Tag: 2025-04-24

5 Attack Reports | 172 Vulnerabilities

Attack reports

Lessons from Ted Lasso for cybersecurity success

This article draws parallels between the popular TV show Ted Lasso and the cybersecurity industry, emphasizing the importance of intellectual curiosity in the field. The author, William Largent, discusses his approach to interviewing candidates for Talos, focusing on their innate curiosity rather t…
xorddos
initial access broker
cybersecurity news
lagtoy
2025-04-24
intellectual curiosity
lagtoy backdoor
cactus ransomware
ted lasso
cisco talos
hiring process
Published: April 24, 2025
Downloadable IOCs: 4

Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations

North Korean cybercrime activities heavily rely on Russian IP ranges in Khasan and Khabarovsk, utilizing extensive anonymization networks. The Void Dokkaebi group, linked to North Korea, employs fictitious companies like BlockNovas to target IT professionals through fraudulent job interviews, aimin…
social engineering
cryptocurrency
beavertail
frostyferret
2025-04-24
blocknovas
invisible ferret
anonymization networks
Published: April 24, 2025
Downloadable IOCs: 45

Power Parasites: Job & Investment Scam Campaign Targets Energy Companies and Major Brands

A scam campaign dubbed 'Power Parasites' is targeting individuals in Asian countries through deceptive websites, social media groups, and Telegram channels. The campaign exploits the names and branding of global energy companies and other major brands to conduct job and investment scams. Victims ar…
phishing
social engineering
telegram
social media
investment fraud
brand impersonation
2025-04-24
job scam
Published: April 24, 2025
Downloadable IOCs: 0

SnakeKeylogger – A Multistage Info Stealer Malware Campaign

This analysis explores a sophisticated malware campaign utilizing SnakeKeylogger, a credential-stealing threat. The attack begins with malicious spam emails containing disguised attachments. The infection chain involves multiple stages, including encrypted payload delivery, process hollowing, and s…
obfuscation
process-hollowing
snakekeylogger
info-stealer
2025-04-24
Published: April 24, 2025
Downloadable IOCs: 5

Lazarus APT updates its toolset in watering hole attacks

The Lazarus group has launched a sophisticated attack campaign dubbed 'Operation SyncHole' targeting South Korean organizations. The operation combines watering hole attacks with exploitation of vulnerabilities in South Korean software. At least six organizations in the software, IT, financial, sem…
apt
supply chain
south korea
vulnerability exploitation
watering hole
2025-04-24
copperhedge
signbt
threatneedle
agamemnon downloader
wagent
Published: April 24, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-31324

10.0
    Sap
  • Sap Netweaver Visual Composer
Published: April 24, 2025

CVE-2025-46264

9.9
    Angelo Mandato
  • Powerpress Podcasting
Published: April 24, 2025

CVE-2025-3603

9.8
    Flynax
  • Flynax Bridge
Published: April 24, 2025

CVE-2025-3604

9.8
    Flynax
  • Flynax Bridge
Published: April 24, 2025

CVE-2025-46248

9.3
    M A Vinoth Kumar
  • Frontend Dashboard
Published: April 24, 2025

CVE-2025-26382

9.3
    Johnson Controls
  • Istar Configuration Utility
Published: April 24, 2025

CVE-2025-43858

9.2
    Youtubedlsharp
  • Yt-Dlp
Published: April 24, 2025

CVE-2025-3065

9.1
    Database Toolset
  • Database Toolset
Published: April 24, 2025

CVE-2025-43859

9.1
    H11
  • H11
Published: April 24, 2025

CVE-2025-3761

8.8
    Wordpress
  • My Tickets
Published: April 24, 2025

CVE-2025-3058

8.8
    Xelion
  • Webchat
Published: April 24, 2025

CVE-2025-3101

8.8
    Wordpress
  • Configurator Theme Core
Published: April 24, 2025

CVE-2025-3607

8.8
    Wordpress
  • Frontend Login And Registration Blocks
Published: April 24, 2025

CVE-2025-43855

8.7
    Trpc
  • Trpc
Published: April 24, 2025

CVE-2025-1976

8.6
    Brocade
  • Fabric Os
Published: April 24, 2025

CVE-2025-2558

8.6
    The-Wound
  • The-Wound
Published: April 24, 2025

CVE-2025-39377

8.5
    Wedevs
  • Appsero Helper
Published: April 24, 2025

CVE-2025-3776

8.3
    Wordpress
  • Targetsms
Published: April 24, 2025

CVE-2021-47663

8.1
    *
  • *
Published: April 24, 2025

CVE-2025-1908

7.7
    Gitlab
  • Gitlab
Published: April 24, 2025

CVE-2025-27580

7.5
    Nih
  • Brics
Published: April 24, 2025

CVE-2021-47662

7.5
    Generic
  • *
Published: April 24, 2025

CVE-2025-27820

7.5
    Apache
  • Httpclient
Published: April 24, 2025

CVE-2025-32921

7.5
    Wpoperation
  • Arrival
Published: April 24, 2025

CVE-2025-39359

7.5
    Code Work Web
  • Cww Portfolio
Published: April 24, 2025

CVE-2025-39360

7.5
    Everestthemes
  • Grace Mag
Published: April 24, 2025

CVE-2025-39378

7.5
    Holest Engineering
  • Spreadsheet Price Changer
    Wp Ecommerce
Published: April 24, 2025

CVE-2025-39379

7.5
    Capturly
  • Capturly
Published: April 24, 2025

CVE-2025-39383

7.5
    Code Work
  • Xews Lite
Published: April 24, 2025

CVE-2025-39384

7.5
    Cedcommerce
  • Product Lister For Ebay
Published: April 24, 2025

CVE-2025-39387

7.5
    Wpoperation
  • Opstore
Published: April 24, 2025

CVE-2025-39391

7.5
    Zamartz
  • Checkout Field Visibility For Woocommerce
Published: April 24, 2025

CVE-2025-39399

7.5
    Envato
  • License For Envato
Published: April 24, 2025

CVE-2025-46230

7.5
    Ghozylab
  • Popup Builder
Published: April 24, 2025

CVE-2025-46439

7.4
    Vladimir Prelevac
  • Plugin Central
Published: April 24, 2025

CVE-2025-3300

7.2
    Wordpress
  • Wpmastertoolkit
Published: April 24, 2025

CVE-2025-3872

7.2
    Centreon
  • Centreon
Published: April 24, 2025

CVE-2025-46473

7.2
    Djjmz
  • Social Counter
Published: April 24, 2025

CVE-2025-46481

7.2
    Michael Cannon
  • Flickr Shortcode Importer
Published: April 24, 2025

CVE-2025-39381

7.1
    Kiotviet
  • Kiotviet Sync
Published: April 24, 2025

CVE-2025-39382

7.1
    Danielpataki
  • Acf Google Font Selector
Published: April 24, 2025

CVE-2025-39397

7.1
    Gopiplus
  • Anything Popup
Published: April 24, 2025

CVE-2025-39400

7.1
    Wpeverest
  • User Registration
Published: April 24, 2025

CVE-2025-39408

7.1
    Everpress
  • Bruteguard
Published: April 24, 2025

CVE-2025-46234

7.1
    Habibur Rahman Razib
  • Control Listings
Published: April 24, 2025

CVE-2025-46435

7.1
    Yash Binani
  • Time Based Greeting
Published: April 24, 2025

CVE-2025-46442

7.1
    Casey Johnson
  • Loan Calculator
Published: April 24, 2025

CVE-2025-46449

7.1
    Novium
  • Wowhead Tooltips
Published: April 24, 2025

CVE-2025-46450

7.1
    X000x
  • Occupancyplan
Published: April 24, 2025

CVE-2025-46452

7.1
    Olav Kolbu
  • Google News
Published: April 24, 2025

CVE-2025-46457

7.1
    Digontoahsan
  • Wp Custom Cms Block
Published: April 24, 2025

CVE-2025-46465

7.1
    John Weissberg
  • Print Science Designer
Published: April 24, 2025

CVE-2025-46466

7.1
    Felixtz
  • Modern Polls
Published: April 24, 2025

CVE-2025-46478

7.1
    Metaloha
  • Dropdown Content
Published: April 24, 2025

CVE-2025-46492

7.1
    Pham Thanh
  • Call Now Pht Blog
Published: April 24, 2025

CVE-2025-46497

7.1
    Navegg
  • Navegg Analytics
Published: April 24, 2025

CVE-2025-46499

7.1
    Hccoder
  • Paypal Express Checkout
Published: April 24, 2025

CVE-2025-46502

7.1
    Bas Matthee
  • Lsd Custom Taxonomy And Category Meta
Published: April 24, 2025

CVE-2025-46504

7.1
    Olar Marius Vasaio
  • Vasaio Qr Code
Published: April 24, 2025

CVE-2025-46506

7.1
    Lora77
  • Wpzon Amazon Affiliate Plugin
Published: April 24, 2025

CVE-2025-46507

7.1
    Ldrumm
  • Unsafe Mimetypes
Published: April 24, 2025

CVE-2025-46508

7.1
    Kasonzhao
  • Advanced Lazy Load
Published: April 24, 2025

CVE-2025-46510

7.1
    Harrysudana
  • Contact Form 7 Calendar
Published: April 24, 2025

CVE-2025-46512

7.1
    Shamim Hasan
  • Custom Functions Plugin
Published: April 24, 2025

CVE-2025-46514

7.1
    Milat
  • Jquery Automatic Popup
Published: April 24, 2025

CVE-2025-46516

7.1
    Silencecm
  • Twitter Card Generator
Published: April 24, 2025

CVE-2025-46520

7.1
    Alphasis
  • Related Posts Via Taxonomies
Published: April 24, 2025

CVE-2025-46522

7.1
    Billy Bryant
  • Tabs
Published: April 24, 2025

CVE-2025-46524

7.1
    Wordpress
  • Wp Filter Post Category
Published: April 24, 2025

CVE-2025-46528

7.1
    Availability Calendar
  • Availability Calendar
Published: April 24, 2025

CVE-2025-46530

7.1
    Huangye Wudeng
  • Hacklog Remote Attachment
Published: April 24, 2025

CVE-2023-37534

7.1
    Hcl
  • Hcl Leap
Published: April 24, 2025

CVE-2025-46417

6.8
    Picklescan
  • Picklescan
    Python
Published: April 24, 2025

CVE-2025-32730

6.8
    I-Pro
  • Configuration Tool
Published: April 24, 2025

CVE-2025-46421

6.8
    Libsoup
  • Libsoup
Published: April 24, 2025

CVE-2025-30408

6.7
    Acronis
  • Cyber Protect Cloud Agent
Published: April 24, 2025

CVE-2025-35965

6.5
    Mattermost
  • Mattermost
Published: April 24, 2025

CVE-2025-41395

6.5
    Mattermost
  • Mattermost
Published: April 24, 2025

CVE-2025-0639

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: April 24, 2025

CVE-2025-3280

6.5
    Elex
  • Woocommerce Advanced Bulk Edit Products Prices Attributes
Published: April 24, 2025

CVE-2025-46420

6.5
    Libsoup
  • Libsoup
Published: April 24, 2025

CVE-2025-44134

6.5
    Code-Projects
  • Online Class And Exam Scheduling System
Published: April 24, 2025

CVE-2025-44135

6.5
    Code-Projects
  • Online Class And Exam Scheduling System
Published: April 24, 2025

CVE-2025-46260

6.5
    Wowdevs
  • Sky Addons For Elementor
Published: April 24, 2025

CVE-2025-46438

6.5
    Warmwhisky
  • Gtdb Guitar Tuners
Published: April 24, 2025

CVE-2025-46445

6.5
    Preya
  • External Markdown
Published: April 24, 2025

CVE-2025-46447

6.5
    Wpfable
  • Fable Extra
Published: April 24, 2025

CVE-2025-46453

6.5
    Creatorteam
  • Zoho Creator Forms
Published: April 24, 2025

CVE-2025-46461

6.5
    Relentless Apps
  • Rrssb
Published: April 24, 2025

CVE-2025-46467

6.5
    Rahendra Putra K
  • Raphicon
Published: April 24, 2025

CVE-2025-46471

6.5
    Gnanavelshenll
  • Wp Custom Post Popup
Published: April 24, 2025

CVE-2025-46472

6.5
    Webangon
  • The Pack Elementor Addons
Published: April 24, 2025

CVE-2025-46475

6.5
    Terrillthompson
  • Able Player
Published: April 24, 2025

CVE-2025-46476

6.5
    Nayon46
  • Awesome Wp Image Gallery
Published: April 24, 2025

CVE-2025-46479

6.5
    Devyncjohnson
  • Bbcode Deluxe
Published: April 24, 2025

CVE-2025-46480

6.5
    Padam Shankhadev
  • Nepali Post Date
Published: April 24, 2025

CVE-2025-46483

6.5
    Alex Moss Peadig
  • Google Plus1 Button
Published: April 24, 2025

CVE-2025-46484

6.5
    Wpbakery
  • Image Hover Effects
Published: April 24, 2025

CVE-2025-46491

6.5
    Matthew Muro
  • Multi-Column Taxonomy List
Published: April 24, 2025

CVE-2025-46495

6.5
    Tomontoast
  • Drop Caps
Published: April 24, 2025

CVE-2025-46496

6.5
    Oniswap
  • Mini Twitter Feed
Published: April 24, 2025

CVE-2025-46501

6.5
    Biancardi
  • Mixcloud Embed
Published: April 24, 2025

CVE-2025-46505

6.5
    Farinspace
  • Peekaboo
Published: April 24, 2025

CVE-2025-46509

6.5
    Andrey Mikhalchuk
  • 360 View
Published: April 24, 2025

CVE-2025-46532

6.5
    Haris Zulfiqar
  • Tooltip
Published: April 24, 2025

CVE-2025-46534

6.5
    Danielriera
  • Image Style Hover
Published: April 24, 2025

CVE-2025-46536

6.5
    Richardharrison
  • Carousel-Of-Post-Images
Published: April 24, 2025

CVE-2025-46538

6.5
    Webplanetsoft
  • Inline Text Popup
Published: April 24, 2025

CVE-2025-46540

6.5
    Chrismok
  • Gna Search Shortcode
Published: April 24, 2025

CVE-2025-46542

6.5
    Themexpert
  • Xpert Tab
Published: April 24, 2025

CVE-2024-30147

6.5
    Hcl
  • Leap
Published: April 24, 2025

CVE-2025-2543

6.4
    Wordpress
  • Advanced Accordion Gutenberg Block
Published: April 24, 2025

CVE-2025-2579

6.4
    Wordpress
  • Lottie Player
Published: April 24, 2025

CVE-2025-3832

6.4
    Fusedesk
  • Fusedesk
Published: April 24, 2025

CVE-2025-46511

6.4
    Derek Springer
  • Beerxml Shortcode
Published: April 24, 2025

CVE-2024-30113

6.3
    Hcl
  • Hcl Leap
Published: April 24, 2025

CVE-2025-46419

5.9
    Westermo
  • Weos
Published: April 24, 2025

CVE-2025-46261

5.9
    Craig Hewitt
  • Seriously Simple Podcasting
Published: April 24, 2025

CVE-2025-46451

5.9
    Syed Balkhi
  • Floating Social Bar
Published: April 24, 2025

CVE-2025-46459

5.9
    Ralf Hortt
  • Confirm User Registration
Published: April 24, 2025

CVE-2025-46469

5.9
    Benjamin Buddle
  • Send From
Published: April 24, 2025

CVE-2025-46477

5.9
    Carlo La Pera
  • Wp Customize Login Page
Published: April 24, 2025

CVE-2025-46517

5.9
    Wpdiscover
  • Blog Manager Wp
Published: April 24, 2025

CVE-2025-46521

5.9
    Silver Muru
  • Ws Force Login Page
Published: April 24, 2025

CVE-2025-46523

5.9
    Devignstudiosltd
  • Covid-19 Coronavirus Update Your Customers
Published: April 24, 2025

CVE-2025-46525

5.9
    Msmitley
  • Wp Cookie Consent
Published: April 24, 2025

CVE-2025-46529

5.9
    Stressfree
  • Business Contact Widget
Published: April 24, 2025

CVE-2025-46533

5.9
    Wpdrift
  • No Landing Pages And Domain Aliases For Wordpress
Published: April 24, 2025

CVE-2025-46541

5.9
    Elrata
  • Wp-Recaptcha-Bp
Published: April 24, 2025

CVE-2025-30409

5.5
    Acronis
  • Cyber Protect Cloud Agent
Published: April 24, 2025

CVE-2025-46498

5.4
    Nghialuu
  • Zalo Official Live Chat
Published: April 24, 2025

CVE-2024-13307

5.3
    Wordpress
  • Reales Wp
Published: April 24, 2025

CVE-2021-47664

5.3
    *
  • *
Published: April 24, 2025

CVE-2025-39390

5.3
    Magepeopleteam
  • Booking And Rental Manager
Published: April 24, 2025

CVE-2025-46485

5.3
    Carlo La Pera
  • Wp Customize Login Page
Published: April 24, 2025

CVE-2025-46489

5.3
    Vinodvaswani9
  • Bulk Assign Linked Products For Woocommerce
Published: April 24, 2025

CVE-2023-45720

5.3
    Hcl
  • Hcl Leap
Published: April 24, 2025

CVE-2025-46443

4.9
    Adam Pery
  • Animate
Published: April 24, 2025

CVE-2025-46503

4.9
    Josheli
  • Simple Google Photos Grid
Published: April 24, 2025

CVE-2025-46531

4.9
    Ankur Vishwakarma
  • Wp Avcl Automation Helper
Published: April 24, 2025

CVE-2025-1453

4.8
    Wordpress
  • Category Posts Widget
Published: April 24, 2025

CVE-2025-29568

4.8
    Code-Projects
  • Online Class And Exam Scheduling System
Published: April 24, 2025

CVE-2025-39404

4.7
    Heateor
  • Sassy Social Share
Published: April 24, 2025

CVE-2022-44759

4.6
    Hcl
  • Leap
Published: April 24, 2025

CVE-2022-44760

4.6
    Hcl
  • Hcl Leap
Published: April 24, 2025

CVE-2025-3435

4.4
    Wordpress
  • Mang Board
Published: April 24, 2025

CVE-2025-43861

4.4
    Mediawiki
  • Managewiki
Published: April 24, 2025

CVE-2025-27581

4.3
    Nih
  • Biomedical Research Informatics Computing System
Published: April 24, 2025

CVE-2024-12244

4.3
    Gitlab
  • Gitlab
Published: April 24, 2025

CVE-2025-1284

4.3
    Woocommerce
  • Automatic Order Printing
Published: April 24, 2025

CVE-2025-39385

4.3
    Vw Themes
  • Sirat
Published: April 24, 2025

CVE-2025-46436

4.3
    Sebastian Echeverry
  • Scss-Library
Published: April 24, 2025

CVE-2025-46462

4.3
    Trân Minh-Quân
  • Wpmn
Published: April 24, 2025

CVE-2025-46470

4.3
    Peter Raschendorfer
  • Smart Hashtags
Published: April 24, 2025

CVE-2025-46513

4.3
    Codebangers
  • All In One Time Clock Lite
Published: April 24, 2025

CVE-2025-46519

4.3
    Michael Revellin Clerc
  • Media Library Downloader
Published: April 24, 2025

CVE-2025-3793

4.2
    Buddypress
  • Force Password Change
    Wordpress
Published: April 24, 2025

CVE-2024-30148

4.1
    Hcl
  • Hcl Leap
Published: April 24, 2025

CVE-2024-30114

3.7
    Hcl
  • Hcl Leap
Published: April 24, 2025

CVE-2023-37516

3.2
    Hcl
  • Leap
Published: April 24, 2025

CVE-2024-30127

3.2
    Hcl
  • Leap
Published: April 24, 2025

CVE-2025-41423

3.1
    Mattermost
  • Mattermost
Published: April 24, 2025

CVE-2025-46374

None
    Fortinet
  • Fortinet
Published: April 24, 2025

CVE-2025-46375

None
    Fortinet
  • *
Published: April 24, 2025

CVE-2025-46376

None
    Fortinet
  • Fortinet
Published: April 24, 2025

CVE-2025-46377

None
    *
  • *
Published: April 24, 2025

CVE-2025-46378

None
    Fortinet
  • Fortinet
Published: April 24, 2025

CVE-2025-46379

None
    Fortinet
  • *
Published: April 24, 2025

CVE-2025-46380

None
    Fortinet
  • *
Published: April 24, 2025

CVE-2025-46381

None
    Fortinet
  • Fortinet
Published: April 24, 2025

CVE-2025-25777

None
    Codeastro
  • Bus Ticket Booking System
Published: April 24, 2025

CVE-2025-29529

None
    Itc Systems
  • Multiplan
  • Matrix Onecard
Published: April 24, 2025
Click here to see more Vulnerabilities