Tag: 2025-04-30

5 Attack Reports | 117 Vulnerabilities

Attack reports

TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks

TheWizards, a China-aligned threat actor, employs Spellbinder, a lateral movement tool that enables adversary-in-the-middle attacks through IPv6 SLAAC spoofing. This technique allows the group to intercept network traffic and redirect legitimate Chinese software updates to malicious servers. The at…
china
lateral movement
adversary-in-the-middle
2025-04-30
software update hijacking
wizardnet
spellbinder
slaac spoofing
2025-05-09
darknights
Published: May 9, 2025
Downloadable IOCs: 8

Advisory: Pahalgam Attack themed decoys used by APT36 to target the Indian Government

A Pakistan-linked APT group, Transparent Tribe (APT36), is targeting Indian Government and Defense personnel using 'Pahalgam Terror Attack' themed documents. The campaign involves credential phishing and deployment of malicious payloads, with fake domains impersonating Jammu & Kashmir Police and In…
phishing
crimson rat
geopolitical
2025-04-30
pahalgam attack
Published: April 30, 2025
Downloadable IOCs: 29

Threat Actors are Targeting US Tax-Session with new Tactics of Stealerium-infostealer

Cybercriminals are exploiting the US tax season to deploy Stealerium malware, targeting citizens through sophisticated phishing campaigns. The attack utilizes deceptive email attachments with malicious LNK files, leading to the execution of PowerShell scripts and the download of a PyInstaller-packa…
powershell
anti-analysis
information stealing
process injection
2025-04-30
tax-season phishing
stealerium
Published: April 30, 2025
Downloadable IOCs: 0

HANNIBAL Stealer: A Rebranded Threat Born from Sharp and TX Lineage

The Hannibal Stealer is a sophisticated information stealer targeting Chromium and Gecko-based browsers, developed in C# and operating on the .NET Framework. It bypasses Chrome Cookie V20 protection and steals data from cryptocurrency wallets, FTP clients, VPNs, and messaging apps. The malware perf…
cryptocurrency
sharp stealer
data exfiltration
information stealer
browser data theft
geofencing
2025-04-26
hannibal stealer
tx stealer
vpn credentials
c2 panel
telegram channels
2025-04-30
rebranded malware
vpn credential theft
Published: April 30, 2025
Downloadable IOCs: 4

Pentagon Stealer: Go and Python Malware Targeting Crypto

Pentagon Stealer is an evolving malware threat that exists in both Python and Golang versions. It primarily targets browser credentials, cookies, crypto wallet data, and messaging app tokens. The malware exploits browser debug modes to bypass encryption and injects into crypto wallets to steal sens…
python
cryptocurrency
data theft
stealer
purecrypter
go
blx stealer
vilsa stealer
2025-04-30
wallet injection
1312 stealer
browser exploitation
pentagon stealer
acab stealer
Published: April 30, 2025
Downloadable IOCs: 19
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-32444

10.0
    Vllm
  • Vllm
Published: April 30, 2025

CVE-2025-30390

9.9
    Microsoft
  • Azure
Published: April 30, 2025

CVE-2025-30392

9.8
    Microsoft
  • Azure Bot Framework Sdk
Published: April 30, 2025

CVE-2025-32973

9.0
    Xwiki
  • Xwiki
Published: April 30, 2025

CVE-2025-32974

9.0
    Xwiki
  • Xwiki
Published: April 30, 2025

CVE-2025-46558

9.0
    Xwiki
  • Syntax Markdown
Published: April 30, 2025

CVE-2025-24351

8.8
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-27134

8.8
    Joplin
  • Joplin
  • Joplin Server
Published: April 30, 2025

CVE-2025-4114

8.7
    Netgear
  • Jwnr2000v2
Published: April 30, 2025

CVE-2025-4115

8.7
    Netgear
  • Jwnr2000v2
Published: April 30, 2025

CVE-2025-4116

8.7
    Netgear
  • Jwnr2000v2
Published: April 30, 2025

CVE-2025-4120

8.7
    Netgear
  • Jwnr2000v2
Published: April 30, 2025

CVE-2025-30389

8.7
    Microsoft
  • Azure Bot Framework Sdk
Published: April 30, 2025

CVE-2025-27611

8.7
    Base-X
  • Base-X
Published: April 30, 2025

CVE-2025-4139

8.7
    Netgear
  • Ex6120
Published: April 30, 2025

CVE-2025-4140

8.7
    Netgear
  • Ex6120
Published: April 30, 2025

CVE-2025-4141

8.7
    Netgear
  • Ex6200
Published: April 30, 2025

CVE-2025-3394

8.5
    Abb
  • Automation Builder
Published: April 30, 2025

CVE-2025-46342

8.5
    Kyverno
  • Kyverno
Published: April 30, 2025

CVE-2025-21416

8.5
    Microsoft
  • Azure Virtual Desktop
Published: April 30, 2025

CVE-2024-9876

8.5
    Abb
  • Anc
  • Anc-L
  • Anc-Mini
Published: April 30, 2025

CVE-2025-3395

8.4
    Abb
  • Automation Builder
Published: April 30, 2025

CVE-2025-46557

8.4
    Xwiki
  • Xwiki
Published: April 30, 2025

CVE-2025-32777

8.2
    Volcano
  • Volcano
Published: April 30, 2025

CVE-2025-30391

8.1
    Microsoft
  • Dynamics
Published: April 30, 2025

CVE-2025-22882

7.8
    Delta Electronics
  • Ispsoft
Published: April 30, 2025

CVE-2025-22883

7.8
    Delta Electronics
  • Ispsoft
Published: April 30, 2025

CVE-2025-22884

7.8
    Delta
  • Ispsoft
Published: April 30, 2025

CVE-2025-4124

7.8
    Delta Electronics
  • Ispsoft
Published: April 30, 2025

CVE-2025-4125

7.8
    Delta Electronics
  • Ispsoft
Published: April 30, 2025

CVE-2024-13943

7.8
    Tesla
  • Model S
Published: April 30, 2025

CVE-2024-6031

7.8
    Tesla
  • Model S
Published: April 30, 2025

CVE-2024-6032

7.8
    Tesla
  • Model S
Published: April 30, 2025

CVE-2025-30202

7.5
    Vllm
  • Vllm
Published: April 30, 2025

CVE-2025-24346

7.5
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-27409

7.5
    Joplin
  • Joplin
Published: April 30, 2025

CVE-2025-33074

7.5
    Microsoft
  • Azure Functions
Published: April 30, 2025

CVE-2025-2082

7.5
    Tesla
  • Model 3
Published: April 30, 2025

CVE-2025-45020

7.2
    Phpgurukul
  • Park Ticketing Management System
Published: April 30, 2025

CVE-2025-24338

7.1
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-24349

7.1
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-24350

7.1
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2023-37535

7.1
    Hcl
  • Hcl Domino Volt
  • Hcl Domino Leap
Published: April 30, 2025

CVE-2024-6030

7.0
    Tesla
  • Model S
Published: April 30, 2025

CVE-2025-4108

6.9
    Phpgurukul
  • Student Record System
Published: April 30, 2025

CVE-2025-4112

6.9
    Phpgurukul
  • Student Record System
Published: April 30, 2025

CVE-2025-4118

6.9
    Weitong
  • Mall
  • Product History Handler
Published: April 30, 2025

CVE-2025-4119

6.9
    Weitong
  • Mall
Published: April 30, 2025

CVE-2025-46560

6.5
    Vllm
  • Vllm
Published: April 30, 2025

CVE-2025-3953

6.5
    Wordpress
  • Wp Statistics
Published: April 30, 2025

CVE-2025-2890

6.5
    Tagdiv
  • Opt-In Builder
Published: April 30, 2025

CVE-2025-24340

6.5
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-24341

6.5
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-24347

6.5
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-27532

6.5
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-3599

6.5
    Symantec
  • Endpoint Protection
Published: April 30, 2025

CVE-2024-30145

6.5
    Hcl
  • Hcl Domino Volt
  • Hcl Domino Leap
Published: April 30, 2025

CVE-2025-24344

6.3
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-24345

6.3
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-24887

6.3
    Opencti
  • Opencti
Published: April 30, 2025

CVE-2024-30115

6.3
    Hcl
  • Hcl Leap
Published: April 30, 2025

CVE-2025-32970

6.1
    Xwiki
  • Xwiki
Published: April 30, 2025

CVE-2025-46331

5.8
    Openfga
  • Openfga
Published: April 30, 2025

CVE-2025-24091

5.5
    Apple
  • Ios
  • Ipados
Published: April 30, 2025

CVE-2025-24343

5.4
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-24348

5.4
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-4109

5.3
    Phpgurukul
  • Pre-School Enrollment System
Published: April 30, 2025

CVE-2025-4110

5.3
    Phpgurukul
  • Pre-School Enrollment System
Published: April 30, 2025

CVE-2025-4111

5.3
    Phpgurukul
  • Pre-School Enrollment System
Published: April 30, 2025

CVE-2025-4113

5.3
    Phpgurukul
  • Curfew E-Pass Management System
Published: April 30, 2025

CVE-2025-24342

5.3
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2025-45009

5.3
    Phpgurukul
  • Park Ticketing Management System
Published: April 30, 2025

CVE-2025-45010

5.3
    Phpgurukul
  • Park Ticketing Management System
Published: April 30, 2025

CVE-2025-45011

5.3
    Phpgurukul
  • Ticketing Management System
Published: April 30, 2025

CVE-2025-45021

5.3
    Phpgurukul
  • Directory Management System
Published: April 30, 2025

CVE-2025-4121

5.3
    Netgear
  • Jwnr2000v2
Published: April 30, 2025

CVE-2025-4122

5.3
    Netgear
  • Jw Nr2000v2
Published: April 30, 2025

CVE-2025-4135

5.3
    Netgear
  • Wg302v2
Published: April 30, 2025

CVE-2024-9877

5.3
    Abb
  • Anc
  • Anc-L
  • Anc-Mini
Published: April 30, 2025

CVE-2025-46554

5.3
    Xwiki
  • Xwiki
Published: April 30, 2025

CVE-2025-4136

5.3
    Weitong
  • Mall
Published: April 30, 2025

CVE-2023-45721

5.3
    Hcl
  • Hcl Leap
Published: April 30, 2025

CVE-2025-4117

5.1
    Netgear
  • Jwnr2000v2
Published: April 30, 2025

CVE-2025-24339

5.0
    Bosch
  • Ctrlx Os
Published: April 30, 2025

CVE-2024-6029

5.0
    Tesla
  • Iris Modem
Published: April 30, 2025

CVE-2025-3471

4.9
    Wordpress
  • Sureforms
Published: April 30, 2025

CVE-2025-45007

4.8
    Phpgurukul
  • Timetable Generator System
Published: April 30, 2025

CVE-2025-32376

4.8
    Discourse
  • Discourse
Published: April 30, 2025

CVE-2022-27562

4.6
    Hcl
  • Domino Volt
Published: April 30, 2025

CVE-2022-42449

4.6
    Hcl
  • Domino Volt
Published: April 30, 2025

CVE-2022-42450

4.6
    Hcl
  • Domino Volt
Published: April 30, 2025

CVE-2025-39413

4.3
    David Gwyer
  • Simple Sitemap
Published: April 30, 2025

CVE-2024-30146

4.1
    Hcl
  • Domino Leap
Published: April 30, 2025

CVE-2025-32971

3.8
    Xwiki
  • Xwiki
Published: April 30, 2025

CVE-2023-37517

3.2
    Hcl
  • Hcl Leap
Published: April 30, 2025

CVE-2025-32972

2.7
    Xwiki
  • Xwiki
Published: April 30, 2025

CVE-2024-47784

2.1
    Abb
  • Anc Software
Published: April 30, 2025

CVE-2025-46778

None
    Fortinet
  • *
Published: April 30, 2025

CVE-2025-46779

None
    Fortinet
  • *
Published: April 30, 2025

CVE-2025-46780

None
    Fortinet
  • Fortinet
Published: April 30, 2025

CVE-2025-46781

None
    Fortinet
  • Unknown
Published: April 30, 2025

CVE-2025-46782

None
    Fortinet
  • Fortinet
Published: April 30, 2025

CVE-2025-45015

None
    Phpgurukul
  • Park Ticketing Management System
Published: April 30, 2025

CVE-2025-45017

None
    Phpgurukul
  • Park Ticketing Management System
Published: April 30, 2025

CVE-2025-45018

None
    Phpgurukul
  • Park Ticketing Management System
Published: April 30, 2025

CVE-2025-45019

None
    Phpgurukul
  • Park Ticketing Management System
Published: April 30, 2025

CVE-2025-3859

None
    Focus
  • Focus
Published: April 30, 2025

CVE-2025-2156

None
    Redhat
  • Redhat Linux
Published: April 30, 2025

CVE-2025-3269

None
    Redhat
  • Product
Published: April 30, 2025

CVE-2025-44192

None
    Sourcecodester
  • Simple Barangay Management System
Published: April 30, 2025

CVE-2025-44193

None
    Sourcecodester
  • Simple Barangay Management System
Published: April 30, 2025

CVE-2025-44194

None
    Sourcecodester
  • Simple Barangay Management System
Published: April 30, 2025

CVE-2025-46619

None
    Couchbase
  • Couchbase Server
Published: April 30, 2025

CVE-2025-2170

None
    Sonicwall
  • Sma1000
Published: April 30, 2025

CVE-2025-24132

None
    Apple
  • Airplay Audio Sdk
  • Airplay Video Sdk
  • Carplay Communication Plugin
Published: April 30, 2025

CVE-2025-30422

None
    Apple
  • Airplay Audio Sdk
  • Airplay Video Sdk
  • Carplay Communication Plugin
Published: April 30, 2025

CVE-2023-4533

None
    Red Hat
  • Red Hat
Published: April 30, 2025
Click here to see more Vulnerabilities