Tag: 2025-04-09

5 Attack Reports | 196 Vulnerabilities

Attack reports

Exploitation of CLFS zero-day leads to ransomware activity

A zero-day elevation of privilege vulnerability in Windows Common Log File System (CLFS) has been exploited against targets in IT, real estate, finance, software, and retail sectors across multiple countries. The exploit, deployed by PipeMagic malware and attributed to Storm-2460, enables privilege…
ransomware
windows
zero-day
privilege escalation
ransomexx
CVE-2025-24983
CVE-2025-29824
2025-04-09
clfs
pipemagic
Published: April 9, 2025
Linked vulnerabilities : CVE-2025-24983 (CVSS 7.0), CVE-2025-29814 (CVSS 9.3), CVE-2025-29824 (CVSS 7.8)
Downloadable IOCs: 0

Beware! Fake 'NextGen mParivahan' Malware Returns

A new variant of the fake NextGen mParivahan malware has emerged, exhibiting enhanced stealth and data theft capabilities. The malware, disguised as a government traffic notification system, tricks users into downloading a malicious app that requests extensive permissions. This latest version targe…
android
anti-analysis
firebase
2025-04-09
malformed apk
sms theft
notification stealer
dropper-payload
c2 extraction
nextgen mparivahan
Published: April 9, 2025
Downloadable IOCs: 0

Sapphire Werewolf refines Amethyst stealer to attack energy companies

The Sapphire Werewolf cluster has upgraded its toolkit with a new version of the Amethyst stealer, targeting energy companies through phishing emails. The enhanced malware features advanced checks for virtualized environments and uses Triple DES for string encryption. The attack involves distributi…
phishing
credential theft
2025-04-09
amethyst stealer
virtualization detection
Published: April 9, 2025
Downloadable IOCs: 0

NEPTUNE RAT: An advanced Windows RAT with System Destruction Capabilities and Password Exfiltration from 270+ Applications

Neptune RAT, a sophisticated Windows-based remote access trojan, has emerged with advanced capabilities including system destruction and password exfiltration from over 270 applications. It employs PowerShell commands for deployment, leveraging catbox.moe for hosting malicious scripts. The malware …
anti-analysis
remote access trojan
2025-04-09
neptune rat
Published: April 9, 2025
Downloadable IOCs: 24

Scattered Spider: Still Hunting for Victims in 2025

Scattered Spider, a notorious hacking collective, continues to actively target victims in 2025. The group has expanded its focus to include services like Klaviyo, HubSpot, and Pure Storage, while targeting high-profile brands such as Audemars Piguet, Chick-fil-A, and Twitter/X. Silent Push research…
phishing
social engineering
hubspot
2025-04-09
domain impersonation
klaviyo
spectre rat
Published: April 9, 2025
Downloadable IOCs: 57
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-32642

10.0
    vite_coupon
Published: April 9, 2025

CVE-2025-32461

9.9
    tiki
    tiki
    tiki
    tiki
Published: April 9, 2025

CVE-2025-27797

9.8
    wi-fi_ap_unit
    ac-wps-11ac_series
Published: April 9, 2025

CVE-2025-32375

9.8
    bentoml
Published: April 9, 2025

CVE-2025-31033

9.8
    buddypress_humanity
Published: April 9, 2025

CVE-2025-32695

9.8
    checkout_mestres_wp
Published: April 9, 2025

CVE-2025-32496

9.6
    ultra_demo_importer
Published: April 9, 2025

CVE-2025-32576

9.6
    wp_shop
Published: April 9, 2025

CVE-2025-32641

9.6
    anant_addons_for_elementor
Published: April 9, 2025

CVE-2025-31002

9.1
    squeeze
Published: April 9, 2025

CVE-2025-25053

8.8
    ac-wps-11ac_series
Published: April 9, 2025

CVE-2025-29390

8.8
    erp
Published: April 9, 2025

CVE-2025-31023

8.8
    seo_meta_tags
Published: April 9, 2025

CVE-2025-31036

8.8
    wpsolr
Published: April 9, 2025

CVE-2025-31038

8.8
    essential_breadcrumbs
Published: April 9, 2025

CVE-2025-32547

8.2
    all_push_notification_for_wp
Published: April 9, 2025

CVE-2025-2222

7.8
    *
Published: April 9, 2025

CVE-2025-2223

7.8
    engineering_workstation
Published: April 9, 2025

CVE-2025-2631

7.8
    labview
    labview
Published: April 9, 2025

CVE-2025-2632

7.8
    ni_labview
    ni_labview
Published: April 9, 2025

CVE-2025-1968

7.7
    sitefinity
    sitefinity
    sitefinity
    sitefinity
    sitefinity
Published: April 9, 2025

CVE-2025-29189

7.6
    flowise
Published: April 9, 2025

CVE-2025-32676

7.6
    verowa_connect
Published: April 9, 2025

CVE-2025-32677

7.6
    wp_social_stream_designer
Published: April 9, 2025

CVE-2025-32685

7.6
    rinjuang_wp_inquiries
Published: April 9, 2025

CVE-2025-27934

7.5
    ac-wps-11ac
Published: April 9, 2025

CVE-2025-29870

7.5
    ac-wps-11ac_series
Published: April 9, 2025

CVE-2025-32380

7.5
    apollo_router
    apollo_router
Published: April 9, 2025

CVE-2025-31377

7.5
    woo_product_feed_for_marketing_channels
Published: April 9, 2025

CVE-2025-32692

7.5
    wp_subscription_forms
Published: April 9, 2025

CVE-2025-21594

7.5
    junose
    junose
    junose
    junose
    junose
    junose
    junose
    junose
Published: April 9, 2025

CVE-2025-21601

7.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
Published: April 9, 2025

CVE-2025-30644

7.5
    juniper_junos
    juniper_junos
    juniper_junos
    juniper_junos
    juniper_junos
    juniper_junos
Published: April 9, 2025

CVE-2025-30645

7.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
Published: April 9, 2025

CVE-2025-30649

7.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    mx240
    mx480
    mx960
Published: April 9, 2025

CVE-2025-30651

7.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
Published: April 9, 2025

CVE-2025-30656

7.5
    junos
    junos
    junos
    junos
    junos
    junos
    junos
Published: April 9, 2025

CVE-2025-30658

7.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
Published: April 9, 2025

CVE-2025-30659

7.5
    junos
    junos
    junos
    junos
    junos
    junos
Published: April 9, 2025

CVE-2025-30660

7.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
Published: April 9, 2025

CVE-2025-21591

7.4
    junos
    junos
    junos
Published: April 9, 2025

CVE-2025-30648

7.4
    junos
    junos
    junos
    junos
    junos
    junos
    junos
    junos_evolved
    junos_evolved
    junos_evolved
    junos_evolved
Published: April 9, 2025

CVE-2017-20197

7.3
    roommate-bill-tracking
Published: April 9, 2025

CVE-2025-2629

7.3
    labview
Published: April 9, 2025

CVE-2025-2630

7.3
    labview
    labview
Published: April 9, 2025

CVE-2025-29391

7.2
    library-manager
Published: April 9, 2025

CVE-2025-32550

7.2
    click_and_pledge_connect_plugin
Published: April 9, 2025

CVE-2025-31026

7.1
    comment_validation_reloaded
Published: April 9, 2025

CVE-2025-31032

7.1
    woocommerce_gateway
Published: April 9, 2025

CVE-2025-31375

7.1
    scheduled
    scheduled
Published: April 9, 2025

CVE-2025-31382

7.1
    language_field
Published: April 9, 2025

CVE-2025-31383

7.1
    frescochat_live_chat
Published: April 9, 2025

CVE-2025-31385

7.1
    site_table_of_contents
Published: April 9, 2025

CVE-2025-31388

7.1
    the_world
Published: April 9, 2025

CVE-2025-31390

7.1
    social_crowd
Published: April 9, 2025

CVE-2025-31391

7.1
    script_compressor
Published: April 9, 2025

CVE-2025-31392

7.1
    smart_product_gallery_slider
Published: April 9, 2025

CVE-2025-31393

7.1
    social_bookmarking_reloaded
Published: April 9, 2025

CVE-2025-31394

7.1
    more_mime_type_filters
Published: April 9, 2025

CVE-2025-31395

7.1
    easy_custom_css
Published: April 9, 2025

CVE-2025-31399

7.1
    cg_scroll_to_top
Published: April 9, 2025

CVE-2025-31400

7.1
    ws_audio_player
Published: April 9, 2025

CVE-2025-31401

7.1
    mmx_make_me_christmas
Published: April 9, 2025

CVE-2025-31402

7.1
    newsboard_post_and_rss_scroller
Published: April 9, 2025

CVE-2025-31404

7.1
    af_tell_a_friend
Published: April 9, 2025

CVE-2025-32476

7.1
    advanced_tag_lists
Published: April 9, 2025

CVE-2025-32477

7.1
    wp-easy_menu
Published: April 9, 2025

CVE-2025-32478

7.1
    wp_sexylightbox
Published: April 9, 2025

CVE-2025-32479

7.1
    flags_widget
Published: April 9, 2025

CVE-2025-32480

7.1
    windows_live_writer
Published: April 9, 2025

CVE-2025-32481

7.1
    nino_social_connect
    nino_social_connect
Published: April 9, 2025

CVE-2025-32482

7.1
    custom_smileys
Published: April 9, 2025

CVE-2025-32484

7.1
    wp-planification
Published: April 9, 2025

CVE-2025-32497

7.1
    spoiler_block
Published: April 9, 2025

CVE-2025-32498

7.1
    vkontakte_cross_post
Published: April 9, 2025

CVE-2025-32500

7.1
    codescar_radio_widget
Published: April 9, 2025

CVE-2025-32501

7.1
    rentsyst
    rentsyst
Published: April 9, 2025

CVE-2025-32502

7.1
    epaper_lister_for_yumpu
Published: April 9, 2025

CVE-2025-32503

7.1
    link_shield
    link_shield
Published: April 9, 2025

CVE-2025-32505

7.1
    multimailer
Published: April 9, 2025

CVE-2025-32518

7.1
    ald_login_page
Published: April 9, 2025

CVE-2025-32543

7.1
    canonical_attachments
Published: April 9, 2025

CVE-2025-32555

7.1
    seo_nutrition_and_print_for_recipes
Published: April 9, 2025

CVE-2025-32556

7.1
    simple_post_meta_manager
Published: April 9, 2025

CVE-2025-32559

7.1
    reve_chat
Published: April 9, 2025

CVE-2025-32563

7.1
    wp_calais_auto_tagger
Published: April 9, 2025

CVE-2025-32570

7.1
    woocommerce
Published: April 9, 2025

CVE-2025-32575

7.1
    wp_w3all_phpbb
Published: April 9, 2025

CVE-2025-32580

7.1
    email_validator
Published: April 9, 2025

CVE-2025-32581

7.1
    wordpress_spam_blocker
Published: April 9, 2025

CVE-2025-32584

7.1
    chat2
Published: April 9, 2025

CVE-2025-32591

7.1
    wp_abstracts
Published: April 9, 2025

CVE-2025-32597

7.1
    events_calendar_plugin_connectedaily
Published: April 9, 2025

CVE-2025-32610

7.1
    foliopress_wysiwyg
Published: April 9, 2025

CVE-2025-32612

7.1
    user_session_synchronizer
Published: April 9, 2025

CVE-2025-32616

7.1
    nimbata_call_tracking
Published: April 9, 2025

CVE-2025-32617

7.1
    multiple_location_google_map
Published: April 9, 2025

CVE-2025-32619

7.1
    keycaptcha
Published: April 9, 2025

CVE-2025-32621

7.1
    digital_wp_map_route_planner
Published: April 9, 2025

CVE-2025-32623

7.1
    plaininventory
Published: April 9, 2025

CVE-2025-32624

7.1
    czater.pl
Published: April 9, 2025

CVE-2025-32644

7.1
    ip2location_world_clock
Published: April 9, 2025

CVE-2025-32645

7.1
    custom_posts_order
Published: April 9, 2025

CVE-2025-32659

7.1
    fraudlabs_pro_for_woocommerce
Published: April 9, 2025

CVE-2025-32661

7.1
    wp_map_plugins_interactive_us_map
Published: April 9, 2025

CVE-2025-32664

7.1
    nepali_date_utilities
Published: April 9, 2025

CVE-2025-32667

7.1
    doppler_forms
    doppler_forms
Published: April 9, 2025

CVE-2025-32669

7.1
    mergado_pack
    mergado_pack
Published: April 9, 2025

CVE-2025-32673

7.1
    epeken_all_kurir
Published: April 9, 2025

CVE-2025-29988

6.9
    client_platform_bios
Published: April 9, 2025

CVE-2025-32464

6.8
    haproxy
Published: April 9, 2025

CVE-2025-2442

6.8
    default_resource_initialization
Published: April 9, 2025

CVE-2025-32675

6.8
    seo_help
    seo_help
Published: April 9, 2025

CVE-2025-25213

6.5
    wi-fi_ap_unit
Published: April 9, 2025

CVE-2025-32372

6.5
    dnn
    dotnetnuke
Published: April 9, 2025

CVE-2025-32373

6.5
    dnn
Published: April 9, 2025

CVE-2025-32381

6.5
    xgrammar
Published: April 9, 2025

CVE-2025-31017

6.5
    nav_menu_manager
Published: April 9, 2025

CVE-2025-31020

6.5
    simple_spoiler
Published: April 9, 2025

CVE-2025-32495

6.5
    waymark
Published: April 9, 2025

CVE-2025-32499

6.5
    logo_showcase_ultimate
Published: April 9, 2025

CVE-2025-32683

6.5
    mapsvg_lite
Published: April 9, 2025

CVE-2025-32690

6.5
    powerpress_podcasting
Published: April 9, 2025

CVE-2025-3474

6.5
    panels
Published: April 9, 2025

CVE-2025-3475

6.5
    web-t
Published: April 9, 2025

CVE-2025-21595

6.5
    juniper_junos_os
    juniper_junos_evolved
Published: April 9, 2025

CVE-2025-30646

6.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
Published: April 9, 2025

CVE-2025-30647

6.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
Published: April 9, 2025

CVE-2025-30653

6.5
    junos
    junos
    junos
    junos
    junos_evolved
    junos_evolved
    junos_evolved
    junos_evolved
Published: April 9, 2025

CVE-2025-32386

6.5
Published: April 9, 2025

CVE-2025-32387

6.5
Published: April 9, 2025

CVE-2025-3100

6.4
    wp_project_manager
Published: April 9, 2025

CVE-2024-8243

6.3
    plugin_upgrade_time_out
Published: April 9, 2025

CVE-2025-29389

6.1
    pbootcms
Published: April 9, 2025

CVE-2025-27722

5.9
    ac-wps-11ac_series
Published: April 9, 2025

CVE-2025-32374

5.9
    dotnetnuke
Published: April 9, 2025

CVE-2025-31008

5.9
    youtube_embed
Published: April 9, 2025

CVE-2025-31035

5.9
    wp_editor.md
Published: April 9, 2025

CVE-2025-32483

5.9
    request_call_back
Published: April 9, 2025

CVE-2025-32488

5.9
    aria_font
    aria_font
Published: April 9, 2025

CVE-2025-32489

5.9
    wetterwarner
Published: April 9, 2025

CVE-2025-32492

5.9
    admin_menu_post_list
Published: April 9, 2025

CVE-2025-32493

5.9
    bp_social_connect
Published: April 9, 2025

CVE-2025-32640

5.9
    one_click_accessibility
Published: April 9, 2025

CVE-2025-32680

5.9
    review_stream
    review_stream
Published: April 9, 2025

CVE-2025-20952

5.5
    mdecservice
Published: April 9, 2025

CVE-2025-30652

5.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
Published: April 9, 2025

CVE-2025-30654

5.5
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os_evolved
    junos_os_evolved
    junos_os
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
Published: April 9, 2025

CVE-2025-30655

5.5
    juniper_junos_os
    juniper_junos_os
    juniper_junos_os
    juniper_junos_os
    juniper_junos_os
    juniper_junos_os
    juniper_junos_os_evolved
    juniper_junos_os_evolved
    juniper_junos_os_evolved
    juniper_junos_os_evolved
    juniper_junos_os_evolved
    juniper_junos_os_evolved
Published: April 9, 2025

CVE-2023-33844

5.4
    security_verify_governance
Published: April 9, 2025

CVE-2025-31009

5.4
    indieblocks
Published: April 9, 2025

CVE-2025-32679

5.4
    user_registration_using_contact_form_7
Published: April 9, 2025

CVE-2025-3131

5.4
    eca_event_condition_action
    eca_event_condition_action
    eca_event_condition_action
    eca_event_condition_action
Published: April 9, 2025

CVE-2025-31012

5.3
    age_gate
Published: April 9, 2025

CVE-2025-31042

5.3
    sandwich_adsense
Published: April 9, 2025

CVE-2025-21597

5.3
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
    junos_os_evolved
Published: April 9, 2025

CVE-2025-26888

5.3
    woocommerce_multilingual_and_multicurrency
Published: April 9, 2025

CVE-2025-30657

5.3
    juniper_junos
    juniper_junos
    juniper_junos
    juniper_junos
    juniper_junos
Published: April 9, 2025

CVE-2025-32379

5.0
    koa
    koa
    koa
    koa
Published: April 9, 2025

CVE-2025-32684

5.0
    mapsvg_lite
    mapsvg_lite
Published: April 9, 2025

CVE-2025-24375

5.0
Published: April 9, 2025

CVE-2025-25023

4.9
    security_guardium
    security_guardium
Published: April 9, 2025

CVE-2025-32487

4.9
    waymark
    waymark
Published: April 9, 2025

CVE-2025-32691

4.9
    powerpress_podcasting
Published: April 9, 2025

CVE-2025-32016

4.7
    identity_web
    identity_abstractions
Published: April 9, 2025

CVE-2025-32693

4.7
    webinarpress
Published: April 9, 2025

CVE-2025-32694

4.7
    ultimate_wp_mail
Published: April 9, 2025

CVE-2025-2441

4.6
    product
Published: April 9, 2025

CVE-2024-6857

4.3
    wp_multitasking
Published: April 9, 2025

CVE-2024-6860

4.3
    wp_multitasking_plugin
Published: April 9, 2025

CVE-2025-23407

4.3
    ac-wps-11ac_series
Published: April 9, 2025

CVE-2025-25056

4.3
    ap_unit_ac-wps-11ac_series
Published: April 9, 2025

CVE-2025-32371

4.3
    dotnetnuke
Published: April 9, 2025

CVE-2025-31004

4.3
    rich_table_of_contents
Published: April 9, 2025

CVE-2025-31005

4.3
    easyfonts
Published: April 9, 2025

CVE-2025-31034

4.3
    customize_login_page
Published: April 9, 2025

CVE-2025-32485

4.3
    wp_performance_pack
Published: April 9, 2025

CVE-2025-32494

4.3
    recaptcha_jetpack
Published: April 9, 2025

CVE-2025-32678

4.3
    wp_show_stats
    wp_show_stats
Published: April 9, 2025

CVE-2025-26901

4.3
    brizy_pro
Published: April 9, 2025

CVE-2025-26902

4.3
    brizy_pro
Published: April 9, 2025

CVE-2025-2440

4.2
    device
Published: April 9, 2025

CVE-2025-32460

4.0
    graphicsmagick
Published: April 9, 2025

CVE-2025-31003

2.7
    squeeze
Published: April 9, 2025

CVE-2025-3442

None
    tapo_h200
Published: April 9, 2025

CVE-2025-30677

None
    pulsar
    pulsar
    pulsar
Published: April 9, 2025

CVE-2025-31672

None
    poi
    poi_ooxml
Published: April 9, 2025

CVE-2025-27391

None
    activemq_artemis
    activemq_artemis
Published: April 9, 2025

CVE-2025-29394

None
    verydows
Published: April 9, 2025

CVE-2025-32378

None
    shopware
    shopware
Published: April 9, 2025

CVE-2025-3114

None
    code_execution
    terr_security
Published: April 9, 2025

CVE-2025-3115

None
    tibco_software
Published: April 9, 2025

CVE-2024-55210

None
    linha_protheus
Published: April 9, 2025

CVE-2025-29018

None
    internet_banking_system
Published: April 9, 2025

CVE-2025-2845

None
Published: April 9, 2025

CVE-2025-3023

None
Published: April 9, 2025
Click here to see more Vulnerabilities