Tag: 2025-05-08

2 Attack Reports | 104 Vulnerabilities

Attack reports

Unmasking the FreeDrain Network

A collaborative investigation by Validin and SentinelLABS exposes the FreeDrain Network, a large-scale cryptocurrency phishing operation. The campaign exploits search engine optimization, free web services, and redirection techniques to target and drain cryptocurrency wallets. The attackers use lur…
phishing
cryptocurrency
infrastructure analysis
seo manipulation
wallet draining
2025-05-08
redirectors
free hosting abuse
Published: May 8, 2025
Downloadable IOCs: 0

Spam campaign targeting Brazil abuses Remote Monitoring and Management tools

A spam campaign targeting Brazilian users, particularly C-level executives and financial/HR accounts, has been identified since January 2025. The campaign exploits commercial remote monitoring and management (RMM) tools, specifically PDQ Connect and N-able remote access tools. Attackers use Brazili…
dropbox
rmm
spam
initial access broker
2025-05-08
nf-e
n-able
screen connect
pdq connect
Published: May 8, 2025
Downloadable IOCs: 26
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-11186

10.0
    Arista
  • Cloudvision Portal
Published: May 8, 2025

CVE-2025-0505

10.0
    Arista
  • Cloudvision
Published: May 8, 2025

CVE-2025-4475

10.0
    My Product
  • Blah
Published: May 8, 2025

CVE-2025-26844

9.8
    Znuny
  • Znuny
Published: May 8, 2025

CVE-2025-26845

9.8
    Znuny
  • Znuny
Published: May 8, 2025

CVE-2025-26847

9.1
    Znuny
  • Znuny
Published: May 8, 2025

CVE-2024-12378

9.1
    Arista
  • Arista Eos
Published: May 8, 2025

CVE-2025-3758

8.7
    Vendor
  • Wf2220
Published: May 8, 2025

CVE-2025-3759

8.7
    *
  • Device Configuration
Published: May 8, 2025

CVE-2024-6648

8.7
    Ap Page Builder
  • Ap Page Builder
Published: May 8, 2025

CVE-2024-8100

8.7
    Arista
  • Cloudvision Portal
Published: May 8, 2025

CVE-2025-4098

8.4
    Horner Automation
  • Cscape
Published: May 8, 2025

CVE-2025-41450

8.2
    Danfoss
  • Ak-Sm 8xxa
Published: May 8, 2025

CVE-2025-1329

7.8
    Ibm
  • Cics Tx Standard
  • Cics Tx Advanced
Published: May 8, 2025

CVE-2025-1330

7.8
    Ibm
  • Cics Tx Standard
  • Cics Tx Advanced
Published: May 8, 2025

CVE-2025-1331

7.8
    Ibm
  • Cics Tx Standard
  • Cics Tx Advanced
Published: May 8, 2025

CVE-2025-1254

7.7
    Rti
  • Connext Professional
Published: May 8, 2025

CVE-2025-3419

7.5
    Wordpress
  • Eventin
Published: May 8, 2025

CVE-2025-26842

7.5
    Znuny
  • Znuny
Published: May 8, 2025

CVE-2025-1948

7.5
    Eclipse
  • Jetty
Published: May 8, 2025

CVE-2024-9448

7.5
    Arista
  • Eos
Published: May 8, 2025

CVE-2024-13793

7.3
    Woocommerce
  • Wolmart Multivendor Marketplace Theme
Published: May 8, 2025

CVE-2024-13009

7.2
    Eclipse
  • Jetty
Published: May 8, 2025

CVE-2025-40846

7.1
    Halo
  • Halo
Published: May 8, 2025

CVE-2025-1252

6.9
    Rti
  • Connext Professional
Published: May 8, 2025

CVE-2025-1253

6.9
    Rti
  • Connext Professional
Published: May 8, 2025

CVE-2025-4127

6.4
    Wordpress
  • Wp Seo Structured Data Schema
Published: May 8, 2025

CVE-2025-3468

6.4
    Wordpress
  • Nex-Forms
Published: May 8, 2025

CVE-2025-3862

6.4
    Wordpress
  • Contest Gallery Plugin
Published: May 8, 2025

CVE-2025-3506

6.3
    Checkmk
  • Checkmk
Published: May 8, 2025

CVE-2025-4208

6.3
    Wordpres
  • Nex-Forms
Published: May 8, 2025

CVE-2025-2806

6.1
    Tagdiv
  • Composer
Published: May 8, 2025

CVE-2025-4207

5.9
    Postgresql
  • Postgresql
  • Libpq
Published: May 8, 2025

CVE-2025-30102

5.5
    Dell
  • Powerscale Onefs
Published: May 8, 2025

CVE-2025-32873

5.3
    Django
  • Django
Published: May 8, 2025

CVE-2025-27695

4.9
    Dell
  • Wyse Management Suite
Published: May 8, 2025

CVE-2025-47730

4.8
    Telemessage
  • Archiving Backend
Published: May 8, 2025

CVE-2025-46833

4.6
    Python
  • Example Encryption
Published: May 8, 2025

CVE-2025-30101

4.4
    Dell
  • Powerscale Onefs
Published: May 8, 2025

CVE-2025-46336

4.2
    Rack
  • Rack-Session
Published: May 8, 2025

CVE-2025-46712

3.7
    Erlang
  • Otp
Published: May 8, 2025

CVE-2025-4132

3.1
    Rapid7
  • Corporate Website
Published: May 8, 2025

CVE-2025-44021

2.8
    Openstack
  • Ironic
Published: May 8, 2025

CVE-2024-55651

2.0
    Ieducar
  • Ieducar
Published: May 8, 2025

CVE-2025-46812

2.0
    Trix
  • Trix
Published: May 8, 2025

CVE-2025-47729

1.9
    Telemessage
  • Archiving Backend
Published: May 8, 2025

CVE-2025-37800

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37801

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37802

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37803

None
    Linux
  • Linux Kernel
  • Udmabuf
Published: May 8, 2025

CVE-2025-37804

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37805

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37806

None
    Linux
  • Linux Kernel
  • Ntfs3
Published: May 8, 2025

CVE-2025-37807

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37808

None
    Linux
  • Linux Kernel
  • Crypto
Published: May 8, 2025

CVE-2025-37809

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37810

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37811

None
    Linux
  • Kernel
Published: May 8, 2025

CVE-2025-37812

None
    Linux
  • Kernel
Published: May 8, 2025

CVE-2025-37813

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37814

None
    Linux
  • Kernel
Published: May 8, 2025

CVE-2025-37815

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37816

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37817

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37818

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37819

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37820

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37821

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37822

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37823

None
    Linux
  • Kernel
Published: May 8, 2025

CVE-2025-37824

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37825

None
    Linux
  • Kernel
Published: May 8, 2025

CVE-2025-37826

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37827

None
    Linux
  • Kernel
  • Btrfs
Published: May 8, 2025

CVE-2025-37828

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37829

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37830

None
    Linux
  • Kernel
Published: May 8, 2025

CVE-2025-37831

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-37832

None
    Linux
  • Kernel
Published: May 8, 2025

CVE-2025-37833

None
    Linux
  • Kernel
  • Niu
Published: May 8, 2025

CVE-2025-37834

None
    Linux
  • Linux Kernel
Published: May 8, 2025

CVE-2025-45818

None
    Slims
  • Senayan Library Management Systems
Published: May 8, 2025

CVE-2025-45819

None
    Slims
  • Senayan Library Management Systems
Published: May 8, 2025

CVE-2025-45820

None
    Slims
  • Senayan Library Management Systems
Published: May 8, 2025

CVE-2023-51295

None
    Phpjabbers
  • Event Booking Calendar
Published: May 8, 2025

CVE-2023-51328

None
    Phpjabbers
  • Cleaning Business Software
Published: May 8, 2025

CVE-2025-43926

None
    Znuny
  • Znuny
Published: May 8, 2025

CVE-2025-45841

None
    Totolink
  • Nr1800x
Published: May 8, 2025

CVE-2025-45842

None
    Totolink
  • Nr1800x
Published: May 8, 2025

CVE-2025-45843

None
    Totolink
  • Nr1800x
Published: May 8, 2025

CVE-2025-45844

None
    Totolink
  • Nr1800x
Published: May 8, 2025

CVE-2025-45845

None
    Totolink
  • Nr1800x
Published: May 8, 2025

CVE-2025-45846

None
    Alfa
  • Alfa Aip W512
Published: May 8, 2025

CVE-2025-45847

None
    Alfa
  • Aip-W512
Published: May 8, 2025

CVE-2025-28073

None
    Phplist
  • Phplist
Published: May 8, 2025

CVE-2025-44023

None
    Dlink
  • Dns-320
  • Dns-320lw
Published: May 8, 2025

CVE-2025-45787

None
    Totolink
  • A3100r
Published: May 8, 2025

CVE-2025-45788

None
    Totolink
  • A3100r
Published: May 8, 2025

CVE-2025-45789

None
    Totolink
  • A3100r
Published: May 8, 2025

CVE-2025-45790

None
    Totolink
  • A3100r
Published: May 8, 2025

CVE-2025-45797

None
    Totolink
  • A950rg
Published: May 8, 2025

CVE-2025-45798

None
    Totolink
  • A950rg
Published: May 8, 2025

CVE-2023-31585

None
    Grocery-Cms
  • Grocery-Cms-Php-Restful-Api
Published: May 8, 2025

CVE-2025-28074

None
    Phplist
  • Phplist
Published: May 8, 2025
Click here to see more Vulnerabilities