Tag: 2025-05-18

1 Attack Reports | 51 Vulnerabilities

Attack reports

Operation RoundPress targeting high-value webmail servers

ESET researchers have uncovered a Russia-aligned espionage operation named RoundPress, targeting high-value webmail servers through XSS vulnerabilities. The campaign, attributed to the Sednit group, aims to steal confidential data from specific email accounts. Initially focused on Roundcube in 2023…
espionage
spearphishing
russia
zero-day
credential theft
xss
data exfiltration
CVE-2024-27443
CVE-2024-11182
2025-05-15
2025-05-18
webmail
eastern europe
spypress.roundcube
spypress.mdaemon
CVE-2023-43770
spypress.zimbra
spypress.horde
Published: May 18, 2025
Linked vulnerabilities : CVE-2024-27443, CVE-2024-11182 (CVSS 6.1), CVE-2020-35730, CVE-2023-23397, CVE-2023-43770
Downloadable IOCs: 16
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-4843

8.7
    D-Link
  • Dcs-932l
Published: May 18, 2025

CVE-2025-4896

8.7
    Tenda
  • Ac10
Published: May 18, 2025

CVE-2025-4897

8.7
    Tenda
  • A15
Published: May 18, 2025

CVE-2025-4883

8.6
    D-Link
  • Di-8100
Published: May 18, 2025

CVE-2025-4867

7.1
    Tenda
  • A15
Published: May 18, 2025

CVE-2025-4844

6.9
    Freefloat
  • Ftp Server
Published: May 18, 2025

CVE-2025-4845

6.9
    Freefloat
  • Ftp Server
Published: May 18, 2025

CVE-2025-4846

6.9
    Freefloat
  • Ftp Server
Published: May 18, 2025

CVE-2025-4847

6.9
    Freefloat
  • Freefloat Ftp Server
Published: May 18, 2025

CVE-2025-4848

6.9
    Freefloat
  • Ftp Server
Published: May 18, 2025

CVE-2025-4861

6.9
    Phpgurukul
  • Beauty Parlour Management System
Published: May 18, 2025

CVE-2025-4864

6.9
    Itsourcecode
  • Restaurant Management System
Published: May 18, 2025

CVE-2025-4865

6.9
    Itsourcecode
  • Restaurant Management System
Published: May 18, 2025

CVE-2025-4869

6.9
    Itsourcecode
  • Restaurant Management System
Published: May 18, 2025

CVE-2025-4870

6.9
    Itsourcecode
  • Restaurant Management System
Published: May 18, 2025

CVE-2025-4871

6.9
    Pcman
  • Ftp Server
Published: May 18, 2025

CVE-2025-4872

6.9
    Freefloat
  • Freefloat Ftp Server
Published: May 18, 2025

CVE-2025-4873

6.9
    Phpgurukul
  • News Portal
Published: May 18, 2025

CVE-2025-4874

6.9
    Phpgurukul
  • News Portal
Published: May 18, 2025

CVE-2025-4875

6.9
    Campcodes
  • Online Shopping Portal
Published: May 18, 2025

CVE-2025-4880

6.9
    Phpgurukul
  • News Portal
Published: May 18, 2025

CVE-2025-4881

6.9
    Itsourcecode
  • Restaurant Management System
Published: May 18, 2025

CVE-2025-4882

6.9
    Itsourcecode
  • Restaurant Management System
Published: May 18, 2025

CVE-2025-4884

6.9
    Itsourcecode
  • Restaurant Management System
Published: May 18, 2025

CVE-2025-4885

6.9
    Itsourcecode
  • Sales And Inventory System
Published: May 18, 2025

CVE-2025-4886

6.9
    Itsourcecode
  • Sales And Inventory System
Published: May 18, 2025

CVE-2025-4895

6.9
    Sourcecodester
  • Doctors Appointment System
Published: May 18, 2025

CVE-2025-4899

6.9
    Campcodes
  • Sales And Inventory System
Published: May 18, 2025

CVE-2025-4900

6.9
    Campcodes
  • Sales And Inventory System
Published: May 18, 2025

CVE-2025-3715

6.4
    Wordpress
  • Plugin
Published: May 18, 2025

CVE-2025-4894

6.3
    Calmkart
  • Django-Sso-Server
Published: May 18, 2025

CVE-2025-4849

5.3
    Totolink
  • N300rh
Published: May 18, 2025

CVE-2025-4850

5.3
    Totolink
  • N300rh
Published: May 18, 2025

CVE-2025-4851

5.3
    Totolink
  • N300rh
Published: May 18, 2025

CVE-2025-4862

5.3
    Phpgurukul
  • Directory Management System
Published: May 18, 2025

CVE-2025-4863

5.3
    Advaya Softech
  • Gems Erp Portal
Published: May 18, 2025

CVE-2025-4866

5.3
    Weibocom
  • Rill-Flow
Published: May 18, 2025

CVE-2025-4868

5.3
    Merikbest
  • Ecommerce-Spring-Reactjs
Published: May 18, 2025

CVE-2025-4887

5.3
    Sourcecodester
  • Online Student Clearance System
Published: May 18, 2025

CVE-2025-4893

5.3
    Jammy928
  • Coinexchange Cryptoexchange Java
Published: May 18, 2025

CVE-2025-4898

5.3
    Sourcecodester
  • Student Result Management System
Published: May 18, 2025

CVE-2025-4852

4.8
    Totolink
  • A3002r
Published: May 18, 2025

CVE-2025-4858

4.8
    D-Link
  • Dap-2695
Published: May 18, 2025

CVE-2025-4859

4.8
    D-Link
  • Dap-2695
Published: May 18, 2025

CVE-2025-4860

4.8
    D-Link
  • Dap-2695
Published: May 18, 2025

CVE-2025-4888

4.8
    *
  • Pharmacy Management System
Published: May 18, 2025

CVE-2025-4889

4.8
    Code-Projects
  • Tourism Management System
Published: May 18, 2025

CVE-2025-4890

4.8
    Code-Projects
  • Tourism Management System
Published: May 18, 2025

CVE-2025-4891

4.8
    Code-Projects
  • Police Station Management System
Published: May 18, 2025

CVE-2025-4892

4.8
    Code-Projects
  • Police Station Management System
Published: May 18, 2025

CVE-2025-48219

3.5
    O2
  • O2 Uk
Published: May 18, 2025
Click here to see more Vulnerabilities