Tag: 2025-04-07

4 Attack Reports | 168 Vulnerabilities

Attack reports

PoisonSeed Campaign Targets CRM and Bulk Email Providers in Supply Chain Spam Operation

A new threat group, dubbed PoisonSeed, is targeting enterprise organizations and individuals outside the cryptocurrency industry. The campaign focuses on phishing CRM and bulk email providers' credentials to export email lists and send bulk spam. The attackers use a cryptocurrency seed phrase poiso…
phishing
cryptocurrency
supply chain
2025-04-04
2025-04-07
crm
coinbase
bulk email
ledger
seed phrase poisoning
Published: April 7, 2025
Downloadable IOCs: 45

Vidar Stealer: Infostealer malware discovered in Steam game

A recent analysis uncovered a sophisticated deployment of Vidar Stealer, an infamous information-stealing malware, disguised as a legitimate Microsoft Sysinternals tool, BGInfo.exe. The malware, found with an expired Microsoft signature, was significantly larger than the original file and contained…
information-stealing
vidar stealer
2025-04-07
thread hijacking
gaming platforms
expired signatures
malware obfuscation
bginfo
Published: April 7, 2025
Downloadable IOCs: 1

How ToddyCat tried to hide behind AV software

The ToddyCat APT group has developed a sophisticated tool called TCESB to stealthily execute payloads and evade detection. This tool exploits a vulnerability (CVE-2024-11859) in ESET Command line scanner for DLL proxying, using a modified version of the open-source EDRSandBlast malware. TCESB emplo…
byovd
2025-04-07
CVE-2024-11859
kernel manipulation
dll proxying
CVE-2021-36276
tcesb
eset
edrsandblast
Published: April 7, 2025
Downloadable IOCs: 0

Unveiling EncryptHub: Analysis of a multi-stage malware campaign

EncryptHub, an emerging cybercriminal entity, has been conducting multi-stage malware campaigns using trojanized applications and third-party distribution services. Their tactics include using PowerShell scripts for system data gathering, information exfiltration, and payload deployment. The threat…
rhadamanthys
kematian stealer
information stealer
2025-04-07
labinstalls
pay-per-install
encryptrat
Published: April 7, 2025
Downloadable IOCs: 69
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-20654

9.8
    Mediatek
  • Wlan Service
Published: April 7, 2025

CVE-2025-3248

9.8
    Langflow
  • Langflow
Published: April 7, 2025

CVE-2025-31173

8.8
    Huawei
  • Kernel Futex
Published: April 7, 2025

CVE-2025-30473

8.8
    Apache
  • Airflow Common Sql Provider
Published: April 7, 2025

CVE-2025-3328

8.7
    Tenda
  • Ac1206 Firmware
  • Ac1206
Published: April 7, 2025

CVE-2025-3346

8.7
    Tenda
  • Ac7
Published: April 7, 2025

CVE-2025-29769

8.5
    Libvips
  • Libvips
Published: April 7, 2025

CVE-2024-58124

8.4
    Huawei
  • Security Verification Module
Published: April 7, 2025

CVE-2024-58125

8.4
    Huawei
  • Security Verification Module
Published: April 7, 2025

CVE-2024-58126

8.4
    Huawei
  • Security Verification Module
Published: April 7, 2025

CVE-2024-58127

8.4
    Huawei
  • Security Verification Module
Published: April 7, 2025

CVE-2025-31170

8.4
    Huawei
  • Security Verification Module
Published: April 7, 2025

CVE-2025-31175

8.4
    Huawei
  • Dsoftbus
Published: April 7, 2025

CVE-2024-45552

8.2
    Qualcomm
  • Video Call
  • Rtcp
Published: April 7, 2025

CVE-2025-32409

8.1
    Ratta
  • Supernote A6 X2 Nomad
Published: April 7, 2025

CVE-2025-31172

7.8
    Huawei
  • Linux Kernel
Published: April 7, 2025

CVE-2024-43058

7.8
    Qualcomm
  • *
Published: April 7, 2025

CVE-2024-43066

7.8
    Qualcomm
  • *
Published: April 7, 2025

CVE-2024-43067

7.8
    Qualcomm
  • Shared Memory
Published: April 7, 2025

CVE-2024-45557

7.8
    Qualcomm
  • *
Published: April 7, 2025

CVE-2025-21421

7.8
    Qualcomm
  • Api
Published: April 7, 2025

CVE-2025-21423

7.8
    Qualcomm
  • Qualcomm Product
Published: April 7, 2025

CVE-2025-21436

7.8
    Qualcomm
  • Cqi
Published: April 7, 2025

CVE-2025-21437

7.8
    Qualcomm
  • *
Published: April 7, 2025

CVE-2025-21438

7.8
    Qualcomm
  • Board Data Read
Published: April 7, 2025

CVE-2025-21439

7.8
    Qualcomm
  • Wlan Driver
Published: April 7, 2025

CVE-2025-21440

7.8
    Qualcomm
  • Wlan Driver
Published: April 7, 2025

CVE-2025-21441

7.8
    Qualcomm
  • Wlan Driver
Published: April 7, 2025

CVE-2025-21442

7.8
    Qualcomm
  • *
Published: April 7, 2025

CVE-2025-21443

7.8
    Qualcomm
  • Eavb
Published: April 7, 2025

CVE-2025-21447

7.8
    Qualcomm
  • Session Control
Published: April 7, 2025

CVE-2024-11071

7.7
    Cyberdigm
  • Destinyecm
Published: April 7, 2025

CVE-2024-45549

7.7
    Qualcomm
  • Mq Channel
Published: April 7, 2025

CVE-2025-3424

7.7
    Philips
  • Intellispace Portal
Published: April 7, 2025

CVE-2024-58107

7.5
    Huawei
  • Codec Module
Published: April 7, 2025

CVE-2024-58111

7.5
    Huawei
  • Arkui
Published: April 7, 2025

CVE-2024-58112

7.5
    Huawei
  • Arkui Framework
Published: April 7, 2025

CVE-2025-20659

7.5
    Mediatek
  • Modem
Published: April 7, 2025

CVE-2025-20663

7.5
    Mediatek
  • Wlan Ap Driver
Published: April 7, 2025

CVE-2025-20664

7.5
    Mediatek
  • Wlan Ap Driver
Published: April 7, 2025

CVE-2024-33058

7.5
    Qualcomm
  • Adsp
Published: April 7, 2025

CVE-2025-21428

7.5
    Qualcomm
  • *
Published: April 7, 2025

CVE-2025-21429

7.5
    Qualcomm
  • *
Published: April 7, 2025

CVE-2025-21430

7.5
    Qualcomm
  • Device
Published: April 7, 2025

CVE-2025-21434

7.5
    Qualcomm
  • *
Published: April 7, 2025

CVE-2025-21435

7.5
    Qualcomm
  • *
Published: April 7, 2025

CVE-2025-21448

7.5
    Qualcomm
  • Wireless
  • *
Published: April 7, 2025

CVE-2025-30195

7.5
    Open-Xchange
  • Recursor
Published: April 7, 2025

CVE-2025-31496

7.5
    Apollo
  • Apollo Compiler
Published: April 7, 2025

CVE-2025-32030

7.5
    Apollo
  • Gateway
Published: April 7, 2025

CVE-2025-32031

7.5
    Apollo
  • Gateway
Published: April 7, 2025

CVE-2025-32032

7.5
    Apollo
  • Router
Published: April 7, 2025

CVE-2025-32033

7.5
    Apollo
  • Apollo Router
Published: April 7, 2025

CVE-2025-32034

7.5
    Apollo
  • Apollo Router
Published: April 7, 2025

CVE-2025-21425

7.3
    Qualcomm
  • Hab
Published: April 7, 2025

CVE-2025-3425

7.3
    Philips
  • Intellispace Portal
Published: April 7, 2025

CVE-2025-3426

7.2
    Philips
  • Intellispace Portal
  • Advanced Visualization Workspace
Published: April 7, 2025

CVE-2024-43065

7.1
    Qualcomm
  • Asymmetric Key Generation
Published: April 7, 2025

CVE-2025-3330

6.9
    Code-Projects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3331

6.9
    Code-Projects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3332

6.9
    Code-Projects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3333

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3334

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3335

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3336

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3337

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3338

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3339

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3340

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3341

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3342

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3343

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3344

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3345

6.9
    Codeprojects
  • Online Restaurant Management System
Published: April 7, 2025

CVE-2025-3349

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3350

6.9
    Phpgurukul
  • Old Age Home Management System
Published: April 7, 2025

CVE-2025-3351

6.9
    Phpgurukul
  • Old Age Home Management System
Published: April 7, 2025

CVE-2025-3352

6.9
    Phpgurukul
  • Old Age Home Management System
Published: April 7, 2025

CVE-2025-3353

6.9
    Phpgurukul
  • Men Salon Management System
Published: April 7, 2025

CVE-2025-3370

6.9
    Phpgurukul
  • Men Salon Management System
Published: April 7, 2025

CVE-2025-32014

6.9
    Estree
  • Estree-Util-Value-To-Estree
Published: April 7, 2025

CVE-2025-3371

6.9
    Pcman
  • Pcman Ftp Server
Published: April 7, 2025

CVE-2025-3372

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3373

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3374

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3375

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3376

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3377

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3378

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3379

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-3380

6.9
    Pcman
  • Ftp Server
Published: April 7, 2025

CVE-2025-32029

6.9
    Ts-Asn1-Der
  • Ts-Asn1-Der
Published: April 7, 2025

CVE-2025-3383

6.9
    Sourcecodester
  • Web Based Pharmacy Product Management System
Published: April 7, 2025

CVE-2025-3384

6.9
    1000 Projects
  • Human Resource Management System
Published: April 7, 2025

CVE-2025-20656

6.8
    Mediatek
  • Da
Published: April 7, 2025

CVE-2025-31171

6.8
    Huawei
  • Kernel File System
Published: April 7, 2025

CVE-2025-31174

6.8
    Huawei
  • Dfs
Published: April 7, 2025

CVE-2024-11859

6.8
    Eset
  • Eset
Published: April 7, 2025

CVE-2025-20661

6.7
    Mediatek
  • Playready Ta
Published: April 7, 2025

CVE-2025-20662

6.7
    Mediatek
  • Playready Ta
Published: April 7, 2025

CVE-2024-49848

6.7
    Qualcomm
  • *
Published: April 7, 2025

CVE-2025-28400

6.7
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28401

6.7
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2024-45540

6.6
    Qualcomm
  • Ioctl Map Buffer
Published: April 7, 2025

CVE-2024-45543

6.6
    Qualcomm
  • Msm
Published: April 7, 2025

CVE-2024-45544

6.6
    Qualcomm
  • Hw
Published: April 7, 2025

CVE-2025-22851

6.5
    Openharmony
  • Openharmony
Published: April 7, 2025

CVE-2024-45556

6.5
    Linux
  • Linux
    Qualcomm
Published: April 7, 2025

CVE-2025-30373

6.5
    Graylog
  • Graylog
Published: April 7, 2025

CVE-2024-45551

6.2
    Qualcomm
  • Gatekeeper
Published: April 7, 2025

CVE-2025-3359

6.2
    Gnuplot
  • Gnuplot
Published: April 7, 2025

CVE-2025-2251

6.2
    Redhat
  • Wildfly
  • Jboss Enterprise Application Platform
Published: April 7, 2025

CVE-2025-20658

6.0
    Mediatek
  • Device
Published: April 7, 2025

CVE-2025-0942

6.0
    Jalios
  • Jplatform
Published: April 7, 2025

CVE-2024-43046

5.5
    Qualcomm
  • Tz Secure Os
Published: April 7, 2025

CVE-2025-21431

5.5
    Qualcomm
  • Virtual Machine
  • Operating System
Published: April 7, 2025

CVE-2025-31138

5.5
    Tarteaucitron
  • Tarteaucitron.Js
Published: April 7, 2025

CVE-2025-31475

5.5
    Tarteaucitron
  • Tarteaucitron.Js
Published: April 7, 2025

CVE-2024-58113

5.3
    Huawei
  • Memory Management
Published: April 7, 2025

CVE-2025-20655

5.3
    Mediatek
  • Keymaster
Published: April 7, 2025

CVE-2025-3347

5.3
    Code-Projects
  • Patient Record Management System
Published: April 7, 2025

CVE-2025-3348

5.3
    Code-Projects
  • Patient Record Management System
Published: April 7, 2025

CVE-2025-3369

5.3
    Xxyopen
  • Novel-Plus
Published: April 7, 2025

CVE-2025-3381

5.3
    Zhangyanbo2007
  • Youkefu
Published: April 7, 2025

CVE-2025-3382

5.3
    Joey-Zhou
  • Xiaozhi-Esp32-Server-Java
Published: April 7, 2025

CVE-2025-3326

5.1
    Iteaj
  • Iboot
Published: April 7, 2025

CVE-2025-3327

5.1
    Iteaj
  • Iboot
Published: April 7, 2025

CVE-2025-31476

4.8
    Tarteaucitron
  • Tarteaucitron.Js
Published: April 7, 2025

CVE-2025-3385

4.8
    Linzhaoguan
  • Pb-Cms
Published: April 7, 2025

CVE-2025-3386

4.8
    Linzhaoguan
  • Pb-Cms
Published: April 7, 2025

CVE-2024-58106

4.6
    Huawei
  • Codec Module
Published: April 7, 2025

CVE-2024-58108

4.6
    Huawei
  • Codec
Published: April 7, 2025

CVE-2024-58109

4.6
    Huawei
  • Codec
Published: April 7, 2025

CVE-2024-58110

4.6
    Huawei
  • Codec
Published: April 7, 2025

CVE-2024-38797

4.6
    Edk2
  • Edk2
Published: April 7, 2025

CVE-2024-58115

4.0
    Huawei
  • Arkui
Published: April 7, 2025

CVE-2024-58116

4.0
    Huawei
  • Arkui
Published: April 7, 2025

CVE-2025-3360

3.7
    Gnome
  • Glib
Published: April 7, 2025

CVE-2025-20102

3.3
    Openharmony
  • Openharmony
Published: April 7, 2025

CVE-2025-22452

3.3
    Openharmony
  • Openharmony
Published: April 7, 2025

CVE-2025-22842

3.3
    Openharmony
  • Openharmony
Published: April 7, 2025

CVE-2025-24304

3.3
    Openharmony
  • Openharmony
Published: April 7, 2025

CVE-2025-25057

3.3
    Openharmony
  • Openharmony
Published: April 7, 2025

CVE-2025-27534

3.3
    Openharmony
  • Openharmony
Published: April 7, 2025

CVE-2025-27686

2.7
    Dell
  • Unisphere For Powermax
  • Powermax
Published: April 7, 2025

CVE-2025-3329

2.3
    Consumer Comanda
  • Mobile
Published: April 7, 2025

CVE-2025-20657

None
    Mediatek
  • Vdec
Published: April 7, 2025

CVE-2025-20660

None
    Mediatek
  • Playready Ta
Published: April 7, 2025

CVE-2025-0050

None
    Arm
  • Arm Bifrost Gpu Userspace Driver
  • Arm Valhall Gpu Userspace Driver
  • Arm 5th Gen Gpu Architecture Userspace Driver
Published: April 7, 2025

CVE-2025-28402

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28403

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28405

None
    *
  • Ruoyi
Published: April 7, 2025

CVE-2025-28406

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28407

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28408

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28409

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28410

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28411

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28412

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2025-28413

None
    Ruoyi
  • Ruoyi
Published: April 7, 2025

CVE-2024-46494

None
    Typecho
  • Typecho
Published: April 7, 2025

CVE-2025-29087

None
    Sqlite
  • Sqlite
Published: April 7, 2025

CVE-2025-29478

None
    Fluent-Bit
  • Fluent-Bit
Published: April 7, 2025

CVE-2025-29479

None
    Hiredis
  • Hiredis
Published: April 7, 2025

CVE-2025-29480

None
    Osgeo
  • Gdal
Published: April 7, 2025

CVE-2025-29481

None
    Libbpf
  • Libbpf
Published: April 7, 2025

CVE-2025-29482

None
    Libheif
  • Libheif
Published: April 7, 2025

CVE-2025-29594

None
    Cs2
  • Weaponpaints
Published: April 7, 2025
Click here to see more Vulnerabilities