Tag: 2025-04-25

1 Attack Reports | 81 Vulnerabilities

Attack reports

A new version of Triada spreads embedded in the firmware of Android devices

Kaspersky researchers have discovered a new version of the Triada Trojan being distributed through infected Android device firmware. The malware is embedded into system files before devices are sold, making it nearly impossible to remove. It infects the Zygote process to compromise all apps on the …
android
cryptocurrency
trojan
credential theft
triada
sms interception
firmware
reverse proxy
2025-04-25
Published: April 25, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-32432

10.0
    Craftcms
  • Craft
Published: April 25, 2025

CVE-2025-46616

9.9
    Quantum
  • Stornext
  • Stornext Ryo
  • Stornext Xcellis Workflow Director
  • Activescale
Published: April 25, 2025

CVE-2025-2470

9.8
    Wordpress
  • Service Finder
Published: April 25, 2025

CVE-2025-25775

9.8
    Codeastro
  • Bus Ticket Booking System
Published: April 25, 2025

CVE-2025-2238

8.8
    Wordpress
  • Vikinger
Published: April 25, 2025

CVE-2025-1279

8.8
    Wordpress
  • Bm Content Builder
Published: April 25, 2025

CVE-2025-3638

8.8
    Moodle
  • Moodle
  • Brickfield
Published: April 25, 2025

CVE-2025-3641

8.8
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-3642

8.8
    Moodle
  • Moodle
  • Equelle
Published: April 25, 2025

CVE-2025-3606

8.7
    Vestel
  • Ac Charger
Published: April 25, 2025

CVE-2025-3928

8.7
    Commvault
  • Web Server
Published: April 25, 2025

CVE-2025-2185

8.5
    Albedo
  • Net.Time
Published: April 25, 2025

CVE-2025-43865

8.2
    React
  • React Router
Published: April 25, 2025

CVE-2024-11917

8.1
    Wordpress
  • Jobsearch Wp Job Board Plugin
Published: April 25, 2025

CVE-2025-3935

8.1
    Screenconnect
  • Screenconnect
Published: April 25, 2025

CVE-2024-6198

7.7
    Lighttpd
  • Lighttpd
Published: April 25, 2025

CVE-2024-6199

7.7
    Onekey
  • Modem
Published: April 25, 2025

CVE-2025-43862

7.6
    Dify
  • Dify
Published: April 25, 2025

CVE-2025-43864

7.5
    React-Router
  • React Router
Published: April 25, 2025

CVE-2025-46613

7.5
    Openplc
  • Openplc
Published: April 25, 2025

CVE-2025-1565

7.5
    Wordpress
  • Mayosis Core
Published: April 25, 2025

CVE-2025-32044

7.5
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-32983

7.5
    Netscout
  • Ngeniusone
Published: April 25, 2025

CVE-2025-46333

7.3
    Z2d
  • Z2d
Published: April 25, 2025

CVE-2025-46617

7.2
    Quantum
  • Stornext Ryo
  • Stornext Xcellis Workflow Director
  • Activescale Cold Storage
Published: April 25, 2025

CVE-2025-3625

7.1
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-28128

7.0
    Mytel
  • Online Account System
Published: April 25, 2025

CVE-2025-46599

6.8
    Cncf
  • K3s
Published: April 25, 2025

CVE-2025-3775

6.5
    Wordpress
  • Shoplentor
Published: April 25, 2025

CVE-2025-46482

6.5
    Mythemeshop
  • Wp Quiz
Published: April 25, 2025

CVE-2025-28354

6.5
    Entrust
  • Printer Manager
Published: April 25, 2025

CVE-2025-28076

6.5
    Easyvirt
  • Dcscope
  • Co2scope
Published: April 25, 2025

CVE-2024-30152

6.5
    Hcl
  • Hcl Sx
Published: April 25, 2025

CVE-2025-46544

6.4
    Sherpa
  • Sherpa Orchestrator
Published: April 25, 2025

CVE-2025-46595

6.4
    Backdrop
  • Flag
Published: April 25, 2025

CVE-2025-3752

6.4
    Able Player
  • Able Player
Published: April 25, 2025

CVE-2025-0671

6.1
    Icegram
  • Icegram Express
Published: April 25, 2025

CVE-2025-3866

6.1
    Wordpress
  • Google Plus One
Published: April 25, 2025

CVE-2025-3867

6.1
    Wordpress
  • Ajax Comment Form Cst
Published: April 25, 2025

CVE-2025-3868

6.1
    Wordpress
  • Admin-Bar Favorites
Published: April 25, 2025

CVE-2025-3870

6.1
    Wordpress
  • 1 Decembrie 1918 Plugin
Published: April 25, 2025

CVE-2025-32984

6.1
    Netscout
  • Ngeniusone
Published: April 25, 2025

CVE-2025-3511

5.9
    Mitsubishi Electric
  • Cc-Link Ie Tsn Remote Io Module
  • Cc-Link Ie Tsn Analog Digital Converter Module
  • Cc-Link Ie Tsn Digital Analog Converter Module
  • Cc-Link Ie Tsn Fpga Module
  • Cc-Link Ie Tsn Remote Station Communication Lsi Cp620
Published: April 25, 2025

CVE-2025-2986

5.5
    Ibm
  • Maximo Asset Management
Published: April 25, 2025

CVE-2024-56156

5.5
    Halo
  • Halo
Published: April 25, 2025

CVE-2025-46547

5.4
    Sherpa
  • Orchestrator
Published: April 25, 2025

CVE-2025-3861

5.4
    Wordpress
  • Prevent Direct Access
Published: April 25, 2025

CVE-2025-46535

5.4
    Alphaefficiencyteam
  • Custom Login And Registration
Published: April 25, 2025

CVE-2025-3643

5.4
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-43016

5.4
    Jetbrains
  • Rider
Published: April 25, 2025

CVE-2025-3923

5.3
    Wordpress
  • Prevent Direct Access Protect Wordpress Files
Published: April 25, 2025

CVE-2025-3743

5.3
    Woocommerce
  • Upsell Funnel Builder
Published: April 25, 2025

CVE-2025-3912

5.3
    Wordpress
  • Ws Form Lite
Published: April 25, 2025

CVE-2025-32045

5.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-2068

5.1
    Lenovo
  • Filez Client
Published: April 25, 2025

CVE-2025-2069

5.1
    Filez
  • Filez Client
Published: April 25, 2025

CVE-2025-2070

5.1
    Lenovo
  • Filez
Published: April 25, 2025

CVE-2025-2580

4.9
    Bit Form
  • Contact Form
Published: April 25, 2025

CVE-2025-46433

4.9
    Jetbrains
  • Teamcity
Published: April 25, 2025

CVE-2025-46545

4.4
    Sherpa
  • Sherpa Orchestrator
Published: April 25, 2025

CVE-2025-3634

4.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-3627

4.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-3628

4.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-3636

4.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-3640

4.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-3644

4.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-3645

4.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-3647

4.3
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-46432

4.3
    Jetbrains
  • Teamcity
Published: April 25, 2025

CVE-2025-46546

3.5
    Sherpa
  • Sherpa Orchestrator
Published: April 25, 2025

CVE-2025-3635

3.5
    Moodle
  • Moodle
Published: April 25, 2025

CVE-2025-46618

3.5
    Jetbrains
  • Teamcity
Published: April 25, 2025

CVE-2025-3637

3.1
    Moodle
  • Mod Data
Published: April 25, 2025

CVE-2024-57375

2.4
    Andamiro
  • Pump It Up
Published: April 25, 2025

CVE-2021-32601

None
    Fortinet
  • Fortinet
Published: April 25, 2025

CVE-2025-32979

None
    Netscout
  • Ngeniusone
Published: April 25, 2025

CVE-2025-32980

None
    Netscout
  • Ngeniusone
Published: April 25, 2025

CVE-2025-32981

None
    Netscout
  • Ngeniusone
Published: April 25, 2025

CVE-2025-32982

None
    Netscout
  • Ngeniusone
Published: April 25, 2025

CVE-2025-32985

None
    Netscout
  • Ngeniusone
Published: April 25, 2025

CVE-2025-32986

None
    Netscout
  • Ngeniusone
Published: April 25, 2025
Click here to see more Vulnerabilities