Tag: 2025-08-28

7 Attack Reports | 106 Vulnerabilities

Attack reports

Link up, lift up, level up

This report emphasizes the importance of community in the cybersecurity profession, reflecting on experiences at Black Hat USA 2025 and DEF CON 33. It highlights the value of these events for learning and networking, but also acknowledges their high costs and potential inaccessibility for many. The…
ransomware
cybersecurity
vulnerabilities
education
2025-08-28
promptlock
networking
conferences
community
professional development
CVE-2025-48384
Published: August 28, 2025
Downloadable IOCs: 0

Backdoor in "AppSuite PDF Editor": A Detailed Technical Analysis

A detailed analysis of a malicious PDF editor application called AppSuite PDF Editor reveals it to be a sophisticated backdoor. The software, masquerading as a legitimate productivity tool, is distributed through high-ranking websites. Once installed, it creates scheduled tasks and establishes pers…
backdoor
trojan
data exfiltration
aes encryption
command and control
scheduled tasks
browser manipulation
2025-08-28
appsuite pdf editor
pdf editor
appsuite
Published: August 28, 2025
Downloadable IOCs: 9

Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System

The CISA Cybersecurity Advisory AA25-239A, issued jointly by U.S. and international cybersecurity and intelligence agencies, highlights a global cyber espionage campaign conducted by Chinese state-sponsored threat actors. These Advanced Persistent Threat (APT) groups have been targeting network inf…
apt
edge devices
2025-08-28
salt typhoon
Published: August 28, 2025
Linked vulnerabilities : CVE-2024-21887, CVE-2023-46805, CVE-2024-3400, CVE-2018-0171, CVE-2023-20273, CVE-2023-20198
Downloadable IOCs: 92

TOATH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents

The TAOTH campaign leveraged an abandoned Sogou Zhuyin IME update server and spear-phishing operations to deliver multiple malware families, primarily targeting users across Eastern Asia. Attackers employed sophisticated infection chains, such as hijacked software updates and fake cloud storage or …
apt
reconnaissance
targeted attacks
information theft
spear-phishing
cobeacon
2025-08-28
merlin
sogou zhuyin
gtelam
desfy
c6door
eastern asia
toshis
taoth
Published: August 28, 2025
Downloadable IOCs: 23

Malicious Appsuite PDF Editor Spreads Tamperedchef Malware

A large cybercrime campaign has been observed involving multiple fraudulent websites promoted through Google advertising. The campaign aims to trick users into downloading and installing a trojanized PDF editor containing the TamperedChef information-stealing malware. The malware harvests sensitive…
obfuscation
credential theft
information stealer
trojanized software
tamperedchef
2025-08-28
google advertising
appsuite pdf editor
Published: August 28, 2025
Downloadable IOCs: 97

Chasing the Silver Fox: Cat & Mouse in Kernel Shadows

Check Point Research uncovered an ongoing campaign by the Silver Fox APT group exploiting a previously unknown vulnerable driver to evade endpoint protection. The attackers used a Microsoft-signed WatchDog Antimalware driver to terminate protected processes on fully updated Windows systems. A dual-…
valleyrat
edr evasion
byovd
process termination
vulnerable driver
kernel exploitation
driver abuse
2025-08-28
signature manipulation
Published: August 28, 2025
Downloadable IOCs: 16

The Covert Dual-Mode Backdoor Threat

MystRodX is a sophisticated backdoor discovered in June 2025, featuring stealth and flexibility. It uses multi-layer encryption for sensitive information and can operate in active or passive modes. The backdoor supports file management, port forwarding, reverse shell, and socket management. Its pas…
backdoor
encryption
stealth
c2 servers
2025-08-28
icmp trigger
mystrodx
dual-process guardian
dns trigger
passive mode
Published: August 28, 2025
Downloadable IOCs: 12
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-49387

10.0
    Add-Ons.Org
  • Drag And Drop File Upload For Elementor Forms
Published: August 28, 2025

CVE-2025-7955

9.8
    Ringcentral
  • Ringcentral Communications Plugin
Published: August 28, 2025

CVE-2025-49388

9.8
    Kamleshyadav
  • Miraculous Core Plugin
Published: August 28, 2025

CVE-2025-52761

9.8
    Manfcarlo
  • Wp Funnel Manager
Published: August 28, 2025

CVE-2025-53970

9.3
    Ss1
  • Ss1
Published: August 28, 2025

CVE-2025-54762

9.3
    Ss1
  • Ss1
Published: August 28, 2025

CVE-2025-39496

9.3
    Woobewoo
  • Product Filter Pro
Published: August 28, 2025

CVE-2025-48100

9.1
    Extremeidea
  • Bidorbuy Store Integrator
Published: August 28, 2025

CVE-2025-7812

8.8
    Wordpress
  • Video Share Vod
Published: August 28, 2025

CVE-2025-46409

8.7
    Ss1
  • Ss1
Published: August 28, 2025

CVE-2025-58072

8.7
    Ss1
  • Ss1
Published: August 28, 2025

CVE-2025-58081

8.7
    Ss1
  • Ss1
Published: August 28, 2025

CVE-2025-49404

8.5
    Purethemes
  • Listeo-Core
Published: August 28, 2025

CVE-2025-49383

8.1
    Cocobasic
  • Neresa
Published: August 28, 2025

CVE-2025-49405

8.1
    Favethemes
  • Houzez
Published: August 28, 2025

CVE-2025-53216

8.1
    Themeuniver
  • Glamer
Published: August 28, 2025

CVE-2025-53227

8.1
    Unfoldwp
  • Magazine Saga
Published: August 28, 2025

CVE-2025-53243

8.1
    Wordpress
  • Employee Directory Staff Listing And Team Directory Plugin
Published: August 28, 2025

CVE-2025-53244

8.1
    Unfoldwp
  • Magazine Elite
Published: August 28, 2025

CVE-2025-53247

8.1
    Wpinterface
  • Blogmarks
Published: August 28, 2025

CVE-2025-53248

8.1
    Unfoldwp
  • Magazine
Published: August 28, 2025

CVE-2025-53334

8.1
    Tielabs
  • Jannah
Published: August 28, 2025

CVE-2025-58322

7.8
    Naver
  • Mybox Explorer
Published: August 28, 2025

CVE-2025-53230

7.6
    Honzat
  • Page Manager For Elementor
Published: August 28, 2025

CVE-2025-36003

7.5
    Ibm
  • Security Verify Governance Identity Manager
Published: August 28, 2025

CVE-2024-13807

7.5
    Xagio
  • Seo Plugin
Published: August 28, 2025

CVE-2025-53326

7.5
    Codeyatri
  • Gutenify
Published: August 28, 2025

CVE-2025-53328

7.5
    Opinion Stage
  • Poll Survey Quiz Maker Plugin
Published: August 28, 2025

CVE-2025-53396

7.3
    Ss1
  • Ss1
Published: August 28, 2025

CVE-2025-48963

7.3
    Acronis
  • Cyber Protect Cloud Agent
Published: August 28, 2025

CVE-2025-54819

7.1
    Vendor Name
  • Ss1
Published: August 28, 2025

CVE-2025-48109

7.1
    Xavier Media
  • Xm-Backup
Published: August 28, 2025

CVE-2025-48304

7.1
    Google
  • Google Xml News Sitemap
Published: August 28, 2025

CVE-2025-48306

7.1
    Savyour
  • Savyour Affiliate Partner
Published: August 28, 2025

CVE-2025-48307

7.1
    Kasonzhao
  • Seo For Images
Published: August 28, 2025

CVE-2025-48308

7.1
    Nonletter
  • Newsletter Subscription Optin Module
Published: August 28, 2025

CVE-2025-48309

7.1
    Betpress
  • Betpress
Published: August 28, 2025

CVE-2025-48311

7.1
    Offclicks
  • Invisible Optin
Published: August 28, 2025

CVE-2025-48320

7.1
    Cuckoohello
  • 百度分享按钮
Published: August 28, 2025

CVE-2025-48321

7.1
    Dyiosah
  • Ultimate Twitter Profile Widget
Published: August 28, 2025

CVE-2025-48325

7.1
    Shmish111
  • Wp Admin Theme
Published: August 28, 2025

CVE-2025-48343

7.1
    Aaron Axelsen
  • Wpmu Ldap Authentication
Published: August 28, 2025

CVE-2025-48351

7.1
    Pluginspoint
  • Kento Splash Screen
Published: August 28, 2025

CVE-2025-48353

7.1
    Dactum
  • Clickbank Wordpress Plugin
Published: August 28, 2025

CVE-2025-48359

7.1
    Att
  • Youtube Widget
Published: August 28, 2025

CVE-2025-49407

7.1
    Favethemes
  • Houzez
Published: August 28, 2025

CVE-2025-53215

7.1
    8bitkid
  • Yahoo Webplayer
Published: August 28, 2025

CVE-2025-53220

7.1
    Xmasb
  • Xmasb Quotes
Published: August 28, 2025

CVE-2025-53223

7.1
    Undoit
  • Theme Switcher Reloaded
Published: August 28, 2025

CVE-2025-53224

7.1
    Koen Schuit
  • Nextgen Gallery Search
Published: August 28, 2025

CVE-2025-53225

7.1
    Eboekhouden
  • Eboekhouden
Published: August 28, 2025

CVE-2025-53289

7.1
    Theme Blvd
  • Widget Areas
Published: August 28, 2025

CVE-2025-52460

6.9
    Ss1
  • Ss1
Published: August 28, 2025

CVE-2025-54541

6.9
    Quickcms
  • Quickcms
Published: August 28, 2025

CVE-2025-54542

6.9
    Quickcms
  • Quickcms
Published: August 28, 2025

CVE-2025-8977

6.5
    Wordpress
  • Simple Download Monitor
Published: August 28, 2025

CVE-2025-9376

6.5
    Wordpress
  • Plugin
Published: August 28, 2025

CVE-2025-48110

6.5
    Mibuthu
  • Link View
Published: August 28, 2025

CVE-2025-48312

6.5
    Wp Chinese Translation
  • Wpavatar
Published: August 28, 2025

CVE-2025-48315

6.5
    Stanton119
  • Wordpress Html
Published: August 28, 2025

CVE-2025-48316

6.5
    Itayxd
  • Responsive Mobile Friendly Tooltip
Published: August 28, 2025

CVE-2025-48322

6.5
    Finn Dohrn
  • Statify Widget
Published: August 28, 2025

CVE-2025-48347

6.5
    Vincent Mimoun-Prat
  • Bxslider
Published: August 28, 2025

CVE-2025-48349

6.5
    Origincode
  • Video Gallery Vimeo And Youtube Gallery
Published: August 28, 2025

CVE-2025-48354

6.5
    Wp Smart Widgets
  • Better Post And Filter Widgets For Elementor
Published: August 28, 2025

CVE-2025-48356

6.5
    Isra
  • Kanpress
Published: August 28, 2025

CVE-2025-49402

6.5
    Favethemes
  • Houzez Crm
Published: August 28, 2025

CVE-2025-9344

6.4
    Userswp
  • Userswp
Published: August 28, 2025

CVE-2025-8603

6.4
    Unlimited Elements
  • Unlimited Elements For Elementor
Published: August 28, 2025

CVE-2025-9346

6.4
    Wordpress
  • Booking Calendar
Published: August 28, 2025

CVE-2025-6255

6.4
    Woocommerce
  • Dynamic Ajax Product Filters
Published: August 28, 2025

CVE-2025-8073

6.4
    Woocommerce
  • Dynamic Ajax Product Filters
Published: August 28, 2025

CVE-2025-53250

6.4
    Chartbeat
  • Chartbeat
Published: August 28, 2025

CVE-2025-8897

6.1
    Beaver Builder
  • Beaver Builder
Published: August 28, 2025

CVE-2024-9648

6.1
    Wordpress
  • Wp Ulike Pro
Published: August 28, 2025

CVE-2025-48305

5.9
    Vikingjs
  • Goal Tracker
Published: August 28, 2025

CVE-2025-48313

5.9
    Kevin Heath
  • Tripadvisor Shortcode
Published: August 28, 2025

CVE-2025-48314

5.9
    Salubrio
  • Add Code To Head
Published: August 28, 2025

CVE-2025-48319

5.9
    Gslauraspeck
  • Mesa Mesa Reservation Widget
Published: August 28, 2025

CVE-2025-48323

5.9
    Md Abunaser Khan
  • Advance Food Menu
Published: August 28, 2025

CVE-2025-48324

5.9
    Khashabawy
  • Tli.Tl Auto Twitter Poster
Published: August 28, 2025

CVE-2025-48352

5.9
    Yandex
  • Site Search Pinger
Published: August 28, 2025

CVE-2025-48358

5.9
    Everythingwp
  • Risk Free Cash On Delivery
Published: August 28, 2025

CVE-2025-48360

5.9
    Razvan Stanga
  • Varnish Nginx Proxy Caching
Published: August 28, 2025

CVE-2025-48365

5.9
    Imaprogrammer
  • Custom Comment
Published: August 28, 2025

CVE-2025-9352

5.4
    Pronamic
  • Google Maps
    Wordpress
Published: August 28, 2025

CVE-2025-48357

5.4
    Century
  • Century Toolkit
Published: August 28, 2025

CVE-2025-48362

5.4
    Saeed Sattar Beglou
  • Hesabfa Accounting
Published: August 28, 2025

CVE-2025-53337

5.4
    Arshan Perera
  • Lifepress
Published: August 28, 2025

CVE-2025-7956

5.3
    Wordpress
  • Ajax Search Lite
Published: August 28, 2025

CVE-2025-54543

5.3
    Quickcms
  • Quickcms
Published: August 28, 2025

CVE-2025-54544

5.3
    Quickcms
  • Quickcms
Published: August 28, 2025

CVE-2025-48327

5.3
    Inkthedmes
  • Wp Mailgun Smtp
Published: August 28, 2025

CVE-2025-48361

5.3
    Saeed Sattar Beglou
  • Hesabfa Accounting
Published: August 28, 2025

CVE-2025-54540

5.1
    Quickcms
  • Quickcms
Published: August 28, 2025

CVE-2025-55175

5.1
    Quickcms
  • Quickcms
Published: August 28, 2025

CVE-2025-9345

4.9
    Managefy
  • File Manager Code Editor Backup
Published: August 28, 2025

CVE-2025-48364

4.9
    Rajce
  • Rajce
Published: August 28, 2025

CVE-2025-0951

4.3
    Liquidthemes
  • Wordpress Plugin
  • Wordpress Theme
Published: August 28, 2025

CVE-2025-48310

4.3
    Wptableeditor
  • Table Editor
Published: August 28, 2025

CVE-2025-48318

4.3
    Shen2
  • 多说社会化评论框
Published: August 28, 2025

CVE-2025-48348

4.3
    Chandrashekharsahu
  • Site Offline
Published: August 28, 2025

CVE-2025-48350

4.3
    Neuralabz
  • Auto Wp
Published: August 28, 2025

CVE-2025-48363

4.3
    Metin Sarac
  • Popup For Cf7 With Sweet Alert
Published: August 28, 2025

CVE-2025-57845

None
Published: August 28, 2025

CVE-2024-58240

None
    Linux
  • Linux Kernel
Published: August 28, 2025
Click here to see more Vulnerabilities