Tag: 2025-04-18

4 Attack Reports | 101 Vulnerabilities

Attack reports

The "free money" trap: How scammers exploit financial anxiety

This analysis explores how scammers capitalize on financial stress by promising 'free money' through fake subsidy programs, government grants, or relief cards. Common tactics include using urgency, exclusivity, and fabricated social proof to manipulate victims. Scammers employ various techniques su…
phishing
social engineering
malvertising
njrat
identity theft
government impersonation
qr code scams
2025-04-18
financial scams
fake subsidies
Published: April 18, 2025
Downloadable IOCs: 0

Two sides of the same coin

This intelligence report analyzes the similarities between two previously separate APT groups, Team46 and TaxOff, concluding they are likely the same entity. The analysis covers their shared tactics, techniques, and procedures, including similar PowerShell commands, loader functionality, and infras…
backdoor
loader
obfuscation
apt
powershell
cobalt strike
zero-day
encryption
CVE-2024-6473
CVE-2025-2783
2025-04-18
dante
trinper
Published: April 18, 2025
Downloadable IOCs: 0

SuperCard X: exposing a Chinese-speaker MaaS for NFC Relay fraud operation

A new Android malware campaign called 'SuperCard X' has been identified, employing NFC-relay techniques to enable fraudulent POS payments and ATM withdrawals. Distributed through a Chinese-speaking Malware-as-a-Service platform, it shares similarities with NGate malware. The campaign uses social en…
android
banking
ngate
maas
2025-04-18
supercard x
relay-attack
Published: April 18, 2025
Downloadable IOCs: 6

Proton66: Compromised WordPress Pages and Malware Campaigns

This intelligence briefing focuses on malware campaigns linked to Proton66, particularly those targeting Android devices through compromised WordPress websites. It details how these sites were injected with malicious scripts to redirect Android users to fake Google Play Store pages. The report also…
xworm
phishing
ransomware
android
korea
remcos
wordpress
strela stealer
2025-04-18
germany
weaxor
Published: April 18, 2025
Downloadable IOCs: 48
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-42599

9.8
    Active!
  • Mail
Published: April 18, 2025

CVE-2025-1863

9.8
    Yokogawa
  • Gx10
  • Gx20
  • Gp10
  • Gp20
  • Gm Data Acquisition System
  • Dx1000
  • Dx2000
  • Dx1000n
  • Fx1000
  • Ur10000
  • Ur20000
  • Mw100
  • Dx1000t
  • Dx2000t
  • Cx1000
  • Cx2000
Published: April 18, 2025

CVE-2025-39471

9.3
    Pantherius
  • Modal Survey
Published: April 18, 2025

CVE-2025-32434

9.3
    Pytorch
  • Pytorch
Published: April 18, 2025

CVE-2025-2492

9.2
    Asus
  • Aicloud
Published: April 18, 2025

CVE-2025-3785

8.7
    D-Link
  • Dwr-M961
Published: April 18, 2025

CVE-2025-3786

8.7
    Tenda
  • Ac15
Published: April 18, 2025

CVE-2025-32792

8.7
    Github
  • Ses
Published: April 18, 2025

CVE-2025-32953

8.7
    Z80pack
  • Z80pack
Published: April 18, 2025

CVE-2025-25427

8.6
    Tp-Link
  • Wr841n
Published: April 18, 2025

CVE-2025-32389

8.6
    Namelessmc
  • Namelessmc
Published: April 18, 2025

CVE-2025-3520

8.1
    Wordpress
  • Avatar Plugin
Published: April 18, 2025

CVE-2025-39470

8.1
    Thimpress
  • Ivy School
Published: April 18, 2025

CVE-2025-29625

7.8
    Astrolog
  • Astrolog
Published: April 18, 2025

CVE-2025-24914

7.8
    Tenable
  • Nessus
Published: April 18, 2025

CVE-2025-29784

7.5
    Namelessmc
  • Namelessmc
Published: April 18, 2025

CVE-2025-32442

7.5
    Fastify
  • Fastify
Published: April 18, 2025

CVE-2025-30357

7.3
    Namelessmc
  • Namelessmc
Published: April 18, 2025

CVE-2025-39469

7.1
    Pantherius
  • Modal Survey
Published: April 18, 2025

CVE-2025-30158

7.1
    Namelessmc
  • Namelessmc
Published: April 18, 2025

CVE-2025-31118

7.1
    Namelessmc
  • Namelessmc
Published: April 18, 2025

CVE-2025-3790

6.9
    Baseweb
  • Jsite
    Apache
Published: April 18, 2025

CVE-2025-1697

6.9
    Hp
  • Touchpoint Analytics Service
  • Pc Products
Published: April 18, 2025

CVE-2025-25984

6.8
    Macro-Video Technologies
  • V380e6 C1 Ip Camera
Published: April 18, 2025

CVE-2025-27599

6.5
    Element.Io
  • Element X Android
Published: April 18, 2025

CVE-2025-32795

6.5
    Dify
  • Dify
Published: April 18, 2025

CVE-2025-32796

6.5
    Dify
  • Dify
Published: April 18, 2025

CVE-2025-32377

6.5
    Rasa
  • Rasa Pro
Published: April 18, 2025

CVE-2024-13650

6.4
    Piotnet
  • Piotnet Addons For Elementor
Published: April 18, 2025

CVE-2025-3106

6.4
    Elementor
  • La-Studio Element Kit
Published: April 18, 2025

CVE-2024-45651

6.3
    Ibm
  • Sterling Connect
Published: April 18, 2025

CVE-2024-49808

6.3
    Ibm
  • Sterling Connect
Published: April 18, 2025

CVE-2024-46089

6.3
    74cms
  • 74cms
Published: April 18, 2025

CVE-2025-32790

6.3
    Dify
  • Dify
Published: April 18, 2025

CVE-2025-3598

6.1
    Coupon Affiliates
  • Affiliate Plugin For Woocommerce
Published: April 18, 2025

CVE-2025-29512

6.1
    Nodebb
  • Nodebb
Published: April 18, 2025

CVE-2025-29513

6.1
    Nodebb
  • Nodebb
Published: April 18, 2025

CVE-2025-3056

5.4
    Wordpress
  • Download Manager
Published: April 18, 2025

CVE-2025-2950

5.4
    Ibm
  • Ibm I
Published: April 18, 2025

CVE-2024-41447

5.4
    Alkacon
  • Opencms
Published: April 18, 2025

CVE-2025-3783

5.3
    Sourcecodester
  • Web-Based Pharmacy Product Management System
Published: April 18, 2025

CVE-2025-31120

5.3
    Namelessmc
  • Namelessmc
Published: April 18, 2025

CVE-2025-3796

5.3
    Phpgurukul
  • Men Salon Management System
Published: April 18, 2025

CVE-2025-3787

5.1
    Pbootcms
  • Pbootcms
Published: April 18, 2025

CVE-2025-3788

5.1
    Baseweb
  • Jsite
Published: April 18, 2025

CVE-2025-3789

5.1
    Baseweb
  • Jsite
Published: April 18, 2025

CVE-2025-3792

5.1
    Seacms
  • Seacms
Published: April 18, 2025

CVE-2025-2162

4.8
    Wordpress
  • Mappress Maps
Published: April 18, 2025

CVE-2025-3791

4.8
    Symisc
  • Unqlite
Published: April 18, 2025

CVE-2025-3795

4.8
    Dai Cuo
  • Dai Cuo
Published: April 18, 2025

CVE-2025-28355

4.7
    Volmarg
  • Personal Management System
Published: April 18, 2025

CVE-2025-2613

4.4
    Wordpress
  • Login Manager
Published: April 18, 2025

CVE-2025-36625

4.3
    Tenable
  • Nessus
Published: April 18, 2025

CVE-2025-43903

4.3
    Poppler
  • Poppler
Published: April 18, 2025

CVE-2025-25983

3.4
    Macro-Video Technologies
  • V380 Pro
Published: April 18, 2025

CVE-2025-25985

2.6
    Macro-Video Technologies
  • V380e6 C1 Ip Camera
Published: April 18, 2025

CVE-2025-0467

None
    *
  • Kernel
  • Gpu Firmware
Published: April 18, 2025

CVE-2025-37785

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-37860

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-37893

None
    Linux
  • Linux Kernel
  • Linux Bpf
Published: April 18, 2025

CVE-2025-37925

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-38049

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-38104

None
    Linux
  • Linux Kernel
    Amdgpu
Published: April 18, 2025

CVE-2025-38152

None
    Linux
  • Linux Kernel
    Nxp
Published: April 18, 2025

CVE-2025-38240

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-38479

None
    Linux
  • Linux Kernel
  • Fsl-Edma
Published: April 18, 2025

CVE-2025-38575

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-38637

None
    Linux
  • Kernel
Published: April 18, 2025

CVE-2025-39688

None
    Linux
  • Kernel
Published: April 18, 2025

CVE-2025-39728

None
    Samsung
  • Linux Kernel
Published: April 18, 2025

CVE-2025-39735

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-39755

None
    Linux
  • Kernel
Published: April 18, 2025

CVE-2025-39778

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-39930

None
    Linux
  • Linux Kernel
  • Asoc Simple Card Util
Published: April 18, 2025

CVE-2025-39989

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-40014

None
    Linux
  • Linux Kernel
    Amd
Published: April 18, 2025

CVE-2025-40114

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2025-40325

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2024-26014

None
    Fortinet
  • Fortinet
Published: April 18, 2025

CVE-2024-11421

None
    Wordpress
  • *
Published: April 18, 2025

CVE-2025-40364

None
    Linux
  • Linux Kernel
Published: April 18, 2025

CVE-2024-29643

None
    Croogo
  • Croogo
Published: April 18, 2025

CVE-2025-28228

None
    Electrolink
  • Medium Dab Transmitter Web
  • Display
Published: April 18, 2025

CVE-2025-28229

None
    Orban
  • Optimod
Published: April 18, 2025

CVE-2025-28230

None
    Jmbroadcast
  • Jmb0150 Firmware
Published: April 18, 2025

CVE-2025-28232

None
    Jmbroadcast
  • Jmb0150 Firmware
Published: April 18, 2025

CVE-2025-29209

None
    Totolink
  • X18
Published: April 18, 2025

CVE-2025-37838

None
    Linux
  • Linux Kernel
  • Ssi Protocol
Published: April 18, 2025

CVE-2025-29953

None
    Apache
  • Activemq Nms Openwire Client
Published: April 18, 2025

CVE-2025-28059

None
    Nagios
  • Nagios Network Analyzer
Published: April 18, 2025

CVE-2025-28231

None
    Itel Electronics
  • Ip Stream
Published: April 18, 2025

CVE-2025-28233

None
    Bw Broadcast
  • Tx600
  • Tx300
  • Tx150
  • Tx1000
  • Tx30
  • Tx50
Published: April 18, 2025

CVE-2025-28235

None
    Soundcraft
  • Ui12
  • Ui16
Published: April 18, 2025

CVE-2025-28236

None
    Nautel
  • Vx Series Transmitters
Published: April 18, 2025

CVE-2025-28237

None
    Worldcast
  • Ecreso Fm Dab Tv Transmitter
Published: April 18, 2025

CVE-2025-28238

None
    Elber
  • Reble310 Firmware
  • Reble310
  • Rx10
  • 4asi
Published: April 18, 2025

CVE-2025-28242

None
    Daenet
  • Daenetip4
Published: April 18, 2025

CVE-2024-57493

None
    Redoxos
  • Relibc
Published: April 18, 2025

CVE-2025-28197

None
    Crawl4ai
  • Crawl4ai
Published: April 18, 2025

CVE-2024-53591

None
    Seclore
  • Seclore
Published: April 18, 2025

CVE-2025-29058

None
    Qimou
  • Qimou Cms
Published: April 18, 2025
Click here to see more Vulnerabilities