Tag: 2025-08-25

3 Attack Reports | 19 Vulnerabilities

Attack reports

WinRAR Directory Traversal & NTFS ADS Vulnerabilities (CVE-2025-6218 & CVE-2025-8088)

Two high-severity vulnerabilities in WinRAR for Windows enable attackers to write files outside intended extraction directories. CVE-2025-6218 involves traditional path traversal, while CVE-2025-8088 extends the attack using NTFS Alternate Data Streams. Both flaws allow for reliable persistence and…
zero-day
remote code execution
winrar
CVE-2025-8088
CVE-2025-6218
2025-08-25
Published: August 25, 2025
Linked vulnerabilities : CVE-2025-8088, CVE-2025-6218
Downloadable IOCs: 4

The Resurgence of IoT Malware: Inside the Mirai-Based "Gayfemboy" Botnet Campaign

FortiGuard Labs has been tracking a stealthy malware strain called "Gayfemboy" that exploits vulnerabilities in DrayTek, TP-Link, Raisecom, and Cisco products. The malware, based on Mirai, has evolved in form and behavior, targeting multiple countries and sectors. Gayfemboy employs obfuscation tech…
obfuscation
evasion
ddos
iot
botnet
mirai
2025-08-25
Published: August 25, 2025
Downloadable IOCs: 0

Android backdoor spies on Russian business employees

A sophisticated Android backdoor named Android.Backdoor.916.origin is targeting Russian business representatives. The malware, disguised as an antivirus app called 'GuardCB', has extensive surveillance capabilities including intercepting calls, streaming camera footage, stealing data from messaging…
backdoor
surveillance
android
spyware
russian
2025-08-25
mobile-malware
business
android.backdoor.916.origin
targeted-attack
Published: August 25, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-9118

10.0
    Google
  • Cloud Dataform
Published: August 25, 2025

CVE-2025-7426

9.3
    Minova
  • Tta
Published: August 25, 2025

CVE-2025-54300

8.5
    Joomla
  • Quantum Manager
Published: August 25, 2025

CVE-2025-54301

8.5
    Joomla
  • Quantum Manager
Published: August 25, 2025

CVE-2025-5191

7.3
    Moxa
  • Industrial Computers
Published: August 25, 2025

CVE-2025-8562

6.5
    Wordpress
  • Custom Query Shortcode
Published: August 25, 2025

CVE-2025-9401

6.3
    Huangdou
  • Utcms
Published: August 25, 2025

CVE-2025-8997

5.7
    Opentext
  • Enterprise Security Manager
Published: August 25, 2025

CVE-2025-9398

5.5
    Yifang
  • Yifang Cms
Published: August 25, 2025

CVE-2025-9405

5.5
    Open5gs
  • Open5gs
Published: August 25, 2025

CVE-2025-9399

5.3
    Yifang
  • Yifang Cms
Published: August 25, 2025

CVE-2025-9400

5.3
    Yifang
  • Yifang Cms
Published: August 25, 2025

CVE-2025-9406

5.3
    Xuhuisheng
  • Lemon
Published: August 25, 2025

CVE-2025-5514

5.3
    Mitsubishi Electric
  • Melsec Iq-F Series Cpu Module
Published: August 25, 2025

CVE-2025-9402

5.1
    Huangdou
  • Utcms
Published: August 25, 2025

CVE-2025-9407

5.1
    Mtons
  • Mblog
Published: August 25, 2025

CVE-2025-9403

4.8
    Jqlang
  • Jq
Published: August 25, 2025

CVE-2025-9404

4.8
    Scada-Lts
  • Scada-Lts
Published: August 25, 2025

CVE-2025-48303

4.3
    Kevin Langley Jr
  • Post Type Converter
Published: August 25, 2025
Click here to see more Vulnerabilities