Tag: 2025-06-16

2 Attack Reports | 95 Vulnerabilities

Attack reports

Clone, Compile, Compromise: Open-Source Malware Trap on GitHub

A newly identified threat actor, Water Curse, is exploiting GitHub to deliver weaponized repositories containing multistage malware. The group has been linked to at least 76 GitHub accounts, targeting cybersecurity professionals, game developers, and DevOps teams. Their malware enables data exfiltr…
supply chain
persistence
privilege escalation
data exfiltration
open-source
github
anti-debugging
2025-06-16
backdoor.js.dullrat
multistage malware
Published: June 16, 2025
Downloadable IOCs: 0

Fileless AsyncRAT Distributed Via Clickfix Technique Targeting German Speaking Users

A fileless AsyncRAT campaign is targeting German-speaking users through Clickfix-themed websites. The attack uses a fake 'I'm not a robot' prompt to execute malicious PowerShell code, which downloads and runs obfuscated C# code in memory. This technique enables full remote access, credential theft,…
obfuscation
powershell
asyncrat
c2
in-memory execution
fileless
clickfix
2025-06-16
german-speaking
Published: June 16, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-6172

9.8
    Afmobi
  • Boomplayer
Published: June 16, 2025

CVE-2025-47868

9.8
    Apache
  • Nuttx
Published: June 16, 2025

CVE-2025-47869

9.8
    Apache
  • Nuttx
Published: June 16, 2025

CVE-2025-6169

9.3
    Hamastar Technology
  • Wimp
Published: June 16, 2025

CVE-2025-40916

9.1
    Mojolicious
  • Plugin Captchapng
Published: June 16, 2025

CVE-2025-49794

9.1
    Gnome
  • Libxml2
Published: June 16, 2025

CVE-2025-49796

9.1
    Gnome
  • Libxml2
Published: June 16, 2025

CVE-2025-6098

8.9
    Utt
  • Utt 750w
Published: June 16, 2025

CVE-2025-6121

8.9
    D-Link
  • Dir-632
Published: June 16, 2025

CVE-2025-25264

8.8
    *
  • *
Published: June 16, 2025

CVE-2025-4987

8.7
    3ds
  • Project Portfolio Manager
Published: June 16, 2025

CVE-2025-40728

8.7
    Customer Support System
  • Customer Support System
Published: June 16, 2025

CVE-2025-3602

8.7
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: June 16, 2025

CVE-2025-3526

8.7
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: June 16, 2025

CVE-2025-3594

8.6
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: June 16, 2025

CVE-2025-5309

8.6
    Generic
  • Remote Support
  • Privileged Remote Access
Published: June 16, 2025

CVE-2025-3464

8.4
    Asus
  • Armoury Crate
Published: June 16, 2025

CVE-2025-4565

8.2
    Google
  • Protobuf
Published: June 16, 2025

CVE-2025-32798

8.2
    Conda
  • Conda-Build
Published: June 16, 2025

CVE-2025-36632

7.8
    Tenable
  • Tenable Agent
Published: June 16, 2025

CVE-2025-6087

7.8
    Opennextjs
  • Cloudflare
Published: June 16, 2025

CVE-2025-25265

7.5
    *
  • Web Application
Published: June 16, 2025

CVE-2025-49795

7.5
    Gnome
  • Libxml2
Published: June 16, 2025

CVE-2025-6102

7.4
    Wifi-Soft
  • Unibox Controller
Published: June 16, 2025

CVE-2025-6103

7.4
    Wifi-Soft
  • Unibox Controller
Published: June 16, 2025

CVE-2025-6104

7.4
    Wifi-Soft
  • Unibox Controller
Published: June 16, 2025

CVE-2025-6110

7.4
    Tenda
  • Fh1201
Published: June 16, 2025

CVE-2025-6111

7.4
    Tenda
  • Fh1205
Published: June 16, 2025

CVE-2025-6112

7.4
    Tenda
  • Fh1205
Published: June 16, 2025

CVE-2025-6113

7.4
    Tenda
  • Fh1203
Published: June 16, 2025

CVE-2025-6114

7.4
    D-Link
  • Dir-619l
Published: June 16, 2025

CVE-2025-6115

7.4
    D-Link
  • Dir-619l
Published: June 16, 2025

CVE-2025-6128

7.4
    Totolink
  • Ex1200t
Published: June 16, 2025

CVE-2025-6129

7.4
    Totolink
  • Ex1200t
Published: June 16, 2025

CVE-2025-6130

7.4
    Totolink
  • Ex1200t
Published: June 16, 2025

CVE-2025-6177

7.4
    Google
  • Chrome Os
Published: June 16, 2025

CVE-2025-6137

7.4
    Totolink
  • T10
Published: June 16, 2025

CVE-2025-6138

7.4
    Totolink
  • T10
Published: June 16, 2025

CVE-2025-6143

7.4
    Totolink
  • Ex1200t
Published: June 16, 2025

CVE-2025-6144

7.4
    Totolink
  • Ex1200t
Published: June 16, 2025

CVE-2025-6145

7.4
    Totolink
  • Ex1200t
Published: June 16, 2025

CVE-2025-32800

7.2
    Anaconda
  • Conda-Build
Published: June 16, 2025

CVE-2025-6116

6.9
    Das Parking Management System
  • Parking Management System
Published: June 16, 2025

CVE-2025-6117

6.9
    Das Parking Management System
  • Parking Management System
Published: June 16, 2025

CVE-2025-6118

6.9
    Das Parking Management System
  • Parking Management System
Published: June 16, 2025

CVE-2025-6123

6.9
    Code-Projects
  • Restaurant Order System
Published: June 16, 2025

CVE-2025-6124

6.9
    Code-Projects
  • Restaurant Order System
Published: June 16, 2025

CVE-2025-6132

6.9
    Chanjet
  • Chanjet Crm
Published: June 16, 2025

CVE-2025-5689

6.4
    Ubuntu
  • Authd
Published: June 16, 2025

CVE-2025-32797

6.0
    Conda
  • Conda-Build
Published: June 16, 2025

CVE-2025-32799

5.6
    Conda
  • Conda-Build
Published: June 16, 2025

CVE-2025-6097

5.5
    Utt
  • Utt 进取 750w
Published: June 16, 2025

CVE-2025-6099

5.5
    Szluyu99
  • Gin-Vue-Blog
Published: June 16, 2025

CVE-2025-6096

5.3
    Codesiddhant
  • Jasmin Ransomware
Published: June 16, 2025

CVE-2025-6100

5.3
    Realguoshuai
  • Open-Video-Cms
Published: June 16, 2025

CVE-2025-6105

5.3
    Jflyfox
  • Jfinal Cms
Published: June 16, 2025

CVE-2025-6106

5.3
    Wukongopensource
  • Wukongcrm
Published: June 16, 2025

CVE-2025-6108

5.3
    Hansonwang99
  • Spring-Boot-In-Action
Published: June 16, 2025

CVE-2025-6109

5.3
    Javahongxi
  • Whatsmars
Published: June 16, 2025

CVE-2025-6122

5.3
    Code-Projects
  • Restaurant Order System
Published: June 16, 2025

CVE-2025-6126

5.3
    Phpgurukul
  • Rail Pass Management System
Published: June 16, 2025

CVE-2025-6133

5.3
    Projectworlds
  • Life Insurance Management System
Published: June 16, 2025

CVE-2025-6134

5.3
    Projectworlds
  • Life Insurance Management System
Published: June 16, 2025

CVE-2025-6135

5.3
    Projectworlds
  • Life Insurance Management System
Published: June 16, 2025

CVE-2025-6136

5.3
    Projectworlds
  • Life Insurance Management System
Published: June 16, 2025

CVE-2025-6142

5.3
    Intera
  • Inhire
Published: June 16, 2025

CVE-2025-48992

5.2
    Group-Office
  • Group-Office
Published: June 16, 2025

CVE-2025-6101

5.1
    Letta-Ai
  • Letta
Published: June 16, 2025

CVE-2025-40726

5.1
    Nosto
  • Nosto
Published: June 16, 2025

CVE-2025-40727

5.1
    Phoenix
  • Phoenix Site Cms
Published: June 16, 2025

CVE-2025-6127

5.1
    Phpgurukul
  • Nipah Virus Testing Management System
Published: June 16, 2025

CVE-2025-2327

5.1
    Purestorage
  • Flasharray
Published: June 16, 2025

CVE-2025-47951

4.9
    Weblate
  • Weblate
Published: June 16, 2025

CVE-2025-2091

4.8
    M-Files
  • M-Files Mobile Applications
Published: June 16, 2025

CVE-2025-40729

4.8
    Customer Support
  • Customer Support System
Published: June 16, 2025

CVE-2025-4748

4.8
    Erlang
  • Otp
  • Stdlib
Published: June 16, 2025

CVE-2025-6119

4.8
    Assimp
  • Assimp
Published: June 16, 2025

CVE-2025-6120

4.8
    Assimp
  • Assimp
Published: June 16, 2025

CVE-2025-6125

4.8
    Phpgurukul
  • Rail Pass Management System
Published: June 16, 2025

CVE-2025-6131

4.8
    Codeastro
  • Food Ordering System
Published: June 16, 2025

CVE-2025-6140

4.8
    Gabime
  • Spdlog
Published: June 16, 2025

CVE-2025-6141

4.8
    Gnu
  • Ncurses
Published: June 16, 2025

CVE-2025-24388

3.8
    Otrs
  • Otrs
  • Community Edition
Published: June 16, 2025

CVE-2025-6170

2.5
    Redhat
  • Xmllint
Published: June 16, 2025

CVE-2025-6107

2.3
    Comfyanonymous
  • Comfyui
Published: June 16, 2025

CVE-2025-49134

2.1
    Weblate
  • Weblate
Published: June 16, 2025

CVE-2025-6139

2.0
    Totolink
  • T10
Published: June 16, 2025

CVE-2025-46710

None
    Kernel
  • *
Published: June 16, 2025

CVE-2025-48976

None
    Apache
  • Commons Fileupload
Published: June 16, 2025

CVE-2025-48988

None
    Apache
  • Tomcat
Published: June 16, 2025

CVE-2025-49124

None
    Apache
  • Tomcat
Published: June 16, 2025

CVE-2025-49125

None
    Apache
  • Tomcat
Published: June 16, 2025

CVE-2025-6179

None
    Google
  • Chromeos
Published: June 16, 2025

CVE-2025-27587

None
    Openssl
  • Openssl
Published: June 16, 2025

CVE-2025-43200

None
    Apple
  • Watchos
  • Macos
  • Ios
  • Ipados
  • Visionos
Published: June 16, 2025
Click here to see more Vulnerabilities