Tag: 2025-06-17

3 Attack Reports | 90 Vulnerabilities

Attack reports

AsyncRAT Campaign Continues to Evade Endpoint Detection

A wide-ranging phishing campaign has been identified that enables threat actors to bypass traditional security controls and delay detection. The campaign, tracked since 2024, has facilitated remote surveillance, credential theft, lateral movement, data exfiltration, and ransomware across numerous o…
obfuscation
xworm
phishing
remcos
asyncrat
venomrat
purehvnc
cloud services
cybercriminal
trycloudflare
remote access trojan
2025-06-17
python scripts
endpoint evasion
Published: June 17, 2025
Downloadable IOCs: 0

Exploring a New KimJongRAT Stealer Variant and Its PowerShell Implementation

This article analyzes two new variants of the KimJongRAT stealer: a Portable Executable (PE) variant and a PowerShell implementation. Both variants use a multi-stage infection process, starting with a Windows shortcut (LNK) file that downloads a dropper from a content delivery network. The PE varia…
powershell
cryptocurrency
stealer
multi-stage infection
browser extensions
2025-06-17
kimjongrat
content delivery network
Published: June 17, 2025
Downloadable IOCs: 0

Fog Ransomware: Unusual Toolset Used in Recent Attack

A financial institution in Asia was targeted by Fog ransomware in May 2025, using an atypical toolset including legitimate employee monitoring software and open-source pentesting tools. The attackers deployed Syteca, GC2, Adaptix, and Stowaway, which are uncommon in ransomware attacks. They remaine…
espionage
data theft
persistence
lateral movement
CVE-2024-40711
fog ransomware
fog
asia
2025-06-12
unusual toolset
employee monitoring software
financial institution
pentesting tools
2025-06-17
Published: June 17, 2025
Linked vulnerabilities : CVE-2024-40711 (CVSS 9.8)
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-32510

10.0
    Ovatheme
  • Ovatheme Events Manager
Published: June 17, 2025

CVE-2025-49071

10.0
    Nasatheme
  • Flozen
Published: June 17, 2025

CVE-2025-47452

9.9
    Rextheme
  • Wp Vr
Published: June 17, 2025

CVE-2025-47559

9.9
    Romancode
  • Mapsvg
Published: June 17, 2025

CVE-2025-30618

9.8
    Yuliaz
  • Rapyd Payment Extension
Published: June 17, 2025

CVE-2025-31919

9.8
    Themeton
  • Spare
Published: June 17, 2025

CVE-2025-5777

9.3
    Citrix
  • Netcaler Adc
  • Netcaler Gateway
  • Netcaler Management Interface
Published: June 17, 2025

CVE-2025-24773

9.3
    Mojoomla
  • Wpcrm
Published: June 17, 2025

CVE-2025-39479

9.3
    Smartiolabs
  • Smart Notification
Published: June 17, 2025

CVE-2025-47573

9.3
    Mojoomla
  • School Management
Published: June 17, 2025

CVE-2025-48274

9.3
    Wpjobportal
  • Wp Job Portal
Published: June 17, 2025

CVE-2025-4404

9.1
    Freeipa
  • Freeipa
Published: June 17, 2025

CVE-2025-5349

8.7
    Citrix
  • Netscaler Adc
  • Netscaler Gateway
Published: June 17, 2025

CVE-2025-0320

8.6
    Citrix
  • Secure Access Client
Published: June 17, 2025

CVE-2025-30562

8.5
    Wpdistillery
  • Navigation Tree Elementor
Published: June 17, 2025

CVE-2025-39486

8.5
    Valvepress
  • Rankie
Published: June 17, 2025

CVE-2025-48118

8.5
    Wpexperts
  • Woocommerce Partial Shipment
Published: June 17, 2025

CVE-2025-3515

8.1
    Wordpress
  • Contact Form 7
Published: June 17, 2025

CVE-2025-24761

8.1
    Snstheme
  • Dsk
Published: June 17, 2025

CVE-2025-28991

8.1
    Snstheme
  • Evon
Published: June 17, 2025

CVE-2025-29002

8.1
    Snstheme
  • Simen
Published: June 17, 2025

CVE-2025-6020

7.8
    Redhat
  • Linux-Pam
Published: June 17, 2025

CVE-2025-28972

7.6
    Suhas Surse
  • Wp Employee Attendance System
Published: June 17, 2025

CVE-2025-32549

7.5
    Mojoomla
  • Wpgym
Published: June 17, 2025

CVE-2025-47572

7.5
    Mojoomla
  • School Management
Published: June 17, 2025

CVE-2025-6146

7.4
    Totolink
  • X15
Published: June 17, 2025

CVE-2025-6147

7.4
    Totolink
  • A702r
Published: June 17, 2025

CVE-2025-6148

7.4
    Totolink
  • A3002ru
Published: June 17, 2025

CVE-2025-6149

7.4
    Totolink
  • A3002r
Published: June 17, 2025

CVE-2025-6150

7.4
    Totolink
  • X15
Published: June 17, 2025

CVE-2025-6151

7.4
    Tp-Link
  • Tl-Wr940n
Published: June 17, 2025

CVE-2025-6158

7.4
    D-Link
  • Dir-665
Published: June 17, 2025

CVE-2025-6162

7.4
    Totolink
  • Ex1200t
Published: June 17, 2025

CVE-2025-6163

7.4
    Totolink
  • A3002ru
Published: June 17, 2025

CVE-2025-6164

7.4
    Totolink
  • A3002r
Published: June 17, 2025

CVE-2025-6165

7.4
    Totolink
  • X15
Published: June 17, 2025

CVE-2025-4879

7.3
    Citrix
  • Citrix Workspace App
Published: June 17, 2025

CVE-2025-3774

7.2
    Wise
  • Chat
Published: June 17, 2025

CVE-2025-30988

7.1
    Creativemedia
  • Elite Video Player
Published: June 17, 2025

CVE-2025-39508

7.1
    Nasatheme
  • Nasa Core
Published: June 17, 2025

CVE-2025-48145

7.1
    Wp Tao
  • Track, Analyze & Optimize
Published: June 17, 2025

CVE-2025-48333

7.1
    Wpquark
  • Eform
Published: June 17, 2025

CVE-2025-6153

6.9
    Phpgurukul
  • Hostel Management System
Published: June 17, 2025

CVE-2025-6154

6.9
    Phpgurukul
  • Hostel Management System
Published: June 17, 2025

CVE-2025-6155

6.9
    Phpgurukul
  • Hostel Management System
Published: June 17, 2025

CVE-2025-6157

6.9
    Phpgurukul
  • Nipah Virus Testing Management System
Published: June 17, 2025

CVE-2025-6159

6.9
    Code-Projects
  • Hostel Management System
Published: June 17, 2025

CVE-2025-6160

6.9
    Sourcecodester
  • Client Database Management System
Published: June 17, 2025

CVE-2025-6161

6.9
    Sourcecodester
  • Simple Food Ordering System
Published: June 17, 2025

CVE-2025-4365

6.9
    Citrix
  • Netscaler
  • Netscaler Sdx
Published: June 17, 2025

CVE-2025-49176

6.6
    Red Hat
  • Big Requests Extension
Published: June 17, 2025

CVE-2025-49179

6.6
    Redhat
  • Xorg
Published: June 17, 2025

CVE-2025-5673

6.5
    Wordpress
  • Blog2social
Published: June 17, 2025

CVE-2025-4775

6.4
    Wordpress
  • Infinite Scroll Ajax Load More Plugin
Published: June 17, 2025

CVE-2025-5291

6.4
    Wordpress
  • Master Slider
Published: June 17, 2025

CVE-2025-5700

6.4
    Wordpress
  • Simple Logo Carousel
Published: June 17, 2025

CVE-2025-49175

5.5
    Redhat
  • X Rendering Extension
Published: June 17, 2025

CVE-2025-49177

5.5
    Redhat
  • Xfixes
Published: June 17, 2025

CVE-2025-49178

5.5
    Redhat
  • X Server
Published: June 17, 2025

CVE-2025-48993

5.3
    Group-Office
  • Group-Office
Published: June 17, 2025

CVE-2025-6152

5.3
    Steel
  • Browser
Published: June 17, 2025

CVE-2025-6156

5.3
    Phpgurukul
  • Nipah Virus Testing Management System
Published: June 17, 2025

CVE-2025-34508

5.3
    Zendto
  • Zendto
Published: June 17, 2025

CVE-2025-6166

5.1
    Frdel
  • Agent-Zero
Published: June 17, 2025

CVE-2025-6167

5.1
    Themanojdesai
  • Python-A2a
Published: June 17, 2025

CVE-2025-6173

5.1
    Webkul
  • Qloapps
Published: June 17, 2025

CVE-2025-40674

5.1
    Oscommerce
  • Oscommerce
Published: June 17, 2025

CVE-2025-5209

4.8
    Ivory Search
  • Ivory Search
Published: June 17, 2025

CVE-2025-6050

4.8
    Mezzanine
  • Mezzanine
Published: June 17, 2025

CVE-2025-3880

4.3
    Opinion Stage
  • Poll Survey Quiz Maker
Published: June 17, 2025

CVE-2025-6069

4.3
    Python
  • Python
Published: June 17, 2025

CVE-2025-48111

4.3
    Yithemes
  • Yith Paypal Express Checkout
Published: June 17, 2025

CVE-2025-49842

1.0
    Conda
  • Conda-Forge-Webservices
Published: June 17, 2025

CVE-2025-49823

0.0
    Conda
  • Constructor
Published: June 17, 2025

CVE-2024-21856

None
    Gallagher
  • *
Published: June 17, 2025

CVE-2024-43422

None
    Gallagher
  • Gallagher
Published: June 17, 2025

CVE-2024-45065

None
    *
  • *
Published: June 17, 2025

CVE-2024-45069

None
    Gallagher
  • *
Published: June 17, 2025

CVE-2024-45380

None
    Gallagher
  • *
Published: June 17, 2025

CVE-2025-52437

None
    *
  • *
Published: June 17, 2025

CVE-2025-52438

None
    Fortinet
  • Fortinet
Published: June 17, 2025

CVE-2025-52439

None
    Fortinet
  • Fortinet
Published: June 17, 2025

CVE-2025-52440

None
    Fortinet
  • Fortinet
Published: June 17, 2025

CVE-2025-52441

None
    Fortinet
  • Fortigate
Published: June 17, 2025

CVE-2025-52442

None
    Fortinet
  • Fortinet
Published: June 17, 2025

CVE-2025-52443

None
    Fortinet
  • Fortinet
Published: June 17, 2025

CVE-2025-52444

None
    Fortinet
  • Fortinet
Published: June 17, 2025

CVE-2025-52445

None
    Fortinet
  • Fortinet
Published: June 17, 2025

CVE-2025-3493

None
    Oracle
  • Oracle
Published: June 17, 2025

CVE-2025-3494

None
    Oracle
  • *-*
Published: June 17, 2025
Click here to see more Vulnerabilities