Tag: 2025-04-14

2 Attack Reports | 84 Vulnerabilities

Attack reports

Slow Pisces Targets Developers With Coding Challenges and Introduces New Customized Python Malware

Slow Pisces, a North Korean state-sponsored threat group, is targeting cryptocurrency developers through LinkedIn with malicious coding challenges. The group impersonates recruiters and sends malware disguised as project tasks, infecting systems with RN Loader and RN Stealer. Their campaign uses Gi…
social engineering
north korea
python
infostealer
cryptocurrency
2025-04-14
rn stealer
rn loader
dpkr
slow pisces
yaml deserialization
Published: April 14, 2025
Downloadable IOCs: 41

Atomic and Exodus crypto wallets targeted in malicious npm campaign

A malicious npm package named pdf-to-office was discovered targeting cryptocurrency wallets. The package, posing as a PDF to Office converter, injects malicious code into locally installed Atomic and Exodus wallets. This attack modifies legitimate files to redirect crypto funds to the attacker's wa…
cryptocurrency
persistence
npm
atomic
software supply chain
exodus
patching
2025-04-10
wallet
2025-04-14
trojanized code
atomic wallet
Published: April 14, 2025
Downloadable IOCs: 1
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-24859

10.0
    Apache
  • Roller
Published: April 14, 2025

CVE-2025-1782

9.9
    Hylafax
  • Hylafax
    Avantfax
Published: April 14, 2025

CVE-2025-22371

9.3
    Sicommnet
  • Basec
Published: April 14, 2025

CVE-2025-22372

9.3
    Sicommnet
  • Basec
Published: April 14, 2025

CVE-2025-32931

9.1
    Devdojo
  • Voyager
    Laravel
Published: April 14, 2025

CVE-2025-22373

8.7
    Sicommnet
  • Basec
Published: April 14, 2025

CVE-2025-3542

8.6
    H3c
  • Magic Nx15
  • Magic Nx400
  • Magic R3010
Published: April 14, 2025

CVE-2025-3543

8.6
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
Published: April 14, 2025

CVE-2025-3544

8.6
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: April 14, 2025

CVE-2025-3545

8.6
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: April 14, 2025

CVE-2025-3546

8.6
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: April 14, 2025

CVE-2025-2563

8.1
    Wordpress
  • User Registration And Membership
Published: April 14, 2025

CVE-2025-2160

8.1
    Pega
  • Pega Platform
Published: April 14, 2025

CVE-2025-3572

7.5
    Intumit
  • Smartrobot
Published: April 14, 2025

CVE-2025-32906

7.5
    Libsoup
  • Libsoup
Published: April 14, 2025

CVE-2025-32907

7.5
    Libsoup
  • Libsoup
Published: April 14, 2025

CVE-2025-32908

7.5
    Libsoup
  • Libsoup
Published: April 14, 2025

CVE-2025-32913

7.5
    Libsoup
  • Libsoup
Published: April 14, 2025

CVE-2025-32914

7.4
    Gnome
  • Libsoup
Published: April 14, 2025

CVE-2025-31344

7.3
    Openeuler
  • Giflib
Published: April 14, 2025

CVE-2025-27009

7.1
    Wphocus
  • My Auctions Allegro
Published: April 14, 2025

CVE-2025-2161

7.1
    Pega
  • Pega Platform
Published: April 14, 2025

CVE-2025-3551

6.9
    Lingxing
  • Erp
Published: April 14, 2025

CVE-2025-3552

6.9
    Lingxing
  • Erp
Published: April 14, 2025

CVE-2025-3566

6.9
    Veal98
  • Echo
Published: April 14, 2025

CVE-2025-3277

6.9
    Sqlite
  • Sqlite
Published: April 14, 2025

CVE-2025-32910

6.5
    Gnome
  • Libsoup
Published: April 14, 2025

CVE-2025-32912

6.5
    Libsoup
  • Libsoup
Published: April 14, 2025

CVE-2025-3555

6.3
    Scriptandtools
  • Ecommerce-Website-In-Php
Published: April 14, 2025

CVE-2025-3556

6.3
    Scriptandtools
  • Ecommerce-Website-In-Php
Published: April 14, 2025

CVE-2024-49825

6.3
    Ibm
  • Robotic Process Automation
Published: April 14, 2025

CVE-2024-9230

5.9
    Blubrry
  • Powerpress
Published: April 14, 2025

CVE-2022-43851

5.9
    Ibm
  • Aspera Console
Published: April 14, 2025

CVE-2025-2572

5.6
    Progress
  • Whatsup Gold
Published: April 14, 2025

CVE-2025-2475

5.4
    Mattermost
  • Mattermost
Published: April 14, 2025

CVE-2022-43847

5.4
    Ibm
  • Aspera Console
Published: April 14, 2025

CVE-2022-43850

5.4
    Ibm
  • Aspera Console
Published: April 14, 2025

CVE-2025-3547

5.3
    Frdel
  • Agent-Zero
Published: April 14, 2025

CVE-2025-3550

5.3
    Wowjoy
  • Internet Doctor Workstation System
Published: April 14, 2025

CVE-2025-3553

5.3
    Phpshe
  • Phpshe
Published: April 14, 2025

CVE-2025-3554

5.3
    Phpshe
  • Phpshe
Published: April 14, 2025

CVE-2025-3557

5.3
    Scriptandtools
  • Ecommerce-Website-In-Php
Published: April 14, 2025

CVE-2025-3558

5.3
    Ghostxbh
  • Uzy-Ssm-Mall
Published: April 14, 2025

CVE-2025-3559

5.3
    Ghostxbh
  • Uzy-Ssm-Mall
Published: April 14, 2025

CVE-2025-3561

5.3
    Ghostxbh
  • Uzy-Ssm-Mall
Published: April 14, 2025

CVE-2025-3562

5.3
    Yonyou
  • Yonbip
Published: April 14, 2025

CVE-2024-10087

5.3
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2024-49705

5.3
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2025-3564

5.3
    Huanfenz
  • Code-Projects
Published: April 14, 2025

CVE-2025-3567

5.3
    Veal98
  • Veal99
Published: April 14, 2025

CVE-2025-3569

5.3
    Jameszbl
  • Db-Hospital-Drug
Published: April 14, 2025

CVE-2025-32909

5.3
    Gnome
  • Libsoup
Published: April 14, 2025

CVE-2025-3571

5.3
    Fannuo
  • Enterprise Content Management System
Published: April 14, 2025

CVE-2025-3585

5.3
    Westboy
  • Cicadascms
Published: April 14, 2025

CVE-2025-3587

5.3
    Zerowdd
  • Studentmanager
Published: April 14, 2025

CVE-2022-43852

5.3
    Ibm
  • Aspera Console
Published: April 14, 2025

CVE-2025-3589

5.3
    Sourcecodester
  • Music Class Enrollment System
Published: April 14, 2025

CVE-2025-3590

5.3
    Adianti
  • Adianti Framework
Published: April 14, 2025

CVE-2025-3560

5.1
    Ghostxbh
  • Uzy-Ssm-Mall
Published: April 14, 2025

CVE-2025-3563

5.1
    Wuzhicms
  • Wuzhicms
Published: April 14, 2025

CVE-2024-10088

5.1
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2024-10089

5.1
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2024-10090

5.1
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2024-13597

5.1
    Softcom
  • Internet Starter
Published: April 14, 2025

CVE-2024-13598

5.1
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2024-49706

5.1
    Softcom
  • Internet Starter
Published: April 14, 2025

CVE-2024-49707

5.1
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2024-49708

5.1
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2025-3565

5.1
    Huanfenz
  • Studentmanager
Published: April 14, 2025

CVE-2025-3568

5.1
    Webkul
  • Krayin Crm
Published: April 14, 2025

CVE-2025-3570

5.1
    Jameszbl
  • Db-Hospital-Drug
Published: April 14, 2025

CVE-2025-3591

5.1
    Zhenfeng13
  • My-Blog-Layui
Published: April 14, 2025

CVE-2025-3592

5.1
    Zhenfeng13
  • My-Blog-Layui
Published: April 14, 2025

CVE-2025-3548

4.8
    Assimp
  • Assimp
Published: April 14, 2025

CVE-2025-3549

4.8
    Assimp
  • Assimp
Published: April 14, 2025

CVE-2025-29720

4.8
    Dify
  • Dify
Published: April 14, 2025

CVE-2025-3588

4.8
    Joelittlejohn
  • Jsonschema2pojo
Published: April 14, 2025

CVE-2025-32093

4.7
    Mattermost
  • Mattermost
Published: April 14, 2025

CVE-2022-43840

4.3
    Ibm
  • Ibm Aspera Console
Published: April 14, 2025

CVE-2025-2424

3.1
    Mattermost
  • Mattermost
Published: April 14, 2025

CVE-2023-27272

3.1
    Ibm
  • Aspera Console
Published: April 14, 2025

CVE-2024-49709

2.3
    Softcom
  • Iksoris
Published: April 14, 2025

CVE-2025-30516

2.0
    Mattermost
  • Mobile Apps
Published: April 14, 2025

CVE-2025-32930

None
Published: April 14, 2025
Click here to see more Vulnerabilities