Tag: 2025-07-30

5 Attack Reports | 165 Vulnerabilities

Attack reports

XWorm V6: Advanced Evasion and AMSI Bypass Capabilities Revealed

A new version of XWorm malware (version 6.0) has been discovered, showcasing advanced features for persistence and evasion. The infection chain begins with a VBScript that downloads and executes a PowerShell script. This script implements an AMSI bypass by modifying CLR.DLL in memory, then download…
malware
xworm
evasion
persistence
anti-analysis
in-memory execution
2025-07-30
amsi bypass
Published: July 30, 2025
Downloadable IOCs: 4

Spear Phishing Campaign Delivers VIP Keylogger via Email Attachment

A sophisticated spear phishing campaign has been identified, distributing the VIP keylogger through email attachments. The malware is delivered via a ZIP file containing a malicious executable disguised as a PDF. Once executed, an AutoIt script drops two encrypted files, which are then decrypted an…
obfuscation
data theft
exfiltration
persistence
autoit
process hollowing
spear phishing
2025-07-30
vip keylogger
Published: July 30, 2025
Downloadable IOCs: 1

LNK Trojan delivers REMCOS

This report details a multi-stage malware campaign delivering the REMCOS backdoor via a malicious Windows LNK shortcut file. The attack begins with social engineering, leveraging PowerShell for initial execution and deploys a persistent backdoor capable of full system compromise. The infection chai…
backdoor
powershell
remcos
keylogger
lnk file
c2 communication
pif file
multi-stage attack
base64 encoding
2025-07-30
Published: July 30, 2025
Downloadable IOCs: 8

Targeted attacks leverage accounts on popular online platforms as C2 servers

A sophisticated cyberattack campaign targeted the Russian IT industry and other entities globally in late 2024. The attackers used social media profiles and popular websites to deliver payload information, bypassing detection methods. They employed spear phishing emails with malicious RAR archives,…
cobalt strike
cobalt strike beacon
shellcode
targeted attacks
social media
c2 communication
spear phishing
dll hijacking
2025-07-30
api obfuscation
Published: July 30, 2025
Downloadable IOCs: 2

Gunra Ransomware Group Unveils Efficient Linux Variant

Gunra ransomware, first observed in April 2025, has expanded its capabilities with a new Linux variant. This cross-platform move broadens the group's attack surface and demonstrates their intent to grow beyond their initial scope. The Linux variant features advanced capabilities, including parallel…
linux
ransomware
chacha20
2025-07-30
Published: July 30, 2025
Downloadable IOCs: 6
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-31279

9.8
    Apple
  • Ipados
  • Macos
Published: July 30, 2025

CVE-2025-43184

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43186

9.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43189

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43192

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43193

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43194

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43198

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43199

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43209

9.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43220

9.8
    Apple
  • Ipados
  • Macos
Published: July 30, 2025

CVE-2025-43222

9.8
    Apple
  • Ipados
  • Macos
Published: July 30, 2025

CVE-2025-43232

9.8
    Apple
  • Macos Sequoia
  • Macos Ventura
  • Macos Sonoma
Published: July 30, 2025

CVE-2025-43233

9.8
    Apple
  • Macos Sequoia
  • Macos Sonoma
  • Macos Ventura
Published: July 30, 2025

CVE-2025-43234

9.8
    Apple
  • Watchos
  • Ios
  • Ipados
  • Tvos
  • Macos
  • Visionos
Published: July 30, 2025

CVE-2025-43237

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43243

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43244

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43245

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43253

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43261

9.8
    Apple
  • Macos Sequoia
  • Macos Sonoma
  • Macos Ventura
Published: July 30, 2025

CVE-2025-43275

9.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-50578

9.8
    Linuxserver.Io
  • Heimdall
Published: July 30, 2025

CVE-2025-46811

9.3
    Suse
  • Suse Manager
  • Suse Manager Server Module
  • Sles
Published: July 30, 2025

CVE-2025-31229

9.1
    Apple
  • Ipados
  • Iphone Os
Published: July 30, 2025

CVE-2025-31281

9.1
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: July 30, 2025

CVE-2025-43273

9.1
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-54430

9.1
    Python
  • Dedupe
Published: July 30, 2025

CVE-2025-54576

9.1
    Oauth2-Proxy
  • Oauth2-Proxy
Published: July 30, 2025

CVE-2025-31273

8.8
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-31277

8.8
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-31278

8.8
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43270

8.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-8320

8.8
    Tesla
  • Wall Connector
Published: July 30, 2025

CVE-2025-8292

8.8
    Google
  • Chrome
Published: July 30, 2025

CVE-2025-26332

8.8
    Dell
  • Techadvisor
  • Xtremio X2
Published: July 30, 2025

CVE-2025-30105

8.8
    Dell
  • Xtremio
Published: July 30, 2025

CVE-2025-8322

8.7
    Ventem
  • E-School
Published: July 30, 2025

CVE-2025-8323

8.7
    Ventem
  • E-School
Published: July 30, 2025

CVE-2025-53022

8.6
    Trustedfirmware
  • Trusted Firmware
Published: July 30, 2025

CVE-2025-54583

8.3
    Gitproxy
  • Gitproxy
Published: July 30, 2025

CVE-2025-4421

8.2
    Lenovo
  • *
Published: July 30, 2025

CVE-2025-4422

8.2
    Lenovo
  • *
Published: July 30, 2025

CVE-2025-4423

8.2
    Lenovo
  • Lenovo Product Security
Published: July 30, 2025

CVE-2025-4425

8.2
    Lenovo
  • Lenovo
Published: July 30, 2025

CVE-2025-52187

8.2
    Getprojectsidea
  • Create School Management System
Published: July 30, 2025

CVE-2025-54585

8.2
    Gitproxy
  • Gitproxy
Published: July 30, 2025

CVE-2025-45620

8.1
    Aver
  • Ptc310uv2
Published: July 30, 2025

CVE-2024-48916

8.1
    Ceph
  • Ceph
Published: July 30, 2025

CVE-2025-24119

7.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-31243

7.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-31280

7.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43188

7.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43196

7.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43248

7.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43249

7.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43256

7.8
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43277

7.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-50777

7.8
    Aziot
  • 2mp Full Hd Smart Wifi Cctv Home Security Camera
Published: July 30, 2025

CVE-2025-53944

7.7
    Autogpt
  • Autogpt
Published: July 30, 2025

CVE-2025-24224

7.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43223

7.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43227

7.5
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-54581

7.5
    Vproxy
  • Vproxy
Published: July 30, 2025

CVE-2024-45955

7.3
    Rocket Software
  • Rocket Zena
Published: July 30, 2025

CVE-2025-36611

7.3
    Dell
  • Dell Encryption
  • Dell Security Management Server
Published: July 30, 2025

CVE-2025-54433

7.2
    Bugsink
  • Bugsink
Published: July 30, 2025

CVE-2025-43221

7.1
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: July 30, 2025

CVE-2025-43224

7.1
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
Published: July 30, 2025

CVE-2025-43239

7.1
    Apple
  • Macos Sequoia
  • Macos Sonoma
  • Macos Ventura
Published: July 30, 2025

CVE-2025-43254

7.1
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-8312

7.1
    Devolutions
  • Devolutions Server
Published: July 30, 2025

CVE-2025-54586

7.1
    Gitproxy
  • Gitproxy
Published: July 30, 2025

CVE-2025-0712

7.0
    Elastic
  • Elastic
Published: July 30, 2025

CVE-2025-25011

7.0
    Elastic
  • Elasticsearch
Published: July 30, 2025

CVE-2025-54584

7.0
    Gitproxy
  • Gitproxy
Published: July 30, 2025

CVE-2025-8326

6.9
    Code-Projects
  • Exam Form Submission
Published: July 30, 2025

CVE-2025-54572

6.9
    Open Id
  • Ruby-Saml
Published: July 30, 2025

CVE-2025-43018

6.9
    Hp
  • Laserjet Pro
Published: July 30, 2025

CVE-2025-8327

6.9
    Code-Projects
  • Exam Form Submission
Published: July 30, 2025

CVE-2025-8328

6.9
    Code-Projects
  • Exam Form Submission
Published: July 30, 2025

CVE-2025-8329

6.9
    Code-Projects
  • Vehicle Management
Published: July 30, 2025

CVE-2025-8330

6.9
    Code-Projects
  • Vehicle Management
Published: July 30, 2025

CVE-2025-8331

6.9
    Code-Projects
  • Online Farm System
Published: July 30, 2025

CVE-2025-8332

6.9
    Code-Projects
  • Online Farm System
Published: July 30, 2025

CVE-2025-8333

6.9
    Code-Projects
  • Online Farm System
Published: July 30, 2025

CVE-2025-8334

6.9
    Campcodes
  • Online Recruitment Management System
Published: July 30, 2025

CVE-2025-8336

6.9
    Campcodes
  • Online Recruitment Management System
Published: July 30, 2025

CVE-2025-8321

6.8
    Tesla
  • Wall Connector
Published: July 30, 2025

CVE-2025-24188

6.5
    Apple
  • Safari
  • Macos
Published: July 30, 2025

CVE-2025-43212

6.5
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43213

6.5
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43214

6.5
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43216

6.5
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43252

6.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-52897

6.5
    Glpi
  • Glpi
Published: July 30, 2025

CVE-2025-53008

6.5
    Glpi
  • Glpi
Published: July 30, 2025

CVE-2025-53111

6.5
    Glpi
  • Glpi
Published: July 30, 2025

CVE-2025-54656

6.5
    Apache
  • Struts
Published: July 30, 2025

CVE-2025-25691

6.5
    Prestashop
  • Prestashop
Published: July 30, 2025

CVE-2025-25692

6.5
    Prestashop
  • Prestashop
Published: July 30, 2025

CVE-2025-45619

6.5
    Aver
  • Ptc310uv2
Published: July 30, 2025

CVE-2025-30480

6.5
    Dell
  • Powerprotect Data Manager
Published: July 30, 2025

CVE-2025-36608

6.5
    Dell
  • Smartfabric Os10
Published: July 30, 2025

CVE-2025-50464

6.5
    Iptime
  • Firmware
Published: July 30, 2025

CVE-2025-31275

6.2
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43191

6.2
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43211

6.2
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43240

6.2
    Apple
  • Macos Sequoia
Published: July 30, 2025

CVE-2025-43229

6.1
    Apple
  • Macos Sequoia
Published: July 30, 2025

CVE-2025-8319

6.1
    *
  • Bma
Published: July 30, 2025

CVE-2024-45515

6.1
    Zimbra
  • Zimbra Collaboration
Published: July 30, 2025

CVE-2025-51951

6.1
    Andisearch
  • Andisearch
Published: July 30, 2025

CVE-2025-51954

6.1
    Electronhub
  • Playground
Published: July 30, 2025

CVE-2025-4424

6.0
    Lenovo
  • Product
Published: July 30, 2025

CVE-2025-4426

6.0
    Lenovo
  • *-*
Published: July 30, 2025

CVE-2025-1221

5.9
    Silabs
  • Emberznet Zigbee Stack
Published: July 30, 2025

CVE-2025-1394

5.9
    Silabs
  • Emberznet
Published: July 30, 2025

CVE-2023-2593

5.9
    Linux
  • Linux Kernel
Published: July 30, 2025

CVE-2025-8353

5.9
    Devolutions
  • Devolutions Server
Published: July 30, 2025

CVE-2025-43185

5.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43195

5.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43215

5.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43218

5.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43225

5.5
    Apple
  • Ipados
  • Macos
Published: July 30, 2025

CVE-2025-43235

5.5
    Apple
  • Macos Sequoia
Published: July 30, 2025

CVE-2025-43241

5.5
    Apple
  • Macos Sequoia
  • Macos Ventura
  • Macos Sonoma
Published: July 30, 2025

CVE-2025-43246

5.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43247

5.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43251

5.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43267

5.5
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-30103

5.5
    Dell
  • Smartfabric Os10
Published: July 30, 2025

CVE-2025-47001

5.4
    Adobe
  • Experience Manager
Published: July 30, 2025

CVE-2025-53357

5.4
    Glpi
  • Glpi
Published: July 30, 2025

CVE-2025-31276

5.3
    Apple
  • Ipados
  • Iphone Os
Published: July 30, 2025

CVE-2025-54425

5.3
    Umbraco
  • Umbraco
Published: July 30, 2025

CVE-2025-54575

5.3
    Sixlabors
  • Imagesharp
Published: July 30, 2025

CVE-2025-8335

5.3
    Code-Projects
  • Simple Car Rental System
Published: July 30, 2025

CVE-2025-43260

5.1
    Apple
  • Macos Sequoia
  • Macos Sonoma
Published: July 30, 2025

CVE-2025-43266

5.1
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-8217

5.1
    Amazon
  • Q Developer
Published: July 30, 2025

CVE-2025-54388

5.1
    Docker
  • Moby
Published: July 30, 2025

CVE-2025-6348

4.9
    Wordpress
  • Smart Slider 3
Published: July 30, 2025

CVE-2025-8337

4.8
    Code-Projects
  • Simple Car Rental System
Published: July 30, 2025

CVE-2025-43259

4.6
    Apple
  • Macos Sequoia
  • Macos Sonoma
  • Macos Ventura
Published: July 30, 2025

CVE-2025-43274

4.4
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43228

4.3
    Apple
  • Ios
  • Ipad Os
Published: July 30, 2025

CVE-2025-53112

4.3
    Glpi
  • Glpi
Published: July 30, 2025

CVE-2025-54573

4.3
    Cvat
  • Cvat
Published: July 30, 2025

CVE-2025-43197

4.0
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43206

4.0
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43217

4.0
    Apple
  • Ipados
  • Iphone Os
Published: July 30, 2025

CVE-2025-43226

4.0
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: July 30, 2025

CVE-2025-43230

4.0
    Apple
  • Ipad Os
  • Watch Os
  • Vision Os
  • Ios
  • Macos Sequoia
  • Tv Os
Published: July 30, 2025

CVE-2025-43250

4.0
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-43265

4.0
    Apple
  • Watchos
  • Visionos
  • Ios
  • Ipados
  • Macos Sequoia
  • Tvos
Published: July 30, 2025

CVE-2025-52567

3.5
    Glpi
  • Glpi
Published: July 30, 2025

CVE-2025-54410

3.3
    Docker
  • Moby
Published: July 30, 2025

CVE-2025-53113

2.7
    Glpi
  • Glpi
Published: July 30, 2025

CVE-2025-36609

2.5
    Dell
  • Smartfabric Os10
Published: July 30, 2025

CVE-2025-43276

None
    Apple
  • Macos
Published: July 30, 2025

CVE-2025-38498

None
    Linux
  • Linux Kernel
Published: July 30, 2025

CVE-2025-54582

None
    Netty
  • Netty
Published: July 30, 2025

CVE-2024-11478

None
Published: July 30, 2025

CVE-2025-7356

None
Published: July 30, 2025
Click here to see more Vulnerabilities