Tag: 2025-04-23

3 Attack Reports | 82 Vulnerabilities

Attack reports

Introducing ToyMaker

The initial access broker (IAB), whom Talos calls “ToyMaker” and assesses with medium confidence is a financially motivated threat actor, exploits vulnerable systems exposed to the internet. They deploy their custom-made backdoor we call “LAGTOY” and extract credentials from the victim enterprise. …
ransomware
powershell
anydesk
persistence
winscp
impacket
bugsleep
ssh
metasploit
initial access broker
file transfer
cactus
2025-04-23
lagtoy
toymaker
magnet ram
capture
holerun
Published: April 23, 2025
Downloadable IOCs: 20

NFC Fraud Wave: Evolution of Ghost Tap on the Dark Web

Chinese cybercriminals are exploiting NFC technologies for fraudulent purposes, targeting financial institutions and consumers worldwide. They use sophisticated tools like Z-NFC and King NFC to facilitate illegal transactions at scale. The fraudsters leverage Host Card Emulation (HCE) to mimic phys…
ngate
2025-04-23
carding
mobile wallets
pos terminals
contactless payments
loyalty points fraud
track2nfc
nfc fraud
ghost tap
king nfc
host card emulation
z-nfc
Published: April 23, 2025
Downloadable IOCs: 3

New Stealer on the Horizon

SvcStealer 2025 is a novel information stealer delivered through spear phishing email attachments. It harvests sensitive data including machine information, installed software, user credentials, cryptocurrency wallets, and browser data. The malware creates a unique folder, terminates specific proce…
cryptocurrency
information stealer
c2 communication
evasion techniques
spear phishing
data harvesting
svcstealer
2025-04-23
Published: April 23, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-45427

9.8
    Tenda
  • Ac9
Published: April 23, 2025

CVE-2025-45428

9.8
    Tenda
  • Ac9
Published: April 23, 2025

CVE-2025-45429

9.8
    Tenda
  • Ac9
Published: April 23, 2025

CVE-2025-42605

9.3
    Meon
  • Bidding Solutions
Published: April 23, 2025

CVE-2025-32969

9.3
    Xwiki
  • Xwiki
Published: April 23, 2025

CVE-2025-1048

8.8
    Sonos
  • Era 300
Published: April 23, 2025

CVE-2025-1049

8.8
    Sonos
  • Era 300
Published: April 23, 2025

CVE-2025-1050

8.8
    Sonos
  • Era 300
Published: April 23, 2025

CVE-2025-2767

8.8
    Arista
  • Ng Firewall
Published: April 23, 2025

CVE-2025-42603

8.7
    Meon
  • Kyc Solutions
Published: April 23, 2025

CVE-2025-32968

8.6
    Xwiki
  • Xwiki
Published: April 23, 2025

CVE-2025-3529

8.2
    Wordpress
  • Simple Shopping Cart
Published: April 23, 2025

CVE-2025-42600

8.2
    Meon
  • Kyc Solution
Published: April 23, 2025

CVE-2025-42601

8.2
    Meon
  • Kyc Solutions
Published: April 23, 2025

CVE-2025-42602

8.2
    Meon
  • Kyc Solutions
Published: April 23, 2025

CVE-2025-32966

8.2
    Dataease
  • Dataease
Published: April 23, 2025

CVE-2025-2764

8.0
    Carlinkit
  • Cpc200-Ccpa
Published: April 23, 2025

CVE-2025-1045

7.8
    Luxion
  • Keyshot Viewer
Published: April 23, 2025

CVE-2025-1046

7.8
    Luxion
  • Keyshot
Published: April 23, 2025

CVE-2025-1047

7.8
    Luxion
  • Keyshot
Published: April 23, 2025

CVE-2025-2760

7.8
    Gimp
  • Gimp
Published: April 23, 2025

CVE-2025-2761

7.8
    Gimp
  • Gimp
Published: April 23, 2025

CVE-2025-2762

7.8
    Carlinkit
  • Cpc200-Ccpa
Published: April 23, 2025

CVE-2025-2768

7.8
    Bdrive
  • Netdrive
Published: April 23, 2025

CVE-2025-2769

7.8
    Bdrive
  • Netdrive
    Openssl
Published: April 23, 2025

CVE-2025-2765

7.6
    Carlinkit
  • Cpc200-Ccpa
Published: April 23, 2025

CVE-2025-1021

7.5
    Synology
  • Diskstation Manager
Published: April 23, 2025

CVE-2025-3530

7.5
    Wordpress
  • Simple Shopping Cart
Published: April 23, 2025

CVE-2025-21605

7.5
    Redis
  • Redis
Published: April 23, 2025

CVE-2025-32818

7.5
    Sonicwall
  • Sonicos
Published: April 23, 2025

CVE-2025-3903

7.3
    Drupal
  • Ueditor Baidu Editor
Published: April 23, 2025

CVE-2025-3904

7.3
    Drupal
  • Sportsleague
Published: April 23, 2025

CVE-2025-2773

7.2
    Bec Technologies
  • Multiple Routers
Published: April 23, 2025

CVE-2025-1520

7.1
    Posthog
  • Posthog
    Clickhouse
Published: April 23, 2025

CVE-2025-1521

7.1
    Posthog
  • Posthog
Published: April 23, 2025

CVE-2025-1522

7.1
    Posthog
  • Posthog
Published: April 23, 2025

CVE-2025-46397

7.1
    Fig2dev
  • Fig2dev
Published: April 23, 2025

CVE-2025-46398

7.1
    Fig2dev
  • Fig2dev
Published: April 23, 2025

CVE-2025-46399

7.1
    Fig2dev
  • Fig2dev
Published: April 23, 2025

CVE-2025-46400

7.1
    Fig2dev
  • Fig2dev
Published: April 23, 2025

CVE-2025-42604

6.9
    Meon
  • Kyc Solutions
Published: April 23, 2025

CVE-2025-2703

6.8
    Grafana
  • Xy Chart Plugin
Published: April 23, 2025

CVE-2025-2763

6.8
    Carlinkit
  • Cpc200-Ccpa
Published: April 23, 2025

CVE-2025-0618

6.5
    Fireeye
  • Edr Agent
Published: April 23, 2025

CVE-2024-47829

6.5
    Pnpm
  • Pnpm
Published: April 23, 2025

CVE-2025-1054

6.4
    Wordpress
  • Uicore Elements
Published: April 23, 2025

CVE-2025-1056

6.1
    Axis
  • Axis Camera Station Pro
Published: April 23, 2025

CVE-2025-29526

6.1
    Q4 Inc
  • Q4 Investor Relations Platform
Published: April 23, 2025

CVE-2025-3900

6.1
    Drupal
  • Colorbox
Published: April 23, 2025

CVE-2025-3901

6.1
    Drupal
  • Bootstrap Site Alert
Published: April 23, 2025

CVE-2025-3902

6.1
    Drupal
  • Drupal
Published: April 23, 2025

CVE-2025-0926

5.9
    Axis
  • Axis Camera Station
Published: April 23, 2025

CVE-2025-43716

5.8
    Ivanti
  • Landesk Management Gateway
Published: April 23, 2025

CVE-2024-10306

5.4
    Apache
  • Mod Proxy Cluster
Published: April 23, 2025

CVE-2025-2595

5.3
    Codesys
  • Codesys Visualization
Published: April 23, 2025

CVE-2025-2771

5.3
    Bec Technologies
  • Router
Published: April 23, 2025

CVE-2025-2772

5.3
    Bec Technologies
  • Router
Published: April 23, 2025

CVE-2025-2770

4.9
    Bec Technologies
  • Router
Published: April 23, 2025

CVE-2025-3907

4.3
    Drupal
  • Search Api Solr
Published: April 23, 2025

CVE-2025-46394

3.2
    Busybox
  • Tar
Published: April 23, 2025

CVE-2025-43965

2.9
    Imagemagick
  • Imagemagick
Published: April 23, 2025

CVE-2025-46393

2.9
    Imagemagick
  • Imagemagick
Published: April 23, 2025

CVE-2024-58251

2.5
    Busybox
  • Busybox
Published: April 23, 2025

CVE-2025-46216

None
    Fortinet
  • *
Published: April 23, 2025

CVE-2025-46217

None
    Fortinet
  • Fortinet
Published: April 23, 2025

CVE-2025-46218

None
    Fortinet
  • Fortinet
Published: April 23, 2025

CVE-2025-46219

None
    Fortinet
  • Fortinet
Published: April 23, 2025

CVE-2025-46220

None
    Fortinet
  • Fortinet
Published: April 23, 2025

CVE-2025-46221

None
    Fortinet
  • Fortinet
Published: April 23, 2025

CVE-2025-46222

None
    Fortinet
  • Fortinet
Published: April 23, 2025

CVE-2025-46223

None
    Fortinet
  • Fortinet
Published: April 23, 2025

CVE-2025-46224

None
    Fortinet
  • Fortinet
Published: April 23, 2025

CVE-2025-28017

None
    Totolink
  • A800r
Published: April 23, 2025

CVE-2025-28018

None
    Totolink
  • A800r
Published: April 23, 2025

CVE-2025-28019

None
    Totolink
  • A800r
Published: April 23, 2025

CVE-2025-28020

None
    Totolink
  • A800r
Published: April 23, 2025

CVE-2025-28021

None
    Totolink
  • A810r
Published: April 23, 2025

CVE-2025-28022

None
    Totolink
  • A810r
Published: April 23, 2025

CVE-2025-28025

None
    Totolink
  • A830r
  • A950rg
  • A3000ru
  • A3100r
Published: April 23, 2025

CVE-2025-28028

None
    Totolink
  • A830r
  • A950rg
  • A3000ru
  • A3100r
Published: April 23, 2025

CVE-2025-3673

None
    Wordpress
  • Wordpress
Published: April 23, 2025

CVE-2025-28169

None
    Byd
  • Qinyplus Dm-I Dilink Os
Published: April 23, 2025
Click here to see more Vulnerabilities