Tag: 2025-05-09

4 Attack Reports | 154 Vulnerabilities

Attack reports

Stealthy .NET Malware: Hiding Malicious Payloads as Bitmap Resources

This article discusses a new obfuscation technique used by threat actors to conceal malware within bitmap resources embedded in seemingly benign 32-bit .NET applications. The malware employs a multi-stage process to extract, deobfuscate, load, and execute secondary payloads, ultimately leading to t…
obfuscation
steganography
malspam
.net
agent tesla
remcos rat
multi-stage
xloader
2025-05-09
bitmap
Published: May 9, 2025
Downloadable IOCs: 0

New Finance Scam Discovered Abusing Niche X/Twitter Advertising Loophole

A new financial scam has been uncovered that exploits a loophole in X/Twitter's advertising display URL feature. The scam spoofs legitimate domains like CNN while directing users to a cryptocurrency scam website impersonating Apple's brand. The fraudulent site promotes a fake 'iToken' and includes …
cryptocurrency
apple
brand impersonation
2025-05-09
x/twitter
url spoofing
domain redirection
Published: May 9, 2025
Downloadable IOCs: 65

FreeDrain Unmasked | Uncovering an Industrial-Scale Crypto Theft Network

FreeDrain is a sophisticated, large-scale cryptocurrency phishing operation that has been stealing digital assets for years. It exploits search engine optimization, free-tier web services, and layered redirection techniques to target cryptocurrency wallets. Victims are lured through high-ranking se…
phishing
cryptocurrency
seo manipulation
2025-05-09
redirection techniques
search engine poisoning
wallet theft
Published: May 9, 2025
Downloadable IOCs: 71

TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks

TheWizards, a China-aligned threat actor, employs Spellbinder, a lateral movement tool that enables adversary-in-the-middle attacks through IPv6 SLAAC spoofing. This technique allows the group to intercept network traffic and redirect legitimate Chinese software updates to malicious servers. The at…
china
lateral movement
adversary-in-the-middle
2025-04-30
software update hijacking
wizardnet
spellbinder
slaac spoofing
2025-05-09
darknights
Published: May 9, 2025
Downloadable IOCs: 8
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-3810

9.8
    Wpbookit
  • Wpbookit
Published: May 9, 2025

CVE-2025-3811

9.8
    Wordpress
  • Wpbookit
Published: May 9, 2025

CVE-2024-11617

9.8
    Wordpress
  • Envolve Plugin
Published: May 9, 2025

CVE-2025-2253

9.8
    Imithemes
  • Listing
Published: May 9, 2025

CVE-2025-3605

9.8
    Wordpress
  • Frontend Login And Registration Blocks
Published: May 9, 2025

CVE-2025-4403

9.8
    Woocommerce
  • Drag And Drop Multiple File Upload
Published: May 9, 2025

CVE-2025-3463

9.4
    Asus
  • Driverhub
Published: May 9, 2025

CVE-2025-3710

9.3
    Lcd
  • Kvm Over Ip Switch
Published: May 9, 2025

CVE-2025-3711

9.3
    Cl5708im
  • Lcd Kvm Over Ip Switch
Published: May 9, 2025

CVE-2025-3714

9.3
    Unknown
  • Cl5708im
Published: May 9, 2025

CVE-2025-1087

9.3
    Kong
  • Insomnia
Published: May 9, 2025

CVE-2025-3455

8.8
    Wordpress
  • 1 Click Wordpress Migration Plugin
Published: May 9, 2025

CVE-2025-4442

8.7
    D-Link
  • Dir-605l
Published: May 9, 2025

CVE-2025-4448

8.7
    D-Link
  • Dir-619l
Published: May 9, 2025

CVE-2025-4449

8.7
    D-Link
  • Dir-619l
Published: May 9, 2025

CVE-2025-4450

8.7
    D-Link
  • Dir-619l
Published: May 9, 2025

CVE-2025-4451

8.7
    D-Link
  • Dir-619l
Published: May 9, 2025

CVE-2025-4452

8.7
    D-Link
  • Dir-619l
Published: May 9, 2025

CVE-2025-3712

8.7
    Cl5708im
  • Cl5708im
Published: May 9, 2025

CVE-2025-3713

8.7
    Cl
  • Cl5708im
Published: May 9, 2025

CVE-2025-4462

8.7
    Totolink
  • N150rt
Published: May 9, 2025

CVE-2025-4446

8.6
    H3c
  • Gr-5400ax
Published: May 9, 2025

CVE-2025-3462

8.4
    Asus
  • Driverhub
  • Motherboard
Published: May 9, 2025

CVE-2025-4377

8.3
    Sparx
  • Pro Cloud Server
Published: May 9, 2025

CVE-2025-47269

8.3
    Coder
  • Code-Server
Published: May 9, 2025

CVE-2025-3528

8.2
    Redhat
  • Quay-App
  • Mirror Registry
Published: May 9, 2025

CVE-2024-13759

7.8
    Avira
  • Avira Prime
Published: May 9, 2025

CVE-2024-13944

7.8
    Norton
  • Norton Utilities Ultimate
Published: May 9, 2025

CVE-2024-13959

7.8
    Nortonlifelock
  • Avg Tuneup
Published: May 9, 2025

CVE-2024-13960

7.8
    Nortonlifelock
  • Avg Tuneup
Published: May 9, 2025

CVE-2024-13961

7.8
    Avast
  • Cleanup Premium
    Microsoft
Published: May 9, 2025

CVE-2024-13962

7.8
    Gen Digital Inc
  • Avast Cleanup Premium
Published: May 9, 2025

CVE-2024-9524

7.8
    Avira
  • Avira Prime
    Microsoft
Published: May 9, 2025

CVE-2025-4455

7.3
    Patch My Pc
  • Home Updater
Published: May 9, 2025

CVE-2025-4206

7.2
    Groundhogg
  • Groundhogg
Published: May 9, 2025

CVE-2025-4447

7.0
    Eclipse
  • Openj9
    Openjdk
Published: May 9, 2025

CVE-2025-4456

6.9
    Project Worlds
  • Car Rental Project
Published: May 9, 2025

CVE-2025-4457

6.9
    Project Worlds
  • Car Rental Project
Published: May 9, 2025

CVE-2025-4463

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4375

6.9
    Sparx Systems
  • Pro Cloud Server
Published: May 9, 2025

CVE-2025-4464

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4465

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4466

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4467

6.9
    Sourcecodester
  • Online Student Clearance System
Published: May 9, 2025

CVE-2025-4468

6.9
    Sourcecodester
  • Online Student Clearance System
Published: May 9, 2025

CVE-2025-4481

6.9
    Sourcecodester
  • Apartment Visitor Management System
Published: May 9, 2025

CVE-2025-4482

6.9
    Project Worlds
  • Student Project Allocation System
Published: May 9, 2025

CVE-2025-4483

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4484

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4485

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4486

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4487

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4488

6.9
    Itsourcecode
  • Gym Management System
Published: May 9, 2025

CVE-2025-4489

6.9
    Campcodes
  • Online Food Ordering System
Published: May 9, 2025

CVE-2025-4490

6.9
    Campcodes
  • Online Food Ordering System
Published: May 9, 2025

CVE-2025-4491

6.9
    Campcodes
  • Online Food Ordering System
Published: May 9, 2025

CVE-2025-4492

6.9
    Campcodes
  • Online Food Ordering System
Published: May 9, 2025

CVE-2025-4494

6.9
    Jadmin
  • Jadmin
Published: May 9, 2025

CVE-2025-0549

6.8
    Gitlab
  • Gitlab
Published: May 9, 2025

CVE-2024-8973

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: May 9, 2025

CVE-2025-4434

6.1
    Wordpress
  • Remote Images Grabber
Published: May 9, 2025

CVE-2025-3897

5.9
    Wordpress
  • Eucookielaw
Published: May 9, 2025

CVE-2025-4382

5.9
    Linux
  • Luks
    Gnu
Published: May 9, 2025

CVE-2025-4443

5.3
    D-Link
  • Dir-605l
Published: May 9, 2025

CVE-2025-4445

5.3
    D-Link
  • Dir-605l
Published: May 9, 2025

CVE-2025-4453

5.3
    D-Link
  • Dir-619l
Published: May 9, 2025

CVE-2025-4454

5.3
    D-Link
  • Dir-619l
Published: May 9, 2025

CVE-2025-4458

5.3
    Code-Projects
  • Patient Record Management System
Published: May 9, 2025

CVE-2025-4459

5.3
    Code-Projects
  • Patient Record Management System
Published: May 9, 2025

CVE-2025-4376

5.3
    Sparx Systems
  • Pro Cloud Server
Published: May 9, 2025

CVE-2025-4432

5.3
    Rust
  • Ring
Published: May 9, 2025

CVE-2025-1278

5.3
    Gitlab
  • Gitlab Ce
Published: May 9, 2025

CVE-2025-1993

5.1
    Ibm
  • App Connect Enterprise Certified Container
Published: May 9, 2025

CVE-2025-4460

4.8
    Totolink
  • N150rt
Published: May 9, 2025

CVE-2025-4461

4.8
    Totolink
  • N150rt
Published: May 9, 2025

CVE-2025-4469

4.8
    Sourcecodester
  • Online Student Clearance System
Published: May 9, 2025

CVE-2025-4470

4.8
    Sourcecodester
  • Online Student Clearance System
Published: May 9, 2025

CVE-2025-4471

4.8
    Code-Projects
  • Jewelery Store Management
Published: May 9, 2025

CVE-2025-4472

4.8
    Code-Projects
  • Departmental Store Management System
Published: May 9, 2025

CVE-2025-4480

4.8
    Code-Projects
  • Simple College Management System
Published: May 9, 2025

CVE-2025-3949

4.3
    Seedprod
  • Website Builder
Published: May 9, 2025

CVE-2025-47735

2.9
    Rust
  • Wgp
Published: May 9, 2025

CVE-2025-47736

2.9
    Libsql-Sqlite3-Parser
  • Libsql-Sqlite3-Parser
Published: May 9, 2025

CVE-2025-47737

2.9
    Rust
  • Trailer
Published: May 9, 2025

CVE-2025-37835

None
    Linux
  • Linux Kernel
    Smb
Published: May 9, 2025

CVE-2025-37836

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37837

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37839

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37840

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37841

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37842

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37843

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37844

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37845

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37846

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37847

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37848

None
    Linux
  • Linux Kernel
  • Ivpu
Published: May 9, 2025

CVE-2025-37849

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37850

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37851

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37852

None
    Linux
  • Linux Kernel
    Amdgpu
Published: May 9, 2025

CVE-2025-37853

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37854

None
    Linux
  • Linux Kernel
    Amdkfd
Published: May 9, 2025

CVE-2025-37855

None
    Linux
  • Linux Kernel
    Amd
Published: May 9, 2025

CVE-2025-37856

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37857

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37858

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37859

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37861

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37862

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37863

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37864

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37865

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37866

None
    Linux
  • Linux Kernel
  • Mlxbf Bootctl
Published: May 9, 2025

CVE-2025-37867

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37868

None
    Linux
  • Linux
Published: May 9, 2025

CVE-2025-37869

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37870

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37871

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37872

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37873

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37874

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37875

None
    Linux
  • Linux Kernel
    Intel
Published: May 9, 2025

CVE-2025-37876

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37877

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37878

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37879

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37880

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37881

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37882

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37883

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37884

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37885

None
    Linux
  • Linux Kernel
  • Kvm
Published: May 9, 2025

CVE-2025-37886

None
    Linux
  • Kernel
Published: May 9, 2025

CVE-2025-37887

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-37888

None
    Linux
  • Kernel
    Mlx5
Published: May 9, 2025

CVE-2025-37889

None
    Linux
  • Linux Kernel
Published: May 9, 2025

CVE-2025-46392

None
    Apache
  • Commons Configuration
Published: May 9, 2025

CVE-2024-11861

None
    Enersys
  • Ampa
Published: May 9, 2025

CVE-2024-12442

None
    Enersys
  • Ampa
Published: May 9, 2025

CVE-2025-45885

None
    Phpgurukul
  • Vehicle Parking Management System
Published: May 9, 2025

CVE-2025-45887

None
    Yifang
  • Yifang Cms
Published: May 9, 2025

CVE-2025-28200

None
    Victure
  • Rx1800
Published: May 9, 2025

CVE-2025-28201

None
    Victure
  • Rx1800
Published: May 9, 2025

CVE-2025-28202

None
    Victure
  • Victure Rx1800
Published: May 9, 2025

CVE-2025-28203

None
    Victure
  • Rx1800
Published: May 9, 2025

CVE-2025-45513

None
    Tenda
  • Fh451
Published: May 9, 2025

CVE-2025-46188

None
    Sourcecodester
  • Client Database Management System
Published: May 9, 2025

CVE-2025-46189

None
    Sourcecodester
  • Client Database Management System
Published: May 9, 2025

CVE-2025-46193

None
    Sourcecodester
  • Client Database Management System
Published: May 9, 2025

CVE-2025-29509

None
    Jan
  • Jan
Published: May 9, 2025

CVE-2025-46190

None
    Sourcecodester
  • Client Database Management System
Published: May 9, 2025

CVE-2025-46191

None
    Sourcecodester
  • Client Database Management System
Published: May 9, 2025

CVE-2025-46192

None
    Sourcecodester
  • Client Database Management System
Published: May 9, 2025
Click here to see more Vulnerabilities