Tag: 2025-05-26

4 Attack Reports | 68 Vulnerabilities

Attack reports

Katz Stealer Threat Analysis

Katz Stealer is a sophisticated credential-stealing malware-as-a-service that targets multiple browsers, cryptocurrency wallets, and communication platforms. It employs advanced evasion techniques like geofencing, VM detection, and process hollowing. The infection chain involves obfuscated JavaScri…
cryptocurrency
process-hollowing
credential-stealer
2025-05-26
katz stealer
uac-bypass
browser-targeting
discord-hijacking
evasion-techniques
Published: May 26, 2025
Downloadable IOCs: 34

Reborn in Rust: Attempt to thwart malware analysis

AsyncRAT, a remote access trojan known since 2019, has been rewritten in Rust, marking a shift from its original C# implementation. This change aims to complicate reverse engineering efforts due to limited analysis tool support for Rust. The malware retains its core functionality, including plugin …
plugins
asyncrat
rust
command and control
remote access trojan
reverse engineering
system information
2025-05-26
tls
hardware id
rustyasyncrat
Published: May 26, 2025
Downloadable IOCs: 4

Malicious attack method on hosted ML models now targets PyPI

A new malicious campaign has been discovered targeting the Python Package Index (PyPI) by exploiting the Pickle file format in machine learning models. Three malicious packages posing as an Alibaba AI Labs SDK were detected, containing infostealer payloads hidden inside PyTorch models. The packages…
infostealer
ai
pypi
machine learning
supply chain attack
pytorch
2025-05-26
pickle format
Published: May 26, 2025
Downloadable IOCs: 2

Global operation disrupts Lumma Stealer

ESET collaborated with Microsoft and other partners in a global operation to disrupt Lumma Stealer, a prominent malware-as-a-service infostealer. ESET's contribution involved analyzing tens of thousands of malware samples to extract key data like C&C servers and affiliate identifiers. The operation…
infostealer
lumma stealer
credential theft
malware-as-a-service
disruption
2025-05-26
c&c infrastructure
Published: May 26, 2025
Downloadable IOCs: 113
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-2146

9.8
    Canon
  • Satera Mf656cdw
  • Satera Mf654cdw
  • Satera Mf551dw
  • Satera Mf457dw
  • Color Imageclass Mf656cdw
  • Color Imageclass Mf654cdw
  • Color Imageclass Mf653cdw
  • Color Imageclass Mf652cdw
  • Color Imageclass Lbp633cdw
  • Color Imageclass Lbp632cdw
  • Imageclass Mf455dw
  • Imageclass Mf453dw
  • Imageclass Mf452dw
  • Imageclass Mf451dw
  • Imageclass Lbp237dw
  • Imageclass Lbp236dw
  • X Mf1238 Ii
  • X Mf1643i Ii
  • X Mf1643if Ii
  • X Lbp1238 Ii
  • I-Sensys Mf657cdw
  • I-Sensys Mf655cdw
  • I-Sensys Mf651cdw
  • I-Sensys Lbp633cdw
  • I-Sensys Lbp631cdw
  • I-Sensys Mf553dw
  • I-Sensys Mf552dw
  • I-Sensys Mf455dw
  • I-Sensys Mf453dw
  • I-Sensys Lbp236dw
  • I-Sensys Lbp233dw
  • Imagerunner 1643if Ii
  • Imagerunner 1643i Ii
  • I-Sensys X 1238if Ii
  • I-Sensys X 1238i Ii
  • I-Sensys X 1238p Ii
  • I-Sensys X 1238pr Ii
Published: May 26, 2025

CVE-2025-35003

9.8
    Apache
  • Nuttx
Published: May 26, 2025

CVE-2025-23394

9.8
    Suse
  • Cyrus-Imapd
Published: May 26, 2025

CVE-2025-40671

9.3
    Aes Multimedia
  • Gestnet
Published: May 26, 2025

CVE-2025-40664

9.3
    Tcm
  • Tcman Gim
Published: May 26, 2025

CVE-2025-40650

8.7
    Clickedu
  • Clickedu
Published: May 26, 2025

CVE-2025-40665

8.7
    Tcm
  • Tmcan Gim
Published: May 26, 2025

CVE-2025-40666

8.7
    Tcm
  • Gim
Published: May 26, 2025

CVE-2025-40667

8.7
    Tcm
  • Gim
Published: May 26, 2025

CVE-2025-40672

8.5
    Grupo Espiral Ms
  • Proactivanet
Published: May 26, 2025

CVE-2025-41654

8.2
    *
  • *
Published: May 26, 2025

CVE-2025-41655

7.5
    *
  • *
Published: May 26, 2025

CVE-2025-5196

7.5
    Wing
  • Ftp Server
Published: May 26, 2025

CVE-2025-5180

7.3
    Wondershare
  • Filmora
Published: May 26, 2025

CVE-2025-23395

7.3
    Screen
  • Screen
Published: May 26, 2025

CVE-2025-5163

6.9
    Yangshare
  • Warehousemanager
Published: May 26, 2025

CVE-2025-5172

6.9
    Econtrata
  • Econtrata
Published: May 26, 2025

CVE-2025-5176

6.9
    Realce Tecnologia
  • Queue Ticket Kiosk
Published: May 26, 2025

CVE-2025-40653

6.9
    M3m
  • M3m Printer Server
Published: May 26, 2025

CVE-2025-5205

6.9
    1000 Projects Daily College Class Work Report Book
  • 1000 Projects Daily College Class Work Report Book
Published: May 26, 2025

CVE-2025-5208

6.9
    Sourcecodester
  • Online Hospital Management System
Published: May 26, 2025

CVE-2025-5210

6.9
    Phpgurukul
  • Employee Record Management System
Published: May 26, 2025

CVE-2025-5211

6.9
    Phpgurukul
  • Employee Record Management System
Published: May 26, 2025

CVE-2025-5212

6.9
    Phpgurukul
  • Employee Record Management System
Published: May 26, 2025

CVE-2025-4053

6.8
    Be-Tech
  • Mifare Classic Card
Published: May 26, 2025

CVE-2025-5164

6.3
    Perfreeblog
  • Perfreeblog
Published: May 26, 2025

CVE-2025-41441

6.3
    *
  • Mailform Pro
Published: May 26, 2025

CVE-2025-1985

6.1
    *
  • *
Published: May 26, 2025

CVE-2025-46805

5.7
    Gnu
  • Screen
Published: May 26, 2025

CVE-2025-23392

5.6
    Suse
  • Suse Manager
  • Suse Manager Server Module
Published: May 26, 2025

CVE-2025-4057

5.5
    Redhat
  • Activemq Artemis
Published: May 26, 2025

CVE-2025-5159

5.3
    H3c
  • Seccenter
Published: May 26, 2025

CVE-2025-5160

5.3
    H3c
  • Seccenter
Published: May 26, 2025

CVE-2025-5161

5.3
    H3c
  • Seccenter
Published: May 26, 2025

CVE-2025-5162

5.3
    H3c
  • Seccenter
Published: May 26, 2025

CVE-2025-5170

5.3
    Llisoft
  • Maita Training System
Published: May 26, 2025

CVE-2025-5171

5.3
    Llisoft
  • Maita Training System
Published: May 26, 2025

CVE-2025-5177

5.3
    Realce Tecnologia
  • Queue Ticket Kiosk
Published: May 26, 2025

CVE-2025-5178

5.3
    Realce Tecnologia
  • Queue Ticket Kiosk
  • Image File Handler
Published: May 26, 2025

CVE-2025-5182

5.3
    Summer Pearl Group
  • Vacation Rental Management Platform
Published: May 26, 2025

CVE-2025-5184

5.3
    Summer Pearl Group
  • Vacation Rental Management Platform
Published: May 26, 2025

CVE-2025-40652

5.3
    Covermanager
  • Booking Software
Published: May 26, 2025

CVE-2025-5185

5.3
    Summer Pearl Group
  • Vacation Rental Management Platform
Published: May 26, 2025

CVE-2025-5186

5.3
    Thinkgem
  • Jeesite
Published: May 26, 2025

CVE-2025-39498

5.3
    Spotlight
  • Social Media Feeds
Published: May 26, 2025

CVE-2025-46802

5.3
    Suse
  • Screen
Published: May 26, 2025

CVE-2025-5181

5.1
    Summer Pearl Group
  • Vacation Rental Management Platform
Published: May 26, 2025

CVE-2025-5183

5.1
    Summer Pearl Group
  • Vacation Rental Management Platform
Published: May 26, 2025

CVE-2025-40663

5.1
    I2a
  • I2a-Cronos
Published: May 26, 2025

CVE-2025-46803

5.1
    Screen
  • Screen
Published: May 26, 2025

CVE-2025-5206

5.1
    Pixelimity
  • Pixelimity
Published: May 26, 2025

CVE-2025-5207

5.1
    Sourcecodester
  • Client Database Management System
Published: May 26, 2025

CVE-2025-5165

4.8
    Assimp
  • Open Asset Import Library
Published: May 26, 2025

CVE-2025-5166

4.8
    Assimp
  • Open Asset Import Library
Published: May 26, 2025

CVE-2025-5167

4.8
    Assimp
  • Assimp
Published: May 26, 2025

CVE-2025-5168

4.8
    Assimp
  • Assimp
Published: May 26, 2025

CVE-2025-5169

4.8
    Assimp
  • Open Asset Import Library
Published: May 26, 2025

CVE-2025-5173

4.8
    Humansignal
  • Label-Studio-Ml-Backend
  • Pt File Handler
Published: May 26, 2025

CVE-2025-5174

4.8
    Erdogant
  • Pypickle
Published: May 26, 2025

CVE-2025-5175

4.8
    Erdogant
  • Pypickle
Published: May 26, 2025

CVE-2025-5179

4.8
    Realce Tecnologia
  • Queue Ticket Kiosk
Published: May 26, 2025

CVE-2025-5200

4.8
    Assimp
  • Assimp
Published: May 26, 2025

CVE-2025-5201

4.8
    Assimp
  • Assimp
Published: May 26, 2025

CVE-2025-5202

4.8
    Assimp
  • Open Asset Import Library
Published: May 26, 2025

CVE-2025-5203

4.8
    Assimp
  • Open Asset Import Library
Published: May 26, 2025

CVE-2025-5204

4.8
    Assimp
  • Open Asset Import Library
Published: May 26, 2025

CVE-2025-46804

2.0
    Screen
  • Screen
Published: May 26, 2025

CVE-2025-37992

None
    Linux
  • Kernel
Published: May 26, 2025
Click here to see more Vulnerabilities