Tag: 2025-04-29

6 Attack Reports | 101 Vulnerabilities

Attack reports

Uncovering Actor TTP Patterns and the Role of DNS in Investment Scams

This report analyzes common techniques, tactics, and procedures (TTPs) used by several investment scam actors who lure victims with fake platforms, including crypto exchanges. Key TTPs include registering large numbers of domains algorithmically, embedding similar web forms to collect user data, hi…
social engineering
cryptocurrency
facebook ads
cloaking
2025-04-29
rdga
dns abuse
web forms
tds
investment scams
2025-05-06
dns exploitation
registered domain generation algorithms
Published: May 6, 2025
Downloadable IOCs: 87

MintsLoader Malware Analysis: Multi-Stage Loader Used in Cyber Attacks

MintsLoader, a malicious loader first observed in 2024, is employed in phishing and drive-by download campaigns to deploy payloads like GhostWeaver, StealC, and modified BOINC clients. It uses obfuscated JavaScript and PowerShell scripts in a multi-stage infection chain, featuring sandbox evasion t…
phishing
socgholish
asyncrat
stealc
drive-by download
boinc
mintsloader
tag-124
ghostweaver
2025-04-29
multi-stage loader
Published: April 29, 2025
Downloadable IOCs: 0

Outlaw cybergang attacking targets worldwide

A recent incident response case in Brazil revealed a Perl-based crypto mining botnet called Outlaw, also known as Dota, targeting Linux environments. The threat actor exploits weak SSH credentials, downloads malicious scripts, and deploys an XMRig miner for Monero cryptocurrency. The botnet include…
linux
backdoor
evasion
xmrig
persistence
botnet
irc
ssh
crypto mining
outlaw
2025-04-29
dota
Published: April 29, 2025
Downloadable IOCs: 0

Gremlin Stealer: New Stealer on Sale in Underground Forum

A new information-stealing malware called Gremlin Stealer, written in C#, has been identified by researchers. Advertised on Telegram since March 2025, it targets a wide range of data including browser information, crypto wallets, FTP and VPN credentials. The malware exfiltrates stolen data to a web…
infostealer
cryptocurrency
vpn
data exfiltration
telegram
browser
2025-04-29
c#
ftp
gremlin stealer
Published: April 29, 2025
Downloadable IOCs: 2

Security Brief: French BEC Threat Actor Targets Property Payments

A new financially motivated business email compromise (BEC) threat actor, TA2900, has been identified targeting individuals in France and occasionally Canada. The actor sends French language emails using rental payment themes, claiming that rental installments have not been received and instructing…
social engineering
financial fraud
email compromise
bec
2025-04-29
france
iban
rental payments
property management
Published: April 29, 2025
Downloadable IOCs: 3

FormBook Malware Distributed via Horus Protector Using Word Docs

Forcepoint X-Labs researchers have identified a phishing campaign where attackers distribute the FormBook information-stealing malware using Horus Protector, a malware distribution service designed to evade detection. The campaign employs malicious Microsoft Word documents that exploit the CVE-2017…
phishing
formbook
CVE-2017-11882
2025-04-29
maldoc
horus
Published: April 29, 2025
Downloadable IOCs: 101
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-46348

10.0
    Yeswiki
  • Yeswiki
Published: April 29, 2025

CVE-2025-24252

9.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: April 29, 2025

CVE-2025-0520

9.4
    Showdoc
  • Showdoc
Published: April 29, 2025

CVE-2025-40617

9.3
    Bookgy
  • Bookgy
Published: April 29, 2025

CVE-2025-40618

9.3
    Bookgy
  • Bookgy
Published: April 29, 2025

CVE-2025-40619

9.3
    Bookgy
  • Bookgy
Published: April 29, 2025

CVE-2025-2817

8.8
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-3501

8.2
    Keycloak
  • Keycloak
Published: April 29, 2025

CVE-2025-23180

8.0
    *
  • *
Published: April 29, 2025

CVE-2025-23181

8.0
    *
  • *
Published: April 29, 2025

CVE-2025-24206

7.7
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: April 29, 2025

CVE-2025-23177

7.6
    *
  • *
Published: April 29, 2025

CVE-2025-23178

7.6
    *
  • *
Published: April 29, 2025

CVE-2025-46349

7.6
    Yeswiki
  • Yeswiki
Published: April 29, 2025

CVE-2025-30194

7.5
    Open-Xchange
  • Dnsdist
Published: April 29, 2025

CVE-2025-46338

6.9
    Audiobookshelf
  • Audiobookshelf
Published: April 29, 2025

CVE-2025-4058

6.9
    Projectworlds
  • Online Examination System
Published: April 29, 2025

CVE-2025-4060

6.9
    Phpgurukul
  • Notice Board System
Published: April 29, 2025

CVE-2025-4064

6.9
    Scriptandtools
  • Online-Travling-System
Published: April 29, 2025

CVE-2025-4065

6.9
    Scriptandtools
  • Online-Travling-System
Published: April 29, 2025

CVE-2025-4066

6.9
    Scriptandtools
  • Online-Travling-System
Published: April 29, 2025

CVE-2025-4067

6.9
    Scriptandtools
  • Online-Travling-System
Published: April 29, 2025

CVE-2025-4070

6.9
    Phpgurukul
  • Rail Pass Management System
Published: April 29, 2025

CVE-2025-4071

6.9
    Phpgurukul
  • Covid19 Testing Management System
Published: April 29, 2025

CVE-2025-4073

6.9
    Phpgurukul
  • Student Record System
Published: April 29, 2025

CVE-2025-4074

6.9
    Phpgurukul
  • Curfew E Pass Management System
Published: April 29, 2025

CVE-2025-4079

6.9
    Pcman
  • Ftp Server
Published: April 29, 2025

CVE-2025-4086

6.5
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-4087

6.5
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
  • Thunderbird Esr
Published: April 29, 2025

CVE-2025-4088

6.5
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-4090

6.5
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-4091

6.5
    Mozilla
  • Firefox
  • Thunderbird
  • Firefox Esr
  • Thunderbird Esr
Published: April 29, 2025

CVE-2025-4092

6.5
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-4093

6.5
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-2893

6.4
    Wordpress
  • Gutenverse
Published: April 29, 2025

CVE-2025-46346

6.3
    Yeswiki
  • Yeswiki
Published: April 29, 2025

CVE-2025-24271

6.2
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: April 29, 2025

CVE-2025-1551

6.1
    Ibm
  • Operational Decision Manager
Published: April 29, 2025

CVE-2025-46347

5.8
    Yeswiki
  • Yeswiki
Published: April 29, 2025

CVE-2025-24179

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: April 29, 2025

CVE-2025-24270

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: April 29, 2025

CVE-2025-30445

5.5
    Apple
  • Macos Sequoia
  • Tvos
  • Macos Ventura
  • Ipados
  • Macos Sonoma
  • Ios
  • Visionos
Published: April 29, 2025

CVE-2025-31197

5.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: April 29, 2025

CVE-2025-31202

5.5
    Apple
  • Ios
  • Ipados
  • Macos Sequoia
  • Tvos
  • Visionos
Published: April 29, 2025

CVE-2025-31203

5.5
    Apple
  • Macos Sequoia
  • Tvos
  • Ipad Os
  • Macos Sonoma
  • Ios
  • Watchos
  • Visionos
Published: April 29, 2025

CVE-2025-23179

5.5
    *
  • *
Published: April 29, 2025

CVE-2025-3910

5.4
    Redhat
  • Keycloak
Published: April 29, 2025

CVE-2025-3891

5.3
    Apache
  • Httpd
  • Mod Auth Openidc
Published: April 29, 2025

CVE-2025-3929

5.3
    Eset
  • Mdaemon Email Server
Published: April 29, 2025

CVE-2025-4072

5.3
    Phpgurukul
  • Online Nurse Hiring System
Published: April 29, 2025

CVE-2025-4075

5.3
    Vmsman
  • Vmsman
Published: April 29, 2025

CVE-2025-4076

5.3
    Lb-Link
  • Bl-Ac3600
Published: April 29, 2025

CVE-2025-4078

5.3
    Wangshen
  • Secgate
Published: April 29, 2025

CVE-2025-4080

5.3
    Phpgurukul
  • Online Nurse Hiring System
Published: April 29, 2025

CVE-2025-3911

5.2
    Docker
  • Docker Desktop
Published: April 29, 2025

CVE-2025-24251

5.1
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: April 29, 2025

CVE-2025-4089

5.1
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-40615

5.1
    Bookgy
  • Bookgy
Published: April 29, 2025

CVE-2025-40616

5.1
    Bookgy
  • Bookgy
Published: April 29, 2025

CVE-2025-46343

5.0
    N8n
  • N8n
Published: April 29, 2025

CVE-2025-46344

4.9
    Auth0
  • Auth0 Next.Js Sdk
Published: April 29, 2025

CVE-2025-4059

4.8
    Code-Projects
  • Prison Management System
Published: April 29, 2025

CVE-2025-4061

4.8
    Code-Projects
  • Clothing Store Management System
Published: April 29, 2025

CVE-2025-4062

4.8
    Code-Projects
  • Theater Seat Booking System
Published: April 29, 2025

CVE-2025-4063

4.8
    Code-Projects
  • Student Information Management System
Published: April 29, 2025

CVE-2025-4068

4.8
    Code-Projects
  • Simple Movie Ticket Booking System
Published: April 29, 2025

CVE-2025-4069

4.8
    Code-Projects
  • Product Management System
Published: April 29, 2025

CVE-2025-0716

4.8
    Angularjs
  • Angularjs
Published: April 29, 2025

CVE-2025-4077

4.8
    Code-Projects
  • School Billing System
Published: April 29, 2025

CVE-2025-3452

4.3
    Securess
  • Securess Free
Published: April 29, 2025

CVE-2025-1194

4.3
    Huggingface
  • Transformers
Published: April 29, 2025

CVE-2025-4035

4.3
    Libsoup
  • Libsoup
Published: April 29, 2025

CVE-2025-4095

4.3
    Docker
  • Docker Desktop
Published: April 29, 2025

CVE-2025-46549

4.3
    Yeswiki
  • Yeswiki
Published: April 29, 2025

CVE-2025-46550

4.3
    Yeswiki
  • Yeswiki
Published: April 29, 2025

CVE-2024-12273

3.5
    Codepeople
  • Calculated Fields Form
Published: April 29, 2025

CVE-2025-46350

3.5
    Yeswiki
  • Yeswiki
Published: April 29, 2025

CVE-2025-46329

3.3
    Snowflake
  • Libsnowflakeclient
Published: April 29, 2025

CVE-2025-46330

3.3
    Snowflake
  • Libsnowflakeclient
Published: April 29, 2025

CVE-2025-3301

1.0
    Silabs
  • Series 2
Published: April 29, 2025

CVE-2017-7740

None
    Fortinet
  • Fortinet
Published: April 29, 2025

CVE-2018-13372

None
    Fortinet
  • Fortinet
Published: April 29, 2025

CVE-2025-46753

None
    Fortinet
  • *
Published: April 29, 2025

CVE-2025-46754

None
    Fortinet
  • Forti
Published: April 29, 2025

CVE-2025-46755

None
    Fortinet
  • Fortinet
Published: April 29, 2025

CVE-2025-46756

None
    Fortinet
  • *
Published: April 29, 2025

CVE-2025-46757

None
    Fortinet
  • *
Published: April 29, 2025

CVE-2025-46758

None
    Fortinet
  • *
Published: April 29, 2025

CVE-2025-46759

None
    Fortinet
  • Fortinet
Published: April 29, 2025

CVE-2025-46760

None
    Fortinet
  • Fortinet
Published: April 29, 2025

CVE-2025-46761

None
    Fortinet
  • Fortinet
Published: April 29, 2025

CVE-2024-58099

None
    Linux
  • Kernel
Published: April 29, 2025

CVE-2025-4082

None
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
  • Thunderbird Esr
Published: April 29, 2025

CVE-2025-4083

None
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
  • Thunderbird Esr
Published: April 29, 2025

CVE-2025-4084

None
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-4085

None
    Mozilla
  • Firefox
  • Thunderbird
Published: April 29, 2025

CVE-2025-25403

None
    Slims
  • Senayan Library Management Systems
Published: April 29, 2025

CVE-2025-25962

None
    Coresmartcontracts
  • Uniswap
Published: April 29, 2025

CVE-2025-32354

None
    Zimbra
  • Zimbra Collaboration
Published: April 29, 2025

CVE-2025-45956

None
    Sourcecodester
  • Computer Laboratory Management System
Published: April 29, 2025

CVE-2024-57698

None
    Modernwms
  • Modernwms
Published: April 29, 2025
Click here to see more Vulnerabilities