Tag: 2025-08-13

8 Attack Reports | 143 Vulnerabilities

Attack reports

Coordinated Brute Force Campaign Targets Fortinet SSL VPN

A significant spike in brute-force traffic targeting Fortinet SSL VPNs was observed on August 3, with over 780 unique IPs triggering the Fortinet SSL VPN Bruteforcer tag. The activity was deliberate and precise, focusing on FortiOS. Two distinct waves of attacks were identified: a long-running set …
vulnerability
fortimanager
fortinet
brute-force
ssl vpn
2025-08-13
fortios
ip blocking
fgfm
Published: August 13, 2025
Downloadable IOCs: 3

Distribution of SmartLoader Malware via Github Repository Disguised as a Legitimate Project

A massive distribution of SmartLoader malware has been discovered through GitHub repositories masquerading as legitimate projects. These repositories focus on topics like game cheats, software cracks, and automation tools to attract users. The malware is distributed via compressed files containing …
obfuscation
rhadamanthys
infostealer
persistence
lumma stealer
redline
c2
github
smartloader
2025-08-13
game-cheats
software-cracks
luascript
Published: August 13, 2025
Downloadable IOCs: 11

Silent Watcher: Dissecting Cmimai Stealer's VBS Payload

A VBS-based infostealer called Cmimai Stealer has emerged, targeting Windows systems since June 2025. It collects system information, browser metadata, and screenshots, exfiltrating data via Discord webhooks. The malware uses PowerShell scripts for browser data collection and screen capture, runnin…
powershell
windows
infostealer
exfiltration
discord
vbs
browser-data
2025-08-13
wmi
screenshot
cmimai stealer
Published: August 13, 2025
Downloadable IOCs: 0

The Dark Side of Parental Control Apps

Parental control apps, designed to protect children online, are gaining popularity but raising concerns about privacy and misuse. These apps require extensive permissions to monitor device activities, including location tracking, call logs, and message access. While some are distributed through off…
surveillance
privacy
2025-08-13
appcare/android.kidlogger
app permissions
smartphone monitoring
security concerns
child protection
appcare/android.manamgeri
parental control
Published: August 13, 2025
Downloadable IOCs: 0

CastleLoader Analysis

CastleLoader, a versatile malware loader, has infected 469 devices since May 2025 using Cloudflare-themed ClickFix phishing and fake GitHub repositories. It delivers information stealers and RATs, with a 28.7% infection rate. The malware employs sophisticated techniques, including PowerShell and Au…
phishing
powershell
malware loader
redline
autoit
hijackloader
c2
rats
stealc
github
netsupport rat
deerstealer
sectoprat
information stealers
2025-08-13
payload delivery
castleloader
u.s. government
Published: August 13, 2025
Downloadable IOCs: 0

Uncovering a Web3 Interview Scam

A Ukrainian Web3 team's interview process involved cloning a GitHub repository containing malicious components. Analysis revealed the project replaced a legitimate dependency with a malicious NPM package, rtk-logger@1.11.5. This package collected sensitive data, including cryptocurrency wallet info…
malware
cryptocurrency
data theft
github
web3
2025-08-13
redux-ace
rtk-logger
npm package
interview scam
Published: August 13, 2025
Downloadable IOCs: 0

AI brings back real trojan horse malware

Trojan horses, once rare, are making a resurgence due to AI and Large Language Models (LLMs). These new trojans, disguised as legitimate applications like recipe apps or AI-powered image search tools, are evading traditional security measures. They appear professional, pass VirusTotal scans, and ex…
steganography
ai
virustotal
llm
2025-08-13
justaskjacky
antivirus evasion
tamperedchef
trojan horse
Published: August 13, 2025
Downloadable IOCs: 0

CVE-2017-11882 Will Never Die

The report discusses the persistent exploitation of CVE-2017-11882, a remote code execution vulnerability affecting Microsoft Office's Equation Editor. Despite being an old vulnerability, it continues to be used by attackers to spread modern malware. The analysis focuses on a malicious Excel file t…
obfuscation
exploit
CVE-2017-11882
keylogger
microsoft office
vipkeylogger
2025-08-13
equation editor
Published: August 13, 2025
Linked vulnerabilities : CVE-2017-11882
Downloadable IOCs: 6
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-34153

10.0
    Hyland
  • Onbase
Published: August 13, 2025

CVE-2011-10011

10.0
    Webid
  • Webid
Published: August 13, 2025

CVE-2011-10013

10.0
    Traq
  • Traq
Published: August 13, 2025

CVE-2011-10017

10.0
    Snort
  • Snort Report
Published: August 13, 2025

CVE-2011-10018

10.0
    Mybb
  • Mybb
Published: August 13, 2025

CVE-2011-10019

10.0
    Spreecommerce
  • Spreecommerce
Published: August 13, 2025

CVE-2012-10058

10.0
    Rabidhamster
  • Rabidhamster R4
Published: August 13, 2025

CVE-2025-7384

9.8
    Wordpress
  • Contact Form 7
  • Wpforms
  • Elementor
Published: August 13, 2025

CVE-2025-6715

9.8
    Latepoint
  • Latepoint
Published: August 13, 2025

CVE-2025-51452

9.8
    Totolink
  • A7000r Firmware
  • A7000r
Published: August 13, 2025

CVE-2025-50594

9.8
    Danphe Health
  • Danphe Health Hospital Management System Emr
Published: August 13, 2025

CVE-2025-51451

9.8
    Totolink
  • Ex1200t Firmware
  • Ex1200t
Published: August 13, 2025

CVE-2025-52385

9.8
    Studio 3t
  • Studio 3t
Published: August 13, 2025

CVE-2025-54382

9.6
    Cherrystudio
  • Cherry Studio
Published: August 13, 2025

CVE-2011-10010

9.4
    Quickshare
  • Quickshare File Server
Published: August 13, 2025

CVE-2012-10059

9.4
    Dolibarr
  • Dolibarr
Published: August 13, 2025

CVE-2025-8760

9.3
    Instar
  • Instar 2k+
  • Instar 4k
Published: August 13, 2025

CVE-2025-8913

9.3
    Wellchoose
  • Organization Portal System
Published: August 13, 2025

CVE-2011-10015

9.3
    Cytel
  • Cytel Studio
Published: August 13, 2025

CVE-2011-10016

9.3
    Real Networks
  • Netzip Classic
Published: August 13, 2025

CVE-2012-10054

9.3
    Umbraco
  • Umbraco Cms
Published: August 13, 2025

CVE-2012-10055

9.3
    Comsndftp
  • Comsndftp
Published: August 13, 2025

CVE-2012-10060

9.3
    Sysax
  • Multi Server
Published: August 13, 2025

CVE-2025-34154

9.2
    Unform
  • Server Manager
Published: August 13, 2025

CVE-2025-50251

9.1
    Makeplane
  • Makeplane
Published: August 13, 2025

CVE-2025-8904

9.0
    Amazon
  • Emr
Published: August 13, 2025

CVE-2025-8879

8.8
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: August 13, 2025

CVE-2025-8880

8.8
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: August 13, 2025

CVE-2025-8882

8.8
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: August 13, 2025

CVE-2025-8901

8.8
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: August 13, 2025

CVE-2025-6184

8.8
    Tutor Lms
  • Tutor Lms Pro
Published: August 13, 2025

CVE-2025-55345

8.8
    Jfrog
  • Codex Cli
Published: August 13, 2025

CVE-2025-32451

8.8
    Foxit
  • Foxit Reader
Published: August 13, 2025

CVE-2025-55154

8.8
    Imagemagick
  • Imagemagick
Published: August 13, 2025

CVE-2025-54809

8.8
    F5
  • Access
Published: August 13, 2025

CVE-2025-8912

8.7
    Wellchoose
  • Organization Portal System
Published: August 13, 2025

CVE-2025-46405

8.7
    F5
  • F5 Big-Ip Apm
Published: August 13, 2025

CVE-2025-52585

8.7
    F5
  • Big-Ip
Published: August 13, 2025

CVE-2025-6186

8.7
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: August 13, 2025

CVE-2025-7734

8.7
    Gitlab
  • Gitlab
Published: August 13, 2025

CVE-2025-7739

8.7
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: August 13, 2025

CVE-2025-8754

8.7
    Abb
  • Abb Ability Tm Zenon
Published: August 13, 2025

CVE-2011-10009

8.7
    S40
  • S40 Cms
Published: August 13, 2025

CVE-2011-10014

8.7
    Sa-Mp
  • Sa-Mp
Published: August 13, 2025

CVE-2012-10056

8.7
    Php Volunteer Management System
  • Php Volunteer Management System
Published: August 13, 2025

CVE-2011-10012

8.4
    Impero Software
  • Netop Remote Control Client
Published: August 13, 2025

CVE-2012-10057

8.4
    Lattice Semiconductor
  • Ispvm System
Published: August 13, 2025

CVE-2025-55163

8.2
    Netty
  • Netty
Published: August 13, 2025

CVE-2025-8941

7.8
    Linux-Pam
  • Linux-Pam
Published: August 13, 2025

CVE-2025-23294

7.8
    Nvidia
  • Webdataset
Published: August 13, 2025

CVE-2025-23295

7.8
    Nvidia
  • Apex
  • Python Component
Published: August 13, 2025

CVE-2025-23296

7.8
    Nvidia
  • Isaac-Gr00t
Published: August 13, 2025

CVE-2025-23298

7.8
    Nvidia
  • Merlin Transformers4rec
Published: August 13, 2025

CVE-2025-23303

7.8
    Nvidia
  • Nemo Framework
Published: August 13, 2025

CVE-2025-23304

7.8
    Nvidia
  • Nemo
Published: August 13, 2025

CVE-2025-23305

7.8
    Nvidia
  • Megatron-Lm
Published: August 13, 2025

CVE-2025-23306

7.8
    Nvidia
  • Megatron-Lm
Published: August 13, 2025

CVE-2025-8761

7.7
    Instar
  • Instar 2k Plus Et 4k
Published: August 13, 2025

CVE-2025-54074

7.7
    Cherry
  • Cherry Studio
Published: August 13, 2025

CVE-2025-55004

7.6
    Imagemagick
  • Imagemagick
Published: August 13, 2025

CVE-2025-4276

7.5
    Unknown
  • Usbcoredxe
Published: August 13, 2025

CVE-2025-4277

7.5
    Tcg2smm
  • Tcg2smm
Published: August 13, 2025

CVE-2025-4410

7.5
    *
  • Setuputility
Published: August 13, 2025

CVE-2025-48989

7.5
    Apache
  • Tomcat
Published: August 13, 2025

CVE-2025-8671

7.5
    Apache
  • Http Server
    Nginx
Published: August 13, 2025

CVE-2025-50635

7.5
    Netis
  • Wf2780
Published: August 13, 2025

CVE-2025-50608

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-50610

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-50611

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-50612

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-50613

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-50614

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-50615

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-50616

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-50617

7.5
    Netis
  • Wf2880
Published: August 13, 2025

CVE-2025-8907

7.3
    H3c
  • M2 Nas
Published: August 13, 2025

CVE-2024-5477

7.3
    Hp
  • System Bios
Published: August 13, 2025

CVE-2025-8909

7.1
    Wellchoose
  • Organization Portal System
Published: August 13, 2025

CVE-2025-8914

7.1
    Wellchoose
  • Organization Portal System
Published: August 13, 2025

CVE-2025-55196

7.1
    External Secrets Operator
  • External Secrets Operator
Published: August 13, 2025

CVE-2025-8762

7.0
    Instar
  • Instar 2k+
  • Instar 4k
Published: August 13, 2025

CVE-2025-54464

7.0
    Zkteco
  • Wl20
Published: August 13, 2025

CVE-2025-48500

7.0
    F5
  • F5 Vpn
Published: August 13, 2025

CVE-2025-55279

6.9
    Zkteco
  • Wl20
Published: August 13, 2025

CVE-2025-54500

6.9
    F5
  • Application Services
  • Http
Published: August 13, 2025

CVE-2025-8921

6.9
    Code-Projects
  • Job Diary
Published: August 13, 2025

CVE-2025-8922

6.9
    Code-Projects
  • Job Diary
Published: August 13, 2025

CVE-2025-8923

6.9
    Code-Projects
  • Job Diary
Published: August 13, 2025

CVE-2025-8924

6.9
    Campcodes
  • Online Water Billing System
Published: August 13, 2025

CVE-2025-8925

6.9
    Itsourcecode
  • Sports Management System
Published: August 13, 2025

CVE-2025-8926

6.9
    Sourcecodester
  • Covid 19 Testing Management System
Published: August 13, 2025

CVE-2025-54465

6.8
    Zkteco
  • Wl20
Published: August 13, 2025

CVE-2024-12303

6.7
    Gitlab
  • Gitlab Ce
Published: August 13, 2025

CVE-2025-55197

6.6
    Pypdf
  • Pypdf
Published: August 13, 2025

CVE-2025-8881

6.5
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: August 13, 2025

CVE-2025-0818

6.5
    Wordpress
  • Plugin
Published: August 13, 2025

CVE-2025-55668

6.5
    Apache
  • Tomcat
Published: August 13, 2025

CVE-2024-10219

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: August 13, 2025

CVE-2025-1477

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: August 13, 2025

CVE-2025-2614

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: August 13, 2025

CVE-2025-2937

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: August 13, 2025

CVE-2025-45317

6.5
    Hortusfox
  • Hortusfox-Web
Published: August 13, 2025

CVE-2025-50946

6.5
    Olivetin
  • Olivetin
Published: August 13, 2025

CVE-2025-8770

6.5
    Gitlab
  • Gitlab Ee
Published: August 13, 2025

CVE-2025-43989

6.5
    Shenzhen Tuoshi
  • Nr500-Ea
Published: August 13, 2025

CVE-2025-8916

6.3
    Legion Of The Bouncy Castle Inc
  • Bouncy Castle For Java
  • Bcpkix Fips
Published: August 13, 2025

CVE-2025-53859

6.3
    Nginx
  • Nginx Open Source
  • Nginx Plus
Published: August 13, 2025

CVE-2025-8927

6.3
    Mtons
  • Mblog
Published: August 13, 2025

CVE-2025-55160

6.1
    Imagemagick
  • Imagemagick
Published: August 13, 2025

CVE-2025-50690

6.1
    Osgeo
  • Spatialreference
Published: August 13, 2025

CVE-2025-51691

6.1
    Marktwo
  • Editor
Published: August 13, 2025

CVE-2025-45314

6.1
    Hortusfox
  • Hortusfox-Web
Published: August 13, 2025

CVE-2025-45316

6.1
    Hortusfox
  • Hortusfox-Web
Published: August 13, 2025

CVE-2025-45313

6.1
    Hortusfox
  • Hortusfox-Web
Published: August 13, 2025

CVE-2025-2181

5.9
    Palo Alto Networks
  • Checkov
  • Prisma Cloud
Published: August 13, 2025

CVE-2025-55194

5.7
    Part-Db
  • Part-Db
Published: August 13, 2025

CVE-2025-2182

5.6
    Palo Alto Networks
  • Pan-Os
  • Pa-7500
Published: August 13, 2025

CVE-2025-55005

5.5
    Imagemagick
  • Imagemagick
Published: August 13, 2025

CVE-2025-52386

5.4
    Cyclonedx
  • Sunshine
Published: August 13, 2025

CVE-2025-52392

5.4
    Soosyze
  • Cms
Published: August 13, 2025

CVE-2025-45315

5.4
    Hortusfox
  • Hortusfox Web
Published: August 13, 2025

CVE-2025-8910

5.3
    Wellchoose
  • Organization Portal System
Published: August 13, 2025

CVE-2025-8911

5.3
    Wellchoose
  • Organization Portal System
Published: August 13, 2025

CVE-2025-8908

5.3
    Shanghai Lingdang Information Technology
  • Lingdang Crm
Published: August 13, 2025

CVE-2025-54791

5.3
    Omego
  • Omero.Web
Published: August 13, 2025

CVE-2025-2183

5.3
    Palo Alto Networks
  • Globalprotect
Published: August 13, 2025

CVE-2025-2184

5.3
    Palo Alto Networks
  • Cortex Xdr Broker Vm
Published: August 13, 2025

CVE-2025-8928

5.3
    Code-Projects
  • Medical Store Management System
Published: August 13, 2025

CVE-2025-8929

5.3
    Code-Projects
  • Medical Store Management System
Published: August 13, 2025

CVE-2025-55280

5.2
    Zkteco
  • W20
Published: August 13, 2025

CVE-2025-5819

5.0
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: August 13, 2025

CVE-2025-8918

4.8
    Portabilis
  • I-Educar
Published: August 13, 2025

CVE-2025-2180

4.8
    Palo Alto Networks
  • Checkov
Published: August 13, 2025

CVE-2025-8919

4.8
    Portabilis
  • I-Diarion
Published: August 13, 2025

CVE-2025-8920

4.8
    Portabilis
  • I-Diarino
Published: August 13, 2025

CVE-2025-8491

4.3
    Wordpress
  • Easy Restaurant Menu Manager
Published: August 13, 2025

CVE-2025-8891

4.3
    Wordpress
  • Theme
Published: August 13, 2025

CVE-2025-2498

3.1
    Gitlab
  • Gitlab
Published: August 13, 2025

CVE-2025-55193

2.7
    Github
  • Active Record
Published: August 13, 2025

CVE-2025-50609

None
    Netis
  • Netis Wf2880
Published: August 13, 2025

CVE-2025-43982

None
    Shenzhen Tuoshi
  • Nr500-Ea
Published: August 13, 2025

CVE-2025-43986

None
    Kuwfi
  • Gc111
Published: August 13, 2025

CVE-2025-43988

None
    Kuwfi
  • 5g01-X55
Published: August 13, 2025
Click here to see more Vulnerabilities