Tag: 2025-09-26

2 Attack Reports | 209 Vulnerabilities

Attack reports

SVG Phishing hits Ukraine with Amatera Stealer, PureMiner

A phishing campaign targeting Ukrainian government entities uses malicious SVG files to initiate an infection chain. The attack begins with emails containing SVG attachments that redirect victims to a download site. A CHM file is then used to execute a remote HTA loader, which delivers two malware …
phishing
data theft
ukraine
cryptomining
fileless
chm
svg
amatera stealer
pureminer
countloader
2025-09-26
hta loader
Published: September 26, 2025
Downloadable IOCs: 0

IOCs for phishing campaign using BitM pages

This intelligence report focuses on a phishing campaign that utilizes Browser-in-the-Middle (BitM) pages. The campaign likely involves sophisticated tactics to intercept and manipulate browser traffic, potentially allowing attackers to harvest credentials or inject malicious content. While specific…
phishing
2025-09-26
browser-in-the-middle
bitm
Published: September 26, 2025
Downloadable IOCs: 208
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-60219

10.0
    Harutheme
  • Woocommerce Designer Pro
Published: September 26, 2025

CVE-2025-58384

10.0
    Doxense
  • Watchdoc
Published: September 26, 2025

CVE-2025-55187

9.9
    Drivelock
  • Drivelock
Published: September 26, 2025

CVE-2025-60156

9.6
    Webandprint
  • Ar For Wordpress
Published: September 26, 2025

CVE-2025-59934

9.4
    Formbricks
  • Formbricks
Published: September 26, 2025

CVE-2025-60111

8.8
    Javothemes
  • Javo Core
Published: September 26, 2025

CVE-2025-60126

8.8
    Pluginops
  • Testimonial Slider
Published: September 26, 2025

CVE-2025-9642

8.7
    Gitlab
  • Gitlab Ce
Published: September 26, 2025

CVE-2025-10657

8.7
    Docker
  • Docker Desktop
Published: September 26, 2025

CVE-2025-10544

8.6
    Docave
  • Docave
    Perimeter
    Compliance Guardian
Published: September 26, 2025

CVE-2025-60107

8.5
    Lambertgroup
  • Allinone Banner With Playlist
Published: September 26, 2025

CVE-2025-60108

8.5
    Lambertgroup
  • All In One Banner With Thumbnails
Published: September 26, 2025

CVE-2025-60109

8.5
    Lambertgroup
  • Allinone
Published: September 26, 2025

CVE-2025-60110

8.5
    Lambertgroup
  • Allinone Banner Rotator
Published: September 26, 2025

CVE-2025-60118

8.5
    Potenzaglobalsolutions
  • Pgs Core
Published: September 26, 2025

CVE-2025-60017

8.2
    Unitree
  • Go2
  • G1
  • H1
  • B2
Published: September 26, 2025

CVE-2025-59362

8.2
    Squid
  • Squid
Published: September 26, 2025

CVE-2025-59845

8.2
    Apollo
  • Apollo Sandbox
  • Apollo Explorer
Published: September 26, 2025

CVE-2025-59002

7.7
    Seatheme
  • Bm Content Builder
Published: September 26, 2025

CVE-2025-59844

7.7
    Sonarsource
  • Sonarqube
Published: September 26, 2025

CVE-2025-54831

7.5
    Apache
  • Airflow
Published: September 26, 2025

CVE-2025-10858

7.5
    Gitlab
  • Gitlab Ce
Published: September 26, 2025

CVE-2025-11021

7.5
    Libsoup
  • Libsoup
    Red Hat
Published: September 26, 2025

CVE-2025-59010

7.5
    Maciej Bis
  • Permalink Manager Lite
Published: September 26, 2025

CVE-2025-59011

7.5
    Shinetheme
  • Traveler
Published: September 26, 2025

CVE-2025-60150

7.5
    Wpshuffle
  • Subscribe To Download
Published: September 26, 2025

CVE-2025-60153

7.5
    Wpshuffle
  • Subscribe To Unlock
Published: September 26, 2025

CVE-2025-36274

7.5
    Ibm
  • Aspera Http Gateway
Published: September 26, 2025

CVE-2025-55847

7.5
    Wavlink
  • M86x3a
Published: September 26, 2025

CVE-2025-35027

7.3
    Unitree
  • Robotic Products
  • Go2
  • G1
  • H1
  • B2
Published: September 26, 2025

CVE-2025-10747

7.2
    Wordpress
  • Wp-Downloadmanager
Published: September 26, 2025

CVE-2025-48107

7.1
    Undsgn
  • Uncode
Published: September 26, 2025

CVE-2025-4957

7.1
    Metagauss
  • Profilegrid
Published: September 26, 2025

CVE-2025-59012

7.1
    Shinetheme
  • Traveler
Published: September 26, 2025

CVE-2025-60164

7.1
    Newsman
  • Newsmanapp
Published: September 26, 2025

CVE-2025-60169

7.1
    W3s Cloud Technology
  • W3scloud Contact Form
Published: September 26, 2025

CVE-2025-60170

7.1
    Htaccess Ip Blocker
  • Htaccess Ip Blocker
Published: September 26, 2025

CVE-2025-60171

7.1
    Yourplugins
  • Conditional Cart Messages For Woocommerce
Published: September 26, 2025

CVE-2025-60172

7.1
    Flytedesk
  • Flytedesk Digital
Published: September 26, 2025

CVE-2025-60173

7.1
    Ashwani Kumar
  • Gst For Woocommerce
Published: September 26, 2025

CVE-2025-58385

7.1
    Doxense
  • Watchdoc
Published: September 26, 2025

CVE-2025-9267

7.0
    Seagate
  • Toolkit
Published: September 26, 2025

CVE-2025-59843

6.9
    Flag Forge
  • Flag Forge
Published: September 26, 2025

CVE-2025-11030

6.9
    Tutorials-Website
  • Employee Management System
Published: September 26, 2025

CVE-2025-11032

6.9
    Kidaze
  • Courseselectionsystem
Published: September 26, 2025

CVE-2025-11033

6.9
    Kidaze
  • Courseselectionsystem
Published: September 26, 2025

CVE-2025-11036

6.9
    Code-Projects
  • E-Commerce Website
Published: September 26, 2025

CVE-2025-11037

6.9
    Code-Projects
  • E-Commerce Website
Published: September 26, 2025

CVE-2025-11039

6.9
    Campcodes
  • Computer Sales And Inventory System
Published: September 26, 2025

CVE-2025-11040

6.9
    Code-Projects
  • Hostel Management System
Published: September 26, 2025

CVE-2025-11045

6.9
    Wayos
  • Lq
Published: September 26, 2025

CVE-2025-11046

6.9
    腾讯
  • Weknora
Published: September 26, 2025

CVE-2025-56463

6.8
    Mercusys
  • Mw305r
Published: September 26, 2025

CVE-2025-57692

6.8
    Piranha
  • Piranha Cms
Published: September 26, 2025

CVE-2025-1862

6.7
    Wso2
  • Wso2
Published: September 26, 2025

CVE-2025-60114

6.6
    Yaycommerce
  • Yaycurrency
Published: September 26, 2025

CVE-2025-10307

6.5
    Backuply
  • Backuply
Published: September 26, 2025

CVE-2025-27006

6.5
    Themeplugs
  • Authorsy
Published: September 26, 2025

CVE-2025-48326

6.5
    Acclectic Media
  • Acclectic Media Organizer
Published: September 26, 2025

CVE-2025-58917

6.5
    Nick Verwymeren
  • Quantities And Units For Woocommerce
Published: September 26, 2025

CVE-2025-60040

6.5
    Fkrauthan
  • Wp-Mpdf
Published: September 26, 2025

CVE-2025-60098

6.5
    Jeff Farthing
  • Theme My Login
Published: September 26, 2025

CVE-2025-60099

6.5
    Awsm.In
  • Embed Any Document
Published: September 26, 2025

CVE-2025-60102

6.5
    Syam Mohan
  • Wpfront User Role Editor
Published: September 26, 2025

CVE-2025-60105

6.5
    Metaphorcreations
  • Ditty
Published: September 26, 2025

CVE-2025-60112

6.5
    Syed Balkhi
  • Athemes Addons For Elementor
Published: September 26, 2025

CVE-2025-60124

6.5
    Ryan Hellyer
  • Simple Colorbox
Published: September 26, 2025

CVE-2025-60138

6.5
    Sonalsinha21
  • Skt Blocks
Published: September 26, 2025

CVE-2025-60142

6.5
    Daganlev
  • Simple Meta Tags
Published: September 26, 2025

CVE-2025-60147

6.5
    Ht Plugins
  • Ht Feed
Published: September 26, 2025

CVE-2025-60157

6.5
    Emarket-Design
  • Wp Ticket Customer Service Software And Support Ticket System
Published: September 26, 2025

CVE-2025-60162

6.5
    Pickplugins
  • Job Board Manager
Published: September 26, 2025

CVE-2025-60163

6.5
    Robin W
  • Bbp Topic Count
Published: September 26, 2025

CVE-2025-7691

6.5
    Gitlab
  • Gitlab
Published: September 26, 2025

CVE-2025-9958

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: September 26, 2025

CVE-2025-55848

6.5
    D-Link
  • Dir-823
Published: September 26, 2025

CVE-2025-45994

6.5
    Aranda
  • Passrecovery
    Microsoft
Published: September 26, 2025

CVE-2025-56383

6.5
    Notepad++
  • Notepad++
Published: September 26, 2025

CVE-2025-10178

6.4
    Wordpress
  • Cm Business Directory
Published: September 26, 2025

CVE-2025-8200

6.4
    Wordpress
  • Mega Elements Addons For Elementor
Published: September 26, 2025

CVE-2025-8906

6.4
    Wordpress
  • Widgets For Tiktok Feed
Published: September 26, 2025

CVE-2025-9044

6.4
    Mapster
  • Wp Maps
Published: September 26, 2025

CVE-2025-9490

6.4
    Wordpress
  • Popup Maker
Published: September 26, 2025

CVE-2025-10136

6.4
    Wordpress
  • Tweetthis Shortcode
Published: September 26, 2025

CVE-2025-10180

6.4
    Wordpress
  • Markdown Shortcode
Published: September 26, 2025

CVE-2025-57292

6.1
    Doist
  • Todoist
Published: September 26, 2025

CVE-2025-6396

6.1
    Webbeyaz
  • Webbeyaz Website Software
Published: September 26, 2025

CVE-2025-26258

6.1
    Sourcecodester
  • Employee Management System
Published: September 26, 2025

CVE-2025-60101

5.9
    Woostify
  • Woostify
Published: September 26, 2025

CVE-2025-60104

5.9
    Jordy Meow
  • Gallery Custom Links
Published: September 26, 2025

CVE-2025-60133

5.9
    Dj-Extensions
  • Pe Easy Slider
Published: September 26, 2025

CVE-2025-60136

5.9
    Cartpauj
  • User Notes
Published: September 26, 2025

CVE-2025-60141

5.9
    Thetribe
  • The Tribal
Published: September 26, 2025

CVE-2025-60144

5.9
    Lenix
  • Scss Compiler
Published: September 26, 2025

CVE-2025-60146

5.9
    Amit Verma
  • Map Categories To Pages
Published: September 26, 2025

CVE-2025-60149

5.9
    Michael Ott
  • Notely
Published: September 26, 2025

CVE-2025-60154

5.9
    Jennifer Moss
  • Mww Disclaimer Buttons
Published: September 26, 2025

CVE-2025-60158

5.9
    Webmaniabr
  • Nota Fiscal Eletronica Woocommerce
Published: September 26, 2025

CVE-2025-60160

5.9
    Sharkthemes
  • Smart Related Products
Published: September 26, 2025

CVE-2025-60177

5.9
    Rozx
  • Recaptcha Wp
Published: September 26, 2025

CVE-2025-60179

5.9
    Space Studio
  • Click And Tweet
Published: September 26, 2025

CVE-2025-60184

5.9
    Terry L
  • Seo Search Permalink
Published: September 26, 2025

CVE-2025-60185

5.9
    Kontur
  • Admin Style
Published: September 26, 2025

CVE-2025-60186

5.9
    Alex Moss
  • Google+ Comments
Published: September 26, 2025

CVE-2025-11060

5.7
    Database Engine
  • *
Published: September 26, 2025

CVE-2025-10992

5.5
    Roncoo
  • Roncoo-Pay
Published: September 26, 2025

CVE-2025-11018

5.5
    Four-Faith
  • Water Conservancy Informatization Platform
Published: September 26, 2025

CVE-2025-11028

5.5
    Givanz
  • Vvveb
Published: September 26, 2025

CVE-2025-11031

5.5
    Datatables
  • Datatables
Published: September 26, 2025

CVE-2025-10137

5.4
    Snow Monkey
  • Snow Monkey
Published: September 26, 2025

CVE-2025-60096

5.4
    Codexthemes
  • Thegem
Published: September 26, 2025

CVE-2025-60097

5.4
    Codexthemes
  • Thegem
Published: September 26, 2025

CVE-2025-60103

5.4
    Cridiostudio
  • Listingpro
Published: September 26, 2025

CVE-2025-60116

5.4
    Themegoods
  • Grand Conference Theme
Published: September 26, 2025

CVE-2025-60127

5.4
    Artistscope
  • Copysafe Web Protection
Published: September 26, 2025

CVE-2025-60161

5.4
    Bdthemes
  • Zoloblocks
Published: September 26, 2025

CVE-2025-60181

5.4
    Silencesoft
  • Silencesoft Rss Reader
Published: September 26, 2025

CVE-2025-10980

5.3
    Jeecg
  • Jeecgboot
Published: September 26, 2025

CVE-2025-10981

5.3
    Jeecg
  • Jeecgboot
Published: September 26, 2025

CVE-2025-10987

5.3
    Yunai
  • Yudao-Cloud
Published: September 26, 2025

CVE-2025-10988

5.3
    Yunaiv
  • Ruoyi-Vue-Pro
Published: September 26, 2025

CVE-2025-10989

5.3
    Yangzongzhuan
  • Ruoyi
Published: September 26, 2025

CVE-2025-10745

5.3
    Wordpress
  • Banhammer
Published: September 26, 2025

CVE-2025-9984

5.3
    Wordpress
  • Featured Image From Url
Published: September 26, 2025

CVE-2025-9985

5.3
    Wordpress
  • Featured Image From Url
Published: September 26, 2025

CVE-2025-58919

5.3
    Guihom
  • Wide Banner
Published: September 26, 2025

CVE-2025-60092

5.3
    Shahjada
  • Download Manager
Published: September 26, 2025

CVE-2025-60100

5.3
    8theme
  • Xstore
Published: September 26, 2025

CVE-2025-60119

5.3
    Coschedule
  • Coschedule
Published: September 26, 2025

CVE-2025-60120

5.3
    Wpdirectorykit
  • Wp Directory Kit
Published: September 26, 2025

CVE-2025-60121

5.3
    Ex-Themes
  • Wooevents
Published: September 26, 2025

CVE-2025-60125

5.3
    Themelooks
  • Foodbook
Published: September 26, 2025

CVE-2025-60129

5.3
    Yext
  • Yext
Published: September 26, 2025

CVE-2025-60130

5.3
    Wedos
  • Wedos Global
Published: September 26, 2025

CVE-2025-60140

5.3
    Thetechtribe
  • The Tribal
Published: September 26, 2025

CVE-2025-60155

5.3
    Loopus
  • Wp Virtual Assistant
Published: September 26, 2025

CVE-2025-11025

5.3
    Vimesoft
  • Vimesoft Corporate Messaging Platform
Published: September 26, 2025

CVE-2025-11016

5.3
    Kalcaddle
  • Kodbox
Published: September 26, 2025

CVE-2025-11029

5.3
    Givanz
  • Vvveb
Published: September 26, 2025

CVE-2025-11034

5.3
    Dibo
  • Data Decision Making System
Published: September 26, 2025

CVE-2025-11035

5.3
    Jinher
  • Oa
Published: September 26, 2025

CVE-2025-11038

5.3
    Itsourcecode
  • Online Clinic Management System
Published: September 26, 2025

CVE-2025-11041

5.3
    Itsourcecode
  • Open Source Job Portal
Published: September 26, 2025

CVE-2025-11047

5.3
    Portabilis
  • I-Educar
Published: September 26, 2025

CVE-2025-11048

5.3
    Portabilis
  • I-Educar
Published: September 26, 2025

CVE-2025-10993

5.1
    Muyucms
  • Muyucms
Published: September 26, 2025

CVE-2025-11026

5.1
    Givanz
  • Vvveb
Published: September 26, 2025

CVE-2025-60251

5.0
    Unitree
  • Go2
  • G1
  • H1
  • B2
Published: September 26, 2025

CVE-2025-10036

4.9
    Wordpress
  • Featured Image From Url
Published: September 26, 2025

CVE-2025-10037

4.9
    Wordpress
  • Featured Image From Url
Published: September 26, 2025

CVE-2025-60106

4.9
    Roxnor
  • Emailkit
Published: September 26, 2025

CVE-2025-10994

4.8
    Openbabel
  • Openbabel
Published: September 26, 2025

CVE-2025-10995

4.8
    Openbabel
  • Open Babel
Published: September 26, 2025

CVE-2025-10996

4.8
    Openbabel
  • Openbabel
Published: September 26, 2025

CVE-2025-10997

4.8
    Open Babel
  • Open Babel
Published: September 26, 2025

CVE-2025-10998

4.8
    Openbabel
  • Open Babel
Published: September 26, 2025

CVE-2025-10999

4.8
    Open Babel
  • Open Babel
Published: September 26, 2025

CVE-2025-11000

4.8
    Open Babel
  • Open Babel
Published: September 26, 2025

CVE-2025-11010

4.8
    Vstakhov
  • Libucl
Published: September 26, 2025

CVE-2025-11011

4.8
    Behaviortree
  • Behaviortree
Published: September 26, 2025

CVE-2025-11012

4.8
    Behaviortree
  • Behaviortree
Published: September 26, 2025

CVE-2025-11013

4.8
    Behavior Tree
  • Behavior Tree
Published: September 26, 2025

CVE-2025-11014

4.8
    Ogre
  • Ogrecave
Published: September 26, 2025

CVE-2025-11015

4.8
    Ogre
  • Ogre
Published: September 26, 2025

CVE-2025-11017

4.8
    Ogrecave
  • Ogre
Published: September 26, 2025

CVE-2025-11019

4.8
    Totaljs
  • Total.Js Cms
Published: September 26, 2025

CVE-2025-11027

4.8
    Givanz
  • Vvveb
Published: September 26, 2025

CVE-2025-60250

4.7
    Unitree
  • Go2
  • G1
  • H1
  • B2
Published: September 26, 2025

CVE-2025-10490

4.4
    Wordpress
  • Zephyr Project Manager
Published: September 26, 2025

CVE-2025-10752

4.3
    Wordpress
  • Oauth Single Sign On
Published: September 26, 2025

CVE-2025-10377

4.3
    Wordpress
  • System Dashboard
Published: September 26, 2025

CVE-2025-58914

4.3
    Di Themes
  • Di Themes Demo Site Importer
Published: September 26, 2025

CVE-2025-60093

4.3
    Shahjada
  • Download Manager
Published: September 26, 2025

CVE-2025-60094

4.3
    Benjamin Intal
  • Stackable
Published: September 26, 2025

CVE-2025-60095

4.3
    Benjamin Intal
  • Stackable
Published: September 26, 2025

CVE-2025-60113

4.3
    Grooni
  • Groovy Menu
Published: September 26, 2025

CVE-2025-60115

4.3
    Instapage
  • Instapage Plugin
Published: September 26, 2025

CVE-2025-60117

4.3
    Tangiblewp
  • Vehica Core
Published: September 26, 2025

CVE-2025-60122

4.3
    Hivepress
  • Hivepress Claim Listings
Published: September 26, 2025

CVE-2025-60123

4.3
    Hivepress
  • Hivepress Claim Listings
Published: September 26, 2025

CVE-2025-60128

4.3
    Wp Delicious
  • Delisho
Published: September 26, 2025

CVE-2025-60137

4.3
    Post Featured Video
  • Post Featured Video
Published: September 26, 2025

CVE-2025-60139

4.3
    Joovii
  • Sendle Shipping
Published: September 26, 2025

CVE-2025-60143

4.3
    Netgsm
  • Netgsm
Published: September 26, 2025

CVE-2025-60145

4.3
    Yonifre
  • Lenix Scss Compiler
Published: September 26, 2025

CVE-2025-60148

4.3
    Wpshuffle
  • Subscribe To Download
Published: September 26, 2025

CVE-2025-60152

4.3
    Wpshuffle
  • Subscribe To Unlock
Published: September 26, 2025

CVE-2025-60159

4.3
    Webmaniabr
  • Nota Fiscal Eletronica Woocommerce
Published: September 26, 2025

CVE-2025-60165

4.3
    Harutheme
  • Frames
Published: September 26, 2025

CVE-2025-60166

4.3
    Wpshuffle
  • Wp Subscription Forms Pro
Published: September 26, 2025

CVE-2025-60167

4.3
    Honzat
  • Page Manager For Elementor
Published: September 26, 2025

CVE-2025-11042

4.3
    Gitlab
  • Gitlab
Published: September 26, 2025

CVE-2025-10871

3.8
    Gitlab
  • Gitlab Ee
Published: September 26, 2025

CVE-2025-1396

3.7
    Wso2
  • Wso2 Product
Published: September 26, 2025

CVE-2025-36326

3.7
    Ibm
  • Cognos Controller
  • Controller
Published: September 26, 2025

CVE-2025-10867

3.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: September 26, 2025

CVE-2025-10868

3.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: September 26, 2025

CVE-2025-5069

3.5
    Gitlab
  • Gitlab
Published: September 26, 2025

CVE-2025-10173

2.7
    Wordpress
  • Shopengine
Published: September 26, 2025

CVE-2025-59842

2.1
    Jupyter
  • Jupyterlab
Published: September 26, 2025

CVE-2025-60026

None
    Fortinet
  • Fortinet
Published: September 26, 2025

CVE-2025-60027

None
    Fortinet
  • Fortinet
Published: September 26, 2025

CVE-2025-60028

None
    Fortinet
  • Fortinet
Published: September 26, 2025

CVE-2025-60029

None
    Fortinet
  • Fortigate
Published: September 26, 2025

CVE-2025-60030

None
    Fortinet
  • Fortinet
Published: September 26, 2025

CVE-2025-60031

None
    Fortinet
  • Fortinet
Published: September 26, 2025

CVE-2025-60032

None
    Fortinet
  • Fortinet
Published: September 26, 2025

CVE-2025-60033

None
    Fortinet
  • Fortinet
Published: September 26, 2025

CVE-2025-50879

None
    *
  • *
Published: September 26, 2025
Click here to see more Vulnerabilities