Tag: 2025-05-06

5 Attack Reports | 176 Vulnerabilities

Attack reports

CoGUI Phish Kit Targets Japan with Millions of Messages

A sophisticated phishing kit named CoGUI is targeting Japanese organizations with high-volume campaigns, primarily impersonating consumer and finance brands to steal credentials and payment data. The kit employs advanced evasion techniques like geofencing and fingerprinting to avoid detection. Sinc…
phishing
credential theft
brand impersonation
2025-05-06
darcula
cogui
Published: May 6, 2025
Downloadable IOCs: 7

Investigating Iranian Intrusion into Strategic Middle East Critical Infrastructure

This report details a prolonged Iranian state-sponsored intrusion into critical national infrastructure in the Middle East from May 2023 to February 2025. The threat actors employed various tactics including web shells, custom malware, and legitimate tools to maintain persistent access across multi…
apt
credential harvesting
lateral movement
systembc
havoc
custom malware
critical infrastructure
web shells
2025-05-06
credinterceptor
CVE-2023-38950
remoteinjector
hxlibrary
CVE-2023-38951
hanifnet
CVE-2023-38952
proxy chaining
neoexpressrat
Published: May 6, 2025
Downloadable IOCs: 35

APT36-Style ClickFix Attack Spoofs Indian Ministry to Target Windows & Linux

A recent campaign attributed to APT36 has been observed spoofing India's Ministry of Defence to deliver cross-platform malware. The attackers used a ClickFix-style infection chain, mimicking government press releases and leveraging a compromised .in domain for payload staging. The campaign targeted…
obfuscation
social engineering
cross-platform
spoofing
clickfix
mshta
2025-05-06
ministry of defence
clipboard-based execution
Published: May 6, 2025
Downloadable IOCs: 7

Uncovering Actor TTP Patterns and the Role of DNS in Investment Scams

This report analyzes common techniques, tactics, and procedures (TTPs) used by several investment scam actors who lure victims with fake platforms, including crypto exchanges. Key TTPs include registering large numbers of domains algorithmically, embedding similar web forms to collect user data, hi…
social engineering
cryptocurrency
facebook ads
cloaking
2025-04-29
rdga
dns abuse
web forms
tds
investment scams
2025-05-06
dns exploitation
registered domain generation algorithms
Published: May 6, 2025
Downloadable IOCs: 87

Lampion Is Back With ClickFix Lures

A highly focused malicious campaign targeting Portuguese organizations, particularly in government, finance, and transportation sectors, has been uncovered. The campaign is linked to Lampion malware, an infostealer focusing on banking information. The threat actors have incorporated ClickFix lures,…
obfuscation
social engineering
powershell
infostealer
vbscript
clickfix
2025-05-06
lampion
Published: May 6, 2025
Downloadable IOCs: 10
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-47419

10.0
    Crestron
  • Automate Vx
Published: May 6, 2025

CVE-2025-46816

9.4
    Goshs
  • Goshs
Published: May 6, 2025

CVE-2025-40620

9.3
    Tcman
  • Gim
Published: May 6, 2025

CVE-2025-40621

9.3
    Tcman
  • Gim
Published: May 6, 2025

CVE-2025-40622

9.3
    Tcm
  • Gin
Published: May 6, 2025

CVE-2025-40623

9.3
    Tcm
  • Tcman
Published: May 6, 2025

CVE-2025-40624

9.3
    Tcm
  • Management
  • Tcm Gim
Published: May 6, 2025

CVE-2025-40625

9.3
    Tcan
  • Gam
Published: May 6, 2025

CVE-2025-4041

9.3
    Optigo
  • Ons Nc600
Published: May 6, 2025

CVE-2025-25014

9.1
    Elastic
  • Kibana
Published: May 6, 2025

CVE-2024-12225

9.1
    Redhat
  • Quarkus Security Webauthn
Published: May 6, 2025

CVE-2025-0649

8.9
    Google
  • Tensorflow Serving
Published: May 6, 2025

CVE-2025-3610

8.8
    Reales
  • Wp Stpt
Published: May 6, 2025

CVE-2025-4298

8.7
    Tenda
  • Ac1206
Published: May 6, 2025

CVE-2025-4299

8.7
    Tenda
  • Ac1206
Published: May 6, 2025

CVE-2025-4342

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4343

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4344

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4345

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4346

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4347

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4348

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4349

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4350

8.7
    D-Link
  • Dir-600l
Published: May 6, 2025

CVE-2025-4354

8.7
    Tenda
  • Dap-1520
Published: May 6, 2025

CVE-2025-4355

8.7
    Tenda
  • Dap-1520
Published: May 6, 2025

CVE-2025-4356

8.7
    Tenda
  • Dap-1520
Published: May 6, 2025

CVE-2025-4368

8.7
    Tenda
  • Ac8
Published: May 6, 2025

CVE-2025-47420

8.7
    Crestron
  • Automate Vx
Published: May 6, 2025

CVE-2025-22477

8.3
    Dell
  • Storage Manager
Published: May 6, 2025

CVE-2024-49846

8.2
    Qualcomm
  • Ota Decoder
Published: May 6, 2025

CVE-2025-0984

8.2
    Netoloji
  • E-Flow
Published: May 6, 2025

CVE-2025-22478

8.1
    Dell
  • Storage Manager
  • Storage Center
Published: May 6, 2025

CVE-2025-30165

8.0
    Vllm
  • Vllm
Published: May 6, 2025

CVE-2025-46815

8.0
    Zitadel
  • Zitadel
Published: May 6, 2025

CVE-2025-2509

7.8
    Virglrenderer
  • Chromeos
Published: May 6, 2025

CVE-2025-46584

7.8
    Huawei
  • File System Module
Published: May 6, 2025

CVE-2024-45554

7.8
    Qualcomm
  • *
Published: May 6, 2025

CVE-2024-45564

7.8
    Qualcomm
  • Server Info Object
Published: May 6, 2025

CVE-2024-45565

7.8
    Qualcomm
  • *
Published: May 6, 2025

CVE-2024-45566

7.8
    Qualcomm
  • Qualcomm
Published: May 6, 2025

CVE-2024-45567

7.8
    Qualcomm
  • Jpeg
Published: May 6, 2025

CVE-2024-45574

7.8
    Qualcomm
  • Camera
Published: May 6, 2025

CVE-2024-45575

7.8
    Qualcomm
  • Camera Kernel
Published: May 6, 2025

CVE-2024-45576

7.8
    Qualcomm
  • Ope
Published: May 6, 2025

CVE-2024-45577

7.8
    Qualcomm
  • Camera Driver
Published: May 6, 2025

CVE-2024-45578

7.8
    Qualcomm
  • *
Published: May 6, 2025

CVE-2024-45579

7.8
    Qualcomm
  • Camera Kernel Driver
Published: May 6, 2025

CVE-2024-49835

7.8
    Qualcomm
  • *
Published: May 6, 2025

CVE-2024-49841

7.8
    Qualcomm
  • Headless Peripheral Vm
Published: May 6, 2025

CVE-2024-49842

7.8
    Qualcomm
  • Qualcomm
Published: May 6, 2025

CVE-2024-49844

7.8
    Qualcomm
  • Playready
Published: May 6, 2025

CVE-2024-49845

7.8
    Qualcomm
  • *
Published: May 6, 2025

CVE-2025-21453

7.8
    Qualcomm
  • Qualcomm
Published: May 6, 2025

CVE-2025-21460

7.8
    Qualcomm
  • *
Published: May 6, 2025

CVE-2025-21462

7.8
    Qualcomm
  • Qualcomm Product
Published: May 6, 2025

CVE-2025-21467

7.8
    Qualcomm
  • Firmware
Published: May 6, 2025

CVE-2025-21468

7.8
    Qualcomm
  • Firmware
  • Driver
Published: May 6, 2025

CVE-2025-21469

7.8
    Qualcomm
  • *
Published: May 6, 2025

CVE-2025-21470

7.8
    Qualcomm
  • Image Processing
Published: May 6, 2025

CVE-2025-21475

7.8
    Qualcomm
  • Product
Published: May 6, 2025

CVE-2025-46728

7.5
    Cpp-Httplib
  • Cpp-Httplib
Published: May 6, 2025

CVE-2025-46585

7.5
    Huawei
  • Kernel Module
Published: May 6, 2025

CVE-2024-49847

7.5
    Qualcomm
  • Product
Published: May 6, 2025

CVE-2025-21459

7.5
    Qualcomm
  • Ml Ie
Published: May 6, 2025

CVE-2025-2011

7.5
    Depicter
  • Slider And Popup Builder
Published: May 6, 2025

CVE-2025-2898

7.5
    Ibm
  • Maximo Application Suite
Published: May 6, 2025

CVE-2025-0853

7.5
    Wordpress
  • Pgs Core Plugin
Published: May 6, 2025

CVE-2025-2802

7.3
    Wordpress
  • Layoutboxx
Published: May 6, 2025

CVE-2025-46762

7.1
    Apache
  • Parquet
  • Parquet-Avro
Published: May 6, 2025

CVE-2025-46820

7.1
    Phpgt
  • Dom
Published: May 6, 2025

CVE-2025-4300

6.9
    Itsourcecode
  • Content Management System
Published: May 6, 2025

CVE-2025-4301

6.9
    Itsourcecode
  • Content Management System
Published: May 6, 2025

CVE-2025-4303

6.9
    Phpgurukul
  • Human Metapneumovirus Testing Management System
Published: May 6, 2025

CVE-2025-4304

6.9
    Phpgurukul
  • Cyber Cafe Management System
Published: May 6, 2025

CVE-2025-4306

6.9
    Phpgurukul
  • Nipah Virus Testing Management System
Published: May 6, 2025

CVE-2025-4307

6.9
    Phpgurukul
  • Art Gallery Management System
Published: May 6, 2025

CVE-2025-4308

6.9
    Phpgurukul
  • Art Gallery Management System
Published: May 6, 2025

CVE-2025-4309

6.9
    Phpgurukul
  • Art Gallery Management System
Published: May 6, 2025

CVE-2025-4311

6.9
    Itsourcecode
  • Content Management System
Published: May 6, 2025

CVE-2025-4312

6.9
    Sourcecodester
  • Advanced Web Store
Published: May 6, 2025

CVE-2025-4313

6.9
    Sourcecodester
  • Advanced Web Store
Published: May 6, 2025

CVE-2025-4314

6.9
    Sourcecodester
  • Advanced Web Store
Published: May 6, 2025

CVE-2025-4331

6.9
    Sourcecodester
  • Online Student Clearance System
Published: May 6, 2025

CVE-2025-4332

6.9
    Phpgurukul
  • Visitor Management System
Published: May 6, 2025

CVE-2025-4358

6.9
    Phpgurukul
  • Visitor Management System
Published: May 6, 2025

CVE-2025-4359

6.9
    Itsourcecode
  • Gym Management System
Published: May 6, 2025

CVE-2025-4360

6.9
    Itsourcecode
  • Gym Management System
Published: May 6, 2025

CVE-2025-4361

6.9
    Phpgurukul
  • Visitor Management System
Published: May 6, 2025

CVE-2025-4362

6.9
    Itsourcecode
  • Gym Management System
Published: May 6, 2025

CVE-2025-4363

6.9
    Unknown
  • Gym Management System
Published: May 6, 2025

CVE-2025-4388

6.9
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: May 6, 2025

CVE-2024-45568

6.7
    Qualcomm
  • Camera-Kernel Driver
Published: May 6, 2025

CVE-2024-49829

6.7
    Qualcomm
  • Buffer Overflow
Published: May 6, 2025

CVE-2024-45562

6.6
    Qualcomm
  • Server Info Object
Published: May 6, 2025

CVE-2024-45563

6.6
    Qualcomm
  • Camera Request Manager
Published: May 6, 2025

CVE-2024-45570

6.6
    Qualcomm
  • Device Driver
  • Io Configuration
Published: May 6, 2025

CVE-2024-45581

6.6
    Qualcomm
  • Audio Kernel Driver
Published: May 6, 2025

CVE-2024-45583

6.6
    Qualcomm
  • *
Published: May 6, 2025

CVE-2024-49830

6.6
    Qualcomm
  • Mixer
Published: May 6, 2025

CVE-2025-4374

6.5
    Red Hat
  • Quay
Published: May 6, 2025

CVE-2025-45487

6.5
    Linksys
  • E5600
Published: May 6, 2025

CVE-2025-45488

6.5
    Linksys
  • E5600
Published: May 6, 2025

CVE-2025-45489

6.5
    Linksys
  • E5600
Published: May 6, 2025

CVE-2025-45490

6.5
    Linksys
  • E5600
Published: May 6, 2025

CVE-2025-45492

6.5
    Netgear
  • Ex8000
Published: May 6, 2025

CVE-2025-26262

6.5
    R-Fx Networks
  • Linux Malware Detect
Published: May 6, 2025

CVE-2025-37730

6.5
    Elastic
  • Logstash
Published: May 6, 2025

CVE-2025-44900

6.5
    Tenda
  • Rx3
Published: May 6, 2025

CVE-2025-3782

6.4
    Wordpress
  • Plugin
Published: May 6, 2025

CVE-2025-46590

6.3
    Huawei
  • Network Search Module
Published: May 6, 2025

CVE-2024-39442

6.2
    Unisoc
  • Sprd Ssense Service
Published: May 6, 2025

CVE-2024-58252

6.2
    Huawei
  • Media Library Module
Published: May 6, 2025

CVE-2025-46587

6.2
    Huawei
  • Media Library
Published: May 6, 2025

CVE-2025-46591

6.2
    Huawei
  • Authorization Module
Published: May 6, 2025

CVE-2025-4384

6.0
    Pcvue
  • Pcvue
  • Pcvue Mqtt Addon
Published: May 6, 2025

CVE-2025-47256

5.6
    Libxmp
  • Libxmp
Published: May 6, 2025

CVE-2025-22476

5.5
    Dell
  • Storage Manager
Published: May 6, 2025

CVE-2025-45250

5.5
    Mrdoc
  • Mrdoc
Published: May 6, 2025

CVE-2025-3020

5.4
    *
  • *
Published: May 6, 2025

CVE-2025-4305

5.3
    Kefaming
  • Kefaming Mayi
Published: May 6, 2025

CVE-2025-3609

5.3
    Wordpress
  • Reales Wp Stpt
Published: May 6, 2025

CVE-2025-4327

5.3
    Mrcms
  • Mrcms
Published: May 6, 2025

CVE-2025-4329

5.3
    74cms
  • 74cms
Published: May 6, 2025

CVE-2025-3281

5.3
    Wordpress
  • User Registration And Membership Plugin
Published: May 6, 2025

CVE-2025-4333

5.3
    Feng Ha Ha
  • Ssm-Erp
    Megagao
Published: May 6, 2025

CVE-2025-4340

5.3
    D-Link
  • Dir-890l
  • Dir-806a1
Published: May 6, 2025

CVE-2025-4341

5.3
    D-Link
  • Dir-880l
Published: May 6, 2025

CVE-2025-4352

5.3
    Golden Link
  • Golden Link Secondary System
Published: May 6, 2025

CVE-2025-4353

5.3
    Golden Link
  • Golden Link Secondary System
Published: May 6, 2025

CVE-2025-46736

5.3
    Umbraco
  • Umbraco
Published: May 6, 2025

CVE-2025-47418

5.3
    Crestron
  • Automate Vx
Published: May 6, 2025

CVE-2025-4310

5.1
    Itsourcecode
  • Content Management System
Published: May 6, 2025

CVE-2025-46586

5.1
    Huawei
  • Contacts Module
Published: May 6, 2025

CVE-2025-4328

5.1
    Spring
  • Spring-Cloud-Base
Published: May 6, 2025

CVE-2025-46593

5.1
    Huawei
  • Printer Module
Published: May 6, 2025

CVE-2025-4357

5.1
    Tenda
  • Rx3
Published: May 6, 2025

CVE-2025-47417

5.1
    Crestron
  • Automate Vx
Published: May 6, 2025

CVE-2025-4323

4.8
    Mrcms
  • Mrcms
Published: May 6, 2025

CVE-2025-4324

4.8
    Mrcms
  • Mrcms
Published: May 6, 2025

CVE-2025-4325

4.8
    Mrcms
  • Mrcms
Published: May 6, 2025

CVE-2025-4326

4.8
    Mrcms
  • Mrcms
Published: May 6, 2025

CVE-2025-4373

4.8
    Glib
  • Glib
Published: May 6, 2025

CVE-2025-32022

4.6
    Finit
  • Finit
Published: May 6, 2025

CVE-2025-46572

4.6
    Passport-Wsfed-Saml2
  • Passport-Wsfed-Saml2
Published: May 6, 2025

CVE-2025-46573

4.6
    Passport
  • Wsfed-Saml2
Published: May 6, 2025

CVE-2025-46588

4.4
    Huawei
  • App Lock
Published: May 6, 2025

CVE-2025-46589

4.4
    Huawei
  • App Lock
Published: May 6, 2025

CVE-2025-46592

4.4
    Huawei
  • Usb Hdi Driver
Published: May 6, 2025

CVE-2025-4337

4.3
    Wordpress
  • Plugin
    Ahat
Published: May 6, 2025

CVE-2025-27132

3.8
    Openharmony
  • Openharmony
Published: May 6, 2025

CVE-2025-22479

3.5
    Dell
  • Storage Manager
Published: May 6, 2025

CVE-2025-23379

3.5
    Dell
  • Storage Manager
Published: May 6, 2025

CVE-2025-46814

3.4
    Fastapi
  • Fastapi Guard
Published: May 6, 2025

CVE-2025-22886

3.3
    Openharmony
  • Openharmony
Published: May 6, 2025

CVE-2025-25052

3.3
    Openharmony
  • Openharmony
Published: May 6, 2025

CVE-2025-25218

3.3
    Openharmony
  • Openharmony
Published: May 6, 2025

CVE-2025-27241

3.3
    Openharmony
  • Openharmony
Published: May 6, 2025

CVE-2025-27248

3.3
    Openharmony
  • Openharmony
Published: May 6, 2025

CVE-2025-46735

1.1
    Terraform
  • Windns Provider
Published: May 6, 2025

CVE-2021-43069

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2023-46716

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2025-47296

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2025-47297

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2025-47298

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2025-47299

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2025-47300

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2025-47301

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2025-47302

None
    Fortinet
  • Fortinet
Published: May 6, 2025

CVE-2025-47303

None
    Fortinet
  • *
Published: May 6, 2025

CVE-2018-1359

None
    Fortinet
  • *
Published: May 6, 2025

CVE-2025-45491

None
    Linksys
  • E5600
Published: May 6, 2025

CVE-2023-33770

None
    Real Estate Management System
  • Real Estate Management System
Published: May 6, 2025

CVE-2025-44073

None
    Seacms
  • Seacms
Published: May 6, 2025

CVE-2025-44899

None
    Tenda
  • Rx3
Published: May 6, 2025

CVE-2025-4372

None
    Google
  • Chrome
Published: May 6, 2025
Click here to see more Vulnerabilities