Tag: 2025-05-22

6 Attack Reports | 138 Vulnerabilities

Attack reports

Targets Tajikistan: New Macro Word Documents Phishing Tactics

From January to February 2025, a phishing campaign targeting Tajikistan was detected and attributed to TAG-110, a Russia-aligned threat actor. The campaign used Tajikistan government-themed documents as lures, shifting from previous tactics to macro-enabled Word template files for initial payload d…
espionage
phishing
government
cherryspy
hatvibe
pyplunderplug
logpie
2025-05-22
russia-aligned
tajikistan
Published: May 22, 2025
Downloadable IOCs: 6

Caught in the CAPTCHA: How ClickFix is Weaponizing Verification Fatigue to Deliver RATs & Infostealers

Threat actors are exploiting user fatigue with anti-spam mechanisms through a technique called ClickFix. This method involves compromising websites and embedding fraudulent CAPTCHA images, which, when solved by unsuspecting users, lead to the execution of malicious code. The attack chain typically …
rat
social engineering
powershell
infostealer
lumma
netsupport rat
sectoprat
captcha
clipboard injection
2025-05-22
Published: May 22, 2025
Downloadable IOCs: 10

Exploits Cityworks zero-day vulnerability to deliver malware

Chinese-speaking threat actors, dubbed UAT-6382, have been exploiting a remote-code-execution vulnerability (CVE-2025-0994) in Cityworks, a popular asset management system. The attacks, which began in January 2025, target local governing bodies in the United States, focusing on utilities management…
cobalt strike
exploitation
china chopper
chinese threat actors
CVE-2025-0994
vshell
web shells
2025-05-22
antsword
tetraloader
cityworks
Published: May 22, 2025
Linked vulnerabilities : CVE-2025-0944 (CVSS 6.3)
Downloadable IOCs: 18

PupkinStealer .NET Infostealer Using Telegram for Data Theft

PupkinStealer is a newly identified .NET-based information-stealing malware that extracts sensitive data like web browser passwords and app session tokens, exfiltrating it via Telegram. It targets Chromium-based browsers, Telegram, and Discord, focusing on credential theft and session hijacking. Th…
infostealer
credential theft
2025-05-22
session hijacking
pupkinstealer
Published: May 22, 2025
Downloadable IOCs: 1

Chinese Adult Content Scam Targets Mobile Users Through PWA Injection

A new injection campaign has been identified that exploits third-party JavaScript to redirect mobile users to a Chinese adult-content Progressive Web App (PWA) scam. The attack specifically targets mobile devices, injecting a viewport meta tag and an ad overlay with click-hijacking functionality. T…
scam
mobile
2025-05-22
pwa
click-hijacking
Published: May 22, 2025
Downloadable IOCs: 19

Data-stealing Chrome extensions impersonate Fortinet, YouTube, VPNs

A campaign targeting the Google Chrome Web Store has deployed over 100 malicious browser extensions masquerading as legitimate tools like VPNs, AI assistants, and crypto utilities. These extensions, while offering some promised functionality, secretly connect to threat actor infrastructure to steal…
data theft
browser security
malicious domains
chrome extensions
2025-05-22
google web store
remote script execution
cookie stealing
vpn impersonation
Published: May 22, 2025
Downloadable IOCs: 25
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-3481

9.8
    Meddream
  • Meddream Pacs Server
Published: May 22, 2025

CVE-2025-3482

9.8
    Meddream
  • Pacs Server
Published: May 22, 2025

CVE-2025-3483

9.8
    Meddream
  • Meddream Pacs Server
Published: May 22, 2025

CVE-2025-3484

9.8
    Meddream
  • Pacs Server
Published: May 22, 2025

CVE-2025-32814

9.8
    Infoblox
  • Netmri
Published: May 22, 2025

CVE-2024-41195

9.8
    Ocuco
  • Innovaserviceintf
Published: May 22, 2025

CVE-2024-41196

9.8
    Ocuco
  • Innovation
Published: May 22, 2025

CVE-2024-41197

9.8
    Ocuco
  • Invclient
Published: May 22, 2025

CVE-2024-41198

9.8
    Ocuco
  • Reports
Published: May 22, 2025

CVE-2024-6914

9.8
    Wso2
  • Wso2
Published: May 22, 2025

CVE-2024-48853

9.5
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-13955

9.4
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-2409

8.9
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-2410

8.9
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-30172

8.9
    Abb
  • Aspect-Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-3881

8.8
    Hardybarth
  • Cph2
Published: May 22, 2025

CVE-2025-3882

8.8
    Echarge Hardy Barth
  • Cph2
Published: May 22, 2025

CVE-2025-3883

8.8
    Hardy Barth
  • Echarging Station
Published: May 22, 2025

CVE-2025-3887

8.8
    Gst-Plugins-Base
  • Gstreamer
Published: May 22, 2025

CVE-2024-25010

8.8
    Ericsson
  • Ran Compute
  • Site Controller 6610
Published: May 22, 2025

CVE-2025-45471

8.8
    *
  • Measure-Cold-Start
Published: May 22, 2025

CVE-2025-45468

8.8
    Fc-Stable-Diffusion-Plus
  • Fc-Stable-Diffusion-Plus
Published: May 22, 2025

CVE-2025-45472

8.8
    Autodeploy-Layer
  • Autodeploy-Layer
Published: May 22, 2025

CVE-2024-52874

8.8
    Infoblox
  • Netmri
Published: May 22, 2025

CVE-2024-13956

8.8
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-47181

8.8
    Microsoft
  • Microsoft Edge
Published: May 22, 2025

CVE-2025-5080

8.7
    Tenda
  • Fh451
Published: May 22, 2025

CVE-2024-13952

8.7
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-43596

8.5
    Msp360
  • Msp360 Backup
Published: May 22, 2025

CVE-2025-3836

8.3
    Zohocorp
  • Manageengine Adaudit Plus
Published: May 22, 2025

CVE-2025-41403

8.3
    Zohocorp
  • Manageengine Adaudit Plus
Published: May 22, 2025

CVE-2025-46713

7.8
    Sandboxie
  • Sandboxie
Published: May 22, 2025

CVE-2025-46714

7.8
    Sandboxie
  • Sandboxie
Published: May 22, 2025

CVE-2025-46715

7.8
    Sandboxie
  • Sandboxie
Published: May 22, 2025

CVE-2024-40458

7.8
    Ocuco
  • Innovation Tracking
Published: May 22, 2025

CVE-2024-40459

7.8
    Ocuco
  • Appmanager
Published: May 22, 2025

CVE-2024-40460

7.8
    Ocuco
  • Innovation
Published: May 22, 2025

CVE-2024-40461

7.8
    Ocuco
  • Innovation
Published: May 22, 2025

CVE-2024-40462

7.8
    Ocuco
  • Innovation
Published: May 22, 2025

CVE-2025-3937

7.7
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2025-47779

7.7
    Asterisk
  • Asterisk
  • Certified Asterisk
Published: May 22, 2025

CVE-2025-48075

7.7
    Fiber
  • Fiber
Published: May 22, 2025

CVE-2025-4123

7.6
    Grafana
  • Grafana
Published: May 22, 2025

CVE-2025-3884

7.5
    Cloudera
  • Hue
    Aceeditor
Published: May 22, 2025

CVE-2025-0993

7.5
    Gitlab
  • Gitlab
Published: May 22, 2025

CVE-2024-48850

7.5
    Abb
  • Aspect
  • Nexus
  • Matrix
Published: May 22, 2025

CVE-2024-13928

7.5
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-13929

7.5
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-13931

7.5
    Abb
  • Aspect
  • Nexus
  • Matrix
Published: May 22, 2025

CVE-2024-9639

7.5
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-5024

7.4
    Gnome
  • Gnome-Remote-Desktop
Published: May 22, 2025

CVE-2025-4366

7.4
    Cloudflare
  • Pingora-Proxy
Published: May 22, 2025

CVE-2025-2272

7.3
    Forcepoint
  • Fie Endpoint
Published: May 22, 2025

CVE-2025-30171

7.3
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-3486

7.2
    Allegra
  • Allegra
Published: May 22, 2025

CVE-2025-3944

7.2
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2025-3945

7.2
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2025-32813

7.2
    Infoblox
  • Netmri
Published: May 22, 2025

CVE-2024-41199

7.2
    Ocuco
  • Jobmanager
Published: May 22, 2025

CVE-2025-33136

7.1
    Ibm
  • Aspera Faspex
Published: May 22, 2025

CVE-2025-33137

7.1
    Ibm
  • Aspera Faspex
Published: May 22, 2025

CVE-2024-13946

7.1
    Abb
  • Aspect-Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-13947

7.1
    Abb
  • Aspect-Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-51552

7.1
    Abb
  • Aspect-Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-2759

7.0
    Gst-Plugins
  • Gst-Plugins
    Gstreamer
Published: May 22, 2025

CVE-2024-13957

7.0
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-48848

7.0
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-51553

7.0
    Abb
  • Aspect-Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-5073

6.9
    Freefloat
  • Ftp Server
Published: May 22, 2025

CVE-2025-5074

6.9
    Freefloat
  • Ftp Server
Published: May 22, 2025

CVE-2025-5075

6.9
    Freefloat
  • Ftp Server
Published: May 22, 2025

CVE-2025-5076

6.9
    Freefloat
  • Ftp Server
Published: May 22, 2025

CVE-2025-5077

6.9
    Campcodes
  • Online Shopping Portal
Published: May 22, 2025

CVE-2025-5078

6.9
    Campcodes
  • Online Shopping Portal
Published: May 22, 2025

CVE-2025-5079

6.9
    Campcodes
  • Online Shopping Portal
Published: May 22, 2025

CVE-2025-5081

6.9
    Campcodes
  • Cybercafe Management System
Published: May 22, 2025

CVE-2025-48366

6.9
    Group-Office
  • Group-Office
Published: May 22, 2025

CVE-2024-13948

6.9
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-13949

6.9
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-13950

6.9
    Abb
  • Aspect-Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-13953

6.9
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-4338

6.9
    Lantronix
  • Device Installer
Published: May 22, 2025

CVE-2025-3938

6.8
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2024-12093

6.8
    Gitlab
  • Gitlab
Published: May 22, 2025

CVE-2025-48372

6.6
    Schule
  • Schule
Published: May 22, 2025

CVE-2025-48373

6.6
    Schule
  • School Management System
Published: May 22, 2025

CVE-2025-3444

6.5
    Zohocorp
  • Managedengine Servicedesk Plus Msp
  • Managedengine Supportcenter Plus
Published: May 22, 2025

CVE-2025-3936

6.5
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2025-2853

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: May 22, 2025

CVE-2025-3111

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: May 22, 2025

CVE-2025-4575

6.5
    Openssl
  • Openssl
Published: May 22, 2025

CVE-2025-32815

6.5
    Infoblox
  • Netmri
Published: May 22, 2025

CVE-2024-9544

6.4
    Mapsvg
  • Mapsvg
Published: May 22, 2025

CVE-2025-5062

6.1
    Woocommerce
  • Woocommerce
Published: May 22, 2025

CVE-2025-23183

6.1
    *
  • *
Published: May 22, 2025

CVE-2024-13951

6.1
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-5962

6.1
    Wso2
  • Wso2
Published: May 22, 2025

CVE-2025-30169

6.0
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-30173

6.0
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-48066

6.0
    Wire
  • Wire-Webapp
Published: May 22, 2025

CVE-2024-13930

5.9
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-30170

5.9
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-48368

5.8
    Group-Office
  • Group-Office
Published: May 22, 2025

CVE-2024-7487

5.8
    Wso2
  • Wso2 Identity Server
Published: May 22, 2025

CVE-2025-48371

5.8
    Openfga
  • Openfga
Published: May 22, 2025

CVE-2025-48061

5.6
    Wire
  • Wire Webapp
Published: May 22, 2025

CVE-2025-46716

5.5
    Sandboxie
  • Sandboxie
Published: May 22, 2025

CVE-2025-48374

5.5
    Zot
  • Zot
    Keycloak
Published: May 22, 2025

CVE-2025-4133

5.4
    Blog2social
  • Blog2social
Published: May 22, 2025

CVE-2025-3941

5.4
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2025-33138

5.4
    Ibm
  • Aspera Faspex
Published: May 22, 2025

CVE-2025-3480

5.3
    Meddream
  • Web Dicom Viewer
Published: May 22, 2025

CVE-2025-3885

5.3
    Harman Becker
  • Mgu21
    Broadcom
Published: May 22, 2025

CVE-2025-3939

5.3
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2025-3940

5.3
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2024-54188

5.3
    Infoblox
  • Netmri
Published: May 22, 2025

CVE-2025-2506

5.3
    Edb
  • Pglogical
  • Bdr
Published: May 22, 2025

CVE-2025-48369

5.3
    Group-Office
  • Group-Office
Published: May 22, 2025

CVE-2024-13954

5.1
    Abb
  • Aspect-Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2025-4405

4.9
    Hot Random Image
  • Hot Random Image
Published: May 22, 2025

CVE-2025-4979

4.9
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: May 22, 2025

CVE-2025-4280

4.8
    Poedit
  • Poedit
Published: May 22, 2025

CVE-2025-47780

4.8
    Asterisk
  • Asterisk
  • Certified Asterisk
Published: May 22, 2025

CVE-2025-4975

4.8
    *
  • *
Published: May 22, 2025

CVE-2025-0605

4.6
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: May 22, 2025

CVE-2024-13958

4.6
    Abb
  • Aspect Enterprise
  • Nexus Series
  • Matrix Series
Published: May 22, 2025

CVE-2024-7103

4.6
    Wso2
  • Identity Server
Published: May 22, 2025

CVE-2025-4419

4.3
    Wordpress
  • Hot Random Image
Published: May 22, 2025

CVE-2025-3942

4.3
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2025-0679

4.3
    Gitlab
  • Gitlab
Published: May 22, 2025

CVE-2025-32915

4.3
    Checkmk
  • Checkmk
Published: May 22, 2025

CVE-2025-23182

4.3
    *
  • *
Published: May 22, 2025

CVE-2025-3943

4.1
    Tridium
  • Niagara Framework
  • Niagara Enterprise Security
Published: May 22, 2025

CVE-2023-47466

2.9
    Taglib
  • Taglib
Published: May 22, 2025

CVE-2025-1110

2.7
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: May 22, 2025

CVE-2003-5004

None
    Unknown
  • Unknown
Published: May 22, 2025

CVE-2025-4562

None
    Gitlab
  • Gitlab
Published: May 22, 2025

CVE-2025-4642

None
Published: May 22, 2025
Click here to see more Vulnerabilities