Tag: 2025-08-26

5 Attack Reports | 89 Vulnerabilities

Attack reports

Boxing Clever: Uncovering a $1M Task Scam Cluster Exploiting Major Brands

A sophisticated task scam cluster has been discovered, exploiting major brands like Delta Airlines, AMC Theatres, and Universal Studios. The scam uses API-driven templates and cryptocurrency payments, with over $1 million in attributable transactions. Victims are lured into 'earning' money by compl…
cryptocurrency
brand impersonation
2025-08-26
dominet
task scam
Published: August 26, 2025
Downloadable IOCs: 7

Major August 2025 Cyber Attacks: 7-Stage Tycoon2FA Phishing, New ClickFix Campaign, and Salty2FA

In August 2025, significant cyber attacks emerged, including a 7-stage Tycoon2FA phishing campaign targeting government, military, and financial institutions across the US, UK, Canada, and Europe. The attack uses multiple verification steps to evade security systems. A new ClickFix campaign deliver…
phishing
rhadamanthys stealer
clickfix
tycoon2fa
2025-08-26
salty2fa
Published: August 26, 2025
Downloadable IOCs: 27

TAG-144's Persistent Grip on South American Organizations

Insikt Group has identified five distinct activity clusters linked to TAG-144 (Blind Eagle), targeting primarily Colombian government entities across local, municipal, and federal levels throughout 2024 and 2025. The clusters share similar tactics, techniques, and procedures (TTPs) such as using op…
xworm
asyncrat
njrat
dcrat
bitrat
quasarrat
remcos rat
blotchyquasar
limerat
2025-08-26
south america
tag-144
Published: August 26, 2025
Downloadable IOCs: 0

Phishing Campaign Targeting Companies via UpCrypter

A sophisticated phishing campaign has been identified, utilizing carefully crafted emails to deliver malicious URLs linked to convincing phishing pages. These pages entice recipients to download JavaScript files that act as droppers for UpCrypter, a malware that ultimately deploys various remote ac…
obfuscation
phishing
persistence
anti-analysis
dcrat
purehvnc
remote access tools
anti-vm
global campaign
2025-08-26
upcrypter
babylon rat
Published: August 26, 2025
Downloadable IOCs: 29

PRC-Nexus Espionage Campaign Hijacks Web Traffic to Target Diplomats

A sophisticated cyber espionage campaign attributed to the PRC-nexus threat actor UNC6384 targeted diplomats in Southeast Asia and other global entities. The attack chain involved hijacking web traffic through a captive portal redirect to deliver malware disguised as software updates. The multi-sta…
espionage
social engineering
in-memory execution
2025-08-26
prc-nexus
canonstager
sogu.sec
digital signatures
staticplugin
captive portal
Published: August 26, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-41702

9.8
    Egos
  • Webgui
Published: August 26, 2025

CVE-2025-25734

9.8
    Kapsch Trafficcom
  • Ris-9160
  • Ris-9260
Published: August 26, 2025

CVE-2025-25736

9.8
    Kapsch
  • Trafficcom Ris-9260 Rsu Leo
Published: August 26, 2025

CVE-2025-25737

9.8
    Kapsch Trafficcom
  • Ris-9160
  • Ris-9260
Published: August 26, 2025

CVE-2025-7775

9.2
    Citrix
  • Netscaler Application Delivery Controller
  • Netscaler Gateway
Published: August 26, 2025

CVE-2025-55526

9.1
    N8n
  • N8n Workflows
Published: August 26, 2025

CVE-2024-39335

9.1
    Mahara
  • Mahara
Published: August 26, 2025

CVE-2025-5931

8.8
    Wordpress
  • Dokan Pro
Published: August 26, 2025

CVE-2025-7776

8.8
    Citrix
  • Netscaler Adc
  • Netscaler Gateway
Published: August 26, 2025

CVE-2025-6366

8.8
    Wordpress
  • Event List
Published: August 26, 2025

CVE-2025-8424

8.7
    Citrix
  • Netscaler Adc
  • Netscaler Gateway
Published: August 26, 2025

CVE-2025-57810

8.7
    Jspdf
  • Jspdf
Published: August 26, 2025

CVE-2025-53418

8.6
    Delta Electronics
  • Commgr
Published: August 26, 2025

CVE-2025-50753

8.4
    Mitrastar
  • Gpt-2741gnac-N2
Published: August 26, 2025

CVE-2025-53419

7.8
    Delta Electronics
  • Commgr
Published: August 26, 2025

CVE-2025-1994

7.8
    Ibm
  • Cognos Command Center
Published: August 26, 2025

CVE-2025-23307

7.8
    Nvidia
  • Nemo Curator
Published: August 26, 2025

CVE-2025-23312

7.8
    Nvidia
  • Nemo Framework
Published: August 26, 2025

CVE-2025-23313

7.8
    Nvidia
  • Nemo Framework
Published: August 26, 2025

CVE-2025-23314

7.8
    Nvidia
  • Nemo Framework
Published: August 26, 2025

CVE-2025-23315

7.8
    Nvidia
  • Nemo Framework
Published: August 26, 2025

CVE-2025-9172

7.5
    Wordpress
  • Vibes
Published: August 26, 2025

CVE-2025-29992

7.5
    Mahara
  • Mahara
Published: August 26, 2025

CVE-2025-25735

7.5
    Kapsch
  • Ris-9160
  • Ris-9260
Published: August 26, 2025

CVE-2025-52218

7.5
    Selectzero
  • Data Observability Platform
Published: August 26, 2025

CVE-2025-55298

7.5
    Imagemagick
  • Imagemagick
Published: August 26, 2025

CVE-2025-57803

7.5
    Imagemagick
  • Imagemagick
Published: August 26, 2025

CVE-2025-9443

7.4
    Tenda
  • Ch22
Published: August 26, 2025

CVE-2025-9481

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 26, 2025

CVE-2025-9482

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 26, 2025

CVE-2025-9483

7.4
    Linksys
  • Re6250
  • Re6300
  • Re6350
  • Re6500
  • Re7000
  • Re9000
Published: August 26, 2025

CVE-2025-2697

7.4
    Ibm
  • Ibm Cognos Command Center
Published: August 26, 2025

CVE-2025-36729

7.2
    Tenable
  • Device Management
Published: August 26, 2025

CVE-2025-29901

7.1
    Qnap
  • File Station
Published: August 26, 2025

CVE-2025-8447

7.0
    Github
  • Github Enterprise Server
Published: August 26, 2025

CVE-2025-9491

7.0
    Microsoft
  • Windows
  • Windows Lnk
Published: August 26, 2025

CVE-2025-9444

6.9
    1000projects
  • Online Project Report Submission And Evaluation System
Published: August 26, 2025

CVE-2025-9468

6.9
    Itsourcecode
  • Apartment Management System
Published: August 26, 2025

CVE-2025-9469

6.9
    Itsourcecode
  • Apartment Management System
Published: August 26, 2025

CVE-2025-9470

6.9
    Itsourcecode
  • Apartment Management System
Published: August 26, 2025

CVE-2025-9471

6.9
    Itsourcecode
  • Apartment Management System
Published: August 26, 2025

CVE-2025-9472

6.9
    Itsourcecode
  • Apartment Management System
Published: August 26, 2025

CVE-2025-9473

6.9
    Sourcecodester
  • Online Bank Management System
Published: August 26, 2025

CVE-2025-9475

6.9
    Sourcecodester
  • Human Resource Information System
Published: August 26, 2025

CVE-2025-9476

6.9
    Sourcecodester
  • Human Resource Information System
Published: August 26, 2025

CVE-2025-48108

6.5
    Mojoomla
  • School Management
Published: August 26, 2025

CVE-2025-25732

6.5
    Kapsch Trafficcom
  • Ris-9160
  • Ris-9260
Published: August 26, 2025

CVE-2025-52219

6.5
    Selectzero
  • Data Observability Platform
Published: August 26, 2025

CVE-2025-57818

6.3
    Firecrawl
  • Firecrawl
Published: August 26, 2025

CVE-2025-44002

6.1
    Teamviewer
  • Teamviewer
Published: August 26, 2025

CVE-2024-45753

6.1
    Mahara
  • Mahara
Published: August 26, 2025

CVE-2025-52035

6.1
    Notescms
  • Notescms
Published: August 26, 2025

CVE-2025-52036

6.1
    Notescms
  • Notescms
Published: August 26, 2025

CVE-2025-52037

6.1
    Notescms
  • Notescms
Published: August 26, 2025

CVE-2025-56432

6.1
    Nagios
  • Nagios Xi
Published: August 26, 2025

CVE-2025-1494

6.1
    Ibm
  • Cognos Command Center
Published: August 26, 2025

CVE-2025-57813

5.9
    Traq
  • Traq
Published: August 26, 2025

CVE-2025-57704

5.5
    Delta Electronics
  • Eip Builder
Published: August 26, 2025

CVE-2025-52217

5.4
    Selectzero
  • Data Observability Platform
Published: August 26, 2025

CVE-2025-9431

5.3
    Mtons
  • Mblog
Published: August 26, 2025

CVE-2025-9432

5.3
    Mtons
  • Mblog
Published: August 26, 2025

CVE-2025-9433

5.3
    Mtons
  • Mblog
Published: August 26, 2025

CVE-2025-9434

5.3
    1000projects
  • Online Project Report Submission And Evaluation System
Published: August 26, 2025

CVE-2025-9438

5.3
    1000projects
  • Online Project Report Submission And Evaluation System
Published: August 26, 2025

CVE-2025-9439

5.3
    1000projects
  • Online Project Report Submission And Evaluation System
Published: August 26, 2025

CVE-2025-9440

5.3
    1000projects
  • Online Project Report Submission And Evaluation System
Published: August 26, 2025

CVE-2025-9461

5.3
    Diyhi
  • Diyhi Bbs
Published: August 26, 2025

CVE-2025-1501

5.3
    Nozomi Networks
  • Cmc
Published: August 26, 2025

CVE-2025-25733

5.3
    Kapsch Trafficcom
  • Ris-9160
  • Ris-9260
Published: August 26, 2025

CVE-2025-9429

5.1
    Mtons
  • Mblog
Published: August 26, 2025

CVE-2025-9430

4.8
    Mtons
  • Mblog
Published: August 26, 2025

CVE-2025-53811

4.8
    Mosh-Pro
  • Mosh-Pro
Published: August 26, 2025

CVE-2025-53813

4.8
    Nozbe
  • Nozbe
Published: August 26, 2025

CVE-2025-8597

4.8
    Macvim
  • Macvim
    Apple
Published: August 26, 2025

CVE-2025-8700

4.8
    Invoice Ninja
  • Invoice Ninja
Published: August 26, 2025

CVE-2025-9190

4.8
    Cursor
  • Cursor
Published: August 26, 2025

CVE-2025-6247

4.7
    Wordpress
  • Automatic Plugin
Published: August 26, 2025

CVE-2024-8860

4.3
    Wordpress
  • Tourfic
Published: August 26, 2025

CVE-2025-55212

3.7
    Imagemagick
  • Imagemagick
Published: August 26, 2025

CVE-2025-9474

2.0
    Mihomo
  • Mihomo Party
Published: August 26, 2025

CVE-2025-38676

None
    Linux
  • Linux Kernel
Published: August 26, 2025

CVE-2024-47853

None
    Mahara
  • Mahara
Published: August 26, 2025

CVE-2025-50974

None
    Ipfire
  • Ipfire
  • Calamaris Log Exporter
Published: August 26, 2025

CVE-2025-52184

None
    Helpy
  • Helpy
Published: August 26, 2025

CVE-2025-57425

None
    Sourcecodester
  • Faq Management System
Published: August 26, 2025

CVE-2025-50976

None
    Ipfire
  • Ipfire
Published: August 26, 2025

CVE-2025-50975

None
    Ipfire
  • Ipfire
Published: August 26, 2025

CVE-2025-9478

None
    Google
  • Chrome
Published: August 26, 2025

CVE-2025-50971

None
    Abantecart
  • Abantecart
Published: August 26, 2025
Click here to see more Vulnerabilities