Tag: 2025-05-12

5 Attack Reports | 60 Vulnerabilities

Attack reports

Marbled Dust leverages zero-day in Output Messenger for regional espionage

A Türkiye-affiliated espionage threat actor, Marbled Dust, has been exploiting a zero-day vulnerability in Output Messenger since April 2024. The attacks target Kurdish military entities in Iraq, allowing the actor to deliver malicious files and exfiltrate data. The exploit involves a directory tra…
backdoor
espionage
zero-day
golang
data exfiltration
iraq
dns hijacking
CVE-2025-27920
CVE-2025-27921
2025-05-12
omserverservice.exe
omserverservice.vbs
omclientservice.exe
kurdistan
output messenger
2025-05-13
directory traversal
om.vbs
Published: May 13, 2025
Linked vulnerabilities : CVE-2025-27920 (CVSS 9.8), CVE-2025-27921 (CVSS 6.1)
Downloadable IOCs: 3

Targeting Taiwan & Japan with DLL Implants

A newly discovered APT campaign dubbed Swan Vector is targeting educational institutes and mechanical engineering industries in Taiwan and Japan. The attack uses a sophisticated multi-stage infection chain involving malicious LNK files, DLL implants (Pterois and Isurus), and Cobalt Strike payloads.…
apt
cobalt strike
dll sideloading
taiwan
multi-stage attack
japan
2025-05-12
google drive
isurus
pterois
dll implants
Published: May 12, 2025
Downloadable IOCs: 16

New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms

As artificial intelligence (AI) surges into mainstream adoption, millions of users turn daily to AI-powered tools for content creation—from generating art and music to transforming photos into videos. But amid this excitement, cybercriminals have uncovered a potent new lure: fake AI platforms promi…
xworm
python
infostealer
worm
credential theft
remote access
ai
morphisec
facebook
2025-05-12
word document
noodlophile
capcutloader
video dream
Published: May 12, 2025
Downloadable IOCs: 32

Recruitment Scams on the Rise: How Threat Actors Exploit Job Seekers

A significant increase in recruitment scams has been observed, with three distinct threat actors targeting job seekers. The first impersonates tech employers using advance fee fraud tactics. The second poses as a logistics recruitment agency, targeting 18 geographies and affecting 63,000 people in …
phishing
social engineering
cryptocurrency
telegram
identity theft
job seekers
2025-05-12
recruitment scams
advance fee fraud
Published: May 12, 2025
Downloadable IOCs: 0

Threat Brief: CVE-2025-31324

CVE-2025-31324 is a critical vulnerability residing in the SAP NetWeaver Application Server Java's Visual Composer component (VCFRAMEWORK). While not installed by default, business analysts commonly use this component to create applications without coding, making it widely present in SAP deployment…
alliance
april
sha256 hash
sap netweaver
2025-05-12
http
ipv4 address
attempted get
suspected web
hosting
cve202531324
goreverse
visual composer
test
Published: May 12, 2025
Linked vulnerabilities : CVE-2025-31324 (CVSS 10.0)
Downloadable IOCs: 44
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-26846

9.8
    Znuny
  • Znuny
Published: May 12, 2025

CVE-2025-3659

9.4
    Digi
  • Digi Portserver Ts
  • Digi One Sp
  • Digi One Ia
  • Digi One Iap
Published: May 12, 2025

CVE-2025-4555

9.3
    Zong Yu
  • Okcat Parking Management Platform
Published: May 12, 2025

CVE-2025-4556

9.3
    Zong Yu
  • Okcat Parking Management Platform
Published: May 12, 2025

CVE-2025-4558

9.3
    Wormhole Tech
  • Gpm
Published: May 12, 2025

CVE-2025-4559

9.3
    Netvision
  • Isoinsight
Published: May 12, 2025

CVE-2025-47682

9.3
    Cozy Vision Technologies
  • Sms Alert Order Notifications Woocommerce
Published: May 12, 2025

CVE-2024-56523

9.1
    Radware
  • Cloud Web Application Firewall
Published: May 12, 2025

CVE-2024-56524

9.1
    Radware
  • Cloud Web Application Firewall
Published: May 12, 2025

CVE-2025-4557

8.8
    Zong Yu
  • Parking Management System
Published: May 12, 2025

CVE-2025-4561

8.7
    Kingfor
  • Kfox
Published: May 12, 2025

CVE-2025-1533

8.2
    Asus
  • Asio3.Sys
Published: May 12, 2025

CVE-2025-46739

8.1
    Sel
  • Sel
Published: May 12, 2025

CVE-2025-1079

7.8
    Google
  • Web Designer
Published: May 12, 2025

CVE-2024-4981

7.6
    Pagure
  • Pagure
Published: May 12, 2025

CVE-2024-4982

7.6
    Pagure
  • Pagure Server
Published: May 12, 2025

CVE-2025-3496

7.5
    *
  • *
Published: May 12, 2025

CVE-2025-47270

7.5
    Nimiq
  • Nimiq Core Rs Albatross
  • Nimiq Network Libp2p
Published: May 12, 2025

CVE-2025-45835

7.5
    Netis
  • Wf2880
Published: May 12, 2025

CVE-2025-3632

7.5
    Ibm
  • Ibm 4769 Developers Toolkit
  • Hardware Security Module
Published: May 12, 2025

CVE-2025-46740

7.5
    Selinc
  • *
Published: May 12, 2025

CVE-2025-46737

7.4
    Selinc
  • Sel-5037 Grid Configurator
Published: May 12, 2025

CVE-2025-32390

7.0
    Espocrm
  • Espocrm
Published: May 12, 2025

CVE-2025-4553

6.9
    Phpgurukul
  • Apartment Visitors Management System
Published: May 12, 2025

CVE-2025-4554

6.9
    Phpgurukul
  • Apartment Visitors Management System
Published: May 12, 2025

CVE-2025-4560

6.9
    Netvision
  • Isoinsight
Published: May 12, 2025

CVE-2025-3649

6.8
    Lightpress
  • Lightbox
Published: May 12, 2025

CVE-2025-46738

6.6
    Selinc
  • Sel-5033
Published: May 12, 2025

CVE-2025-47578

6.5
    Edward Caissie
  • Bns Twitter Follow Button
Published: May 12, 2025

CVE-2025-46745

6.5
    Selinc
  • Software
Published: May 12, 2025

CVE-2025-47271

6.3
    Github
  • Ozi Action
Published: May 12, 2025

CVE-2025-46743

6.3
    Selinc
  • Token
Published: May 12, 2025

CVE-2025-22247

6.1
    Vmware
  • Vmware Tools
Published: May 12, 2025

CVE-2025-26841

6.1
    Wpeverst
  • Everest Forms
Published: May 12, 2025

CVE-2025-3597

5.9
    Firelight
  • Lightbox
Published: May 12, 2025

CVE-2025-46746

5.8
    Selinc
  • *
Published: May 12, 2025

CVE-2025-46741

5.7
    Selinc
  • Blueframe
Published: May 12, 2025

CVE-2025-46747

5.7
    Selinc
  • Authentication
Published: May 12, 2025

CVE-2025-4552

5.3
    Continew
  • Admin
Published: May 12, 2025

CVE-2025-41393

5.1
    Ricoh
  • Web Image Monitor
Published: May 12, 2025

CVE-2025-40626

5.1
    Abantecart
  • Abantecart
Published: May 12, 2025

CVE-2025-40627

5.1
    Abantecart
  • Abantecart
Published: May 12, 2025

CVE-2025-46750

4.4
    Sel
  • Bios
Published: May 12, 2025

CVE-2025-46742

4.3
    Selinc
  • System Information
Published: May 12, 2025

CVE-2025-46749

4.3
    Selinc
  • Software
Published: May 12, 2025

CVE-2025-46717

3.3
    Sudo-Rs
  • Sudo-Rs
Published: May 12, 2025

CVE-2025-46718

3.3
    Sudo-Rs
  • Sudo-Rs
Published: May 12, 2025

CVE-2025-46744

2.7
    Selinc
  • Software
Published: May 12, 2025

CVE-2025-46748

2.7
    Selinc
  • *
Published: May 12, 2025

CVE-2025-47274

2.4
    Toolhive
  • Toolhive
Published: May 12, 2025

CVE-2025-46729

2.1
    Julmud
  • Phpdvdprofiler
Published: May 12, 2025

CVE-2025-46610

None
    Artec
  • Ema Mail
Published: May 12, 2025

CVE-2025-46611

None
    Artec
  • Ema Mail
Published: May 12, 2025

CVE-2025-44022

None
    Vvveb
  • Cms
Published: May 12, 2025

CVE-2025-44830

None
    Engineercms
  • Engineercms
Published: May 12, 2025

CVE-2025-45779

None
    Tenda
  • Ac10
Published: May 12, 2025

CVE-2023-34732

None
    Flytxt
  • Neon Dx
Published: May 12, 2025

CVE-2025-44175

None
    Tenda
  • Ac10
Published: May 12, 2025

CVE-2025-44176

None
    Tenda
  • Fh451
Published: May 12, 2025

CVE-2024-55466

None
    Thingsboard
  • Thingsboard Community
  • Thingsboard Cloud
  • Thingsboard Professional
Published: May 12, 2025
Click here to see more Vulnerabilities