Tag: 2025-09-23

3 Attack Reports | 143 Vulnerabilities

Attack reports

How a new PlugX variant abuses DLL search order hijacking

A new campaign targeting telecommunications and manufacturing sectors in Central and South Asian countries has been discovered, delivering a new variant of PlugX. The campaign, active since 2022, shows overlaps between RainyDay and Turian backdoors, including the abuse of legitimate applications fo…
apt
plugx
rainyday
telecommunications
dll hijacking
manufacturing
chinese apt
2025-09-23
backdoordiplomacy
naikon
turian
2025-09-25
Published: September 25, 2025
Downloadable IOCs: 53

Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO Poisoning Campaign

A Chinese-speaking threat actor group, tracked as CL-UNK-1037, has been conducting a large-scale SEO poisoning campaign called Operation Rewrite. The attackers use a malicious IIS module named BadIIS to intercept and alter web traffic on compromised servers, manipulating search engine results to re…
seo poisoning
vietnam
iis module
dragonrank
chinese threat actor
badiis
chinese-speaking
web shells
2025-09-23
operation rewrite
iis modules
group 9
2025-09-25
Published: September 25, 2025
Downloadable IOCs: 71

Artificial Intelligence Exposes the Homoglyph Hustle

A seemingly harmless desktop application named calendaromatic.exe was discovered to be a sophisticated malware utilizing NeutralinoJS, Unicode homoglyphs, and hidden payloads. The malware, distributed through an aggressive ad campaign, exploited NeutralinoJS's native APIs to interact directly with …
javascript
unicode
2025-09-23
calendaromatic.exe
covert channel
desktop application
homoglyphs
ai-assisted investigation
neutralinojs
Published: September 23, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-9588

10.0
    Iron Mountain Archiving Services Inc
  • Envision
Published: September 23, 2025

CVE-2025-9962

10.0
    Novakon
  • P Series
Published: September 23, 2025

CVE-2025-9846

10.0
    Talentsys
  • Inka.Net
Published: September 23, 2025

CVE-2025-26399

9.8
    Solarwinds
  • Web Help Desk
Published: September 23, 2025

CVE-2025-9321

9.8
    Wordpress
  • Wpcasa
Published: September 23, 2025

CVE-2025-10147

9.8
    Podlove
  • Podlove Podcast Publisher
Published: September 23, 2025

CVE-2025-10412

9.8
    Wordpress
  • Woocommerce Uni Cpo
Published: September 23, 2025

CVE-2025-9963

9.4
    Novakon
  • P Series
Published: September 23, 2025

CVE-2025-9965

9.3
    Novakon
  • P Series
Published: September 23, 2025

CVE-2025-59545

9.0
    Dnn
  • Dnn
Published: September 23, 2025

CVE-2025-9798

8.9
    Netcad
  • Netigma
Published: September 23, 2025

CVE-2025-10380

8.8
    Wordpress
  • Advanced Views
Published: September 23, 2025

CVE-2025-9844

8.8
    Salesforce
  • Salesforce Cli
Published: September 23, 2025

CVE-2025-9900

8.8
    Libtiff
  • Libtiff
Published: September 23, 2025

CVE-2025-9495

8.7
    Carrier
  • Vitogate 300
Published: September 23, 2025

CVE-2025-10244

8.7
    Autodesk
  • Fusion
Published: September 23, 2025

CVE-2025-59484

8.7
    Click Plus
  • Plc
Published: September 23, 2025

CVE-2025-55069

8.7
    Click
  • Plus Plc
Published: September 23, 2025

CVE-2025-9964

8.6
    Novakon
  • P Series
Published: September 23, 2025

CVE-2025-9494

8.5
    Carrier
  • Vitogate 300
Published: September 23, 2025

CVE-2025-1255

8.3
    Rti
  • Connext Professional
Published: September 23, 2025

CVE-2025-4993

8.3
    Rti
  • Connext Professional
Published: September 23, 2025

CVE-2025-10184

8.2
    Google
  • Android
Published: September 23, 2025

CVE-2025-57882

8.2
    Click Plus
  • C2-03cpu-2
Published: September 23, 2025

CVE-2025-58473

8.2
    Click Plus
  • C2-03cpu-2
Published: September 23, 2025

CVE-2025-8354

7.8
    Autodesk
  • Revit
Published: September 23, 2025

CVE-2025-59826

7.6
    Flag Forge
  • Flag Forge
Published: September 23, 2025

CVE-2025-55038

7.6
    Click Plus
  • C2-03cpu2
Published: September 23, 2025

CVE-2025-55780

7.5
    Artifex
  • Mupdf
Published: September 23, 2025

CVE-2025-56394

7.5
    Free5gc
  • Free5gc
Published: September 23, 2025

CVE-2025-51005

7.5
    Tcpreplay
  • Tcpreplay
Published: September 23, 2025

CVE-2025-57637

7.5
    D-Link
  • Di-7100g
Published: September 23, 2025

CVE-2025-57638

7.5
    Tenda
  • Ac9
Published: September 23, 2025

CVE-2025-10838

7.4
    Tenda
  • Ac21
Published: September 23, 2025

CVE-2025-9966

7.3
    Novakon
  • P Series
Published: September 23, 2025

CVE-2025-59534

7.3
    Cryptolib
  • Cryptolib
Published: September 23, 2025

CVE-2025-1131

7.0
    Asterisk
  • Asterisk
Published: September 23, 2025

CVE-2025-52905

7.0
    Totolink
  • X6000r
Published: September 23, 2025

CVE-2025-10829

6.9
    Campcodes
  • Computer Sales And Inventory System
Published: September 23, 2025

CVE-2025-10830

6.9
    Campcodes
  • Computer Sales And Inventory System
Published: September 23, 2025

CVE-2025-10831

6.9
    Campcodes
  • Computer Sales And Inventory System
Published: September 23, 2025

CVE-2025-10832

6.9
    Sourcecodester
  • Pet Grooming Management Software
Published: September 23, 2025

CVE-2025-10833

6.9
    1000projects
  • Bookstore Management System
Published: September 23, 2025

CVE-2025-10834

6.9
    Itsourcecode
  • Open Source Job Portal
Published: September 23, 2025

CVE-2025-10836

6.9
    Mayurik
  • Pet Grooming Management Software
Published: September 23, 2025

CVE-2025-10841

6.9
    Code-Projects
  • Online Bidding System
Published: September 23, 2025

CVE-2025-10842

6.9
    Code-Projects
  • Online Bidding System
Published: September 23, 2025

CVE-2025-10843

6.9
    Reservation Online
  • Reservation Online Hotel Reservation System
Published: September 23, 2025

CVE-2025-10851

6.9
    Campcodes
  • Gym Management System
Published: September 23, 2025

CVE-2025-10857

6.9
    Campcodes
  • Point Of Sale System
Published: September 23, 2025

CVE-2025-58354

6.9
    Kata-Containers
  • Kata Containers
Published: September 23, 2025

CVE-2025-58069

6.9
    Click
  • Click Plus Plc
Published: September 23, 2025

CVE-2025-0663

6.8
    Wso2
  • Wso2 Product
Published: September 23, 2025

CVE-2025-5717

6.7
    Wso2
  • Wso2
Published: September 23, 2025

CVE-2025-54081

6.7
    Sunshine
  • Game Stream Host
  • Sunshine Service
Published: September 23, 2025

CVE-2025-58915

6.5
    Emarket-Design
  • Youtube Showcase
Published: September 23, 2025

CVE-2025-10548

6.5
    Clevercontrol
  • Clevercontrol Employee Monitoring Software
Published: September 23, 2025

CVE-2025-9342

6.5
    Anadolu Hayat Emeklilik Inc
  • Ahe Mobile
Published: September 23, 2025

CVE-2024-4598

6.5
    Wso2
  • Wso2
  • Wso2 Enrich Mediator
Published: September 23, 2025

CVE-2025-29083

6.5
    Csz-Cms
  • Csz-Cms
Published: September 23, 2025

CVE-2025-29084

6.5
    *
  • Csz-Cms
Published: September 23, 2025

CVE-2025-57639

6.5
    Tenda
  • Ac9
Published: September 23, 2025

CVE-2025-59821

6.5
    Dnn
  • Dnn
Published: September 23, 2025

CVE-2025-45326

6.5
    Pocketvj
  • Pocketvj Cp
Published: September 23, 2025

CVE-2025-57636

6.5
    D-Link
  • C1
Published: September 23, 2025

CVE-2025-8902

6.4
    Wordpress
  • Widget Options Extended
Published: September 23, 2025

CVE-2017-20200

6.3
    Coinomi
  • Coinomi
Published: September 23, 2025

CVE-2025-59539

6.3
    Dnn
  • Dotnetnuke
Published: September 23, 2025

CVE-2025-59822

6.3
    Http4s
  • Http4s
Published: September 23, 2025

CVE-2025-8282

6.1
    Wordpress
  • Sureforms Plugin
Published: September 23, 2025

CVE-2025-56304

6.1
    Yzmcms
  • Yzmcms
Published: September 23, 2025

CVE-2025-0209

6.1
    Wso2
  • Wso2 Identity Server
Published: September 23, 2025

CVE-2025-59825

6.1
    Astral
  • Tokio-Tar
Published: September 23, 2025

CVE-2025-59548

5.9
    Dnn
  • Dnn
Published: September 23, 2025

CVE-2025-58674

5.9
    Automattic
  • Wordpress
Published: September 23, 2025

CVE-2025-8410

5.8
    Rti
  • Connext Professional
Published: September 23, 2025

CVE-2025-57407

5.4
    S-Cart
  • S-Cart
Published: September 23, 2025

CVE-2025-10822

5.3
    Fuyang Lipengjun
  • Fuyang Lipengjun
Published: September 23, 2025

CVE-2025-10825

5.3
    Campcodes
  • Online Beauty Parlor Management System
Published: September 23, 2025

CVE-2025-10826

5.3
    Campcodes
  • Online Beauty Parlor Management System
Published: September 23, 2025

CVE-2025-10827

5.3
    Phpjabbers
  • Restaurant Menu Maker
Published: September 23, 2025

CVE-2025-10828

5.3
    Sourcecodester
  • Pet Grooming Management Software
Published: September 23, 2025

CVE-2025-10835

5.3
    Mayurik
  • Pet Grooming Management Software
Published: September 23, 2025

CVE-2025-10839

5.3
    Sourcecodester
  • Pet Grooming Management Software
Published: September 23, 2025

CVE-2025-10840

5.3
    Sourcecodester
  • Pet Grooming Management Software
Published: September 23, 2025

CVE-2025-10844

5.3
    Portabilis
  • I-Educar
Published: September 23, 2025

CVE-2025-10845

5.3
    Portabilis
  • I-Educar
Published: September 23, 2025

CVE-2025-10846

5.3
    Portabilis
  • I-Educar
Published: September 23, 2025

CVE-2025-10848

5.3
    Campcodes
  • Society Membership Information System
Published: September 23, 2025

CVE-2025-7106

5.3
    Danny-Avila
  • Librechat
Published: September 23, 2025

CVE-2025-6921

5.3
    Huggingface
  • Transformers
Published: September 23, 2025

CVE-2025-59547

5.3
    Dnn
  • Dnn
Published: September 23, 2025

CVE-2025-10837

5.1
    Code-Projects
  • Simple Food Ordering System
Published: September 23, 2025

CVE-2024-21927

5.0
    Amd
  • Satellite Management Controller
    Openbmc
Published: September 23, 2025

CVE-2024-21935

5.0
    Amd
  • Satellite Management Controller
Published: September 23, 2025

CVE-2025-10823

4.8
    Axboe
  • Fio
Published: September 23, 2025

CVE-2025-10824

4.8
    Axboe
  • Fio
Published: September 23, 2025

CVE-2025-4760

4.8
    Wso2
  • Product
  • Api Manager
Published: September 23, 2025

CVE-2025-42907

4.3
    Sap
  • Sap Bi Platform
Published: September 23, 2025

CVE-2024-6429

4.3
    Wso2
  • Wso2
Published: September 23, 2025

CVE-2025-58246

4.3
    Automattic
  • Wordpress
Published: September 23, 2025

CVE-2025-54855

4.1
    *
  • Click Programming Software
Published: September 23, 2025

CVE-2025-0672

3.3
    Wso2
  • *
Published: September 23, 2025

CVE-2025-59546

2.4
    Dnn
  • Dotnetnuke
Published: September 23, 2025

CVE-2025-59811

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59812

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59813

None
    Fortinet
  • Fortigate
Published: September 23, 2025

CVE-2025-59876

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59877

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59878

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59879

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59880

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59881

None
    Fortinet
  • *
Published: September 23, 2025

CVE-2025-59882

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59883

None
    Fortinet
  • Fortinet
Published: September 23, 2025

CVE-2025-59884

None
    Fortinet
  • *
Published: September 23, 2025

CVE-2025-59885

None
    Fortinet
  • *
Published: September 23, 2025

CVE-2025-39867

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39868

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39869

None
    Linux
  • Linux Kernel
    Ti
Published: September 23, 2025

CVE-2025-39870

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39871

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39872

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39873

None
    Linux
  • Linux Kernel
    Xilinx
Published: September 23, 2025

CVE-2025-39874

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39875

None
    Linux
  • Linux Kernel
    Intel
Published: September 23, 2025

CVE-2025-39876

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39877

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39878

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39879

None
    Linux
  • Kernel
Published: September 23, 2025

CVE-2025-39880

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39881

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39882

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39883

None
    Linux
  • Kernel
Published: September 23, 2025

CVE-2025-39884

None
    Linux
  • Kernel
Published: September 23, 2025

CVE-2025-39885

None
    Linux
  • Kernel
  • Ocfs2
Published: September 23, 2025

CVE-2025-39886

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-39887

None
    Linux
  • Kernel
Published: September 23, 2025

CVE-2025-39888

None
    Linux
  • Linux Kernel
Published: September 23, 2025

CVE-2025-4582

None
    Rti
  • Connext Professional
Published: September 23, 2025

CVE-2025-9197

None
    Lenovo
  • *
Published: September 23, 2025

CVE-2025-56146

None
    Indian Bank
  • Indsmart Android App
Published: September 23, 2025

CVE-2025-56311

None
    Shenzhen C-Data Technology
  • Fd602gw-Dx-R410
Published: September 23, 2025
Click here to see more Vulnerabilities