Tag: 2025-07-04

3 Attack Reports | 186 Vulnerabilities

Attack reports

Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset

Throughout 2024, Gamaredon focused exclusively on targeting Ukrainian governmental institutions with spearphishing campaigns and weaponized USB drives. The group developed six new tools and significantly updated existing ones, improving stealth and evasion capabilities. Gamaredon increased the scal…
apt
spearphishing
powershell
cloudflare tunnels
2025-07-04
Published: July 4, 2025
Downloadable IOCs: 53

Discovery of Qwizzserial: A New Android SMS Stealer Family

A new Android SMS stealer family, named Qwizzserial, has been uncovered, primarily targeting users in Uzbekistan. The malware exploits the reliance on SMS for two-factor authentication in local payment systems, allowing fraudsters to intercept SMS messages and gain control over victims' finances. D…
financial fraud
sms stealer
2025-07-04
qwizzserial
Published: July 4, 2025
Downloadable IOCs: 1188

macOS NimDoor | North Korean Threat Actors Target Web3 and Crypto Platforms with Nim-Based Malware

DPRK threat actors are targeting Web3 and crypto-related businesses using Nim-compiled binaries and multiple attack chains. The malware, dubbed NimDoor, employs unusual techniques for macOS, including process injection and encrypted WebSocket communications. It uses a novel persistence mechanism le…
cryptocurrency
macos
process injection
web3
applescript
websocket
2025-07-04
nimdoor
Published: July 4, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-30933

10.0
    Liquidthemes
  • Logisticshub
Published: July 4, 2025

CVE-2025-49302

10.0
    Scott Paterson
  • Easy Stripe
Published: July 4, 2025

CVE-2025-49414

10.0
    Fastw3b
  • Fw Gallery
Published: July 4, 2025

CVE-2025-23970

9.8
    Aonetheme
  • Service Finder Booking
Published: July 4, 2025

CVE-2025-28983

9.8
    Clickandpledge
  • Click And Pledge Connect
Published: July 4, 2025

CVE-2025-49417

9.8
    Bestwpdeveloper
  • Woocommerce Product Multi Action
Published: July 4, 2025

CVE-2025-49867

9.8
    Inspirythemes
  • Realhomes
Published: July 4, 2025

CVE-2025-48952

9.4
    Netalertx
  • Netalertx
Published: July 4, 2025

CVE-2025-52830

9.3
    Bsecuretech
  • Bsecure
Published: July 4, 2025

CVE-2025-52831

9.3
    Thanhtungtnt
  • Video List Manager
Published: July 4, 2025

CVE-2025-52832

9.3
    Wpo-Hr
  • Ngg Smart Image Search
Published: July 4, 2025

CVE-2025-52833

9.3
    Designthemes
  • Lms
Published: July 4, 2025

CVE-2025-28951

9.1
    Creedally
  • Bulk Featured Image
Published: July 4, 2025

CVE-2025-5953

8.8
    Wordpress
  • Wp Human Resource Management
Published: July 4, 2025

CVE-2025-52828

8.8
    Designthemes
  • Red Art
Published: July 4, 2025

CVE-2025-53365

8.7
    *
  • Mcp
Published: July 4, 2025

CVE-2025-53366

8.7
    Mcp
  • Mcp
Published: July 4, 2025

CVE-2025-24748

8.5
    Lambertgroup
  • All In One Slider Responsive
Published: July 4, 2025

CVE-2025-28967

8.5
    Contact People Lite
  • Contact People Lite
Published: July 4, 2025

CVE-2025-28969

8.5
    Cybio
  • Gallery Widget
Published: July 4, 2025

CVE-2025-30947

8.5
    Gopiplus
  • Cool Fade Popup
Published: July 4, 2025

CVE-2025-30969

8.5
    Gopiplus
  • Iframe Images Gallery
Published: July 4, 2025

CVE-2025-30979

8.5
    Gopiplus
  • Pixelating Image Slideshow Gallery
Published: July 4, 2025

CVE-2025-24780

8.5
    Printcart
  • Printcart Web To Print Product Designer
Published: July 4, 2025

CVE-2025-32297

8.5
    Quantumcloud
  • Simple Link Directory
Published: July 4, 2025

CVE-2025-4414

8.1
    Cmsmasters
  • Cmsmasters Content Composer
Published: July 4, 2025

CVE-2025-52807

8.1
    Apuswp
  • Kossy
Published: July 4, 2025

CVE-2025-52813

8.1
    Mobiloud
  • Mobiloud
Published: July 4, 2025

CVE-2025-6238

8.0
    Wordpress
  • Ai Engine
Published: July 4, 2025

CVE-2025-46733

7.9
    Op-Tee
  • Op-Tee
Published: July 4, 2025

CVE-2025-49809

7.8
    Mtr
  • Mtr
Published: July 4, 2025

CVE-2025-52496

7.8
    Mbed
  • Mbed Tls
Published: July 4, 2025

CVE-2025-28980

7.7
    Noaa
  • Aviation Weather
Published: July 4, 2025

CVE-2025-6782

7.5
    Wordpress
  • Plugin
Published: July 4, 2025

CVE-2025-6783

7.5
    Wordpress
  • Gozen Forms
Published: July 4, 2025

CVE-2025-6814

7.5
    Wordpress
  • Booking X
Published: July 4, 2025

CVE-2025-47627

7.5
    Lcweb
  • Privatecontent Mail Actions
Published: July 4, 2025

CVE-2025-49070

7.5
    Nasathemes
  • Elessi
Published: July 4, 2025

CVE-2025-49870

7.5
    Cozmoslabs
  • Paid Member Subscriptions
Published: July 4, 2025

CVE-2025-52805

7.5
    Vaultdweller
  • Leyka
Published: July 4, 2025

CVE-2025-6586

7.2
    Wordpress
  • Download Plugin
Published: July 4, 2025

CVE-2025-49418

7.2
    Teconcedesign
  • Allmart
Published: July 4, 2025

CVE-2025-52718

7.2
    Bearsthemes
  • Alone
Published: July 4, 2025

CVE-2025-24771

7.1
    Otwthemes
  • Content Manager Light
Published: July 4, 2025

CVE-2025-28968

7.1
    Wp Wall
  • Wp Wall
Published: July 4, 2025

CVE-2025-28978

7.1
    Hung Trang Si
  • Sb Breadcrumbs
Published: July 4, 2025

CVE-2025-31037

7.1
    Favethemes
  • Homey
Published: July 4, 2025

CVE-2025-32311

7.1
    Quanticalabs
  • Pressroom News Magazine Wordpress Theme
Published: July 4, 2025

CVE-2025-39487

7.1
    Valvepress
  • Rankie
Published: July 4, 2025

CVE-2025-49245

7.1
    Cmoreira
  • Testimonials Showcase
Published: July 4, 2025

CVE-2025-49247

7.1
    Cmoreira
  • Team Showcase
Published: July 4, 2025

CVE-2025-49274

7.1
    Awplife
  • Neom Blog
Published: July 4, 2025

CVE-2025-49866

7.1
    Nikel
  • Beautiful Cookie Consent Banner
Published: July 4, 2025

CVE-2025-52776

7.1
    Thanhtungtnt
  • Video List Manager
Published: July 4, 2025

CVE-2025-52796

7.1
    Tggfref
  • Wp-Recall
Published: July 4, 2025

CVE-2025-52798

7.1
    Eyecix
  • Jobsearch
Published: July 4, 2025

CVE-2025-6056

6.9
    Ergon Informatik Ag
  • Airlock Iam
Published: July 4, 2025

CVE-2025-49303

6.8
    Dynamiapps
  • Shabti Kaplan Frontend Admin
Published: July 4, 2025

CVE-2025-5956

6.5
    Wordpress
  • Wp Human Resource Management
Published: July 4, 2025

CVE-2025-6739

6.5
    Wordpress
  • Wpquiz
Published: July 4, 2025

CVE-2024-9453

6.5
    Redhat
  • Openshift
  • Jenkins
Published: July 4, 2025

CVE-2025-24757

6.5
    Long Watch Studio
  • Myrewards
Published: July 4, 2025

CVE-2025-24764

6.5
    A.Jones
  • Simply Guest Author Name
Published: July 4, 2025

CVE-2025-26591

6.5
    Noor Alam
  • Wp Fancybox
Published: July 4, 2025

CVE-2025-27326

6.5
    Bplugins
  • Video Gallery Block
Published: July 4, 2025

CVE-2025-28957

6.5
    Ownerrez
  • Ownerrez
Published: July 4, 2025

CVE-2025-30943

6.5
    Aakif Kadiwala
  • Posts Slider Shortcode
Published: July 4, 2025

CVE-2025-30983

6.5
    Gopiplus
  • Card Flip Image Slideshow
Published: July 4, 2025

CVE-2025-53566

6.5
    Osama.Esh
  • Wp Visitor Statistics
Published: July 4, 2025

CVE-2025-28976

6.5
    Webemailprotector
  • Email Address Security
Published: July 4, 2025

CVE-2025-47634

6.5
    Keylor Mendoza
  • Wc Pickup Store
Published: July 4, 2025

CVE-2025-48231

6.5
    Codepeople
  • Booking Calendar Contact Form
Published: July 4, 2025

CVE-2025-49431

6.5
    Gnuget
  • Mf Plus Wpml
Published: July 4, 2025

CVE-2025-50032

6.5
    Paytiko
  • Paytiko For Woocommerce
Published: July 4, 2025

CVE-2025-50039

6.5
    Vgwort
  • Vg Wort Metis
Published: July 4, 2025

CVE-2025-5567

6.4
    Wordpress
  • Shortcodes Ultimate
Published: July 4, 2025

CVE-2025-6039

6.4
    Wordpress
  • Processingjs
Published: July 4, 2025

CVE-2025-6729

6.4
    Wordpress
  • Paymaster
Published: July 4, 2025

CVE-2025-6787

6.4
    Wordpress
  • Smart Docs
Published: July 4, 2025

CVE-2025-7046

6.4
    Wordpress
  • Portfolio For Elementor
Published: July 4, 2025

CVE-2025-6944

6.4
    Wordpress
  • Uncode
Published: July 4, 2025

CVE-2024-11937

6.4
    Elementor
  • Premium Addons For Elementor
Published: July 4, 2025

CVE-2025-6673

6.4
    Wordpress
  • Easy Restaurant Menu Manager
Published: July 4, 2025

CVE-2025-47565

6.3
    Ashanjay
  • Eventon
Published: July 4, 2025

CVE-2025-6041

6.1
    Wordpress
  • Ycontributors
Published: July 4, 2025

CVE-2025-6740

6.1
    Wordpress
  • Contact Form 7 Database Addon
Published: July 4, 2025

CVE-2025-7066

6.1
    Jirafeau
  • Jirafeau
Published: July 4, 2025

CVE-2025-24735

5.9
    Chatra
  • Chatra Live Chat
Published: July 4, 2025

CVE-2025-28971

5.9
    Cwd
  • Web Designer Easy Elements Hider
Published: July 4, 2025

CVE-2025-48172

5.6
    Chmlib
  • Chmlib
    Sumatrapdf
Published: July 4, 2025

CVE-2025-28963

5.4
    Md Yeasin Ul Haider
  • Url Shortener
Published: July 4, 2025

CVE-2025-6786

5.3
    Wordpress
  • Doccheck Login Plugin
Published: July 4, 2025

CVE-2025-32918

5.3
    Checkmk
  • Checkmk
Published: July 4, 2025

CVE-2025-29012

5.3
    Kamleshyadav
  • Cf7 7 Mailchimp Add On
Published: July 4, 2025

CVE-2025-30929

5.3
    Amazewp
  • Fluxtore
Published: July 4, 2025

CVE-2025-47479

5.3
    Aresit
  • Wp Compress
Published: July 4, 2025

CVE-2025-53602

5.3
    Zipkin
  • Zipkin
Published: July 4, 2025

CVE-2025-7070

5.3
    Iroad
  • Dashcam Q9
Published: July 4, 2025

CVE-2025-7053

5.1
    Cockpit
  • Cockpit
Published: July 4, 2025

CVE-2025-7061

5.1
    Intelbras
  • Incontrol
Published: July 4, 2025

CVE-2025-5372

5.0
    Libssh
  • Libssh
    Openssl
Published: July 4, 2025

CVE-2025-49600

4.9
    Mbedtls
  • Mbedtls
Published: July 4, 2025

CVE-2025-49601

4.8
    Mbedtls
  • Mbedtls
Published: July 4, 2025

CVE-2025-52497

4.8
    Mbed
  • Mbed Tls
Published: July 4, 2025

CVE-2025-7067

4.8
    Hdfgroup
  • Hdf5
Published: July 4, 2025

CVE-2025-7068

4.8
    Hdf-Group
  • Hdf5
Published: July 4, 2025

CVE-2025-7069

4.8
    Hdf5
  • Hdf5
Published: July 4, 2025

CVE-2025-27358

4.6
    Mndpsingh287
  • Frontend File Manager
Published: July 4, 2025

CVE-2025-5924

4.3
    Wordpress
  • Wpfirebasepushnotification
Published: July 4, 2025

CVE-2025-5933

4.3
    Wordpress
  • Rd Contacto Plugin
Published: July 4, 2025

CVE-2025-23972

4.3
    Brian S Reed
  • Contact Form 7 Recaptcha
Published: July 4, 2025

CVE-2025-29001

4.3
    Zoomit
  • Woocommerce Shop Page Builder
Published: July 4, 2025

CVE-2025-29007

4.3
    Lmsace
  • Lmsace Connect
Published: July 4, 2025

CVE-2025-53568

4.3
    Tony Zeoli
  • Radio Station
Published: July 4, 2025

CVE-2025-53569

4.3
    Trust Payments
  • Trust Payments Gateway For Woocommerce
Published: July 4, 2025

CVE-2025-5351

4.2
    Libssh
  • Libssh
Published: July 4, 2025

CVE-2025-7060

2.1
    Monitorr
  • Monitorr
Published: July 4, 2025

CVE-2025-53599

None
    Navercorp
  • Whale Browser
Published: July 4, 2025

CVE-2025-53600

None
    Navercorp
  • Whale
Published: July 4, 2025

CVE-2025-5920

None
    Wordpress
  • Sharable Password Protected Posts
Published: July 4, 2025

CVE-2025-38174

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38175

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38176

None
    Linux
  • Linux Kernel
  • Kernel Binder
Published: July 4, 2025

CVE-2025-38177

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38178

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38179

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38180

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38181

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38182

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38183

None
    Linux
  • Linux Kernel
    Lan743x
Published: July 4, 2025

CVE-2025-38184

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38185

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38186

None
    Linux
  • Linux Kernel
    Bnxt
Published: July 4, 2025

CVE-2025-38187

None
    Linux
  • Linux Kernel
    Nouveau
Published: July 4, 2025

CVE-2025-38188

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38189

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38190

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38191

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38192

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38193

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38194

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38195

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38196

None
    Linux
  • Linux Kernel
  • Io Uring
Published: July 4, 2025

CVE-2025-38197

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38198

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38199

None
    Linux
  • Kernel
    Qca
Published: July 4, 2025

CVE-2025-38200

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38201

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38202

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38203

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38204

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38205

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38206

None
    Linux
  • Linux Kernel
  • Exfat
Published: July 4, 2025

CVE-2025-38207

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38208

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38209

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38210

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38211

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38212

None
    Linux
  • Linux
Published: July 4, 2025

CVE-2025-38213

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38214

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38215

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38216

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38217

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38218

None
    Linux
  • Linux Kernel
  • F2fs
Published: July 4, 2025

CVE-2025-38219

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38220

None
    Linux
  • Linux Kernel
  • Ext4
Published: July 4, 2025

CVE-2025-38221

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38222

None
    Linux
  • Linux Kernel
  • Ext4
Published: July 4, 2025

CVE-2025-38223

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38224

None
    Linux
  • Linux Kernel
    Kvaser
Published: July 4, 2025

CVE-2025-38225

None
    Linux
  • Linux Kernel
    Freescale
Published: July 4, 2025

CVE-2025-38226

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38227

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38228

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38229

None
    Linux
  • Linux Kernel
  • Cxusb
Published: July 4, 2025

CVE-2025-38230

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38231

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-38232

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38233

None
    Linux
  • Linux Kernel
Published: July 4, 2025

CVE-2025-38234

None
    Linux
  • Kernel
Published: July 4, 2025

CVE-2025-53481

None
    Wikimedia
  • Mediawiki Ipinfo Extension
Published: July 4, 2025

CVE-2025-53482

None
    Mediawiki
  • Ipinfo Extension
Published: July 4, 2025

CVE-2025-53483

None
    Mediawiki
  • Securepoll
Published: July 4, 2025

CVE-2025-53484

None
    Mediawiki
  • Securepoll
Published: July 4, 2025

CVE-2025-53485

None
    Mediawiki
  • Securepoll
Published: July 4, 2025
Click here to see more Vulnerabilities