Tag: 2025-05-28

4 Attack Reports | 238 Vulnerabilities

Attack reports

Mark Your Calendar: APT41 Innovative Tactics

In late October 2024, a government website was discovered hosting malware targeting multiple government entities. The malware, dubbed TOUGHPROGRESS, utilized Google Calendar for command and control. Attributed to APT41, a PRC-based actor, the campaign targeted global organizations in various sector…
voldemort
apt41
2025-05-28
toughprogress
google calendar
plusdrop
plusnject
dusttrap
Published: May 28, 2025
Downloadable IOCs: 6

Evolution of Zanubis, a banking Trojan for Android

Zanubis is an evolving Android banking Trojan that emerged in 2022, targeting financial institutions in Peru before expanding to virtual cards and crypto wallets. It impersonates legitimate apps to trick users into granting accessibility permissions, enabling extensive data theft and device control…
android
credential theft
banking trojan
2025-05-28
zanubis
sms hijacking
Published: May 28, 2025
Downloadable IOCs: 8

Vietnam-Nexus Hackers Distribute Malware Via Fake AI Video Generators

A hacking group with alleged ties to Vietnam has been exploiting social media ads promoting AI video generators to distribute malware since mid-2024. The campaign, discovered by Mandiant, uses fake websites mimicking legitimate AI tools to deploy payloads including Python-based infostealers and bac…
backdoor
xworm
infostealer
vietnam
2025-05-28
noodlophile stealer
frostrift
grimpull
social media ads
starkveil
ai video generators
Published: May 28, 2025
Downloadable IOCs: 1

Fake Bitdefender Site Spreads Trio of Malware Tools

A spoofed Bitdefender website is being used in a malicious campaign to distribute VenomRAT, StormKitty, and SilentTrinity malware. The fake site mimics Bitdefender's legitimate antivirus download page but redirects visitors to malicious files hosted on Bitbucket and Amazon S3. The malware package a…
phishing
venomrat
stormkitty
2025-05-28
silenttrinity
spoofed website
Published: May 28, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-22252

9.8
    Fortinet
  • Fortiproxy
  • Fortiswitchmanager
  • Fortios
Published: May 28, 2025

CVE-2025-3357

9.8
    Ibm
  • Tivoli Monitoring
Published: May 28, 2025

CVE-2025-45343

9.8
    Tenda
  • W18e
Published: May 28, 2025

CVE-2025-5277

9.4
    Aws
  • Aws-Mcp-Server
Published: May 28, 2025

CVE-2025-4009

9.3
    Evertz
  • Svdn 3080ipx-10g
Published: May 28, 2025

CVE-2025-27528

9.1
    Apache
  • Inlong
Published: May 28, 2025

CVE-2025-48749

9.1
    Netwrix
  • Directory Manager
Published: May 28, 2025

CVE-2025-4800

8.8
    Masterstudy
  • Masterstudy Lms Pro
Published: May 28, 2025

CVE-2025-48734

8.8
    Apache
  • Commons-Beanutils
Published: May 28, 2025

CVE-2025-45997

8.6
    Sourcecodester
  • Pharmacy Product Management System
Published: May 28, 2025

CVE-2025-25251

7.8
    Fortinet
  • Forticlient Mac
Published: May 28, 2025

CVE-2025-1753

7.8
    Llama-Index
  • Cli
Published: May 28, 2025

CVE-2025-32801

7.8
    Isc
  • Kea
Published: May 28, 2025

CVE-2025-5287

7.5
    Wordpress
  • Likes And Dislikes Plugin
Published: May 28, 2025

CVE-2025-4134

7.3
    Avast
  • Business Antivirus Linux
Published: May 28, 2025

CVE-2025-30087

7.2
    Best Practical
  • Request Tracker
Published: May 28, 2025

CVE-2025-31500

7.2
    Best Practical
  • Request Tracker
Published: May 28, 2025

CVE-2025-31501

7.2
    Best Practical
  • Request Tracker
Published: May 28, 2025

CVE-2025-27703

7.0
    Absolute
  • Secure Access
Published: May 28, 2025

CVE-2025-5295

6.9
    Freefloat
  • Ftp Server
Published: May 28, 2025

CVE-2025-5298

6.9
    Campcodes
  • Online Hospital Management System
Published: May 28, 2025

CVE-2025-5299

6.9
    Sourcecodester
  • Client Database Management System
Published: May 28, 2025

CVE-2025-27702

6.9
    Netmotion Software
  • Absolute Secure Access
Published: May 28, 2025

CVE-2025-4947

6.5
    Curl
  • Libcurl
Published: May 28, 2025

CVE-2025-27522

6.5
    Apache
  • Inlong
Published: May 28, 2025

CVE-2025-27526

6.5
    Apache
  • Inlong
Published: May 28, 2025

CVE-2025-4493

6.5
    Devolutions
  • Devolutions Server
Published: May 28, 2025

CVE-2025-36572

6.5
    Dell
  • Powerstore
Published: May 28, 2025

CVE-2025-5257

6.5
    Mautic
  • Mautic
Published: May 28, 2025

CVE-2025-4963

6.4
    Wordpress
  • Plugin
Published: May 28, 2025

CVE-2025-5082

6.1
    Wordpress
  • Wp Attachments
Published: May 28, 2025

CVE-2025-32802

6.1
    Isc
  • Kea
Published: May 28, 2025

CVE-2024-38341

5.9
    Ibm
  • Sterling Secure Proxy
Published: May 28, 2025

CVE-2025-1461

5.6
    Vuetify
  • Vuetify
Published: May 28, 2025

CVE-2025-5256

5.4
    Mautic
  • Mautic
Published: May 28, 2025

CVE-2025-47294

5.3
    Fortinet
  • Fortios
Published: May 28, 2025

CVE-2025-40673

5.3
    Dino Rank
  • Dino Rank
Published: May 28, 2025

CVE-2025-48927

5.3
    Spring
  • Spring Boot
Published: May 28, 2025

CVE-2024-47057

5.3
    Mautic
  • Mautic
Published: May 28, 2025

CVE-2025-40651

5.1
    Real Easy Store
  • Real Easy Store
Published: May 28, 2025

CVE-2024-47056

5.1
    Mautic
  • Mautic
Published: May 28, 2025

CVE-2025-48747

5.0
    Netwrix
  • Directory Manager
    Imanami
Published: May 28, 2025

CVE-2025-25029

4.9
    Ibm
  • Security Guardium
Published: May 28, 2025

CVE-2025-5297

4.8
    Sourcecodester
  • Computer Store System
Published: May 28, 2025

CVE-2025-27706

4.6
    Netmotionsoftware
  • Absolute Secure Access
Published: May 28, 2025

CVE-2025-25025

4.3
    Ibm
  • Security Guardium
Published: May 28, 2025

CVE-2025-25026

4.3
    Ibm
  • Security Guardium
Published: May 28, 2025

CVE-2024-51453

4.3
    Ibm
  • Sterling Secure Proxy
Published: May 28, 2025

CVE-2025-48925

4.3
    Telemessage
  • Telemessage
  • Tm Sgnl App
Published: May 28, 2025

CVE-2025-48926

4.3
    Telemessage
  • Telemessage
Published: May 28, 2025

CVE-2024-47055

4.3
    Mautic
  • Mautic
Published: May 28, 2025

CVE-2025-48928

4.0
    Telemessage
  • Service
    Java
Published: May 28, 2025

CVE-2025-48929

4.0
    Telemessage
  • Telemessage Service
Published: May 28, 2025

CVE-2025-32803

4.0
    Isc
  • Kea
Published: May 28, 2025

CVE-2025-24473

3.7
    Fortinet
  • Forticlient
Published: May 28, 2025

CVE-2025-47295

3.7
    Fortinet
  • Fortios
Published: May 28, 2025

CVE-2025-48931

3.2
    Telemessage
  • Telemessage
Published: May 28, 2025

CVE-2025-48930

2.8
    Telemessage
  • Telemessage Service
Published: May 28, 2025

CVE-2024-54020

2.3
    Fortinet
  • Fortimanager
Published: May 28, 2025

CVE-2025-46777

2.3
    Fortinet
  • Fortiportal
Published: May 28, 2025

CVE-2025-3864

2.3
    Hackney
  • Hackney
Published: May 28, 2025

CVE-2023-41839

None
    Fortinet
  • Fortinet Products
Published: May 28, 2025

CVE-2025-48841

None
    Fortinet
  • Fortinet
Published: May 28, 2025

CVE-2025-48842

None
    Fortinet
  • Fortinet
Published: May 28, 2025

CVE-2025-48843

None
    Fortinet
  • Fortinet
Published: May 28, 2025

CVE-2025-48844

None
    Fortinet
  • Fortinet Product
Published: May 28, 2025

CVE-2025-48845

None
    Fortinet
  • Fortinet
Published: May 28, 2025

CVE-2025-48846

None
    Fortinet
  • Fortinet
Published: May 28, 2025

CVE-2025-48847

None
    Fortinet
  • Fortinet
Published: May 28, 2025

CVE-2025-48848

None
    Fortinet
  • Fortinet
Published: May 28, 2025

CVE-2025-5025

None
    Curl
  • Libcurl
    Wolfssl
Published: May 28, 2025

CVE-2022-24067

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-25868

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-25870

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-25909

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-26037

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-26056

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-26072

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-26304

None
Published: May 28, 2025

CVE-2022-26424

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2025-48746

None
    Netwrix
  • Directory Manager
Published: May 28, 2025

CVE-2022-26038

None
    *
  • *
Published: May 28, 2025

CVE-2022-27876

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-27877

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-29924

None
Published: May 28, 2025

CVE-2022-32233

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-33893

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-34859

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-34860

None
Published: May 28, 2025

CVE-2022-36298

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-36406

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-38092

None
    *
  • *
Published: May 28, 2025

CVE-2022-40970

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-43493

None
    Intel
  • Unused
Published: May 28, 2025

CVE-2022-43496

None
Published: May 28, 2025

CVE-2022-43502

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2024-57336

None
    M2soft
  • Crownix
Published: May 28, 2025

CVE-2024-57337

None
    M2soft
  • Crownix
Published: May 28, 2025

CVE-2024-57338

None
    M2soft
  • Crownix Report And Ers
Published: May 28, 2025

CVE-2025-47748

None
    Netwrix
  • Directory Manager
Published: May 28, 2025

CVE-2022-21135

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-21161

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-21171

None
Published: May 28, 2025

CVE-2022-21175

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-21183

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-21185

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-21188

None
Published: May 28, 2025

CVE-2022-21206

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-21207

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-21795

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-23914

None
Published: May 28, 2025

CVE-2022-23917

None
    Intel
  • Intel Products
Published: May 28, 2025

CVE-2022-24914

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-26084

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-26515

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-27173

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-28694

None
    Intel
  • Intel Products
Published: May 28, 2025

CVE-2022-28698

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-29469

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-29478

None
    Intel
  • *-*
Published: May 28, 2025

CVE-2022-29870

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-29895

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-29896

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-29920

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-29921

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-30537

None
    Intel
  • Intel Products
Published: May 28, 2025

CVE-2022-30606

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-32232

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-32288

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-32571

None
Published: May 28, 2025

CVE-2022-32580

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-32581

None
Published: May 28, 2025

CVE-2022-32584

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-32762

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-33141

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-33143

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-33144

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-33145

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-33188

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-33197

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-33200

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-33310

None
    Intel
  • Unused
Published: May 28, 2025

CVE-2022-33895

None
    Intel
  • Unused
Published: May 28, 2025

CVE-2022-33899

None
Published: May 28, 2025

CVE-2022-33940

None
Published: May 28, 2025

CVE-2022-33949

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-33966

None
    Intel
  • Unused
Published: May 28, 2025

CVE-2022-33976

None
Published: May 28, 2025

CVE-2022-33979

None
Published: May 28, 2025

CVE-2022-34489

None
    Intel
  • Product
Published: May 28, 2025

CVE-2022-34649

None
    *
  • *
Published: May 28, 2025

CVE-2022-34653

None
Published: May 28, 2025

CVE-2022-34842

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-34846

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-34852

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-34856

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-34861

None
Published: May 28, 2025

CVE-2022-34863

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-35237

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-35274

None
Published: May 28, 2025

CVE-2022-35400

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-35727

None
Published: May 28, 2025

CVE-2022-35731

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-35732

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-35736

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-36281

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-36283

None
Published: May 28, 2025

CVE-2022-36286

None
Published: May 28, 2025

CVE-2022-36290

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-36291

None
Published: May 28, 2025

CVE-2022-36294

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-36297

None
Published: May 28, 2025

CVE-2022-36342

None
Published: May 28, 2025

CVE-2022-36353

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-36366

None
    Intel
  • Intel Device
Published: May 28, 2025

CVE-2022-36393

None
Published: May 28, 2025

CVE-2022-36395

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-36419

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-36420

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-36421

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-36426

None
Published: May 28, 2025

CVE-2022-36792

None
Published: May 28, 2025

CVE-2022-37408

None
Published: May 28, 2025

CVE-2022-38071

None
Published: May 28, 2025

CVE-2022-38084

None
Published: May 28, 2025

CVE-2022-40221

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-40688

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-40689

None
Published: May 28, 2025

CVE-2022-41341

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-41625

None
Published: May 28, 2025

CVE-2022-41626

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-41637

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-41782

None
Published: May 28, 2025

CVE-2022-41803

None
Published: May 28, 2025

CVE-2022-41834

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-41997

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-42480

None
Published: May 28, 2025

CVE-2022-42487

None
Published: May 28, 2025

CVE-2022-42700

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-42702

None
Published: May 28, 2025

CVE-2022-43444

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-43446

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-43498

None
Published: May 28, 2025

CVE-2022-43510

None
Published: May 28, 2025

CVE-2022-43511

None
    Intel
  • Intel Product
Published: May 28, 2025

CVE-2022-43659

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-43661

None
Published: May 28, 2025

CVE-2022-43669

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-44450

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-44452

None
Published: May 28, 2025

CVE-2022-44454

None
Published: May 28, 2025

CVE-2022-44607

None
Published: May 28, 2025

CVE-2022-44609

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-44613

None
Published: May 28, 2025

CVE-2022-44614

None
Published: May 28, 2025

CVE-2022-44618

None
Published: May 28, 2025

CVE-2022-45114

None
Published: May 28, 2025

CVE-2022-45117

None
Published: May 28, 2025

CVE-2022-45120

None
Published: May 28, 2025

CVE-2022-45125

None
    Intel
  • Unused
Published: May 28, 2025

CVE-2022-45878

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-46296

None
Published: May 28, 2025

CVE-2022-46419

None
Published: May 28, 2025

CVE-2022-46655

None
Published: May 28, 2025

CVE-2022-46729

None
    Intel
  • *
Published: May 28, 2025

CVE-2022-46734

None
Published: May 28, 2025

CVE-2022-46735

None
    Intel
  • *-*
Published: May 28, 2025

CVE-2022-46736

None
Published: May 28, 2025

CVE-2022-46739

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2022-47914

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2023-48726

None
Published: May 28, 2025

CVE-2023-49137

None
    Intel
  • Unused
Published: May 28, 2025

CVE-2023-49139

None
Published: May 28, 2025

CVE-2023-49604

None
    Intel
  • Intel
Published: May 28, 2025

CVE-2023-49904

None
Published: May 28, 2025

CVE-2023-50338

None
    Intel
  • *
Published: May 28, 2025

CVE-2023-51753

None
Published: May 28, 2025

CVE-2023-51756

None
Published: May 28, 2025
Click here to see more Vulnerabilities