Tag: 2025-09-19

5 Attack Reports | 130 Vulnerabilities

Attack reports

Gamaredon X Turla collaboration

ESET Research has uncovered collaboration between notorious APT groups Gamaredon and Turla, both associated with Russia's FSB, targeting high-profile victims in Ukraine. The research reveals Gamaredon tools being used to restart and deploy Turla's Kazuar backdoor on compromised machines. This marks…
backdoor
apt
russia
ukraine
cyberespionage
fsb
2025-09-19
kazuar
pterographin
pterolnk
pteroeffigy
collaboration
pteroodd
pteropaste
pterostew
2025-09-27
Published: September 27, 2025
Downloadable IOCs: 0

Malicious PyPI Packages Deliver SilentSync RAT

Two malicious Python packages, sisaws and secmeasure, were discovered in the Python Package Index (PyPI) repository. These packages, created by the same author, deliver a Remote Access Trojan (RAT) called SilentSync. The RAT is capable of remote command execution, file exfiltration, screen capturin…
rat
python
typosquatting
supply chain
data theft
remote access
pypi
data-exfiltration
supply-chain-attack
browser-data-theft
2025-09-18
silentsync
2025-09-19
python packages
Published: September 19, 2025
Downloadable IOCs: 0

AsyncRAT Campaigns Uncovered: How Attackers Abuse ScreenConnect and Open Directories

This intelligence report details a sophisticated attack campaign leveraging trojanized ConnectWise ScreenConnect installers to deliver AsyncRAT payloads. Attackers use open directories as staging points, blending legitimate remote management software abuse with custom loaders and scripts. The campa…
obfuscation
screenconnect
phishing
persistence
asyncrat
remote access trojan
c2 infrastructure
open directories
CVE-2025-3935
powershell rat
2025-09-19
payload staging
Published: September 19, 2025
Downloadable IOCs: 0

Fake Empire Podcast Invites Target Crypto Industry with macOS AMOS Stealer

A new phishing campaign is targeting crypto industry developers and influencers with fake interview requests impersonating the popular Empire podcast. Attackers pose as hosts, luring victims to fraudulent websites mimicking platforms like Streamyard and Huddle. These sites prompt users to download …
phishing
macos
crypto
amos stealer
2025-09-19
huddle
empire podcast
fake interviews
streamyard
Published: September 19, 2025
Downloadable IOCs: 7

CountLoader: New Malware Loader Being Served in 3 Different Versions

A new malware loader named CountLoader has been identified, strongly associated with Russian ransomware gangs. It comes in three versions: .NET, PowerShell, and JScript. The threat is believed to be part of an Initial Access Broker's toolset or used by a ransomware affiliate linked to LockBit, Blac…
phishing
ransomware
powershell
ukraine
lumma stealer
malware loader
.net
cobaltstrike
jscript
purehvnc
evasion techniques
initial access broker
adaptixc2
2025-09-19
countloader
Published: September 19, 2025
Downloadable IOCs: 27
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-10690

9.8
    Goza
  • Nonprofit Charity Wordpress Theme
Published: September 19, 2025

CVE-2025-5948

9.8
    Wordpress
  • Service Finder Bookings
Published: September 19, 2025

CVE-2022-4980

9.3
    General Bytes
  • Crypto Application Server
Published: September 19, 2025

CVE-2024-13990

9.3
    Microworld
  • Escan Av
Published: September 19, 2025

CVE-2025-34192

9.3
    Vasion
  • Vasion Print
  • Vasion Print Application
    Openssl
Published: September 19, 2025

CVE-2025-34198

9.3
    Vasion Print
  • Virtual Appliance Host
  • Application
Published: September 19, 2025

CVE-2025-34199

9.3
    Vasion Print
  • Virtual Appliance Host
  • Application
Published: September 19, 2025

CVE-2025-34203

9.3
    Vasion Print
  • Virtual Appliance Host
  • Application
    Nginx
    Openssl
    Laravel
Published: September 19, 2025

CVE-2025-34205

9.3
    Vasion Print
  • Virtual Appliance Host
  • Application
Published: September 19, 2025

CVE-2025-34206

9.3
    Printerlogic
  • Vasion Print
Published: September 19, 2025

CVE-2025-57644

9.1
    Accela
  • Accela Automation Platform
Published: September 19, 2025

CVE-2025-48703

9.0
    Control Web Panel
  • Centos Web Panel
Published: September 19, 2025

CVE-2025-59431

8.9
    Mapserver
  • Mapserver
Published: September 19, 2025

CVE-2025-10647

8.8
    Wordpress
  • Embed Pdf For Wpforms
Published: September 19, 2025

CVE-2025-52159

8.8
    Ppress
  • Ppress
Published: September 19, 2025

CVE-2025-54815

8.8
    Ppress
  • Ppress
Published: September 19, 2025

CVE-2025-34202

8.7
    Vasion Print
  • Virtual Appliance
  • Application
Published: September 19, 2025

CVE-2025-34204

8.7
    Printerlogic
  • Vasion Print
  • Virtual Appliance
Published: September 19, 2025

CVE-2025-9906

8.6
    Keras
  • Keras
Published: September 19, 2025

CVE-2025-34195

8.6
    Printerlogic
  • Virtual Appliance Host
  • Printer Installer Client
Published: September 19, 2025

CVE-2025-34197

8.6
    Vasion Print
  • Virtual Appliance Host
  • Application
Published: September 19, 2025

CVE-2025-34200

8.6
    Vasion Print
  • Virtual Appliance
    Printerlogic
Published: September 19, 2025

CVE-2025-34190

8.5
    Vasion
  • Print
  • Printerlogic
  • Printerinstallerclientservice
Published: September 19, 2025

CVE-2025-34191

8.5
    Vasion Print
  • Virtual Appliance Host
  • Application
Published: September 19, 2025

CVE-2025-34194

8.5
    Vasion Print
  • Virtual Appliance Host
    Printerlogic
Published: September 19, 2025

CVE-2025-34201

8.5
    Vason Print
  • Virtual Appliance
    Printerlogic
Published: September 19, 2025

CVE-2025-34188

8.4
    Printerlogic
  • Vation Print
Published: September 19, 2025

CVE-2025-5955

8.1
    Wordpress
  • Service Finder Sms System
Published: September 19, 2025

CVE-2025-7665

8.1
    Miniorange
  • Otp Verification With Firebase
Published: September 19, 2025

CVE-2025-54761

8.0
    Ppress
  • Ppress
Published: September 19, 2025

CVE-2025-9079

8.0
    Mattermost
  • Mattermost
Published: September 19, 2025

CVE-2025-57528

7.7
    Tenda
  • Ac6
Published: September 19, 2025

CVE-2025-59344

7.7
    Aliasvault
  • Aliasvault
Published: September 19, 2025

CVE-2025-10458

7.6
    Zephyrproject
  • Zephyr
Published: September 19, 2025

CVE-2025-7403

7.6
    Zephyrproject
  • Zephyr
Published: September 19, 2025

CVE-2025-10468

7.5
    Beyaz Computer
  • Cityplus
Published: September 19, 2025

CVE-2025-26515

7.5
    Netapp
  • Storagegrid
Published: September 19, 2025

CVE-2025-9905

7.3
    Keras
  • Keras
Published: September 19, 2025

CVE-2025-10456

7.1
    Zephyr
  • Ble
Published: September 19, 2025

CVE-2025-9969

7.1
    Vizly
  • Web Design Real Estate Packages
Published: September 19, 2025

CVE-2025-34193

7.1
    Printerlogic
  • Vasion Print
  • Printerinstallerclientinterface
  • Printerinstallerclient
  • Printerinstallerclientlauncher
Published: September 19, 2025

CVE-2025-10712

6.9
    07flycms
  • 07flycms
  • 07fly-Cms
  • 07flycrm
Published: September 19, 2025

CVE-2025-34189

6.9
    Vasion Print
  • Virtual Appliance Host
  • Application
Published: September 19, 2025

CVE-2025-43803

6.9
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: September 19, 2025

CVE-2025-43808

6.9
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: September 19, 2025

CVE-2025-59713

6.8
    Snipe-It
  • Snipe-It
Published: September 19, 2025

CVE-2025-8531

6.8
    Mitsubishi
  • Electric Corporation
Published: September 19, 2025

CVE-2025-7937

6.6
    Supermicro
  • Mbd-X12stw
Published: September 19, 2025

CVE-2025-59714

6.5
    Internet2
  • Grouper
Published: September 19, 2025

CVE-2025-57296

6.5
    Tenda
  • Ac6
Published: September 19, 2025

CVE-2025-57396

6.5
    Tandoor
  • Tandoor Recipes
Published: September 19, 2025

CVE-2025-6198

6.4
    Supermicro
  • Bmc
  • Mbd-X13sem-F
Published: September 19, 2025

CVE-2025-59712

6.4
    Snipe-It
  • Snipe-It
Published: September 19, 2025

CVE-2025-8532

6.4
    Bimser Solution Software Trade Inc
  • Eba Document And Workflow Management System
Published: September 19, 2025

CVE-2025-26514

6.4
    Netapp
  • Storagegrid
Published: September 19, 2025

CVE-2025-8664

6.3
    Saysis
  • Starcities E-Municipality Management
Published: September 19, 2025

CVE-2025-55910

6.3
    Cmseasy
  • Cmseasy
Published: September 19, 2025

CVE-2025-30755

6.1
    Oracle
  • Opengrok
Published: September 19, 2025

CVE-2025-10146

6.1
    Wordpress
  • Download Manager
Published: September 19, 2025

CVE-2025-56762

6.1
    Paracrawl
  • Keops
Published: September 19, 2025

CVE-2025-59689

6.1
    Libraesva
  • Libraesva Esg
Published: September 19, 2025

CVE-2025-46703

5.9
    Bluespice
  • Bluespice
Published: September 19, 2025

CVE-2025-48007

5.9
    Bluespice
  • Hallo Welt Blue Spice
Published: September 19, 2025

CVE-2025-57880

5.9
    Bluespice
  • Bluespice
Published: September 19, 2025

CVE-2025-58114

5.9
    Hallo Welt Gmbh
  • Bluespice
Published: September 19, 2025

CVE-2025-10708

5.5
    Four-Faith
  • Water Conservancy Informatization Platform
Published: September 19, 2025

CVE-2025-10709

5.5
    Four-Faith
  • Water Conservancy Informatization Platform
Published: September 19, 2025

CVE-2025-59717

5.4
    Digitalocean
  • Do-Markdownit
Published: September 19, 2025

CVE-2025-8487

5.4
    Kubio
  • Ai Page Builder
Published: September 19, 2025

CVE-2025-36248

5.4
    Ibm
  • Copy Services Manager
Published: September 19, 2025

CVE-2025-26517

5.4
    Netapp
  • Storagegrid
Published: September 19, 2025

CVE-2025-10719

5.3
    Wisdomgarden
  • Tronclass
Published: September 19, 2025

CVE-2025-10707

5.3
    Jeecgboot
  • Jeecgboot
Published: September 19, 2025

CVE-2025-10710

5.3
    07flycms
  • 07flycms
  • 07fly-Cms
  • 07flycrm
Published: September 19, 2025

CVE-2025-10711

5.3
    07flycms
  • 07flycms
  • 07fly Cms
  • 07flycrm
Published: September 19, 2025

CVE-2025-56869

5.3
    Sync
  • Sync In Server
Published: September 19, 2025

CVE-2025-26516

5.3
    Netapp
  • Storagegrid
Published: September 19, 2025

CVE-2025-10568

5.2
    Hp
  • Hyperx Ngenuity
Published: September 19, 2025

CVE-2025-43809

5.1
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: September 19, 2025

CVE-2025-59715

4.8
    Smseagle
  • Smseagle
Published: September 19, 2025

CVE-2025-10715

4.8
    Apeunipte
  • Exam Practice App
    Android
Published: September 19, 2025

CVE-2025-10716

4.8
    Creality
  • Creality Cloud App
Published: September 19, 2025

CVE-2025-10717

4.8
    Intsig
  • Camscanner
Published: September 19, 2025

CVE-2025-10718

4.8
    Ooma
  • Office Business Phone App
Published: September 19, 2025

CVE-2025-10721

4.8
    Webull
  • Webull Investing And Trading App
Published: September 19, 2025

CVE-2025-10722

4.8
    Sktlab
  • Mukbee App
Published: September 19, 2025

CVE-2025-7702

4.7
    Pusula Communication
  • Manageable Email Sending System
Published: September 19, 2025

CVE-2025-10457

4.3
    Zephyrproject
  • Zephyr
Published: September 19, 2025

CVE-2025-10630

4.3
    Grafana
  • Grafana
  • Grafana-Zabbix
Published: September 19, 2025

CVE-2025-9081

3.1
    Mattermost
  • Mattermost
Published: September 19, 2025

CVE-2025-59427

2.9
    Cloudflare
  • Vite Plugin
Published: September 19, 2025

CVE-2025-59670

None
    Fortinet
  • Fortinet
Published: September 19, 2025

CVE-2025-59671

None
    Fortinet
  • *
Published: September 19, 2025

CVE-2025-59672

None
    Fortinet
  • *
Published: September 19, 2025

CVE-2025-59673

None
    Fortinet
  • Fortinet
Published: September 19, 2025

CVE-2025-59674

None
    Fortinet
  • Fortinet
Published: September 19, 2025

CVE-2025-59675

None
    Fortinet
  • Fortiguard
Published: September 19, 2025

CVE-2025-59676

None
    Fortinet
  • Fortinet
Published: September 19, 2025

CVE-2025-59677

None
    Fortinet
  • Fortinet
Published: September 19, 2025

CVE-2025-59678

None
    Fortinet
  • Fortinet
Published: September 19, 2025

CVE-2025-39837

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39838

None
    Linux
  • Kernel
Published: September 19, 2025

CVE-2025-39839

None
    Linux
  • Linux
  • Batman-Adv
Published: September 19, 2025

CVE-2025-39840

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39841

None
    Linux
  • Kernel
Published: September 19, 2025

CVE-2025-39842

None
    Linux
  • Kernel
Published: September 19, 2025

CVE-2025-39843

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39844

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39845

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39846

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39847

None
    Linux
  • Kernel
Published: September 19, 2025

CVE-2025-39848

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39849

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39850

None
    Linux
  • Kernel
Published: September 19, 2025

CVE-2025-39851

None
    Linux
  • Kernel
  • Vxlan
Published: September 19, 2025

CVE-2025-39852

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39853

None
    Linux
  • Linux Kernel
    Intel
Published: September 19, 2025

CVE-2025-39854

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39855

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39856

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39857

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39858

None
    Linux
  • Linux Kernel
    Mlx
Published: September 19, 2025

CVE-2025-39859

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39860

None
    Linux
  • Linux Kernel
  • Bluetooth
Published: September 19, 2025

CVE-2025-39861

None
    Linux
  • Kernel
Published: September 19, 2025

CVE-2025-39862

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39863

None
    Linux
  • Kernel
Published: September 19, 2025

CVE-2025-39864

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39865

None
    Linux
  • Linux Kernel
Published: September 19, 2025

CVE-2025-39866

None
    Linux
  • Linux Kernel
Published: September 19, 2025
Click here to see more Vulnerabilities