Tag: 2025-06-02

1 Attack Reports | 117 Vulnerabilities

Attack reports

PyPI Supply Chain Attack Uncovered: Colorama and Colorizr Name Confusion

A malicious package campaign targeting Python and NPM users on Windows and Linux has been discovered. The attack uses typo-squatting and name-confusion tactics against the popular colorama Python package and the similar colorizr JavaScript package. Multiple packages with risky payloads were uploade…
typosquatting
remote-access
npm
pypi
data-exfiltration
supply-chain-attack
2025-06-02
colorama
colorizr
Published: June 2, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-49113

9.9
    Roundcube
  • Roundcube Webmail
Published: June 2, 2025

CVE-2025-20672

9.8
    Mediatek
  • Bluetooth Driver
Published: June 2, 2025

CVE-2025-20674

9.8
    Mediatek
  • Wlan Ap Driver
Published: June 2, 2025

CVE-2025-1750

9.8
    Llama Index
  • Duckdbvectorstore
Published: June 2, 2025

CVE-2025-37093

9.8
    Hpe
  • Storeonce Software
Published: June 2, 2025

CVE-2025-0324

9.4
    Axis
  • Device Configuration
  • Vapix
Published: June 2, 2025

CVE-2025-23099

9.1
    Samsung
  • Exynos 1480
  • Exynos 2400
Published: June 2, 2025

CVE-2025-5086

9.0
    3ds
  • Delmia Apriso
Published: June 2, 2025

CVE-2025-0358

8.8
    Axis
  • Vapix Device Configuration
Published: June 2, 2025

CVE-2025-1051

8.8
    Sonos
  • Era 300
Published: June 2, 2025

CVE-2025-46807

8.7
    Sslh
  • Sslh
Published: June 2, 2025

CVE-2025-48387

8.7
    Tar-Fs
  • Tar-Fs
Published: June 2, 2025

CVE-2025-4010

8.6
    Netcom
  • Ntc 6200
  • Nwl 222
Published: June 2, 2025

CVE-2025-5113

8.6
    Diviotec
  • Professional Series
Published: June 2, 2025

CVE-2025-48990

8.6
    Nekernal
  • Nekernal
Published: June 2, 2025

CVE-2024-11857

8.5
    Realtek
  • Bluetooth Hci Adaptor
Published: June 2, 2025

CVE-2025-5455

8.4
    Qt
  • Qt
Published: June 2, 2025

CVE-2024-12168

8.4
    Yandex
  • Telemost
Published: June 2, 2025

CVE-2024-48877

8.4
    Xis2
  • Xis2
Published: June 2, 2025

CVE-2024-52035

8.4
    Catdoc
  • Catdoc
Published: June 2, 2025

CVE-2024-54028

8.4
    Catdoc
  • Catdoc
Published: June 2, 2025

CVE-2025-3260

8.3
    Grafana
  • Grafana
Published: June 2, 2025

CVE-2024-57783

8.1
    Dot
  • Dot
Published: June 2, 2025

CVE-2025-20298

8.0
    Splunk
  • Splunk Universal Forwarder
Published: June 2, 2025

CVE-2025-25179

7.8
    Nvidia
  • Gpu
    Amd
    Intel
    *
Published: June 2, 2025

CVE-2025-0073

7.8
    Arm
  • Valhall Gpu Kernel Driver
  • Arm 5th Gen Gpu Architecture Kernel Driver
Published: June 2, 2025

CVE-2025-0819

7.8
    Arm
  • Arm Bifrost Gpu Kernel Driver
  • Arm Valhall Gpu Kernel Driver
  • Arm 5th Gen Gpu Architecture Kernel Driver
Published: June 2, 2025

CVE-2025-1246

7.8
    Arm
  • Bifrost Gpu Userspace Driver
  • Valhall Gpu Userspace Driver
  • Arm 5th Gen Gpu Architecture Userspace Driver
Published: June 2, 2025

CVE-2025-26396

7.8
    Solarwinds
  • Dameware Mini Remote Control
Published: June 2, 2025

CVE-2025-5036

7.8
    Autodesk
  • Revit
Published: June 2, 2025

CVE-2025-23105

7.8
    Samsung
  • Exynos 2200
  • Exynos 1480
  • Exynos 2400
Published: June 2, 2025

CVE-2025-20678

7.5
    Mediatek
  • Ims
Published: June 2, 2025

CVE-2025-29785

7.5
    Quic-Go
  • Quic-Go
Published: June 2, 2025

CVE-2025-48957

7.5
    Astrbot
  • Astrbot
Published: June 2, 2025

CVE-2025-37089

7.5
    Hpe
  • Storeonce Software
Published: June 2, 2025

CVE-2025-37092

7.5
    Hpe
  • Storeonce
Published: June 2, 2025

CVE-2025-37096

7.5
    Hpe
  • Storeonce Software
Published: June 2, 2025

CVE-2025-48866

7.5
    Modsecurity
  • Modsecurity
Published: June 2, 2025

CVE-2025-27956

7.5
    Weblaudos
  • Weblaudos
Published: June 2, 2025

CVE-2024-57459

7.3
    Cloudclassroom
  • Php Project
Published: June 2, 2025

CVE-2025-45542

7.3
    Cloudclassroom
  • Php Project
Published: June 2, 2025

CVE-2025-37091

7.2
    Hpe
  • Storeonce Software
Published: June 2, 2025

CVE-2025-48940

7.2
    Mybb
  • Mybb
Published: June 2, 2025

CVE-2025-5434

6.9
    Aem Solutions
  • Aem Solutions Cms
Published: June 2, 2025

CVE-2025-5435

6.9
    Marwal Infotech
  • Cms
Published: June 2, 2025

CVE-2025-5436

6.9
    Multilaser
  • Sirius
Published: June 2, 2025

CVE-2025-5437

6.9
    Multilaser
  • Sirius Re016
Published: June 2, 2025

CVE-2025-46806

6.9
    Sslh
  • Sslh
Published: June 2, 2025

CVE-2025-37090

6.9
    Hpe
  • Storeonce
Published: June 2, 2025

CVE-2025-48994

6.9
    Signxml
  • Signxml
Published: June 2, 2025

CVE-2025-48995

6.9
    Github
  • Signxml
Published: June 2, 2025

CVE-2024-7074

6.8
    Wso2
  • Wso2
Published: June 2, 2025

CVE-2025-20001

6.5
    High-Logic
  • Fontcreator
Published: June 2, 2025

CVE-2025-44172

6.5
    Tenda
  • Ac6 Firmware
  • Ac6
Published: June 2, 2025

CVE-2024-40113

6.5
    Sitecom
  • Wlx-2006
Published: June 2, 2025

CVE-2024-7073

6.5
    Wso2
  • Wso2 Product
Published: June 2, 2025

CVE-2025-23104

6.5
    Samsung
  • Samsung Exynos 2200
  • Samsung Exynos 1480
  • Samsung Exynos 2400
Published: June 2, 2025

CVE-2025-27953

6.5
    Clinical Collaboration Platform
  • Clinical Collaboration Platform
Published: June 2, 2025

CVE-2025-47585

6.5
    Mage People
  • Booking And Rental Manager
Published: June 2, 2025

CVE-2025-3919

6.4
    Wordpress
  • Comments Import Export
Published: June 2, 2025

CVE-2025-47289

6.3
    Ce Phoenix
  • Ce Phoenix
Published: June 2, 2025

CVE-2025-48955

6.2
    Para
  • Para
Published: June 2, 2025

CVE-2024-40114

6.1
    Sitecom
  • Wxl-2006
Published: June 2, 2025

CVE-2025-37095

5.9
    Hpe
  • Storeonce
Published: June 2, 2025

CVE-2024-40112

5.9
    Sitecom
  • Wlx-2006
Published: June 2, 2025

CVE-2025-20673

5.5
    Mediatek
  • Wlan
Published: June 2, 2025

CVE-2025-20675

5.5
    Mediatek
  • Wlan Sta Driver
Published: June 2, 2025

CVE-2025-20676

5.5
    Mediatek
  • Wlan Sta Driver
Published: June 2, 2025

CVE-2025-20677

5.5
    Mediatek
  • Bluetooth Driver
Published: June 2, 2025

CVE-2025-47272

5.5
    Ce Phoenix
  • Ce Phoenix Ecommerce
Published: June 2, 2025

CVE-2025-48958

5.5
    Froxlor
  • Froxlor
Published: June 2, 2025

CVE-2025-37094

5.5
    Hpe
  • Storeonce
Published: June 2, 2025

CVE-2025-44115

5.4
    Cotonti
  • Cotonti Siena
Published: June 2, 2025

CVE-2024-1440

5.4
    Wso2
  • Wso2 Products
Published: June 2, 2025

CVE-2025-45387

5.4
    Osticket
  • Osticket
Published: June 2, 2025

CVE-2025-5421

5.3
    Juzaweb
  • Juzaweb Cms
Published: June 2, 2025

CVE-2025-5422

5.3
    Juzaweb
  • Juzaweb Cms
Published: June 2, 2025

CVE-2025-5423

5.3
    Juzaweb
  • Juzaweb Cms
Published: June 2, 2025

CVE-2025-5424

5.3
    Juzaweb
  • Juzaweb Cms
Published: June 2, 2025

CVE-2025-5425

5.3
    Juzaweb
  • Cms
Published: June 2, 2025

CVE-2025-5426

5.3
    Juzaweb
  • Juzaweb Cms
Published: June 2, 2025

CVE-2025-5427

5.3
    Juzaweb
  • Juzaweb Cms
Published: June 2, 2025

CVE-2025-5428

5.3
    Juzaweb
  • Cms
Published: June 2, 2025

CVE-2025-5429

5.3
    Juzaweb
  • Cms
Published: June 2, 2025

CVE-2025-5430

5.3
    Assamlook
  • Assamlook Cms
Published: June 2, 2025

CVE-2025-5431

5.3
    Assamlook
  • Cms
Published: June 2, 2025

CVE-2025-5432

5.3
    Assamlook
  • Cms
Published: June 2, 2025

CVE-2025-5433

5.3
    Fengoffice
  • Feng Office
Published: June 2, 2025

CVE-2025-5438

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5439

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5440

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5441

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5442

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5443

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5444

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5445

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5446

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-5447

5.3
    Linksys
  • Re6500
  • Re6250
  • Re6300
  • Re6350
  • Re7000
  • Re9000
Published: June 2, 2025

CVE-2025-48941

5.3
    Mybb
  • Mybb
Published: June 2, 2025

CVE-2025-48996

5.3
    Hax
  • Open-Apis
Published: June 2, 2025

CVE-2024-8008

5.2
    *
  • *
Published: June 2, 2025

CVE-2025-5412

5.1
    Mist
  • Community Edition
Published: June 2, 2025

CVE-2025-5420

5.1
    Juzaweb
  • Juzaweb Cms
Published: June 2, 2025

CVE-2025-3454

5.0
    Grafana
  • Grafana
  • Alertmanager
    Prometheus
Published: June 2, 2025

CVE-2025-1485

4.8
    Real Cookie Banner
  • Real Cookie Banner
  • Real Cookie Banner Pro
Published: June 2, 2025

CVE-2025-48494

4.8
    Gokapi
  • Gokapi
Published: June 2, 2025

CVE-2025-48495

4.8
    Gokapi
  • Gokapi
Published: June 2, 2025

CVE-2025-1235

4.3
    *
  • *
Published: June 2, 2025

CVE-2025-0325

4.3
    Axis
  • Axis Device
Published: June 2, 2025

CVE-2024-3509

4.3
    Wso2
  • Wso2 Product
Published: June 2, 2025

CVE-2025-20297

4.3
    Splunk
  • Splunk Enterprise
  • Splunk Cloud Platform
Published: June 2, 2025

CVE-2025-49069

4.3
    Cimatti
  • Contact Forms
Published: June 2, 2025

CVE-2025-3951

4.1
    Wp-Optimize
  • Wp-Optimize
Published: June 2, 2025

CVE-2025-49112

3.1
    Valkey
  • Valkey
Published: June 2, 2025

CVE-2025-48745

None
    *
  • *
Published: June 2, 2025

CVE-2025-27954

None
    Clinical Collaboration Platform
  • Clinical Collaboration Platform
Published: June 2, 2025

CVE-2025-27955

None
    Clinical Collaboration Platform
  • Clinical Collaboration Platform
Published: June 2, 2025
Click here to see more Vulnerabilities