Tag: 2025-06-09

1 Attack Reports | 178 Vulnerabilities

Attack reports

APT carries out attacks with data theft and crypto miner deployment

Librarian Ghouls, an APT group targeting entities in Russia and the CIS, has been conducting a campaign involving targeted phishing emails with malicious archives. The attackers use legitimate third-party software and scripts to establish remote access, steal credentials, and deploy an XMRig crypto…
apt
phishing
xmrig
russia
data theft
crypto mining
2025-06-09
legitimate tools
cis
industrial targets
Published: June 9, 2025
Downloadable IOCs: 55
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-32291

10.0
    Fantasticplugins
  • Sumo Affiliates Pro
Published: June 9, 2025

CVE-2025-48123

10.0
    Holest Engineering
  • Spreadsheet Price Changer For Woocommerce
  • Wp E-Commerce Light
Published: June 9, 2025

CVE-2025-49013

9.9
    Wilderforge
  • Wilderforge
    Github
Published: June 9, 2025

CVE-2025-48140

9.9
    Metalpriceapi
  • Metalpriceapi
Published: June 9, 2025

CVE-2025-31022

9.8
    Payu-India
  • Payu
Published: June 9, 2025

CVE-2025-31052

9.8
    Themeton
  • The Fashion - Model Agency One Page Beauty Theme
Published: June 9, 2025

CVE-2025-31396

9.8
    Themeton
  • Flap Business Wordpress Theme
Published: June 9, 2025

CVE-2025-31398

9.8
    Themeton
  • Pimp Creative Multipurpose
Published: June 9, 2025

CVE-2025-31429

9.8
    Themeton
  • Pressgrid Frontend Publish Reaction Multimedia Theme
Published: June 9, 2025

CVE-2025-48129

9.8
    Holest Engineering
  • Spreadsheet Price Changer
  • Wp E-Commerce Light
Published: June 9, 2025

CVE-2025-49652

9.8
    Lablup
  • Backendai
Published: June 9, 2025

CVE-2025-3835

9.6
    Zohocorp
  • Manageengine Exchange Reporter Plus
Published: June 9, 2025

CVE-2025-5893

9.3
    Honding Technology
  • Smart Parking Management System
Published: June 9, 2025

CVE-2025-24767

9.3
    Patchstack
  • Ticketbai Facturas Para Woocommerce
Published: June 9, 2025

CVE-2025-31059

9.3
    Woobewoo
  • Wbw Product Table Pro
Published: June 9, 2025

CVE-2025-31424

9.3
    Kamleshyadav
  • Wp Lead Capturing Pages
Published: June 9, 2025

CVE-2025-47608

9.3
    Sonalsinha21
  • Recover Abandoned Cart For Woocommerce
Published: June 9, 2025

CVE-2025-48122

9.3
    Holest Engineering
  • Spreadsheet Price Changer For Woocommerce
  • Wp E Commerce Light
Published: June 9, 2025

CVE-2025-48141

9.3
    Alex Zaytseff
  • Multi Cryptocurrency Payments
Published: June 9, 2025

CVE-2025-48281

9.3
    Mystyleplatform
  • Mystyle Custom Product Designer
Published: June 9, 2025

CVE-2025-30184

9.3
    Cyberdata
  • Intercom
Published: June 9, 2025

CVE-2025-30515

9.3
    Cyberdata
  • Intercom
Published: June 9, 2025

CVE-2025-31039

9.1
    Pixelgrade
  • Category Icon
Published: June 9, 2025

CVE-2025-49136

9.0
    Listmonk
  • Listmonk
Published: June 9, 2025

CVE-2025-31019

8.8
    Miniorange
  • Password Policy Manager
Published: June 9, 2025

CVE-2025-47561

8.8
    Romancode
  • Mapsvg
Published: June 9, 2025

CVE-2025-5894

8.7
    Honding Technology
  • Smart Parking Management System
Published: June 9, 2025

CVE-2025-48053

8.7
    Discourse
  • Discourse
Published: June 9, 2025

CVE-2025-26468

8.7
    Cyberdata
  • Intercom
Published: June 9, 2025

CVE-2025-30183

8.7
    Cyberdata
  • Intercom
Published: June 9, 2025

CVE-2025-5865

8.6
    Rt-Thread
  • Rt-Thread
Published: June 9, 2025

CVE-2025-5866

8.6
    Rt-Thread
  • Rt-Thread
Published: June 9, 2025

CVE-2025-5867

8.6
    Rt-Thread
  • Rt-Thread
Published: June 9, 2025

CVE-2025-5868

8.6
    Rt-Thread
  • Rt-Thread
Published: June 9, 2025

CVE-2025-5869

8.6
    Rt-Thread
  • Rt-Thread
Published: June 9, 2025

CVE-2025-48267

8.6
    Thimpress
  • Wp Pipes
Published: June 9, 2025

CVE-2025-31920

8.5
    Amentotech
  • Wp Guppy
Published: June 9, 2025

CVE-2025-47651

8.5
    Infility
  • Infility Global
Published: June 9, 2025

CVE-2025-49137

8.5
    Hax
  • Hax
Published: June 9, 2025

CVE-2025-49141

8.5
    Hax Cms
  • Hax Cms
Published: June 9, 2025

CVE-2025-27709

8.3
    Zohocorp
  • Manageengine Adaudit Plus
Published: June 9, 2025

CVE-2025-36528

8.3
    Zohocorp
  • Manageengine Adaudit Plus
Published: June 9, 2025

CVE-2025-41444

8.3
    Zohocorp
  • Manageengine Adaudit Plus
Published: June 9, 2025

CVE-2025-49006

8.2
    Wasp
  • Wasp
    Keycloak
Published: June 9, 2025

CVE-2025-48877

8.1
    Discourse
  • Discourse
Published: June 9, 2025

CVE-2023-25999

8.1
    Snstheme
  • Bodycenter Gym Fitness Woocommerce Wordpress Theme
Published: June 9, 2025

CVE-2023-26005

8.1
    Bzotheme
  • Fitrush
Published: June 9, 2025

CVE-2025-23974

8.1
    Ifkooo
  • One-Login
Published: June 9, 2025

CVE-2025-24768

8.1
    Snstheme
  • Nitan
Published: June 9, 2025

CVE-2025-24770

8.1
    Bzotheme
  • Craftxtore
Published: June 9, 2025

CVE-2025-26592

8.1
    Ancorathemes
  • Inset
Published: June 9, 2025

CVE-2025-27362

8.1
    Bzothemes
  • Petito
Published: June 9, 2025

CVE-2025-28888

8.1
    Bzotheme
  • Giftxtore
Published: June 9, 2025

CVE-2025-28944

8.1
    Snstheme
  • Avaz
Published: June 9, 2025

CVE-2025-28945

8.1
    Snstheme
  • Valen Sport Fashion Woocommerce Wordpress Theme
Published: June 9, 2025

CVE-2025-28992

8.1
    Snstheme
  • Sns Anton
Published: June 9, 2025

CVE-2025-32595

8.1
    Gavias
  • Krowd
Published: June 9, 2025

CVE-2025-39473

8.1
    Webgeniuslab
  • Seofy Core
Published: June 9, 2025

CVE-2025-39475

8.1
    Frenify
  • Arlo
Published: June 9, 2025

CVE-2025-48125

8.1
    Wp Event Manager
  • Wp Event Manager
Published: June 9, 2025

CVE-2025-48126

8.1
    G5theme
  • Essential Real Estate
Published: June 9, 2025

CVE-2025-49275

8.1
    Unfoldwp
  • Blogbyte
Published: June 9, 2025

CVE-2025-49276

8.1
    Unfoldwp
  • Blogmine
Published: June 9, 2025

CVE-2025-49277

8.1
    Unfoldwp
  • Blogprise
Published: June 9, 2025

CVE-2025-49278

8.1
    Unfoldwp
  • Blogty
Published: June 9, 2025

CVE-2025-49279

8.1
    Unfoldwp
  • Blogvy
Published: June 9, 2025

CVE-2025-49280

8.1
    Unfoldwp
  • Magty
Published: June 9, 2025

CVE-2025-49281

8.1
    Unfoldwp
  • Magways
Published: June 9, 2025

CVE-2025-49282

8.1
    Unfoldwp
  • Magze
Published: June 9, 2025

CVE-2025-49295

8.1
    Mikado-Themes
  • Medi Clinic
Published: June 9, 2025

CVE-2025-49296

8.1
    Mikado-Themes
  • Grandprix
Published: June 9, 2025

CVE-2025-49297

8.1
    Mikado-Themes
  • Grill And Chow
Published: June 9, 2025

CVE-2025-49651

8.1
    Lablup
  • Backendai
Published: June 9, 2025

CVE-2025-49653

8.0
    Lablup
  • Backendai
Published: June 9, 2025

CVE-2025-32308

7.6
    Looks Awesome
  • Team Builder
Published: June 9, 2025

CVE-2025-31045

7.5
    Elfsight
  • Elfsight Contact Form Widget
Published: June 9, 2025

CVE-2025-31050

7.5
    Appthaplugins
  • Apptha Slider Gallery
Published: June 9, 2025

CVE-2025-31635

7.5
    Lambertgroup
  • Clever
Published: June 9, 2025

CVE-2025-39476

7.5
    Magentech
  • Revo
Published: June 9, 2025

CVE-2025-48124

7.5
    Holest Engineering
  • Spreadsheet Price Changer
    Woocommerce
Published: June 9, 2025

CVE-2025-48130

7.5
    Spicethemes
  • Spice Blocks
Published: June 9, 2025

CVE-2025-48261

7.5
    Multivendorx
  • Multivendorx
Published: June 9, 2025

CVE-2025-49265

7.5
    Wp Swings
  • Membership For Woocommerce
Published: June 9, 2025

CVE-2025-45001

7.5
    React-Native-Keys
  • React-Native-Keys
Published: June 9, 2025

CVE-2025-49004

7.5
    Caido
  • Caido
Published: June 9, 2025

CVE-2025-49140

7.5
    Pion
  • Interceptor
Published: June 9, 2025

CVE-2025-5851

7.4
    Tenda
  • Ac15 Firmware
  • Ac15
Published: June 9, 2025

CVE-2025-5852

7.4
    Tenda
  • Ac6 Firmware
  • Ac6
Published: June 9, 2025

CVE-2025-5853

7.4
    Tenda
  • Ac6 Firmware
  • Ac6
Published: June 9, 2025

CVE-2025-5854

7.4
    Tenda
  • Ac6 Firmware
  • Ac6
Published: June 9, 2025

CVE-2025-5855

7.4
    Tenda
  • Ac6 Firmware
  • Ac6
Published: June 9, 2025

CVE-2025-5861

7.4
    Tenda
  • Ac7 Firmware
  • Ac7
Published: June 9, 2025

CVE-2025-5862

7.4
    Tenda
  • Ac7 Firmware
  • Ac7
Published: June 9, 2025

CVE-2025-5863

7.4
    Tenda
  • Ac5 Firmware
  • Ac5
Published: June 9, 2025

CVE-2025-5875

7.4
    Tp-Link
  • Tl-Ipc544ep-W4
Published: June 9, 2025

CVE-2025-5901

7.4
    Totolink
  • T10
Published: June 9, 2025

CVE-2025-5902

7.4
    Totolink
  • T10
Published: June 9, 2025

CVE-2025-40668

7.1
    Tman
  • Gim
Published: June 9, 2025

CVE-2025-40669

7.1
    Tcm
  • Gin
Published: June 9, 2025

CVE-2025-40670

7.1
    Tcm
  • Gamification Management
Published: June 9, 2025

CVE-2025-48062

7.1
    Discourse
  • Discourse
Published: June 9, 2025

CVE-2025-31057

7.1
    Lambertgroup
  • Universal Video Player
Published: June 9, 2025

CVE-2025-31058

7.1
    Lambertgroup
  • Revolution Video Player
Published: June 9, 2025

CVE-2025-31061

7.1
    Redqteam
  • Wishlist
Published: June 9, 2025

CVE-2025-31426

7.1
    Lambertgroup
  • Sticky Radio Player
Published: June 9, 2025

CVE-2025-31638

7.1
    Themeton
  • Spare
Published: June 9, 2025

CVE-2025-31917

7.1
    Lambertgroup
  • Universal Video Player
Published: June 9, 2025

CVE-2025-31925

7.1
    Lambertgroup
  • Shout
Published: June 9, 2025

CVE-2025-32305

7.1
    Sneeit
  • Flatnews
Published: June 9, 2025

CVE-2025-39539

7.1
    Quitenicestuff
  • Soho Hotel
Published: June 9, 2025

CVE-2025-47463

7.1
    Fahad Mahmood
  • Stock Locations For Woocommerce
Published: June 9, 2025

CVE-2025-47477

7.1
    Wp Time Capsule
  • Backup And Staging
Published: June 9, 2025

CVE-2025-47487

7.1
    Moreconvert
  • Mc Woocommerce Wishlist
Published: June 9, 2025

CVE-2025-47527

7.1
    Icegram
  • Icegram Collect
Published: June 9, 2025

CVE-2025-48143

7.1
    Salesup2019
  • Formulario De Contacto Salesup
Published: June 9, 2025

CVE-2025-48279

7.1
    Richard Perdaan
  • Wc Myparcel Belgium
Published: June 9, 2025

CVE-2025-5856

6.9
    Phpgurukul
  • Bp Monitoring Management System
Published: June 9, 2025

CVE-2025-5860

6.9
    Phpgurukul
  • Maid Hiring Management System
Published: June 9, 2025

CVE-2025-5870

6.9
    Trendnet
  • Tv-Ip121w
Published: June 9, 2025

CVE-2025-30507

6.9
    Cyberdata
  • Intercom
Published: June 9, 2025

CVE-2025-47511

6.8
    Nanbu
  • Welcart E-Commerce
Published: June 9, 2025

CVE-2025-29627

6.8
    Keeper
  • Keeperchat
Published: June 9, 2025

CVE-2025-47598

6.5
    Click5
  • History Log
Published: June 9, 2025

CVE-2025-48139

6.5
    Relentlo
  • Styleai
Published: June 9, 2025

CVE-2025-48147

6.5
    Cryptocloud
  • Crypto Payment Gateway
Published: June 9, 2025

CVE-2025-49138

6.5
    Haxcms
  • Haxcms
Published: June 9, 2025

CVE-2025-5864

6.3
    Tenda
  • Tdsee
Published: June 9, 2025

CVE-2025-49131

6.3
    Fastgpt
  • Fastgpt
  • Fastgpt Sandbox
Published: June 9, 2025

CVE-2025-4652

6.1
    Broadstreet
  • Broadstreet Wordpress Plugin
Published: June 9, 2025

CVE-2025-46178

6.1
    Cloudclassroom
  • Cloudclassroom Php Project
Published: June 9, 2025

CVE-2024-46452

6.1
    Vigybag
  • Vigybag Open Source Online Shop
Published: June 9, 2025

CVE-2025-49130

6.0
    Laravel
  • Translation Manager
  • Laravel
Published: June 9, 2025

CVE-2025-25207

5.7
    Red Hat
  • Authorino
  • Connectivity Link
Published: June 9, 2025

CVE-2025-25208

5.7
    Redhat
  • Authorino
Published: June 9, 2025

CVE-2025-25209

5.7
    Redhat
  • Connectivity Link
Published: June 9, 2025

CVE-2025-5871

5.5
    Papendorf
  • Sol Connect Center
Published: June 9, 2025

CVE-2025-5872

5.5
    Egauge
  • Egauge Eg3000
Published: June 9, 2025

CVE-2025-5876

5.5
    Lucky
  • Lm-520-Sc
  • Lm-520-Fsc
  • Lm-520-Fsc-Sam
Published: June 9, 2025

CVE-2025-45055

5.4
    Silverpeas
  • Silverpeas
Published: June 9, 2025

CVE-2025-45002

5.4
    Vigybag
  • Vigybag
Published: June 9, 2025

CVE-2025-46041

5.4
    Anchor
  • Cms
Published: June 9, 2025

CVE-2025-5857

5.3
    Code-Projects
  • Patient Record Management System
Published: June 9, 2025

CVE-2025-5858

5.3
    Phpgurukul
  • Nipah Virus Testing Management System
Published: June 9, 2025

CVE-2025-5859

5.3
    Phpgurukul
  • Nipah Virus Testing Management System
Published: June 9, 2025

CVE-2025-5873

5.3
    Hardy Barth
  • Echarge Hardy Barth Salia Plcc
Published: June 9, 2025

CVE-2025-5877

5.3
    Fengoffice
  • Feng Office
Published: June 9, 2025

CVE-2025-5880

5.3
    Whistle
  • Whistle
Published: June 9, 2025

CVE-2025-5881

5.3
    Code-Projects
  • Chat System
Published: June 9, 2025

CVE-2025-5885

5.3
    Konica Minolta
  • Bizhub
Published: June 9, 2025

CVE-2024-47081

5.3
    Requests
  • Requests
Published: June 9, 2025

CVE-2025-5888

5.3
    Jsnjfz
  • Webstack-Guns
Published: June 9, 2025

CVE-2025-5890

5.3
    Actions Toolkit
  • Glob
Published: June 9, 2025

CVE-2025-5891

5.3
    Unitech
  • Pm2
Published: June 9, 2025

CVE-2025-5892

5.3
    Rocketchat
  • Rocketchat
Published: June 9, 2025

CVE-2025-5895

5.3
    Metabase
  • Metabase
Published: June 9, 2025

CVE-2025-49139

5.3
    Hax
  • Hax Cms
Published: June 9, 2025

CVE-2025-5896

5.3
    Tarojs
  • Taro
Published: June 9, 2025

CVE-2025-5897

5.3
    Vuejs
  • Vue-Cli
Published: June 9, 2025

CVE-2025-5900

5.3
    Tenda
  • Ac9
Published: June 9, 2025

CVE-2025-40675

5.1
    Bagisto
  • Bagisto
Published: June 9, 2025

CVE-2025-5874

5.1
    Redash
  • Redash
Published: June 9, 2025

CVE-2025-5879

5.1
    Wukongopensource
  • Wukongcrm
Published: June 9, 2025

CVE-2025-5884

5.1
    Konica Minolta
  • Bizhub
Published: June 9, 2025

CVE-2025-5886

5.1
    Emlog
  • Emlog
Published: June 9, 2025

CVE-2025-5887

5.1
    Jsnjfz
  • Webstack-Guns
Published: June 9, 2025

CVE-2025-3581

4.8
    Wordpress
  • Newsletter
Published: June 9, 2025

CVE-2025-3582

4.8
    Wordpress
  • Newsletter
Published: June 9, 2025

CVE-2025-5898

4.8
    Gnu
  • Pspp
Published: June 9, 2025

CVE-2025-5899

4.8
    Gnu
  • Pspp
Published: June 9, 2025

CVE-2025-47711

4.3
    Redhat
  • Nbdkit
Published: June 9, 2025

CVE-2025-47712

4.3
    Nbdkit
  • Nbdkit
Published: June 9, 2025

CVE-2025-41437

4.3
    Zohocorp
  • Manageengine Opmanager
  • Manageengine Netflow Analyzer
  • Manageengine Network Configuration Manager
  • Manageengine Firewall Analyzer
  • Manageengine Oputils
Published: June 9, 2025

CVE-2025-5914

3.9
    Libarchive
  • Libarchive
Published: June 9, 2025

CVE-2025-5915

3.9
    Libarchive
  • Libarchive
Published: June 9, 2025

CVE-2025-5916

3.9
    Libarchive
  • Libarchive
Published: June 9, 2025

CVE-2025-5918

3.9
    Libarchive
  • Libarchive
Published: June 9, 2025

CVE-2025-5917

2.8
    Redhat
  • Libarchive
Published: June 9, 2025

CVE-2025-5889

2.3
    Juliangruber
  • Brace-Expansion
Published: June 9, 2025
Click here to see more Vulnerabilities