Tag: 2025-07-31

6 Attack Reports | 126 Vulnerabilities

Attack reports

MaaS Appeal: An Infostealer Rises From The Ashes

NOVABLIGHT is a NodeJS-based Malware-as-a-Service (MaaS) information stealer developed by a French-speaking threat group. It's sold as an educational tool but used for credential theft and cryptowallet compromise. The malware features heavy obfuscation, multiple anti-analysis techniques, and variou…
obfuscation
infostealer
anti-analysis
electron
credential theft
data exfiltration
maas
nodejs
2025-07-31
nova sentinel
malicord
novablight
Published: July 31, 2025
Downloadable IOCs: 8

RedHook: A New Android Banking Trojan Targeting Users In Vietnam

A sophisticated Android banking trojan named RedHook has been discovered targeting Vietnamese users through spoofed government and financial websites. The malware uses WebSocket to communicate with its command-and-control server and supports over 30 remote commands, enabling complete control over c…
rat
phishing
android
banking trojan
keylogging
vietnam
aws s3
websocket
2025-07-31
chinese-language
redhook
Published: July 31, 2025
Downloadable IOCs: 13

GOLD BLADE remote DLL sideloading attack deploys RedLoader

A new infection chain for GOLD BLADE's RedLoader malware has been identified, combining previously separate techniques. The attack begins with a malicious PDF link, leading to a ZIP archive containing a LNK file masquerading as a PDF. This file executes conhost.exe, which uses WebDAV to contact a C…
dll sideloading
webdav
redloader
2025-07-31
Published: July 31, 2025
Downloadable IOCs: 5

Qilin Ransomware and the Hidden Dangers of BYOVD

This analysis examines a recent incident involving Qilin ransomware, highlighting the evolving tactics of cybercriminals to evade Endpoint Detection and Response (EDR) systems. The attackers utilized a previously unknown driver, TPwSav.sys, to disable EDR measures through a technique known as bring…
ransomware
qilin
byovd
raas
2025-07-31
Published: July 31, 2025
Downloadable IOCs: 7

Auto-Color Backdoor: How a Stealthy Linux Intrusion Was Thwarted

In April 2025, an Auto-Color backdoor malware attack was detected on a US-based chemicals company's network. The threat actor exploited CVE-2025-31324 in SAP NetWeaver to gain initial access, attempted to download suspicious files, and communicated with malicious infrastructure. The attack involved…
2025-07-31
Published: July 31, 2025
Downloadable IOCs: 0

Sealed Chain of Deception: Actors leveraging Node.JS to Launch JSCeal

A sophisticated malware campaign called JSCEAL is targeting cryptocurrency users through fake apps impersonating popular trading platforms. The attackers use malicious ads to lure victims into downloading installers that deploy a multi-stage infection chain. This includes PowerShell scripts for pro…
evasion
malvertising
powershell
cryptocurrency
stealer
node.js
multi-stage
fake apps
2025-07-31
jsceal
jsc
Published: July 31, 2025
Downloadable IOCs: 268
Click here to see more Attack Reports

Vulnerabilities

CVE-2013-10040

10.0
    Clipbucket
  • Clipbucket
Published: July 31, 2025

CVE-2014-125121

10.0
    Array Networks
  • Vapv
  • Vxag
Published: July 31, 2025

CVE-2014-125123

10.0
    Lxcenter
  • Kloxo
Published: July 31, 2025

CVE-2014-125124

10.0
    Pandora Fms
  • Pandora Fms
Published: July 31, 2025

CVE-2025-50475

9.8
    Russound
  • Mbx-Pre-D67f
Published: July 31, 2025

CVE-2025-26062

9.8
    Intelbras
  • Rx1500
  • Rx3000
Published: July 31, 2025

CVE-2025-26063

9.8
    Intelbras
  • Rx1500
  • Rx3000
Published: July 31, 2025

CVE-2013-10043

9.5
    Oastium
  • Astium Confweb
Published: July 31, 2025

CVE-2025-8426

9.4
    Marvell
  • Qconvergeconsole
Published: July 31, 2025

CVE-2012-10021

9.3
    D-Link
  • Dir-605l Wireless N300 Cloud Router
Published: July 31, 2025

CVE-2013-10033

9.3
    Kimai
  • Kimai
Published: July 31, 2025

CVE-2013-10034

9.3
    Kaseya
  • Kserver
Published: July 31, 2025

CVE-2013-10037

9.3
    Webtester
  • Webtester
Published: July 31, 2025

CVE-2013-10038

9.3
    Flashchat
  • Flashchat
Published: July 31, 2025

CVE-2013-10042

9.3
    Freeftp
  • Freeftp
Published: July 31, 2025

CVE-2025-8286

9.3
    Guralp
  • Fmus
Published: July 31, 2025

CVE-2014-125126

9.2
    Simple
  • E-Document
Published: July 31, 2025

CVE-2025-7847

8.8
    Wordpress
  • Ai Engine
Published: July 31, 2025

CVE-2014-125125

8.8
    A10
  • Ax Loadbalancer
Published: July 31, 2025

CVE-2025-50572

8.8
    Archer Technology
  • Rsa Archer
Published: July 31, 2025

CVE-2025-53558

8.7
    Zte
  • Zxhn-F660t
  • Zxhn-F660a
Published: July 31, 2025

CVE-2013-10035

8.7
    Processmaker
  • Processmaker
Published: July 31, 2025

CVE-2013-10039

8.7
    Gestioip
  • Gestioip
Published: July 31, 2025

CVE-2025-46359

8.6
    Powercms
  • Powercms
Published: July 31, 2025

CVE-2011-10008

8.6
    Mplayer
  • Mplayer Lite
Published: July 31, 2025

CVE-2025-50850

8.6
    Cs Cart
  • Cs Cart
Published: July 31, 2025

CVE-2013-10036

8.4
    Beetel
  • Connection Manager
Published: July 31, 2025

CVE-2025-48071

8.4
    Openexr
  • Openexr
Published: July 31, 2025

CVE-2025-50849

8.0
    Cs-Cart
  • Cs-Cart
Published: July 31, 2025

CVE-2025-52289

8.0
    Magnusbilling
  • Magnusbilling
Published: July 31, 2025

CVE-2025-52203

7.6
    Devaslan
  • Devaslanphp
Published: July 31, 2025

CVE-2025-51503

7.6
    Microweber
  • Microweber Cms
Published: July 31, 2025

CVE-2025-24853

7.5
    Apache
  • Jspwiki
Published: July 31, 2025

CVE-2025-2813

7.5
    *
  • Http Service
Published: July 31, 2025

CVE-2025-29556

7.3
    Exagrid
  • Exa Grid Ex10
Published: July 31, 2025

CVE-2025-26064

7.3
    Intelbras
  • Rx1500
  • Rx3000
Published: July 31, 2025

CVE-2025-45769

7.3
    Php-Jwt
  • Php-Jwt
Published: July 31, 2025

CVE-2025-41688

7.2
    Lua
  • Lua
Published: July 31, 2025

CVE-2025-8213

7.2
    Ninjastream
  • Ninjascanner
Published: July 31, 2025

CVE-2025-49083

7.0
    Netmotionsoftware
  • Absolute Secure Access
Published: July 31, 2025

CVE-2025-34146

7.0
    Nyariv
  • Sandboxjs
Published: July 31, 2025

CVE-2025-45770

7.0
    Jwt
  • Jwt
Published: July 31, 2025

CVE-2025-45768

7.0
    Pyjwt
  • Pyjwt
Published: July 31, 2025

CVE-2025-8338

6.9
    Projectworlds
  • Online Admission System
Published: July 31, 2025

CVE-2025-8339

6.9
    Code-Projects
  • Intern Membership Management System
Published: July 31, 2025

CVE-2025-8348

6.9
    Kehua
  • Charging Pile Cloud Platform
Published: July 31, 2025

CVE-2025-8371

6.9
    Code-Projects
  • Exam Form Submission
Published: July 31, 2025

CVE-2025-8372

6.9
    Code-Projects
  • Exam Form Submission
Published: July 31, 2025

CVE-2025-8373

6.9
    Code-Projects
  • Vehicle Management
Published: July 31, 2025

CVE-2025-8192

6.9
    Google
  • Android
  • Tvsettings
Published: July 31, 2025

CVE-2025-8374

6.9
    Code-Projects
  • Vehicle Management
Published: July 31, 2025

CVE-2025-8375

6.9
    Code-Projects
  • Vehicle Management
Published: July 31, 2025

CVE-2025-8376

6.9
    Code-Projects
  • Vehicle Management
Published: July 31, 2025

CVE-2025-8378

6.9
    Campcodes
  • Online Hotel Reservation System
Published: July 31, 2025

CVE-2025-8407

6.9
    Code-Projects
  • Vehicle Management
Published: July 31, 2025

CVE-2025-8408

6.9
    Code-Projects
  • Vehicle Management
Published: July 31, 2025

CVE-2025-46809

6.9
    Suse
  • Suse Manager
Published: July 31, 2025

CVE-2025-8409

6.9
    Code-Projects
  • Vehicle Management
Published: July 31, 2025

CVE-2025-54833

6.9
    Opexus
  • Foiaxpress
Published: July 31, 2025

CVE-2025-54834

6.9
    Opexus
  • Foiaxpress
Published: July 31, 2025

CVE-2025-48072

6.8
    Openexr
  • Openexr
Published: July 31, 2025

CVE-2025-36039

6.5
    Ibm
  • Aspera Faspex
Published: July 31, 2025

CVE-2025-36040

6.5
    Ibm
  • Aspera Faspex
Published: July 31, 2025

CVE-2025-50847

6.5
    Cs Cart
  • Cs Cart
Published: July 31, 2025

CVE-2025-50867

6.5
    Cloudclassroom
  • Cloudclassroom-Php-Project
Published: July 31, 2025

CVE-2024-34327

6.5
    Sielox
  • Sielox Anyware
Published: July 31, 2025

CVE-2025-5720

6.4
    Wordpress
  • Plugin
Published: July 31, 2025

CVE-2025-54589

6.3
    Copyparty
  • Copyparty
Published: July 31, 2025

CVE-2024-34328

6.3
    Sielox
  • Sielox Anyware
Published: July 31, 2025

CVE-2025-24854

6.1
    Apache
  • Jspwiki
Published: July 31, 2025

CVE-2025-50270

6.1
    Anqicms
  • Anqicms
Published: July 31, 2025

CVE-2025-51569

6.1
    Lb-Link
  • Bl-Cpe300m
Published: July 31, 2025

CVE-2025-50848

6.1
    Cs Cart
  • Cs Cart
Published: July 31, 2025

CVE-2025-50866

6.1
    Cloudclassroom
  • Php Project
Published: July 31, 2025

CVE-2025-37110

6.0
    Hpe
  • Telco Network Function Virtual Orchestrator
Published: July 31, 2025

CVE-2025-37111

6.0
    Hpe
  • Hpe Telco Network Function Virtual Orchestrator
Published: July 31, 2025

CVE-2025-37112

6.0
    Hpe
  • Hpe Telco Network Function Virtual Orchestrator
Published: July 31, 2025

CVE-2025-23289

5.5
    Nvidia
  • Omniverse Launcher
Published: July 31, 2025

CVE-2025-7205

5.4
    Givewp
  • Donation Plugin
Published: July 31, 2025

CVE-2025-29557

5.4
    Exagrid
  • Exagrid Ex10
Published: July 31, 2025

CVE-2025-49084

5.3
    Netmotion
  • Absolute Secure Access
Published: July 31, 2025

CVE-2025-8340

5.3
    Code-Projects
  • Intern Membership Management System
Published: July 31, 2025

CVE-2025-8343

5.3
    Openviglet
  • Shio
Published: July 31, 2025

CVE-2025-8344

5.3
    Openviglet
  • Shio
Published: July 31, 2025

CVE-2025-8345

5.3
    Shanghailingdanginformationtechnology
  • Lingdang Crm
Published: July 31, 2025

CVE-2025-8346

5.3
    Portabilis
  • I-Educar
Published: July 31, 2025

CVE-2025-8347

5.3
    Kehua
  • Charging Pile Cloud Platform
Published: July 31, 2025

CVE-2025-8366

5.3
    Portabilis
  • I-Educar
Published: July 31, 2025

CVE-2025-8367

5.3
    Portabilis
  • I-Educar
Published: July 31, 2025

CVE-2025-8368

5.3
    Portabilis
  • I-Educar
Published: July 31, 2025

CVE-2025-8369

5.3
    Portabilis
  • I-Educar
Published: July 31, 2025

CVE-2025-8370

5.3
    Portabilis
  • I-Educar
Published: July 31, 2025

CVE-2025-36563

5.3
    Powercms
  • Powercms
Published: July 31, 2025

CVE-2025-41396

5.3
    Powercms
  • Powercms
Published: July 31, 2025

CVE-2025-8381

5.3
    Campcodes
  • Online Hotel Reservation System
Published: July 31, 2025

CVE-2025-8382

5.3
    Campcodes
  • Online Hotel Reservation System
Published: July 31, 2025

CVE-2014-125122

5.3
    Linksys
  • Wrt120n
Published: July 31, 2025

CVE-2025-54832

5.3
    Opexus
  • Foiaxpress
Published: July 31, 2025

CVE-2025-49082

5.1
    Netmotionsoftware
  • Absolute Secure Access
Published: July 31, 2025

CVE-2025-54085

5.1
    Netmotionsoftware
  • Absolute Secure Access
Published: July 31, 2025

CVE-2025-8365

5.1
    Portabilis
  • I-Educar
Published: July 31, 2025

CVE-2025-41391

5.1
    Powercms
  • Powercms
Published: July 31, 2025

CVE-2025-54757

5.1
    Powercms
  • Powercms
Published: July 31, 2025

CVE-2025-40980

5.1
    Ultimatefosters
  • Ultimatepos
Published: July 31, 2025

CVE-2025-8379

5.1
    Campcodes
  • Online Hotel Reservation System
Published: July 31, 2025

CVE-2025-8380

5.1
    Campcodes
  • Online Hotel Reservation System
Published: July 31, 2025

CVE-2025-54752

4.8
    Powercms
  • Powercms
Published: July 31, 2025

CVE-2025-48073

4.6
    Openexr
  • Openexr
Published: July 31, 2025

CVE-2025-7738

4.4
    Redhat
  • Ansible Automation Platform
Published: July 31, 2025

CVE-2025-8068

4.3
    Htmega
  • Absolute Addons For Elementor
Published: July 31, 2025

CVE-2025-8151

4.3
    Elementor
  • Ht Mega
    Wordpress
Published: July 31, 2025

CVE-2025-8401

4.3
    Ht Mega
  • Absolute Addons
Published: July 31, 2025

CVE-2023-32251

3.7
    Linux
  • Linux Kernel
Published: July 31, 2025

CVE-2025-51383

3.5
    Dlink
  • Di-8200 Firmware
  • Di-8200
Published: July 31, 2025

CVE-2025-51384

3.5
    Dlink
  • Di-8200 Firmware
  • Di-8200
Published: July 31, 2025

CVE-2025-51385

3.5
    Dlink
  • Di-8200 Firmware
  • Di-8200
Published: July 31, 2025

CVE-2025-37108

3.5
    Hpe
  • Hpe Telco Service Activator
Published: July 31, 2025

CVE-2025-37109

3.5
    Hpe
  • Telco Service Activator
Published: July 31, 2025

CVE-2023-41674

None
    Fortinet
  • Fortinet
Published: July 31, 2025

CVE-2025-54823

None
    Fortinet
  • Fortinet
Published: July 31, 2025

CVE-2025-54824

None
    Fortinet
  • Fortigate
Published: July 31, 2025

CVE-2025-54825

None
    Fortinet
  • Fortinet
Published: July 31, 2025

CVE-2025-54826

None
    Fortinet
  • *
Published: July 31, 2025

CVE-2025-54827

None
    Fortinet
  • Fortinet
Published: July 31, 2025

CVE-2025-54828

None
    Fortinet
  • Fortinet
Published: July 31, 2025

CVE-2025-54829

None
    Fortinet
  • *
Published: July 31, 2025
Click here to see more Vulnerabilities