Tag: 2025-08-11

4 Attack Reports | 97 Vulnerabilities

Attack reports

Echoes in the Shell: Legacy Tooling Behind Ongoing SharePoint 'ToolShell' Exploitation

Chinese nation-state actors are exploiting vulnerabilities in Microsoft SharePoint on-premises infrastructure. The attacks chain together multiple recently disclosed vulnerabilities, collectively known as 'ToolShell', to perform unauthenticated code execution, extract cryptographic keys, and deploy…
valleyrat
china chopper
sharepoint
antsword
CVE-2025-53770
CVE-2025-53771
toolshell
CVE-2025-49704
CVE-2025-49706
2025-08-11
requestrepo
Published: August 11, 2025
Linked vulnerabilities : CVE-2019-0604, CVE-2025-53770 (CVSS 9.8), CVE-2025-53771 (CVSS 7.1), CVE-2025-49704, CVE-2025-49706
Downloadable IOCs: 1

From ClickFix to Command: A Full PowerShell Attack Chain

A targeted intrusion campaign impacting Israeli organizations has been identified, leveraging compromised internal email infrastructure to distribute phishing messages. The attack uses a multi-stage, PowerShell-based infection chain, culminating in the delivery of a remote access trojan (RAT). Key …
obfuscation
rat
phishing
social engineering
powershell
lateral movement
c2 communication
2025-08-11
israeli targets
powershell rat
Published: August 11, 2025
Downloadable IOCs: 0

Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability

A zero-day vulnerability in WinRAR, CVE-2025-8088, has been discovered being exploited in the wild by the Russia-aligned group RomCom. The vulnerability allows attackers to hide malicious files in archives, which are silently deployed when extracted. The exploit was used in spearphishing campaigns …
backdoor
exploit
spearphishing
vulnerability
zero-day
mythic
winrar
snipbot
rustyclaw
russia-aligned
2025-08-11
CVE-2025-8088
Published: August 11, 2025
Linked vulnerabilities : CVE-2023-36884, CVE-2025-8088
Downloadable IOCs: 9

Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild

A critical vulnerability (CVE-2025-32433) in Erlang/OTP's SSH daemon allows unauthenticated remote code execution, affecting critical infrastructure and operational technology networks. With a CVSS score of 10.0, it enables command execution by sending SSH connection protocol messages to open ports…
exploit
vulnerability
ssh
remote code execution
critical infrastructure
CVE-2025-32433
2025-08-11
erlang/otp
operational technology
Published: August 11, 2025
Linked vulnerabilities : CVE-2025-32433 (CVSS 10.0)
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-45146

9.8
    Modelcache
  • Modelcache
Published: August 11, 2025

CVE-2024-32640

9.8
    Masa
  • Cms
Published: August 11, 2025

CVE-2012-10039

9.4
    Zen
  • Zen Load Balancer
Published: August 11, 2025

CVE-2012-10040

9.4
    Openfiler
  • Openfiler
Published: August 11, 2025

CVE-2025-8853

9.3
    2100 Technology
  • Official Document Management System
Published: August 11, 2025

CVE-2012-10037

9.3
    Phptax
  • Phptax
Published: August 11, 2025

CVE-2012-10038

9.3
    Auxilium
  • Ratemypet
Published: August 11, 2025

CVE-2025-7679

8.9
    Abb
  • Aspect
Published: August 11, 2025

CVE-2025-8747

8.6
    Keras
  • Keras
Published: August 11, 2025

CVE-2025-40920

8.6
    Catalyst
  • Catalyst-Authentication-Credential-Http
    Perl
Published: August 11, 2025

CVE-2025-54878

8.6
    Nasa
  • Cryptolib
Published: August 11, 2025

CVE-2025-25235

8.6
    Omnissa
  • Secure Email Gateway
Published: August 11, 2025

CVE-2025-55150

8.6
    Stirling-Pdf
  • Stirling Pdf
Published: August 11, 2025

CVE-2025-55151

8.6
    Stirling
  • Stirling-Pdf
Published: August 11, 2025

CVE-2025-55161

8.6
    Stirling-Pdf
  • Stirling-Pdf
Published: August 11, 2025

CVE-2025-55012

8.5
    Zed
  • Zed
Published: August 11, 2025

CVE-2025-24298

8.4
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-25278

8.4
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-27128

8.4
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-27577

8.4
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-8854

8.4
    Bulletphysics
  • Bullet3
Published: August 11, 2025

CVE-2025-53191

8.4
    Abb
  • Aspect
Published: August 11, 2025

CVE-2025-7677

8.2
    Abb
  • Aspect
Published: August 11, 2025

CVE-2025-54063

8.0
    Cherry Studio
  • Cherry Studio
Published: August 11, 2025

CVE-2025-55156

7.8
    Pyload
  • Pyload
Published: August 11, 2025

CVE-2025-25231

7.5
    Omnissa
  • Workspace One Uem
Published: August 11, 2025

CVE-2025-52931

7.5
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-54525

7.5
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-8820

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8822

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8824

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8826

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8831

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8832

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8833

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-53187

7.3
    Abb
  • Aspect
Published: August 11, 2025

CVE-2025-53188

7.3
    Abb
  • Aspect
Published: August 11, 2025

CVE-2025-53189

7.3
    Abb
  • Aspect
Published: August 11, 2025

CVE-2025-53190

7.3
    Abb
  • Aspect
Published: August 11, 2025

CVE-2025-44004

7.2
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-54478

7.2
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-8862

7.0
    Yugabyte
  • Yugabytedb
Published: August 11, 2025

CVE-2025-8863

7.0
    Yugabyte
  • Yugabytedb
Published: August 11, 2025

CVE-2025-8838

6.9
    Winterchens
  • My-Site
Published: August 11, 2025

CVE-2025-54992

6.9
    Openkilda
  • Openkilda
Published: August 11, 2025

CVE-2025-55157

6.9
    Vim
  • Vim
Published: August 11, 2025

CVE-2025-55158

6.9
    Vim
  • Vim
Published: August 11, 2025

CVE-2025-8864

6.8
    Yugabyte
  • Yugabyte Db
Published: August 11, 2025

CVE-2025-51823

6.5
    Libcsp
  • Libcsp
Published: August 11, 2025

CVE-2025-51824

6.5
    Libcsp
  • Libcsp
Published: August 11, 2025

CVE-2025-48731

6.4
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-53514

5.9
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-54463

5.9
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-8660

5.6
    Symantec
  • Privilege Escalation
Published: August 11, 2025

CVE-2025-25229

5.4
    Omnissa
  • Workspace One Uem
Published: August 11, 2025

CVE-2025-8821

5.3
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8823

5.3
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8825

5.3
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8827

5.3
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8828

5.3
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8829

5.3
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8830

5.3
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 11, 2025

CVE-2025-8839

5.3
    Jsherp
  • Jsherp
Published: August 11, 2025

CVE-2025-8840

5.3
    Jsherp
  • Jsherp
Published: August 11, 2025

CVE-2025-8841

5.3
    Zlt2000
  • Zlt2000 Microservices-Platform
Published: August 11, 2025

CVE-2025-8852

5.3
    Wukongopensource
  • Wukongcrm
Published: August 11, 2025

CVE-2025-8859

5.3
    Code-Projects
  • Eblog Site
Published: August 11, 2025

CVE-2025-8847

5.1
    Yangzongzhuan
  • Ruoyi
Published: August 11, 2025

CVE-2025-8866

5.1
    Yugabyte
  • Yugabytedb Anywhere
Published: August 11, 2025

CVE-2025-55159

5.1
    Slab
  • Slab
Published: August 11, 2025

CVE-2025-54458

5.0
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-8834

4.8
    Jcg
  • Jcg Link-Net Lw-N915r
Published: August 11, 2025

CVE-2025-8835

4.8
    Jasper
  • Jasper
Published: August 11, 2025

CVE-2025-8836

4.8
    Jasper
  • Jasper
Published: August 11, 2025

CVE-2025-8837

4.8
    Jasper
  • Jasper
Published: August 11, 2025

CVE-2025-8842

4.8
    Nasm
  • Netwide Assembler
Published: August 11, 2025

CVE-2025-8843

4.8
    Nasm
  • Netwide Assembler
Published: August 11, 2025

CVE-2025-8844

4.8
    Nasm
  • Nasm
Published: August 11, 2025

CVE-2025-8672

4.8
    Gimp
  • Gimp
Published: August 11, 2025

CVE-2025-8845

4.8
    Nasm
  • Nasm
Published: August 11, 2025

CVE-2025-8846

4.8
    Nasm
  • Netwide Assembler
Published: August 11, 2025

CVE-2025-8851

4.8
    Libtiff
  • Libtiff
Published: August 11, 2025

CVE-2025-8661

4.6
    Symantec
  • Symantec
Published: August 11, 2025

CVE-2025-7965

4.3
    Cbx
  • Restaurant Booking Plugin
Published: August 11, 2025

CVE-2025-8865

4.1
    Yugabyte
  • Yugabytedb
Published: August 11, 2025

CVE-2025-44001

4.0
    Mattermost
  • Mattermost Confluence Plugin
Published: August 11, 2025

CVE-2025-53910

4.0
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-8285

4.0
    Mattermost
  • Mattermost Confluence Plugin
Published: August 11, 2025

CVE-2025-49221

3.7
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-53857

3.7
    Mattermost
  • Confluence Plugin
Published: August 11, 2025

CVE-2025-24844

3.3
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-24925

3.3
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-25212

3.3
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-26690

3.3
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-27536

3.3
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-27562

3.3
    Openatom
  • Openharmony
Published: August 11, 2025

CVE-2025-38499

None
    Linux
  • Linux Kernel
Published: August 11, 2025
Click here to see more Vulnerabilities