Tag: 2025-06-26

9 Attack Reports | 116 Vulnerabilities

Attack reports

SadFuture: Mapping XDSpy latest evolution

This report examines recent activities attributed to the XDSpy threat actor, focusing on an ongoing campaign targeting Eastern European and Russian governmental entities using the XDigo malware since March 2025. The investigation stemmed from analyzing a vulnerability in LNK files, leading to the d…
government
infrastructure analysis
eastern europe
xdigo
2025-06-26
etdownloader
lnk exploitation
Published: June 26, 2025
Downloadable IOCs: 134

Dissecting Kimsuky's Attacks on South Korea: In-Depth Analysis of GitHub-Based Malicious Infrastructure

A sophisticated spearphishing campaign targeting South Korea has been uncovered, utilizing GitHub as attack infrastructure. The threat actor, linked to the North Korean group Kimsuky, created multiple private repositories to store malware, decoy files, and exfiltrated victim data. The attack levera…
north korea
spearphishing
kimsuky
dropbox
south korea
xenorat
2025-06-26
Published: June 26, 2025
Downloadable IOCs: 16

Checking all the Boxes: LapDogs, The New ORB in Town

SecurityScorecard's STRIKE team has uncovered a new China-Nexus Operational Relay Box (ORB) network called 'LapDogs', targeting primarily Linux-based SOHO devices globally. The network, active since September 2023, focuses on the United States and Southeast Asia, particularly Japan, South Korea, Ho…
orb
tls certificates
southeast asia
2025-06-26
shortleash
soho devices
CVE-2017-17663
Published: June 26, 2025
Linked vulnerabilities : CVE-2017-17663, CVE-2015-1548
Downloadable IOCs: 26

Hacker Exploit Social Security Statement Theme to Target Over 2,000 Victims with Malware

A sophisticated phishing campaign has targeted over 2,000 individuals by exploiting the theme of official Social Security statements. Cybercriminals used a convincing phishing lure, mimicking legitimate communication from the Social Security Administration. The attack involved a URL directing victi…
backdoor
screenconnect
phishing
remote-access
2025-06-26
amazon-aws
social-security
.net-loader
Published: June 26, 2025
Downloadable IOCs: 2

SHOE RACK: A post-exploitation tool for remote shell access & TCP tunnelling through a victim device

SHOE RACK is a sophisticated malware developed in Go 1.18, designed for post-exploitation activities. It connects to a custom SSH server at a hardcoded C2 URL, enabling remote interaction with the victim device. The malware utilizes DNS-over-HTTPS to locate its C2 server's IP address and has been o…
fortigate
post-exploitation
shoe rack
remote shell
2025-06-26
reverse ssh
dns-over-https
tcp tunnelling
firewalls
Published: June 26, 2025
Downloadable IOCs: 3

Iranian Educated Manticore Targets Leading Tech Academics

The Iranian threat group Educated Manticore, associated with the Islamic Revolutionary Guard Corps, has launched spear-phishing campaigns targeting Israeli journalists, cyber security experts and computer science professors. The attackers posed as fictitious assistants to technology executives or r…
iran
apt42
charming kitten
2025-06-26
educated manticore
Published: June 26, 2025
Downloadable IOCs: 140

Black Hat SEO Poisoning Search Engine Results For AI to Distribute Malware

Threat actors are exploiting the popularity of AI tools by using Black Hat SEO techniques to poison search engine rankings for AI-related keywords. These malicious websites redirect users through multiple layers to deliver malware such as Vidar, Lumma, and Legion Loader. The attackers employ sophis…
vidar
lumma
search engine poisoning
stealer malware
2025-06-26
legion loader
browser fingerprinting
Published: June 26, 2025
Downloadable IOCs: 23

Decrement by one to rule them all: AsIO3.sys driver exploitation

The article details the discovery and exploitation of two critical vulnerabilities in the AsIO3.sys driver, used by ASUS Armory Crate and AI Suite applications. The vulnerabilities, a stack-based buffer overflow and an authorization bypass, were found in the IRP_MJ_CREATE handler. The author demons…
windows
vulnerability
privilege escalation
asus
driver exploitation
CVE-2025-1533
CVE-2025-3464
2025-06-26
kernel exploitation
asio3.sys
Published: June 26, 2025
Linked vulnerabilities : CVE-2025-1533 (CVSS 8.2), CVE-2025-3464 (CVSS 8.4)
Downloadable IOCs: 0

Cybercriminals Abuse Open-Source Tools To Target Africa's Financial Sector

A series of attacks targeting financial organizations across Africa has been observed since July 2023. The threat actor, tracked as CL-CRI-1014, uses open-source and publicly available tools like PoshC2, Chisel, and Classroom Spy to establish attack frameworks, create tunnels for network communicat…
lateral movement
poshc2
financial sector
chisel
2025-06-26
Published: June 26, 2025
Downloadable IOCs: 32
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-34043

10.0
    Vacron
  • Network Video Recorder
Published: June 26, 2025

CVE-2025-34046

10.0
    Fanwei
  • E-Office
Published: June 26, 2025

CVE-2025-4334

9.8
    Wordpress
  • Simple User Registration
Published: June 26, 2025

CVE-2025-6561

9.8
    Hunt Electronic
  • Hbf-09kd
  • Hbf-16nk
Published: June 26, 2025

CVE-2025-29331

9.8
    Mhsanaei
  • 3x-Ui
Published: June 26, 2025

CVE-2025-30131

9.8
    Iroad
  • Dashcam Fx2
Published: June 26, 2025

CVE-2014-0468

9.8
    Fusionforge
  • Fusionforge
Published: June 26, 2025

CVE-2014-7210

9.8
    Pdns
  • Pdns
    Debian
Published: June 26, 2025

CVE-2015-0842

9.8
    Yubico
  • Yubiserver
Published: June 26, 2025

CVE-2015-0843

9.8
    Yubico
  • Yubiserver
Published: June 26, 2025

CVE-2025-3699

9.8
    Mitsubishi Electric
  • G-50
  • G-50-W
  • G-50a
  • Gb-50
  • Gb-50a
  • Gb-24a
  • G-150ad
  • Ag-150a-A
  • Ag-150a-J
  • Gb-50ad
  • Gb-50ada-A
  • Gb-50ada-J
  • Eb-50gu-A
  • Eb-50gu-J
  • Ae-200j
  • Ae-200a
  • Ae-200e
  • Ae-50j
  • Ae-50a
  • Ae-50e
  • Ew-50j
  • Ew-50a
  • Ew-50e
  • Te-200a
  • Te-50a
  • Tw-50a
  • Cms-Rmd-J
Published: June 26, 2025

CVE-2024-52928

9.6
    Arc
  • Arc
Published: June 26, 2025

CVE-2025-34042

9.4
    Beward
  • N100 Ip Camera
Published: June 26, 2025

CVE-2025-34044

9.4
    Wifisky
  • Wifisky 7-Layer Flow Control Router
Published: June 26, 2025

CVE-2025-34049

9.4
    Optilink
  • Ont1gew Gpon Router
Published: June 26, 2025

CVE-2025-49603

9.1
    Northern.Tech
  • Mender
Published: June 26, 2025

CVE-2025-49003

8.9
    Dataease
  • Dataease
Published: June 26, 2025

CVE-2025-53007

8.9
    Arduino
  • Arduino-Esp32
Published: June 26, 2025

CVE-2025-5590

8.8
    Wordpress
  • Owl Carousel
Published: June 26, 2025

CVE-2024-6174

8.8
    Ubuntu
  • Cloud-Init
Published: June 26, 2025

CVE-2025-48921

8.8
    Drupal
  • Open Social
Published: June 26, 2025

CVE-2025-37101

8.7
    Hpe
  • Hpe Oneview
    Vmware
Published: June 26, 2025

CVE-2025-6562

8.7
    Hunt Electronic
  • Hybrid Dvr
Published: June 26, 2025

CVE-2025-34045

8.7
    Shenzhen Yuanmengyun Technology Co Ltd
  • Wei Php
Published: June 26, 2025

CVE-2025-34047

8.7
    Leadsec
  • Ssl Vpn
Published: June 26, 2025

CVE-2025-34048

8.7
    D-Link
  • Dsl-2730u
  • Dsl-2750u
  • Dsl-2750e
Published: June 26, 2025

CVE-2025-5459

8.6
    Puppet
  • Puppet Enterprise
Published: June 26, 2025

CVE-2025-52477

8.6
    Github
  • Octo-Sts
Published: June 26, 2025

CVE-2025-6693

8.5
    Rt-Thread
  • Rt-Thread
Published: June 26, 2025

CVE-2025-53002

8.3
    Llama
  • Llama-Factory
Published: June 26, 2025

CVE-2025-5366

8.1
    Zohocorp
  • Manageengine Exchange Reporter Plus
Published: June 26, 2025

CVE-2025-5966

8.1
    Zohocorp
  • Manageengine Exchange Reporter Plus
Published: June 26, 2025

CVE-2025-51672

8.0
    Phpgurukul
  • Dairy Farm Shop Management System
Published: June 26, 2025

CVE-2025-52903

8.0
    Filebrowser
  • Filebrowser
Published: June 26, 2025

CVE-2025-52904

8.0
    Filebrowser
  • Filebrowser
Published: June 26, 2025

CVE-2025-52902

7.6
    File Browser
  • File Browser
Published: June 26, 2025

CVE-2025-6709

7.5
    Mongodb
  • Mongodb Server
Published: June 26, 2025

CVE-2025-6710

7.5
    Mongodb
  • Mongodb Server
Published: June 26, 2025

CVE-2025-52887

7.5
    Cpp-Httplib
  • Cpp-Httplib
Published: June 26, 2025

CVE-2014-6274

7.5
    Git-Annex
  • Git-Annex
Published: June 26, 2025

CVE-2025-6732

7.4
    Utt
  • Hi Per 840g
Published: June 26, 2025

CVE-2025-6733

7.4
    Utt
  • Hiper 840g
Published: June 26, 2025

CVE-2025-6734

7.4
    Utt
  • Hiper 840g
Published: June 26, 2025

CVE-2025-6212

7.2
    Wordpress
  • Ultra Addons For Contact Form 7
Published: June 26, 2025

CVE-2025-3771

7.2
    Trellix
  • System Information Reporter
Published: June 26, 2025

CVE-2025-53121

6.9
    Opennms
  • Openmns Horizon
  • Meridian
Published: June 26, 2025

CVE-2025-53122

6.9
    Opennms
  • Meridian
  • Horizon
Published: June 26, 2025

CVE-2025-3279

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: June 26, 2025

CVE-2024-56915

6.5
    Netbox
  • Netbox
Published: June 26, 2025

CVE-2025-52555

6.5
    Ceph
  • Ceph
Published: June 26, 2025

CVE-2025-5488

6.4
    Wordpress
  • Wp Masonry Infinite Scroll
Published: June 26, 2025

CVE-2025-5535

6.4
    Wordpress
  • E.Nigma Buttons
  • Wordpress
Published: June 26, 2025

CVE-2025-5540

6.4
    Wordpress
  • Event Rsvp
Published: June 26, 2025

CVE-2025-5559

6.4
    Wordpress
  • Timezonecalculator
Published: June 26, 2025

CVE-2025-5564

6.4
    Gc Social Wall
  • Gc Social Wall
    Wordpress
Published: June 26, 2025

CVE-2025-5588

6.4
    Pixo
  • Image Editor
Published: June 26, 2025

CVE-2025-6258

6.4
    Wordpress
  • Wp Soundsystem
Published: June 26, 2025

CVE-2025-6290

6.4
    Wordpress
  • Tournament Bracket Generator
Published: June 26, 2025

CVE-2025-6378

6.4
    Wordpress
  • Responsive Food And Drink Menu
Published: June 26, 2025

CVE-2025-6383

6.4
    Wordpress
  • Wpphotonav
Published: June 26, 2025

CVE-2025-6538

6.4
    Wordpress
  • Post Rating And Review
Published: June 26, 2025

CVE-2025-5929

6.4
    Wordpress
  • Countdown
Published: June 26, 2025

CVE-2025-6537

6.4
    Mdesign
  • Namasha
Published: June 26, 2025

CVE-2025-6540

6.4
    Wordpress
  • Web-Cam Plugin
Published: June 26, 2025

CVE-2025-6546

6.4
    Wordpress
  • Drive Folder Embedder
Published: June 26, 2025

CVE-2025-5338

6.4
    Wordpress
  • Royal Elementor Addons
Published: June 26, 2025

CVE-2025-5842

6.4
    Wordpress
  • Modern Design Library
Published: June 26, 2025

CVE-2025-5731

6.2
    Redhat
  • Infinispan
Published: June 26, 2025

CVE-2025-48922

6.1
    Drupal
  • Glightbox
Published: June 26, 2025

CVE-2025-48923

6.1
    Drupal
  • Toc.Js
Published: June 26, 2025

CVE-2025-6674

6.1
    Drupal
  • Ckeditor5 Youtube
Published: June 26, 2025

CVE-2025-44141

6.1
    Backdrop
  • Backdrop Cms
Published: June 26, 2025

CVE-2025-52573

6.0
    Apple
  • Ios Simulator Mcp
Published: June 26, 2025

CVE-2024-11584

5.9
    Ubuntu
  • Cloud-Init
Published: June 26, 2025

CVE-2013-1424

5.6
    Matplotlib
  • Matplotlib
Published: June 26, 2025

CVE-2025-52900

5.5
    File Browser
  • File Browser
Published: June 26, 2025

CVE-2025-6676

5.4
    Drupal
  • Simple Xml Sitemap
Published: June 26, 2025

CVE-2025-6677

5.4
    Drupal
  • Paragraphs
Published: June 26, 2025

CVE-2025-50350

5.4
    Phpgurukul
  • Pre-School Enrollment System
Published: June 26, 2025

CVE-2025-51671

5.4
    Phpgurukul
  • Dairy Farm Shop Management System
Published: June 26, 2025

CVE-2025-5813

5.3
    Woocommerce
  • Amazon Products
Published: June 26, 2025

CVE-2025-1754

5.3
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: June 26, 2025

CVE-2025-41404

5.3
    Iroha Board
  • Iroha Board
Published: June 26, 2025

CVE-2025-36034

5.3
    Ibm
  • Infosphere Datastage
  • Infosphere Information Server
Published: June 26, 2025

CVE-2025-6700

5.3
    Xuxueli
  • Xxl-Sso
Published: June 26, 2025

CVE-2025-6702

5.3
    Linlinjava
  • Litemall
Published: June 26, 2025

CVE-2025-6731

5.3
    Yzcheng90
  • X-Springboot
Published: June 26, 2025

CVE-2025-53013

5.2
    Himmelblau
  • Himmelblau
Published: June 26, 2025

CVE-2025-48497

5.1
    Iroha
  • Board
Published: June 26, 2025

CVE-2025-6694

5.1
    Labredescefetpj
  • Wegia
Published: June 26, 2025

CVE-2025-6695

5.1
    Labredescefetrj
  • Wegia
Published: June 26, 2025

CVE-2025-6696

5.1
    Labredescefetjr
  • Wegia
Published: June 26, 2025

CVE-2025-6697

5.1
    Labredescefet
  • Wegia
Published: June 26, 2025

CVE-2025-6698

5.1
    Labredescefetrj
  • Wegia
Published: June 26, 2025

CVE-2025-6699

5.1
    Labredescefetrj
  • Wegia
Published: June 26, 2025

CVE-2025-6701

5.1
    Xuxueli
  • Xxl-Sso
Published: June 26, 2025

CVE-2025-6706

5.0
    Mongodb
  • Mongodb Server
Published: June 26, 2025

CVE-2025-6675

4.8
    Drupal
  • Enterprise Mfa
Published: June 26, 2025

CVE-2025-49592

4.6
    N8n
  • N8n
Published: June 26, 2025

CVE-2025-5995

4.6
    Canon
  • Eos Webcam Utility Pro
Published: June 26, 2025

CVE-2025-5275

4.4
    Charitable
  • Donation Plugin For Wordpress
Published: June 26, 2025

CVE-2025-3863

4.3
    Wordpress
  • Post Carousel Slider For Elementor
Published: June 26, 2025

CVE-2025-5812

4.3
    Wordpress
  • Vg Wort Metis Plugin
Published: June 26, 2025

CVE-2025-5932

4.3
    Wordpress
  • Homerunner
Published: June 26, 2025

CVE-2025-5315

4.3
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: June 26, 2025

CVE-2025-5682

4.3
    Drupal
  • Klaro Cookie And Consent Management
Published: June 26, 2025

CVE-2025-6707

4.2
    Mongodb
  • Mongodb Server
Published: June 26, 2025

CVE-2025-2938

3.1
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: June 26, 2025

CVE-2025-5846

2.7
    Gitlab
  • Gitlab Ee
Published: June 26, 2025

CVE-2025-6624

2.4
    Snyk
  • Snyk
Published: June 26, 2025

CVE-2025-6703

2.3
    Mozilla
  • Neqo
Published: June 26, 2025

CVE-2025-3722

0.0
    Trellix
  • System Information Reporter
Published: June 26, 2025

CVE-2025-3773

0.0
    Trellix
  • System Information Reporter
Published: June 26, 2025

CVE-2025-52934

None
Published: June 26, 2025

CVE-2013-1440

None
    Debian
  • Debian
Published: June 26, 2025

CVE-2015-0849

None
    Pycode-Browser
  • Pycode-Browser
Published: June 26, 2025
Click here to see more Vulnerabilities