Tag: 2025-04-26

5 Attack Reports | 22 Vulnerabilities

Attack reports

HANNIBAL Stealer: A Rebranded Threat Born from Sharp and TX Lineage

The Hannibal Stealer is a sophisticated information stealer targeting Chromium and Gecko-based browsers, developed in C# and operating on the .NET Framework. It bypasses Chrome Cookie V20 protection and steals data from cryptocurrency wallets, FTP clients, VPNs, and messaging apps. The malware perf…
cryptocurrency
sharp stealer
data exfiltration
information stealer
browser data theft
geofencing
2025-04-26
hannibal stealer
tx stealer
vpn credentials
c2 panel
telegram channels
2025-04-30
rebranded malware
vpn credential theft
Published: April 30, 2025
Downloadable IOCs: 4

The Return of Pharmacy-Themed Spam

Pharmaceutical-themed spam campaigns continue to target individuals and organizations, particularly in the healthcare and pharmaceutical sectors. Recent observations reveal a bulk spam campaign using spoofed identities and compromised infrastructure to send deceptive emails. The attackers employ ta…
phishing
spam
social-engineering
domain-spoofing
2025-04-26
pharmacy
compromised-servers
email-security
fraudulent-websites
dkim
Published: April 26, 2025
Downloadable IOCs: 0

Steganography Analysis With pngdump.py

This article discusses the analysis of a PNG file containing hidden malicious content using the pngdump.py tool. The image, 31744 pixels wide and 1 pixel high, was found to have a PE file embedded in its pixel data. The author demonstrates how to extract the hidden file using various Python tools a…
malware
python
steganography
2025-04-26
pe file
data extraction
file analysis
png
pngdump
Published: April 26, 2025
Downloadable IOCs: 0

Fake GIF Leveraged in Multi-Stage Reverse-Proxy Card Skimming Attack

A sophisticated multi-stage carding attack on a Magento eCommerce website has been uncovered. The malware used a fake gif image file, local browser sessionStorage data, and a malicious reverse-proxy server to steal credit card data, login details, cookies, and other sensitive information. The attac…
magento
multi-stage attack
ecommerce
javascript injection
2025-04-26
reverse-proxy
sessionstorage
card skimming
Published: April 26, 2025
Downloadable IOCs: 0

The Persistent Threat of Salt Typhoon: Tracking Exposures of Potentially Targeted Devices

Salt Typhoon, a Chinese state-sponsored threat actor, has been targeting major telecommunications providers worldwide by exploiting vulnerabilities in network devices. This analysis tracks global exposures of internet-facing devices associated with Salt Typhoon activity over six months, including S…
network devices
CVE-2024-21887
CVE-2023-46805
shadowpad
telecommunications
vulnerability exploitation
CVE-2023-48788
CVE-2022-3236
masol rat
ivanti connect secure
2025-04-26
chinese state-sponsored
CVE-2023-20198
sophos firewall
CVE-2023-20273
cisco ios xe
exposure tracking
fortinet forticlient ems
Published: April 26, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-13808

8.8
    Xpro
  • Elementor Addons Pro
Published: April 26, 2025

CVE-2025-3906

8.8
    Eduzz
  • Integraçao Entre Eduzz E Woocommerce
Published: April 26, 2025

CVE-2025-3914

8.8
    Wordpress
  • Aeropage Sync For Airtable
Published: April 26, 2025

CVE-2025-2851

8.6
    Gl.Inet
  • Gl-A1300 Slate Plus
  • Gl-Ar300m16 Shadow
  • Gl-Ar300m Shadow
  • Gl-Ar750 Creta
  • Gl-Ar750s-Ext Slate
  • Gl-Ax1800 Flint
  • Gl-Axt1800 Slate Ax
  • Gl-B1300 Convexa-B
  • Gl-B3000 Marble
  • Gl-Be3600 Slate 7
  • Gl-E750
  • Gl-E750v2 Mudi
  • Gl-Mt300n-V2 Mango
  • Gl-Mt1300 Beryl
  • Gl-Mt2500 Brume 2
  • Gl-Mt3000 Beryl Ax
  • Gl-Mt6000 Flint 2
  • Gl-Sft1200 Opal
  • Gl-X300b Collie
  • Gl-X750 Spitz
  • Gl-X3000 Spitz Ax
  • Gl-Xe300 Puli
  • Gl-Xe3000 Puli Ax
Published: April 26, 2025

CVE-2025-2105

8.1
    Wordpress
  • Jupiter X Core
Published: April 26, 2025

CVE-2025-2101

8.1
    Wordpress
  • Edumall
Published: April 26, 2025

CVE-2025-2801

7.3
    Wordpress
  • Smart Form Plugin
Published: April 26, 2025

CVE-2025-3491

7.2
    Wordpress
  • Add Custom Page Template Plugin
Published: April 26, 2025

CVE-2025-2811

6.9
    Gl.Inet
  • Gl-A1300 Slate Plus
  • Gl-Ar300m16 Shadow
  • Gl-Ar300m Shadow
  • Gl-Ar750 Creta
  • Gl-Ar750s-Ext Slate
  • Gl-Ax1800 Flint
  • Gl-Axt1800 Slate Ax
  • Gl-B1300 Convexa-B
  • Gl-B3000 Marble
  • Gl-Be3600 Slate 7
  • Gl-E750
  • Gl-E750v2 Mudi
  • Gl-Mt300n-V2 Mango
  • Gl-Mt1300 Beryl
  • Gl-Mt2500 Brume 2
  • Gl-Mt3000 Beryl Ax
  • Gl-Mt6000 Flint 2
  • Gl-Sft1200 Opal
  • Gl-X300b Collie
  • Gl-X750 Spitz
  • Gl-X3000 Spitz Ax
  • Gl-Xe300 Puli
  • Gl-Xe3000 Puli Ax
Published: April 26, 2025

CVE-2024-13812

6.5
    Wordpress
  • Anps Theme Plugin
Published: April 26, 2025

CVE-2025-1458

6.4
    Wordpress
  • Element Pack Addons
Published: April 26, 2025

CVE-2024-53636

6.4
    Serosoft
  • Academia Student Information System
  • Eagler
Published: April 26, 2025

CVE-2025-3954

6.3
    Churchcrm
  • Churchcrm
Published: April 26, 2025

CVE-2025-46652

6.1
    Izarc
  • Izarc
Published: April 26, 2025

CVE-2025-2850

5.1
    Gl.Inet
  • Gl-A1300 Slate Plus
  • Gl-Ar300m16 Shadow
  • Gl-Ar300m Shadow
  • Gl-Ar750 Creta
  • Gl-Ar750s-Ext Slate
  • Gl-Ax1800 Flint
  • Gl-Axt1800 Slate Ax
  • Gl-B1300 Convexa-B
  • Gl-B3000 Marble
  • Gl-Be3600 Slate 7
  • Gl-E750
  • Gl-E750v2 Mudi
  • Gl-Mt300n-V2 Mango
  • Gl-Mt1300 Beryl
  • Gl-Mt2500 Brume 2
  • Gl-Mt3000 Beryl Ax
  • Gl-Mt6000 Flint 2
  • Gl-Sft1200 Opal
  • Gl-X300b Collie
  • Gl-X750 Spitz
  • Gl-X3000 Spitz Ax
  • Gl-Xe300 Puli
  • Gl-Xe3000 Puli Ax
Published: April 26, 2025

CVE-2025-46654

4.9
    Codi
  • Codimd
Published: April 26, 2025

CVE-2025-46655

4.9
    Codimd
  • Codimd
Published: April 26, 2025

CVE-2025-46646

4.5
    Artifex
  • Ghostscript
Published: April 26, 2025

CVE-2025-3915

4.3
    Aeropage
  • Aeropage Sync For Airtable
Published: April 26, 2025

CVE-2025-46653

3.1
    Formidable
  • Formidable
Published: April 26, 2025

CVE-2025-46656

2.9
    Python-Markdownify
  • Markdownify
Published: April 26, 2025

CVE-2025-2907

None
    Wordpress
  • Order Delivery Date Plugin
Published: April 26, 2025
Click here to see more Vulnerabilities