Tag: 2025-09-27

3 Attack Reports | 52 Vulnerabilities

Attack reports

Threat Hunting on potential APT35 Servers

The article discusses the discovery of two servers sharing similarities with those reported by Check Point on APT35, an Iranian threat group. The servers are active and resolve multiple domains used for phishing purposes. The analysis focuses on the HTML page displayed on some domains, which contai…
phishing
typosquatting
threat hunting
infrastructure tracking
2025-09-27
iranian apt
video conferencing
Published: September 27, 2025
Downloadable IOCs: 0

Gamaredon X Turla collaboration

ESET Research has uncovered collaboration between notorious APT groups Gamaredon and Turla, both associated with Russia's FSB, targeting high-profile victims in Ukraine. The research reveals Gamaredon tools being used to restart and deploy Turla's Kazuar backdoor on compromised machines. This marks…
backdoor
apt
russia
ukraine
cyberespionage
fsb
2025-09-19
kazuar
pterographin
pterolnk
pteroeffigy
collaboration
pteroodd
pteropaste
pterostew
2025-09-27
Published: September 27, 2025
Downloadable IOCs: 0

Update on Ongoing Akira Ransomware Campaign

The Akira ransomware campaign targeting SonicWall SSL VPN accounts has intensified since July 2025, with new infrastructure observed as recently as September 20. Threat actors are exploiting previously exfiltrated credentials, including those with OTP MFA, likely related to CVE-2024-40766. The atta…
ransomware
credential theft
akira
CVE-2024-40766
CVE-2023-20269
CVE-2020-3259
sonicwall
ssl vpn
2025-09-27
infrastructure rotation
Published: September 27, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-59936

9.4
    Get-Jwks
  • Get-Jwks
Published: September 27, 2025

CVE-2025-59939

8.8
    *
  • Wegia
Published: September 27, 2025

CVE-2025-59932

8.6
    Flagforge
  • Flag Forge
Published: September 27, 2025

CVE-2025-59945

8.1
    Sysreptor
  • Sysreptor
Published: September 27, 2025

CVE-2025-8014

7.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: September 27, 2025

CVE-2025-7647

7.3
    Llama-Index
  • Llama-Index-Core
Published: September 27, 2025

CVE-2025-9816

7.2
    Wordpress
  • W Statistics
Published: September 27, 2025

CVE-2025-11052

6.9
    Kidaze
  • Courseselectionsystem
Published: September 27, 2025

CVE-2025-11053

6.9
    Phpgurukul
  • Small Crm
Published: September 27, 2025

CVE-2025-11055

6.9
    Sourcecodester
  • Online Hotel Reservation System
Published: September 27, 2025

CVE-2025-11057

6.9
    Sourcecodester
  • Pet Grooming Management Software
Published: September 27, 2025

CVE-2025-11061

6.9
    Campcodes
  • Online Learning Management System
Published: September 27, 2025

CVE-2025-11062

6.9
    Campcodes
  • Online Learning Management System
Published: September 27, 2025

CVE-2025-11063

6.9
    Campcodes
  • Online Learning Management System
Published: September 27, 2025

CVE-2025-11064

6.9
    Campcodes
  • Online Learning Management System
Published: September 27, 2025

CVE-2025-11066

6.9
    Code-Projects
  • Online Bidding System
Published: September 27, 2025

CVE-2025-11070

6.9
    Projectworlds
  • Online Shopping System
Published: September 27, 2025

CVE-2025-11074

6.9
    Code-Projects
  • Project Monitoring System
Published: September 27, 2025

CVE-2025-11075

6.9
    Campcodes
  • Online Learning Management System
Published: September 27, 2025

CVE-2025-11076

6.9
    Campcodes
  • Online Learning Management System
Published: September 27, 2025

CVE-2025-11077

6.9
    Campcodes
  • Online Learning Management System
Published: September 27, 2025

CVE-2025-59938

6.5
    Wazuh
  • Wazuh
Published: September 27, 2025

CVE-2024-43192

6.5
    Ibm
  • Storage Ts4500 Library
Published: September 27, 2025

CVE-2025-8440

6.4
    Wordpress
  • Team Members Plugin
  • Wordpress
Published: September 27, 2025

CVE-2025-36239

6.1
    Ibm
  • Ibm Storage Ts4500 Library
Published: September 27, 2025

CVE-2025-9899

6.1
    Wordpress
  • Trust Reviews Plugin
Published: September 27, 2025

CVE-2025-3193

5.9
    Algolia
  • Algoliasearch-Helper
Published: September 27, 2025

CVE-2025-10954

5.5
    Nyaruka
  • Phonenumbers
Published: September 27, 2025

CVE-2025-11079

5.5
    Campcodes
  • Farm Management System
Published: September 27, 2025

CVE-2025-11049

5.3
    Portabilis
  • I-Educar
Published: September 27, 2025

CVE-2025-11050

5.3
    Portabilis
  • I-Educar
Published: September 27, 2025

CVE-2025-11051

5.3
    Sourcecodester
  • Pet Grooming Management Software
Published: September 27, 2025

CVE-2025-11054

5.3
    Itsourcecode
  • Open Source Job Portal
Published: September 27, 2025

CVE-2025-11056

5.3
    Projectsandprograms
  • School Management System
Published: September 27, 2025

CVE-2025-11078

5.3
    Itsourcecode
  • Open Source Job Portal
Published: September 27, 2025

CVE-2025-11080

5.3
    Zhuimengshaonian
  • Wisdom-Education
Published: September 27, 2025

CVE-2025-11071

5.1
    Seacms
  • Seacms
Published: September 27, 2025

CVE-2025-11073

5.1
    Keyfactor
  • Rg-Ew5100be
Published: September 27, 2025

CVE-2025-11067

4.8
    Projectworlds
  • Visitor Management System
Published: September 27, 2025

CVE-2025-11068

4.8
    Westboy
  • Cicadascms
Published: September 27, 2025

CVE-2025-11069

4.8
    Westboy
  • Cicadascms
Published: September 27, 2025

CVE-2025-11081

4.8
    Gnu
  • Binutils
Published: September 27, 2025

CVE-2025-11082

4.8
    Gnu
  • Binutils
Published: September 27, 2025

CVE-2025-11083

4.8
    Gnu
  • Binutils
Published: September 27, 2025

CVE-2025-10498

4.3
    Ninja Forms
  • Ninja Forms
Published: September 27, 2025

CVE-2025-10499

4.3
    Ninja Forms
  • Ninja Forms
Published: September 27, 2025

CVE-2025-9893

4.3
    Wordpress
  • Vm Menu Reorder
Published: September 27, 2025

CVE-2025-9894

4.3
    Wordpress
  • Feedly Plugin
Published: September 27, 2025

CVE-2025-9896

4.3
    Wordpress
  • Hidepost
Published: September 27, 2025

CVE-2025-9898

4.3
    Wordpress
  • Cforms
Published: September 27, 2025

CVE-2025-9944

4.3
    Wordpress
  • Professional Contact Form
Published: September 27, 2025

CVE-2025-36144

3.3
    Ibm
  • Watsonx.Data
Published: September 27, 2025
Click here to see more Vulnerabilities