Tag: 2025-07-15

2 Attack Reports | 162 Vulnerabilities

Attack reports

Rainbow Hyena strikes again: new backdoor and shift in tactics

A new phishing campaign targeting healthcare and IT organizations in Russia has been attributed to the Rainbow Hyena cluster. The attackers used compromised email addresses to distribute malicious attachments, including polyglot files and LNK files mimicking legitimate documents. A new custom-built…
backdoor
phishing
lnk files
2025-07-15
phantomremote
rainbow hyena
Published: July 15, 2025
Downloadable IOCs: 0

KongTuke FileFix Leads to New Interlock RAT Variant

A new and resilient variant of the Interlock ransomware group's remote access trojan (RAT) has been identified. This PHP-based malware, a shift from the previous JavaScript-based NodeSnake, is being used in a widespread campaign associated with the LandUpdate808 (KongTuke) web-inject threat cluster…
reconnaissance
interlock rat
cloudflare tunnel
kongtuke
2025-07-15
web-inject
filefix
nodesnake
Published: July 15, 2025
Downloadable IOCs: 12
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-34105

10.0
    Diskboss
  • Diskboss Enterprise
Published: July 15, 2025

CVE-2025-34112

10.0
    Riverbed
  • Steelcentral Netprofiler
  • Steelcentral Netexpress
Published: July 15, 2025

CVE-2025-53836

9.9
    Xwiki
  • Xwiki
Published: July 15, 2025

CVE-2025-53890

9.8
    Pyload
  • Pyload
Published: July 15, 2025

CVE-2025-5394

9.8
    Wordpress
  • Alone Charity Multipurpose Non-Profit Theme
Published: July 15, 2025

CVE-2025-7340

9.8
    Hasthemes
  • Download Contact Form 7 Widget For Elementor Page Builder \& Gutenberg Blocks
Published: July 15, 2025

CVE-2025-52376

9.8
    Nexxt Solutions
  • Ncm-X1800 Mesh Router
Published: July 15, 2025

CVE-2025-3621

9.4
    Protns
  • Actadur
Published: July 15, 2025

CVE-2025-34104

9.4
    Matomo
  • Matomo
Published: July 15, 2025

CVE-2025-34068

9.3
    Samsung
  • Wlan Ap
Published: July 15, 2025

CVE-2025-34103

9.3
    Wepresent
  • Wipg-1000
Published: July 15, 2025

CVE-2025-34110

9.3
    Coloradoftp
  • Server
Published: July 15, 2025

CVE-2025-34111

9.3
    Tikiwiki
  • Tiki
Published: July 15, 2025

CVE-2025-41236

9.3
    Vmware
  • Esxi
  • Workstation
  • Fusion
Published: July 15, 2025

CVE-2025-41237

9.3
    Vmware
  • Esxi
  • Workstation
  • Fusion
Published: July 15, 2025

CVE-2025-41238

9.3
    Vmware
  • Esxi
  • Workstation
  • Fusion
Published: July 15, 2025

CVE-2025-5393

9.1
    Alone
  • Charity Multipurpose Non-Profit Wordpress Theme
Published: July 15, 2025

CVE-2025-7341

9.1
    Hasthemes
  • Download Contact Form 7 Widget For Elementor Page Builder \& Gutenberg Blocks
Published: July 15, 2025

CVE-2025-7360

9.1
    Hasthemes
  • Download Contact Form 7 Widget For Elementor Page Builder \& Gutenberg Blocks
Published: July 15, 2025

CVE-2025-49827

9.1
    Conjur
  • Conjur Oss
  • Conjur Enterprise
Published: July 15, 2025

CVE-2025-49831

9.1
    Cyberark
  • Secrets Manager
  • Conjur
Published: July 15, 2025

CVE-2025-50067

9.0
    Oracle
  • Oracle Application Express
Published: July 15, 2025

CVE-2025-49833

8.9
    Gpt-Sovits
  • Gpt-Sovits-Webui
Published: July 15, 2025

CVE-2025-49834

8.9
    Gpt-Sovits
  • Webui
Published: July 15, 2025

CVE-2025-49835

8.9
    Gpt-Sovits
  • Webui
Published: July 15, 2025

CVE-2025-49836

8.9
    Gpt-Sovits
  • Webui
Published: July 15, 2025

CVE-2025-49837

8.9
    Gpt-Sovits
  • Webui
Published: July 15, 2025

CVE-2025-49838

8.9
    Gpt-Sovits
  • Webui
Published: July 15, 2025

CVE-2025-49839

8.9
    Gpt
  • Sovits-Webui
Published: July 15, 2025

CVE-2025-49840

8.9
    Git
  • So Vits Web Ui
Published: July 15, 2025

CVE-2025-49841

8.9
    Gpt
  • Gpt-Sovits-Webui
Published: July 15, 2025

CVE-2025-6558

8.8
    Google
  • Chrome
Published: July 15, 2025

CVE-2025-7656

8.8
    Google
  • Chrome
Published: July 15, 2025

CVE-2025-7657

8.8
    Google
  • Chrome
Published: July 15, 2025

CVE-2025-30751

8.8
    Oracle
  • Database Server
Published: July 15, 2025

CVE-2025-34107

8.7
    Winaxe
  • Ftp Client
Published: July 15, 2025

CVE-2025-34113

8.7
    Tiki
  • Tiki Wiki Cms
Published: July 15, 2025

CVE-2025-34115

8.7
    Op5
  • Monitor
Published: July 15, 2025

CVE-2025-34116

8.7
    Ipfire
  • Ipfire
Published: July 15, 2025

CVE-2025-34108

8.6
    Diskpulse
  • Disk Pulse Enterprise
Published: July 15, 2025

CVE-2025-49828

8.6
    Conjur
  • Conjur Oss
  • Secrets Manager
Published: July 15, 2025

CVE-2025-50059

8.6
    Oracle
  • Java Se
  • Graalvm For Jdk
  • Graalvm Enterprise Edition
Published: July 15, 2025

CVE-2025-34109

8.5
    Panda Security
  • Panda Global Protection
  • Panda Antivirus Pro
  • Panda Small Business Protection
  • Panda Internet Security
Published: July 15, 2025

CVE-2025-34106

8.4
    Pdf Shaper
  • Pdf Shaper
Published: July 15, 2025

CVE-2025-53024

8.2
    Oracle
  • Vm Virtualbox
Published: July 15, 2025

CVE-2025-53027

8.2
    Oracle
  • Vm Virtualbox
Published: July 15, 2025

CVE-2025-53028

8.2
    Oracle
  • Vm Virtualbox
Published: July 15, 2025

CVE-2025-7667

8.1
    Wordpress
  • Restrict File Access
Published: July 15, 2025

CVE-2025-26186

8.1
    Opensis
  • Opensis
Published: July 15, 2025

CVE-2025-30743

8.1
    Oracle
  • Lease And Finance Management
  • E-Business Suite
Published: July 15, 2025

CVE-2025-30744

8.1
    Oracle
  • Oracle E-Business Suite
  • Oracle Mobile Field Service
Published: July 15, 2025

CVE-2025-30749

8.1
    Oracle
  • Java Se
  • Graalvm For Jdk
  • Graalvm Enterprise Edition
Published: July 15, 2025

CVE-2025-50060

8.1
    Oracle
  • Bi Publisher
Published: July 15, 2025

CVE-2025-50062

8.1
    Oracle
  • Peoplesoft
Published: July 15, 2025

CVE-2025-50105

8.1
    Oracle
  • Oracle Universal Work Queue
  • Oracle E-Business Suite
Published: July 15, 2025

CVE-2025-50106

8.1
    Oracle
  • Java Se
  • Graalvm For Jdk
  • Graalvm Enterprise Edition
Published: July 15, 2025

CVE-2025-0831

7.8
    Solidworks
  • Edrawings
Published: July 15, 2025

CVE-2025-6971

7.8
    3ds
  • Solidworks
Published: July 15, 2025

CVE-2025-6972

7.8
    3ds
  • Solidworks Edrawings
Published: July 15, 2025

CVE-2025-6973

7.8
    3ds
  • Solidworks Edrawings
Published: July 15, 2025

CVE-2025-6974

7.8
    3ds
  • Solidworks Edrawings
Published: July 15, 2025

CVE-2025-7042

7.8
    Solidworks
  • Edrawings
Published: July 15, 2025

CVE-2025-53895

7.7
    Zitadel
  • Zitadel
Published: July 15, 2025

CVE-2025-53826

7.7
    File Browser
  • File Browser
Published: July 15, 2025

CVE-2025-53893

7.7
    File Browser
  • File Browser
Published: July 15, 2025

CVE-2025-50069

7.7
    Oracle
  • Oracle Database Server
Published: July 15, 2025

CVE-2025-53959

7.6
    Jetbrains
  • Youtrack
Published: July 15, 2025

CVE-2024-42650

7.5
    Nanomq
  • Nanomq
Published: July 15, 2025

CVE-2025-30762

7.5
    Oracle
  • Weblogic Server
Published: July 15, 2025

CVE-2025-50063

7.3
    Oracle
  • Java Se
Published: July 15, 2025

CVE-2025-6265

7.2
    Zyxel
  • Nwa50ax Pro
Published: July 15, 2025

CVE-2025-6965

7.2
    Sqlite
  • Sqlite
Published: July 15, 2025

CVE-2025-50819

7.1
    Beiyuouo
  • Arxiv-Daily
Published: July 15, 2025

CVE-2025-41239

7.1
    Vmware
  • Esxi
  • Workstation
  • Fusion
  • Tools
Published: July 15, 2025

CVE-2025-49830

7.1
    Conjur
  • Secrets Manager Self-Hosted
  • Conjur Oss
Published: July 15, 2025

CVE-2025-53621

6.9
    Dspace
  • Dspace
Published: July 15, 2025

CVE-2025-50068

6.7
    Oracle
  • Mysql Cluster
Published: July 15, 2025

CVE-2025-53889

6.5
    Monospace
  • Directus
Published: July 15, 2025

CVE-2025-52080

6.5
    Netgear
  • Xr300 Firmware
  • Xr300
Published: July 15, 2025

CVE-2025-52081

6.5
    Netgear
  • Xr300 Firmware
  • Xr300
Published: July 15, 2025

CVE-2025-52082

6.5
    Netgear
  • Xr300 Firmware
  • Xr300
Published: July 15, 2025

CVE-2025-30753

6.5
    Oracle
  • Weblogic Server
Published: July 15, 2025

CVE-2025-50076

6.5
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50078

6.5
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50082

6.5
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-50083

6.5
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-7367

6.4
    Strong Testimonials
  • Strong Testimonials
Published: July 15, 2025

CVE-2025-33097

6.4
    Ibm
  • Qradar Siem
Published: July 15, 2025

CVE-2025-50071

6.4
    Oracle
  • Oracle E-Business Suite
  • Oracle Applications Framework
Published: July 15, 2025

CVE-2025-30745

6.1
    Oracle
  • Oracle E-Business Suite
Published: July 15, 2025

CVE-2025-30746

6.1
    Oracle
  • E-Business Suite
  • Istor
Published: July 15, 2025

CVE-2025-30748

6.1
    Oracle
  • Peoplesoft
Published: July 15, 2025

CVE-2025-30756

6.1
    Oracle
  • Oracle Rest Data Services
Published: July 15, 2025

CVE-2025-30759

6.1
    Oracle
  • Business Intelligence Enterprise Edition
Published: July 15, 2025

CVE-2025-50073

6.1
    Oracle
  • Weblogic Server
Published: July 15, 2025

CVE-2025-50107

6.1
    Oracle
  • Oracle E-Business Suite
  • Oracle Universal Work Queue
Published: July 15, 2025

CVE-2025-49829

6.0
    Cyberark
  • Conjur Oss
  • Secrets Manager
Published: July 15, 2025

CVE-2025-53025

6.0
    Oracle
  • Vm Virtualbox
Published: July 15, 2025

CVE-2025-53026

6.0
    Oracle
  • Vm Virtualbox
Published: July 15, 2025

CVE-2025-53030

6.0
    Oracle
  • Vm Virtualbox
Published: July 15, 2025

CVE-2025-30761

5.9
    Oracle
  • Java Se
  • Graalvm Enterprise Edition
Published: July 15, 2025

CVE-2025-48795

5.6
    Apache
  • Cxf
Published: July 15, 2025

CVE-2025-4369

5.5
    Wordpress
  • Companion Auto Update
  • Wordpress
Published: July 15, 2025

CVE-2025-30483

5.5
    Dell
  • Ecs
  • Objectscale
Published: July 15, 2025

CVE-2025-30739

5.5
    Oracle
  • Oracle E-Business Suite
  • Crm Technical Foundation
Published: July 15, 2025

CVE-2025-50085

5.5
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-52377

5.4
    Nexxt Solutions
  • Ncm-X1800 Mesh Router
Published: July 15, 2025

CVE-2025-52378

5.4
    Nexxt Solutions
  • Ncm-X1800 Mesh Router
Published: July 15, 2025

CVE-2025-52379

5.4
    Nexxt Solutions
  • Ncm-X1800 Mesh Router
Published: July 15, 2025

CVE-2025-30760

5.4
    Oracle
  • Jd Edwards Enterpriseone Tools
Published: July 15, 2025

CVE-2025-50061

5.4
    Oracle
  • Primavera P6 Enterprise Project Portfolio Management
Published: July 15, 2025

CVE-2025-50090

5.4
    Oracle
  • Oracle Applications Framework
  • Oracle E-Business Suite
Published: July 15, 2025

CVE-2025-50108

5.4
    Oracle
  • Hyperion Financial Reporting
Published: July 15, 2025

CVE-2025-53887

5.3
    Monospace
  • Directus
Published: July 15, 2025

CVE-2025-30758

5.3
    Oracle
  • Siebel Crm
Published: July 15, 2025

CVE-2025-50070

5.3
    Oracle
  • Oracle Database Server
Published: July 15, 2025

CVE-2025-53031

5.3
    Oracle
  • Financial Services Analytical Applications Infrastructure
Published: July 15, 2025

CVE-2025-6981

5.3
    Github
  • Github Enterprise Server
Published: July 15, 2025

CVE-2025-53622

5.2
    Dspace
  • Dspace
Published: July 15, 2025

CVE-2025-50077

4.9
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-50079

4.9
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-50080

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50084

4.9
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-50086

4.9
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-50087

4.9
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-50088

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50089

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50091

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50092

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50093

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50094

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50095

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50097

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50099

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50101

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50102

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-53023

4.9
    Oracle
  • Mysql Server
Published: July 15, 2025

CVE-2025-53032

4.9
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-30754

4.8
    Oracle
  • Java Se
  • Graalvm
  • Graalvm Enterprise Edition
Published: July 15, 2025

CVE-2025-50064

4.8
    Oracle
  • Weblogic Server
Published: July 15, 2025

CVE-2025-53886

4.5
    Monospace
  • Directus
Published: July 15, 2025

CVE-2025-50096

4.4
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50103

4.4
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-53891

4.3
    Timelineofficial
  • Time-Line
Published: July 15, 2025

CVE-2025-30747

4.3
    Oracle
  • Peoplesoft Enterprise Peopletools
Published: July 15, 2025

CVE-2025-53885

4.2
    Monospace
  • Directus
Published: July 15, 2025

CVE-2025-24477

4.2
    Fortinet
  • Fortios
Published: July 15, 2025

CVE-2025-53905

4.1
    Vim
  • Vim
Published: July 15, 2025

CVE-2025-53906

4.1
    Vim
  • Vim
Published: July 15, 2025

CVE-2025-53839

4.0
    Dracoon
  • Dracoon Branding Service
Published: July 15, 2025

CVE-2025-50072

4.0
    Oracle
  • Weblogic Server
Published: July 15, 2025

CVE-2025-30752

3.7
    Oracle
  • Java Se
  • Graalvm For Jdk
Published: July 15, 2025

CVE-2025-50065

3.7
    Oracle
  • Graalvm For Jdk
Published: July 15, 2025

CVE-2025-50081

3.1
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50066

2.7
    Oracle
  • Oracle Database Server
Published: July 15, 2025

CVE-2025-50098

2.7
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-50104

2.7
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-30750

2.4
    Oracle
  • Oracle Database Server
Published: July 15, 2025

CVE-2025-7672

2.3
    Jiransoft
  • Crosseditor4
Published: July 15, 2025

CVE-2025-53029

2.3
    Oracle
  • Vm Virtualbox
Published: July 15, 2025

CVE-2025-50100

2.2
    Oracle
  • Mysql
Published: July 15, 2025

CVE-2025-53903

1.3
    Scratch Channel
  • *
Published: July 15, 2025
Click here to see more Vulnerabilities