Tag: 2025-08-18

2 Attack Reports | 75 Vulnerabilities

Attack reports

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework

PipeMagic is a sophisticated modular backdoor used by the Storm-2460 threat actor, disguised as a legitimate ChatGPT Desktop Application. It employs a highly flexible architecture with multiple linked list structures for payload management, execution, and networking. The malware communicates with i…
backdoor
ransomware
windows
zero-day
modular
chatgpt
CVE-2025-29824
clfs
pipemagic
2025-08-18
Published: August 18, 2025
Linked vulnerabilities : CVE-2025-29824 (CVSS 7.8)
Downloadable IOCs: 4

Microsoft 365 Direct Send Abuse: Phishing Risks & Security Recommendations

Threat actors are actively exploiting Microsoft 365's Direct Send feature to deliver phishing emails, bypassing perimeter security solutions by routing malicious messages through trusted infrastructure. This technique requires no credentials, only knowledge of the target domain and valid recipient …
phishing
credential theft
spoofing
microsoft 365
business email compromise
email security
2025-08-18
direct send
Published: August 18, 2025
Downloadable IOCs: 27
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-31715

9.8
    Unisoc
  • Vowifi
Published: August 18, 2025

CVE-2025-55591

9.8
    Totolink
  • A3002r
Published: August 18, 2025

CVE-2025-55293

9.4
    Meshtastic
  • Meshtastic
Published: August 18, 2025

CVE-2025-55299

9.4
    Vaulttls
  • Vaulttls
Published: August 18, 2025

CVE-2025-7693

9.3
    Rockwell Automation
  • *
Published: August 18, 2025

CVE-2025-55282

9.1
    Aiven
  • Aiven-Db-Migrate
    Postgresql
Published: August 18, 2025

CVE-2025-55283

9.1
    Aiven
  • Aiven-Db-Migrate
Published: August 18, 2025

CVE-2025-54156

9.1
    Sante
  • Sante Pacs Server
Published: August 18, 2025

CVE-2025-54117

9.0
    Namelessmc
  • Namelessmc
Published: August 18, 2025

CVE-2025-55205

9.0
    Capsule
  • Capsule
Published: August 18, 2025

CVE-2025-36120

8.8
    Ibm
  • Storage Virtualize
Published: August 18, 2025

CVE-2025-53192

8.8
    Apache
  • Commons Ognl
Published: August 18, 2025

CVE-2025-6625

8.7
    Se
  • Ftp Device
Published: August 18, 2025

CVE-2025-53948

8.7
    Sante
  • Sante Pacs Server
Published: August 18, 2025

CVE-2025-55300

8.6
    Komari
  • Komari
Published: August 18, 2025

CVE-2025-55201

8.5
    Copier
  • Copier
Published: August 18, 2025

CVE-2025-32992

8.5
    Thermo Fisher Scientific
  • Eport
Published: August 18, 2025

CVE-2025-8098

8.5
    Lenovo
  • Pc Manager
Published: August 18, 2025

CVE-2025-31713

8.4
    Unisoc
  • *
Published: August 18, 2025

CVE-2025-41392

8.4
    Ashlar-Vellum
  • Cobalt
  • Xenon
  • Argon
  • Lithium
  • Share
Published: August 18, 2025

CVE-2025-53705

8.4
    Ashlar-Vellum
  • Cobalt
  • Xenon
  • Argon
  • Lithium
  • Cobalt Share
Published: August 18, 2025

CVE-2025-46269

8.4
    Ashlar-Vellum
  • Cobalt
  • Xenon
  • Argon
  • Lithium
  • Cobalt Share
Published: August 18, 2025

CVE-2025-52584

8.4
    Ashlar-Vellum
  • Cobalt
  • Xenon
  • Argon
  • Lithium
  • Cobalt Share
Published: August 18, 2025

CVE-2025-55287

8.0
    Genealogy
  • Genealogy
Published: August 18, 2025

CVE-2025-4962

7.7
    Lunary
  • Api
Published: August 18, 2025

CVE-2025-33090

7.5
    Ibm
  • Concert Software
Published: August 18, 2025

CVE-2025-55586

7.5
    Totolink
  • A3002r
Published: August 18, 2025

CVE-2025-55587

7.5
    Totolink
  • A3002r
Published: August 18, 2025

CVE-2025-55588

7.5
    Totolink
  • A3002r
Published: August 18, 2025

CVE-2025-54421

7.2
    Namelessmc
  • Namelessmc
Published: August 18, 2025

CVE-2025-47206

7.1
    Qnap
  • File Station 5
Published: August 18, 2025

CVE-2025-55291

7.1
    Shaarli
  • Shaarli
Published: August 18, 2025

CVE-2025-57700

7.0
    Diaenergie
  • Diaenergie
Published: August 18, 2025

CVE-2025-5296

7.0
    *
  • *
Published: August 18, 2025

CVE-2025-4371

7.0
    Lenovo
  • 510 Fhd Web Camera
  • Performance Fhd Web Camera
Published: August 18, 2025

CVE-2025-55214

6.9
    Copier
  • Copier
Published: August 18, 2025

CVE-2025-43731

6.9
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: August 18, 2025

CVE-2025-31714

6.8
    Unisoc
  • Developer Tools
Published: August 18, 2025

CVE-2025-55585

6.5
    Totolink
  • A3002r
Published: August 18, 2025

CVE-2025-55589

6.5
    Totolink
  • A3002r
Published: August 18, 2025

CVE-2025-55590

6.5
    Totolink
  • A3002r
Published: August 18, 2025

CVE-2025-9109

6.3
    Portabilis
  • I-Diario
Published: August 18, 2025

CVE-2025-33100

6.2
    Ibm
  • Concert Software
Published: August 18, 2025

CVE-2025-57701

5.9
    Diaenergie
  • Diaenergie
Published: August 18, 2025

CVE-2025-57702

5.9
    Diaenergie
  • Diaenergie
Published: August 18, 2025

CVE-2025-57703

5.9
    Diaenergie
  • Diaenergie
Published: August 18, 2025

CVE-2025-41242

5.9
    Spring
  • Spring Framework
Published: August 18, 2025

CVE-2025-1759

5.9
    Ibm
  • Concert Software
Published: August 18, 2025

CVE-2025-55213

5.8
    Openfga
  • Openfga
Published: August 18, 2025

CVE-2025-9100

5.5
    Zhenfeng13
  • My-Blog
Published: August 18, 2025

CVE-2025-55288

5.5
    Genealogy
  • Genealogy
Published: August 18, 2025

CVE-2025-55296

5.5
    Librenms
  • Librenms
Published: August 18, 2025

CVE-2025-27909

5.4
    Ibm
  • Concert Software
Published: August 18, 2025

CVE-2025-9099

5.3
    Acrel
  • Environmental Monitoring Cloud Platform
Published: August 18, 2025

CVE-2025-9107

5.3
    Portabilis
  • I-Diario
Published: August 18, 2025

CVE-2025-9108

5.3
    *
  • *
Published: August 18, 2025

CVE-2025-54118

5.3
    Namelessmc
  • Namelessmc
Published: August 18, 2025

CVE-2025-55584

5.3
    Totolink
  • A3002r
Published: August 18, 2025

CVE-2025-9096

5.1
    Expressgateway
  • Express-Gateway
Published: August 18, 2025

CVE-2025-9101

5.1
    Zhenfeng13
  • My-Blog
Published: August 18, 2025

CVE-2025-9104

5.1
    Portabilis
  • I Diario
Published: August 18, 2025

CVE-2025-9105

5.1
    Portabilis
  • I-Diario
Published: August 18, 2025

CVE-2025-9106

5.1
    Portabilis
  • I-Diario
Published: August 18, 2025

CVE-2025-54759

5.1
    Sante
  • Sante Pacs Server
Published: August 18, 2025

CVE-2025-9097

4.8
    Euro Information Cic
  • Banque Et Compte En Ligne App
  • *
Published: August 18, 2025

CVE-2025-9098

4.8
    Elseplus
  • File Recovery App
Published: August 18, 2025

CVE-2025-9102

4.8
    1&1 Mail And Media
  • Mail.Com App
    Android
Published: August 18, 2025

CVE-2025-9103

4.8
    Zencart
  • Zencart
    Ckeditor
Published: August 18, 2025

CVE-2025-43732

4.8
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: August 18, 2025

CVE-2025-9119

4.8
    Netis
  • Wf2419
Published: August 18, 2025

CVE-2025-54862

4.8
    Sante
  • Pacs Server
Published: August 18, 2025

CVE-2024-49827

3.7
    Ibm
  • Concert Software
Published: August 18, 2025

CVE-2025-43733

2.3
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: August 18, 2025

CVE-2025-54234

2.2
    Adobe
  • Coldfusion
Published: August 18, 2025

CVE-2025-3639

2.0
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: August 18, 2025
Click here to see more Vulnerabilities