Tag: 2025-05-03

2 Attack Reports | 29 Vulnerabilities

Attack reports

DragonForce Ransomware Gang | From Hacktivists to High Street Extortionists

The DragonForce ransomware group, initially a pro-Palestine hacktivist operation, has evolved into a profit-driven extortion enterprise targeting UK retailers and various global entities. Emerging in August 2023, the group now employs a multi-extortion model, threatening data leaks and reputational…
ransomware
extortion
cobalt strike
CVE-2024-21412
CVE-2021-44228
CVE-2024-21887
CVE-2023-46805
systembc
2025-05-03
CVE-2024-21893
multi-extortion
dragonforce ransomware
white-label
Published: May 3, 2025
Downloadable IOCs: 0

Venom Spider Uses Server-Side Polymorphism to Weave a Web Around Victims

Arctic Wolf Labs discovered a new campaign by Venom Spider targeting corporate HR departments with fake resumes containing the More_eggs backdoor. The financially motivated threat group uses spear-phishing emails and abuses legitimate job platforms to apply for real jobs. The backdoor can steal cre…
backdoor
evasion
javascript
spear-phishing
more_eggs
lnk files
2025-05-03
polymorphism
Published: May 3, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-3918

9.8
    Wordpress
  • Job Listings Plugin
Published: May 3, 2025

CVE-2024-13738

7.3
    Wordpress
  • The Motors
Published: May 3, 2025

CVE-2025-4226

6.9
    Phpgurukul
  • Cyber Cafe Management System
Published: May 3, 2025

CVE-2025-4236

6.9
    Pcman
  • Ftp Server
Published: May 3, 2025

CVE-2025-4237

6.9
    Pcman
  • Ftp Server
Published: May 3, 2025

CVE-2025-4238

6.9
    Pcman
  • Ftp Server
Published: May 3, 2025

CVE-2025-4239

6.9
    Pcman
  • Pcman Ftp Server
Published: May 3, 2025

CVE-2025-4240

6.9
    Pcman
  • Pcman Ftp Server
Published: May 3, 2025

CVE-2025-4241

6.9
    Phpgurukul
  • Teacher Subject Allocation Management System
Published: May 3, 2025

CVE-2025-4242

6.9
    Phpgurukul
  • Online Birth Certificate System
Published: May 3, 2025

CVE-2025-1838

6.5
    Ibm
  • Cloud Pak For Business Automation
Published: May 3, 2025

CVE-2025-3779

6.4
    Wordpress
  • Personizely Plugin
Published: May 3, 2025

CVE-2025-4168

6.4
    Wordpress
  • Subpage List
Published: May 3, 2025

CVE-2025-4170

6.4
    Wordpress
  • Xavins Review Ratings
Published: May 3, 2025

CVE-2025-4172

6.4
    Wordpress
  • Verticalresponse Newsletter Widget
Published: May 3, 2025

CVE-2025-3815

6.4
    Surveyjs
  • Surveyjs
Published: May 3, 2025

CVE-2025-4188

6.1
    Wordpress
  • Advanced Reorder Image Text Slider
Published: May 3, 2025

CVE-2025-4198

6.1
    Wordpress
  • Alink Tap
Published: May 3, 2025

CVE-2025-4199

6.1
    Wordpress
  • Abundatrade Plugin
Published: May 3, 2025

CVE-2024-41753

6.1
    Ibm
  • Cloud Pak For Business Automation
Published: May 3, 2025

CVE-2025-4222

5.9
    Wordpress
  • Database Toolset Plugin
Published: May 3, 2025

CVE-2025-4243

5.3
    Code-Projects
  • Online Bus Reservation System
Published: May 3, 2025

CVE-2025-4244

5.3
    Code-Projects
  • Online Bus Reservation System
Published: May 3, 2025

CVE-2025-1495

4.3
    Ibm
  • Business Automation Workflow
Published: May 3, 2025

CVE-2025-47241

4.0
    Browser Use
  • Browser Use
Published: May 3, 2025

CVE-2025-47229

2.9
    Gnu
  • Pspp
Published: May 3, 2025

CVE-2024-58135

None
    Mojolicious
  • Mojolicious
Published: May 3, 2025

CVE-2025-37799

None
    Linux
  • Kernel
Published: May 3, 2025

CVE-2024-58134

None
    Mojolicious
  • Mojolicious
Published: May 3, 2025
Click here to see more Vulnerabilities