinup
Published: April 3, 2025

CVE-2025-30616

7.1
    Notfound
  • Latest Custom Post Type Updates
Published: April 3, 2025

CVE-2025-30858

7.1
    Tribulant
  • Snow Storm
Published: April 3, 2025

CVE-2025-30908

7.1
    Shamalli
  • Web Directory Free
Published: April 3, 2025

CVE-2025-31436

7.1
    Blubrry
  • Powerpress Podcasting Plugin
Published: April 3, 2025

CVE-2025-31442

7.1
    Notfound
  • Search Engine Keywords Highlighter
Published: April 3, 2025

CVE-2025-31467

7.1
    Notfound
  • Flickr Photostream
Published: April 3, 2025

CVE-2025-31468

7.1
    Notfound
  • Wp Identicon
Published: April 3, 2025

CVE-2025-31536

7.1
    Moshensky
  • Cf7 Spreadsheets
Published: April 3, 2025

CVE-2025-31573

7.1
    Pepro Dev Group
  • Peprodev Cf7 Database
Published: April 3, 2025

CVE-2025-31582

7.1
    Ashish Ajani
  • Contact Form Vcard Generator
Published: April 3, 2025

CVE-2025-31626

7.1
    M.Ali Saleem
  • Support Helpdesk Ticket System Lite
Published: April 3, 2025

CVE-2025-31898

7.1
    Notfound
  • Mediaview
Published: April 3, 2025

CVE-2025-31899

7.1
    Wpshopee
  • Awesome Logos
Published: April 3, 2025

CVE-2025-31900

7.1
    Lexicata
  • Lexicata
Published: April 3, 2025

CVE-2025-31901

7.1
    Digihood
  • Digihood Html Sitemap
Published: April 3, 2025

CVE-2025-31902

7.1
    Notfound
  • Social Share And Social Locker
Published: April 3, 2025

CVE-2025-31903

7.1
    Notfound
  • Xv Random Quotes
Published: April 3, 2025

CVE-2025-31905

7.1
    Notfound
  • Team Rosters
Published: April 3, 2025

CVE-2025-31907

7.1
    Labib Ahmed
  • Team Builder
Published: April 3, 2025

CVE-2025-3167

7.1
    Tenda
  • Ac23
Published: April 3, 2025

CVE-2025-2784

7.0
    Libsoup
  • Libsoup
Published: April 3, 2025

CVE-2025-3137

6.9
    Phpgurukul
  • Online Security Guards Hiring System
Published: April 3, 2025

CVE-2025-3138

6.9
    Phpgurukul
  • Online Security Guards Hiring System
Published: April 3, 2025

CVE-2025-3146

6.9
    Phpgurukul
  • Bus Pass Management System
Published: April 3, 2025

CVE-2025-3147

6.9
    Phpgurukul
  • Boat Booking System
Published: April 3, 2025

CVE-2025-3151

6.9
    Sourcecodester
  • Gym Management System
Published: April 3, 2025

CVE-2025-3168

6.9
    Phpgurukul
  • Time Table Generator System
Published: April 3, 2025

CVE-2025-3170

6.9
    Project Worlds
  • Online Lawyer Management System
Published: April 3, 2025

CVE-2025-3171

6.9
    Project Worlds
  • Online Lawyer Management System
Published: April 3, 2025

CVE-2025-3172

6.9
    Project Worlds
  • Online Lawyer Management System
Published: April 3, 2025

CVE-2025-3173

6.9
    Project Worlds
  • Online Lawyer Management System
Published: April 3, 2025

CVE-2025-3174

6.9
    Project Worlds
  • Online Lawyer Management System
Published: April 3, 2025

CVE-2025-3175

6.9
    Project Worlds
  • Online Lawyer Management System
Published: April 3, 2025

CVE-2025-3176

6.9
    Projectworlds
  • Online Lawyer Management System
Published: April 3, 2025

CVE-2025-3178

6.9
    Projectworlds
  • Online Doctor Appointment Booking System
Published: April 3, 2025

CVE-2025-3179

6.9
    Projectworlds
  • Online Doctor Appointment Booking System
Published: April 3, 2025

CVE-2025-3180

6.9
    Projectworlds
  • Online Doctor Appointment Booking System
Published: April 3, 2025

CVE-2025-3181

6.9
    Projectworlds
  • Online Doctor Appointment Booking System
Published: April 3, 2025

CVE-2025-3182

6.9
    Projectworlds
  • Online Doctor Appointment Booking System
Published: April 3, 2025

CVE-2025-3183

6.9
    Projectworlds
  • Online Doctor Appointment Booking System
Published: April 3, 2025

CVE-2025-2055

6.8
    Wordpress
  • Mappress Maps
Published: April 3, 2025

CVE-2025-31334

6.8
    Winrar
  • Winrar
Published: April 3, 2025

CVE-2025-30596

6.5
    Notfound
  • Include-File
Published: April 3, 2025

CVE-2025-30915

6.5
    Enituretechnology
  • Small Package Quotes
Published: April 3, 2025

CVE-2025-30916

6.5
    Enituretechnology
  • Residential Address Detection
Published: April 3, 2025

CVE-2025-31091

6.5
    Creativemindssolutions
  • Cm Header And Footer
Published: April 3, 2025

CVE-2025-31541

6.5
    Turitop
  • Turi Top Booking System
Published: April 3, 2025

CVE-2025-31581

6.5
    Sandeep Kumar
  • Wp Video Playlist
Published: April 3, 2025

CVE-2025-31622

6.5
    Utkarsh Kukreti
  • Advanced Typekit
Published: April 3, 2025

CVE-2025-31729

6.5
    Jeffikus
  • Wootumblog
Published: April 3, 2025

CVE-2025-31736

6.5
    Richtexteditor
  • Rich Text Editor
Published: April 3, 2025

CVE-2025-31758

6.5
    Binarycarpenter
  • Free Woocommerce Product Table View
Published: April 3, 2025

CVE-2025-31768

6.5
    Otwthemes
  • Widget Manager Light
Published: April 3, 2025

CVE-2025-31789

6.5
    Matat Technologies
  • Textme Sms
Published: April 3, 2025

CVE-2025-31795

6.5
    Plugin Devs
  • Shopify To Woocommerce Migration
Published: April 3, 2025

CVE-2025-31800

6.5
    Publitio
  • Publitio
Published: April 3, 2025

CVE-2025-31858

6.5
    Matthewrubin
  • Local Magic
Published: April 3, 2025

CVE-2025-31893

6.5
    Cheesefather
  • Botnet Attack Blocker
Published: April 3, 2025

CVE-2025-31896

6.5
    Istmoplugins
  • Getbookingswp
Published: April 3, 2025

CVE-2025-32052

6.5
    Libsoup
  • Libsoup
Published: April 3, 2025

CVE-2025-32053

6.5
    Libsoup
  • Libsoup
Published: April 3, 2025

CVE-2025-3155

6.5
    Gnome
  • Yelp
Published: April 3, 2025

CVE-2024-13673

6.4
    Wordpress
  • Big Boom Directory
Published: April 3, 2025

CVE-2025-1663

6.4
    Unlimited Elements
  • Unlimited Elements For Elementor
Published: April 3, 2025

CVE-2024-9416

6.4
    Modula
  • Image Gallery
    Fancybox
Published: April 3, 2025

CVE-2025-31739

6.4
    Manuel Schmalstieg
  • Minimalistic Event Manager
Published: April 3, 2025

CVE-2025-31746

6.4
    Think201
  • Clients
Published: April 3, 2025

CVE-2025-31841

6.3
    Frank P Walentynowicz
  • Fpw Category Thumbnails
Published: April 3, 2025

CVE-2025-30485

6.2
    Future Net
  • Nxr Series
  • Vxr Series
  • Wxr Series
Published: April 3, 2025

CVE-2025-2299

6.1
    Luckywp
  • Table Of Contents
Published: April 3, 2025

CVE-2025-31554

5.9
    Docxpresso
  • Docxpresso
Published: April 3, 2025

CVE-2025-32050

5.9
    Libsoup
  • Libsoup
Published: April 3, 2025

CVE-2025-32051

5.9
    Gnome
  • Libsoup
Published: April 3, 2025

CVE-2025-31558

5.8
    Greg
  • Tailpress
Published: April 3, 2025

CVE-2025-31876

5.8
    Gunnarpayday
  • Payday
Published: April 3, 2025

CVE-2025-31794

5.4
    Patchstack
  • Wr Price List Manager
Published: April 3, 2025

CVE-2025-0272

5.4
    Hcl
  • Devops Deploy
  • Launch
Published: April 3, 2025

CVE-2025-3134

5.3
    Code-Projects
  • Payroll Management System
Published: April 3, 2025

CVE-2025-3135

5.3
    Fcba Zzm
  • Ics-Park Smart Park Management System
Published: April 3, 2025

CVE-2025-3140

5.3
    Sourcecodester
  • Online Medicine Ordering System
Published: April 3, 2025

CVE-2025-3141

5.3
    Sourcecodester
  • Online Medicine Ordering System
Published: April 3, 2025

CVE-2025-3142

5.3
    Sourcecodester
  • Apartment Visitor Management System
Published: April 3, 2025

CVE-2025-3143

5.3
    Sourcecodester
  • Apartment Visitor Management System
Published: April 3, 2025

CVE-2025-3150

5.3
    Itning
  • Student Homework Management System
Published: April 3, 2025

CVE-2023-47639

5.3
    Api Platform
  • Api Platform Core
Published: April 3, 2025

CVE-2025-31126

5.3
    Element
  • Element X Ios
Published: April 3, 2025

CVE-2025-31127

5.3
    Element.Io
  • Element X Android
Published: April 3, 2025

CVE-2025-31486

5.3
    Vite
  • Vite
Published: April 3, 2025

CVE-2025-3153

5.1
    Concretecms
  • Concrete Cms
Published: April 3, 2025

CVE-2025-3152

5.1
    Caipeichao
  • Thinkox
Published: April 3, 2025

CVE-2025-3164

5.1
    Tencent Music Entertainment
  • Supersonic
    H2 Database
Published: April 3, 2025

CVE-2025-31825

4.9
    Pixelgrade
  • Category Icon
Published: April 3, 2025

CVE-2025-31827

4.9
    Vlad.Olaru
  • Fonto
Published: April 3, 2025

CVE-2025-3136

4.8
    Pytorch
  • Pytorch
Published: April 3, 2025

CVE-2025-3139

4.8
    Code-Projects
  • Bus Reservation System
Published: April 3, 2025

CVE-2025-3144

4.8
    Mindspore
  • Mindspore
Published: April 3, 2025

CVE-2025-3145

4.8
    Mindspore
  • Mindspore
Published: April 3, 2025

CVE-2025-3148

4.8
    Codeprojects
  • Product Management System
Published: April 3, 2025

CVE-2025-3149

4.8
    Itning
  • Student Homework Management System
Published: April 3, 2025

CVE-2025-3157

4.8
    Intelbras
  • Wrn 150
Published: April 3, 2025

CVE-2025-3158

4.8
    Assimp
  • Open Asset Import Library
  • Lwo File Handler
Published: April 3, 2025

CVE-2025-3159

4.8
    Assimp
  • Assimp
Published: April 3, 2025

CVE-2025-3160

4.8
    Assimp
  • Assimp
Published: April 3, 2025

CVE-2025-3162

4.8
    Internlm
  • Lmdeploy
Published: April 3, 2025

CVE-2025-3163

4.8
    Internlm
  • Lmdeploy
Published: April 3, 2025

CVE-2025-3165

4.8
    Thu-Pacman
  • Chitu
Published: April 3, 2025

CVE-2025-3166

4.8
    Code-Projects
  • Product Management System
Published: April 3, 2025

CVE-2025-31483

4.8
    Miniflux
  • Miniflux
Published: April 3, 2025

CVE-2025-2874

4.4
    Wordpress
  • User Submitted Posts
Published: April 3, 2025

CVE-2025-0278

4.3
    Hcl
  • Hcl Traveler
Published: April 3, 2025

CVE-2025-0279

4.3
    Hcl
  • Hcl Traveler
Published: April 3, 2025

CVE-2025-32054

3.3
    Jetbrains
  • Intellij Idea
Published: April 3, 2025

CVE-2025-3169

2.3
    Projeqtor
  • Projeqtor
Published: April 3, 2025

CVE-2025-3177

2.3
    Fastcms
  • Fastcms
Published: April 3, 2025

CVE-2025-29991

2.2
    Yubico
  • Yubikey
Published: April 3, 2025

CVE-2025-21995

None
    Linux
  • Linux Kernel
Published: April 3, 2025

CVE-2025-21996

None
    Linux
  • Linux Kernel
    Radeon
Published: April 3, 2025

CVE-2025-21997

None
    Linux
  • Kernel
Published: April 3, 2025

CVE-2025-21998

None
    Linux
  • Linux Kernel
    Qcom
Published: April 3, 2025

CVE-2025-22000

None
    Linux
  • Linux Kernel
Published: April 3, 2025

CVE-2025-22001

None
    Linux
  • Linux Kernel
Published: April 3, 2025

CVE-2025-22002

None
    Linux
  • Kernel
Published: April 3, 2025

CVE-2025-22003

None
    Linux
  • Kernel
Published: April 3, 2025

CVE-2025-22005

None
    Linux
  • Linux Kernel
Published: April 3, 2025

CVE-2025-22006

None
    Linux
  • Linux Kernel
Published: April 3, 2025

CVE-2025-22007

None
    Linux
  • Linux Kernel
Published: April 3, 2025

CVE-2024-53868

None
    Apache
  • Traffic Server
Published: April 3, 2025

CVE-2025-22927

None
    Os4ed
  • Opensis
Published: April 3, 2025

CVE-2025-22928

None
    Os4ed
  • Opensis
Published: April 3, 2025

CVE-2025-22926

None
    Os4ed
  • Opensis
Published: April 3, 2025

CVE-2025-22929

None
    Os4ed
  • Opensis
Published: April 3, 2025

CVE-2025-22930

None
    Os4ed
  • Opensis
Published: April 3, 2025

CVE-2025-22931

None
    Os4ed
  • Opensis
Published: April 3, 2025

CVE-2025-29369

None
    Code-Projects
  • Matrimonial Site
Published: April 3, 2025

CVE-2025-3190

None
    Wordpress
  • Unknown
Published: April 3, 2025

CVE-2024-4877

None
    Openvpn
  • Openvpn
Published: April 3, 2025

CVE-2024-22611

None
    Openemr
  • Openemr
Published: April 3, 2025

CVE-2025-29647

None
    Seacms
  • Seacms
Published: April 3, 2025

CVE-2024-45198

None
    Insightsoftware
  • Spark Jdbc
Published: April 3, 2025

CVE-2025-26817

None
    Netwrix
  • Password Secure
Published: April 3, 2025

CVE-2025-26818

None
    Netwrix
  • Password Secure
Published: April 3, 2025

CVE-2025-29064

None
    Totolink
  • X18
Published: April 3, 2025

CVE-2025-29462

None
    Tenda
  • Ac15
Published: April 3, 2025

CVE-2025-29504

None
    Student-Manage
  • Student-Manage
Published: April 3, 2025

CVE-2025-29570

None
    Shenzhen Libituo Technology Co Ltd
  • Lbt-T300-T400
Published: April 3, 2025

CVE-2025-30406

None
    Gladinet
  • Centrestack
Published: April 3, 2025

CVE-2024-45199

None
    Insightsoftware
  • Hive Jdbc
Published: April 3, 2025

CVE-2024-47212

None
    Iglu
  • Iglu Server
Published: April 3, 2025

CVE-2024-47213

None
    Snowplow
  • Enrich
Published: April 3, 2025

CVE-2024-47214

None
    Iglu
  • Iglu Server
Published: April 3, 2025

CVE-2024-47215

None
    Snowbridge
  • Snowbridge
    Google
Published: April 3, 2025

CVE-2024-47217

None
    Iglu
  • Iglu Server
Published: April 3, 2025

CVE-2024-56528

None
    Snowplow
  • Collector
Published: April 3, 2025
Click here to see more Vulnerabilities