Tag: 2025-06-23

3 Attack Reports | 75 Vulnerabilities

Attack reports

DRAT V2: Updated DRAT Emerges in Arsenal

TAG-140, a threat actor group overlapping with SideCopy, has deployed an updated version of their DRAT remote access trojan, dubbed DRAT V2. This new variant, developed in Delphi, introduces enhanced command and control capabilities, including arbitrary shell command execution and improved C2 obfus…
india
remote access trojan
2025-06-23
delphi
drat
drat v2
c2 obfuscation
broaderaspect
Published: June 23, 2025
Downloadable IOCs: 8

Malware Analysis Report: UMBRELLA STAND - Malware targeting Fortinet devices

UMBRELLA STAND is a sophisticated malware targeting FortiGate 100D series firewalls produced by Fortinet. It contains remote shell execution functionality, configurable beacon frequency, and AES-encrypted C2 communications. The malware uses fake TLS on port 443 to beacon to its C2 server and has th…
persistence
c2
process injection
aes encryption
defense evasion
fortinet
firewall
2025-06-23
shoe rack
remote shell
umbrella stand
Published: June 23, 2025
Downloadable IOCs: 11

The new SparkKitty Trojan spy in the App Store and Google Play

A new spyware campaign dubbed SparkKitty has been discovered targeting both iOS and Android devices. The malware, believed to be connected to the previously identified SparkCat campaign, is distributed through official app stores and unofficial sources. It primarily steals photos from infected devi…
ios
android
cryptocurrency
china
spyware
sparkcat
southeast asia
2025-06-23
sparkkitty
Published: June 23, 2025
Downloadable IOCs: 20
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-6512

10.0
    Brain2
  • Report
Published: June 23, 2025

CVE-2025-52562

10.0
    Performave
  • Convoy
Published: June 23, 2025

CVE-2025-52921

9.9
    Innoshop
  • Innoshop
Published: June 23, 2025

CVE-2023-47297

9.8
    Ncr
  • Terminal Handler
Published: June 23, 2025

CVE-2023-48978

9.8
    Ncr
  • Itm Web Terminal
Published: June 23, 2025

CVE-2025-46101

9.8
    Beakon Software
  • Beakon Learning Management System
Published: June 23, 2025

CVE-2023-47032

9.8
    Ncr
  • Terminal Handler
Published: June 23, 2025

CVE-2023-47295

9.8
    Ncr
  • Terminal Handler
Published: June 23, 2025

CVE-2023-47031

9.8
    Ncr
  • Terminal Handler
Published: June 23, 2025

CVE-2023-47030

9.8
    Ncr
  • Terminal Handler
Published: June 23, 2025

CVE-2024-45347

9.6
    Xiaomi
  • Mi Connect Service App
Published: June 23, 2025

CVE-2025-52935

9.4
    Dragonflydb
  • Dragonfly
Published: June 23, 2025

CVE-2025-52939

9.4
    Notepadnext
  • Notepadnext
Published: June 23, 2025

CVE-2025-52936

9.3
    Yrutschle
  • Sslh
Published: June 23, 2025

CVE-2025-6513

9.3
    Brain2
  • Brain2
Published: June 23, 2025

CVE-2025-6545

9.1
    Pbkdf2
  • Pbkdf2
Published: June 23, 2025

CVE-2025-6547

9.1
    Pbkdf2
  • Pbkdf2
Published: June 23, 2025

CVE-2025-49126

8.8
    Visionatrix
  • Visionatrix
Published: June 23, 2025

CVE-2025-6529

8.7
    70mai
  • M300
Published: June 23, 2025

CVE-2025-23049

8.4
    Materialise
  • Orthoview
Published: June 23, 2025

CVE-2025-2828

8.4
    Langchain-Ai
  • Langchain
Published: June 23, 2025

CVE-2025-2171

7.8
    Aviatrix
  • Controller
Published: June 23, 2025

CVE-2025-50348

7.5
    Phpgurukul
  • Pre-School-Enrollment-System
Published: June 23, 2025

CVE-2025-50349

7.5
    Phpgurukul
  • Pre-School Enrollment System
Published: June 23, 2025

CVE-2025-44528

7.5
    Texas Instruments
  • Simplelink Cc13xx Cc26xx Sdk
Published: June 23, 2025

CVE-2025-48026

7.5
    Mitel
  • Openscape Xpressions
Published: June 23, 2025

CVE-2025-27387

7.4
    Oppo
  • Clone Phone
Published: June 23, 2025

CVE-2025-52922

7.4
    Innoshop
  • Innoshop
Published: June 23, 2025

CVE-2025-6510

7.4
    Netgear
  • Ex6100
Published: June 23, 2025

CVE-2025-6511

7.4
    Netgear
  • Ex6150
Published: June 23, 2025

CVE-2025-49144

7.3
    Notepad++
  • Notepad++
Published: June 23, 2025

CVE-2025-23092

7.2
    Mitel
  • Openscape Accounting Management
Published: June 23, 2025

CVE-2025-52558

7.0
    Changedetection
  • Changedetection.Io
Published: June 23, 2025

CVE-2025-6500

6.9
    Code-Projects
  • Inventory Management System
Published: June 23, 2025

CVE-2025-6501

6.9
    Code-Projects
  • Inventory Management System
Published: June 23, 2025

CVE-2025-6502

6.9
    Code-Projects
  • Inventory Management System
Published: June 23, 2025

CVE-2025-6503

6.9
    Code-Projects
  • Inventory Management System
Published: June 23, 2025

CVE-2025-52561

6.9
    Htmlsanitizer
  • Htmlsanitizer.Jl
Published: June 23, 2025

CVE-2025-2172

6.6
    Aviatrix
  • Controller
Published: June 23, 2025

CVE-2025-52920

6.4
    Innoshop
  • Innoshop
Published: June 23, 2025

CVE-2025-49574

6.4
    Quarkus
  • Quarkus
Published: June 23, 2025

CVE-2025-48700

6.1
    Zimbra
  • Zimbra Collaboration
Published: June 23, 2025

CVE-2025-6530

5.9
    70mai
  • M300
Published: June 23, 2025

CVE-2025-52967

5.8
    Datarobot
  • Mlflow
Published: June 23, 2025

CVE-2021-47688

5.7
    Whitebeam
  • Whitebeam
Published: June 23, 2025

CVE-2025-52875

5.4
    Jetbrains
  • Teamcity
Published: June 23, 2025

CVE-2025-52876

5.4
    Jetbrains
  • Teamcity
Published: June 23, 2025

CVE-2025-6517

5.3
    Dromara
  • Maxkey
Published: June 23, 2025

CVE-2025-6518

5.3
    Pyspur-Dev
  • Pyspur
Published: June 23, 2025

CVE-2025-6525

5.3
    70mai
  • 1s
Published: June 23, 2025

CVE-2025-6528

5.3
    70mai
  • M300
Published: June 23, 2025

CVE-2025-52938

5.1
    Notepadnext
  • Notepadnext
Published: June 23, 2025

CVE-2025-6509

5.1
    Seaswalker
  • Spring-Analysis
Published: June 23, 2025

CVE-2025-6496

4.8
    Htacg
  • Tidy-Html5
Published: June 23, 2025

CVE-2025-6497

4.8
    Htacg
  • Tidy-Html5
Published: June 23, 2025

CVE-2025-6498

4.8
    Htacg
  • Tidy-Html5
Published: June 23, 2025

CVE-2025-6499

4.8
    Vstakhov
  • Libucl
Published: June 23, 2025

CVE-2025-52877

4.8
    Jetbrains
  • Teamcity
Published: June 23, 2025

CVE-2025-52879

4.8
    Jetbrains
  • Teamcity
Published: June 23, 2025

CVE-2025-6516

4.8
    Hdf5
  • Hdf5
Published: June 23, 2025

CVE-2024-3511

4.3
    Wso2
  • Wso2
Published: June 23, 2025

CVE-2023-47298

4.3
    Ncr
  • Terminal Handler
Published: June 23, 2025

CVE-2025-52878

4.3
    Jetbrains
  • Teamcity
Published: June 23, 2025

CVE-2025-52969

2.8
    Clickhouse
  • Clickhouse
Published: June 23, 2025

CVE-2025-52926

2.7
    Spytrap
  • Spytrap-Adb
Published: June 23, 2025

CVE-2025-52968

2.7
    Xdg-Utils
  • Xdg-Open
Published: June 23, 2025

CVE-2025-4563

2.7
    Kubernetes
  • Kubernetes
Published: June 23, 2025

CVE-2025-6524

2.3
    70mai
  • 1s
Published: June 23, 2025

CVE-2025-6526

2.3
    70mai
  • M300
Published: June 23, 2025

CVE-2025-6527

2.3
    70mai
  • M300
Published: June 23, 2025

CVE-2025-52937

2.0
    Pointcloudlibrary
  • Pcl
Published: June 23, 2025

CVE-2025-52542

None
Published: June 23, 2025

CVE-2023-47294

None
    Ncr
  • Terminal Handler
Published: June 23, 2025

CVE-2023-50450

None
    Sensopart
  • Visor Vision Sensors
Published: June 23, 2025

CVE-2023-47029

None
    Ncr
  • Terminal Handler
Published: June 23, 2025
Click here to see more Vulnerabilities