Tag: 2025-09-30

5 Attack Reports | 118 Vulnerabilities

Attack reports

Disallow: /security-research? Crypto Phishing Sites' Failed Attempt to Block Investigators

An analysis of robots.txt files revealed over 60 cryptocurrency phishing pages impersonating hardware wallet brands Trezor and Ledger. The actor behind these pages attempted to block phishing reporting sites by including their endpoints in the robots.txt file, demonstrating a misunderstanding of it…
phishing
cryptocurrency
github
2025-09-30
hardware wallets
cloudflare pages
robots.txt
Published: September 30, 2025
Downloadable IOCs: 2

Phantom Taurus: A New Chinese Nexus APT and the Discovery of the NET-STAR Malware Suite

Phantom Taurus, a newly identified Chinese state-sponsored threat actor, has been conducting espionage operations targeting government and telecommunications organizations across Africa, the Middle East, and Asia. The group's primary focus includes ministries of foreign affairs, embassies, and mili…
espionage
plugx
government
africa
gh0st rat
telecommunications
china chopper
middle east
chinese apt
asia
iis backdoor
2025-09-30
ntospy
specter
iiservercore
assemblyexecuter
net-star
database targeting
Published: September 30, 2025
Downloadable IOCs: 4

FlipSwitch: a Novel Syscall Hooking Technique

FlipSwitch introduces a new syscall hooking technique for Linux kernel 6.9+, bypassing traditional methods rendered obsolete by changes in the syscall dispatch mechanism. The technique locates the original syscall function, scans the x64_sys_call function's machine code for a specific call instruct…
rootkit
yara
syscall hooking
2025-09-30
linux kernel
kernel security
flipswitch
x86-64
Published: September 30, 2025
Downloadable IOCs: 1

Datzbro: RAT Hiding Behind Senior Travel Scams

A new Android Trojan named Datzbro has been discovered targeting seniors through fake Facebook groups promoting travel and social activities. The malware, which combines spyware and banking Trojan capabilities, is distributed via malicious APKs disguised as community apps. Datzbro features remote a…
social engineering
spyware
remote access
zombinder
banking malware
android trojan
2025-09-30
facebook groups
datzbro
senior scams
Published: September 30, 2025
Downloadable IOCs: 0

Threat Profile: Conti Ransomware Group

Conti, a notorious ransomware operation identified in 2019, quickly gained infamy for its advanced encryption, rapid lateral movement, and double extortion tactics. Operated by the Russia-based Wizard Spider group, Conti evolved from Ryuk ransomware and maintained suspected ties to Russian state in…
ransomware
cobalt strike
government
healthcare
conti
ryuk
double extortion
critical infrastructure
education
trickbot
2025-09-30
wizard spider
russia-based
Published: September 30, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-7063

10.0
    Pad
  • Cms
Published: September 30, 2025

CVE-2025-7065

10.0
    Pad Cms
  • Pad Cms
Published: September 30, 2025

CVE-2025-8120

10.0
    Pad Cms
  • Pad Cms
Published: September 30, 2025

CVE-2025-34217

10.0
    Vasion
  • Vasion Print
Published: September 30, 2025

CVE-2025-10725

9.9
    Red Hat
  • Openshift Ai Service
Published: September 30, 2025

CVE-2025-11148

9.8
    Check-Branches
  • Check-Branches
Published: September 30, 2025

CVE-2025-8625

9.8
    Copypress
  • Copypress Rest Api
Published: September 30, 2025

CVE-2025-9762

9.8
    Wordpress
  • Post By Email Plugin
Published: September 30, 2025

CVE-2025-59954

9.3
    Knowage
  • Knowage
Published: September 30, 2025

CVE-2025-61584

9.3
    Rethinkdns
  • Serverless-Dns
Published: September 30, 2025

CVE-2025-10659

9.3
    Telenium
  • Online Web Application
Published: September 30, 2025

CVE-2024-58040

9.1
    Perl
  • Crypt
Published: September 30, 2025

CVE-2025-7493

9.1
    Redhat
  • Freeipa
Published: September 30, 2025

CVE-2025-7052

8.8
    Wp-Latepoint
  • Latepoint
Published: September 30, 2025

CVE-2025-7779

8.8
    Acronis
  • True Image
  • True Image For Sandisk
  • True Image For Western Digital
Published: September 30, 2025

CVE-2025-59952

8.7
    Minio
  • Minio Java Sdk
Published: September 30, 2025

CVE-2025-59668

8.7
    Central Monitor
  • Cns-6201
Published: September 30, 2025

CVE-2025-8117

8.7
    Pad
  • Pad Cms
Published: September 30, 2025

CVE-2025-8121

8.7
    *
  • *
Published: September 30, 2025

CVE-2025-8122

8.7
    *
  • Article Positioning
Published: September 30, 2025

CVE-2025-23293

8.7
    Nvidia
  • Delegated Licensing Service
Published: September 30, 2025

CVE-2025-24525

8.7
    Keysight
  • Ixia Vision
Published: September 30, 2025

CVE-2025-11152

8.6
    Mozilla
  • Firefox
Published: September 30, 2025

CVE-2025-6033

8.5
    National Instruments
  • Ni Circuit Design Suite
Published: September 30, 2025

CVE-2025-6034

8.5
    Ni
  • Ni Circuit Design Suite
Published: September 30, 2025

CVE-2025-7038

8.2
    Latepoint
  • Latepoint
Published: September 30, 2025

CVE-2025-9991

8.1
    Wordpress
  • Tiny Bootstrap Elements Light
Published: September 30, 2025

CVE-2025-9993

8.1
    Bei Fen
  • Wordpress Backup Plugin
Published: September 30, 2025

CVE-2025-11149

7.5
    Nodesolutions
  • Node-Static
    Nubosoftware
Published: September 30, 2025

CVE-2025-8877

7.5
    Wordpress
  • Affiliatewp
Published: September 30, 2025

CVE-2025-11153

7.5
    Mozilla
  • Firefox
Published: September 30, 2025

CVE-2025-9230

7.5
    Openssl
  • Openssl
Published: September 30, 2025

CVE-2025-56301

7.5
    Chipsalliance
  • Rocket-Chip
Published: September 30, 2025

CVE-2024-55017

7.5
    Corezoid
  • Corezoid
Published: September 30, 2025

CVE-2025-11178

7.3
    Acronis
  • True Image
Published: September 30, 2025

CVE-2025-56132

7.3
    Liquidfiles
  • Filetransfer Server
Published: September 30, 2025

CVE-2025-41091

7.1
    Bold
  • Bold Workplanner
Published: September 30, 2025

CVE-2025-41092

7.1
    Bold
  • Workplanner
Published: September 30, 2025

CVE-2025-41093

7.1
    Bold
  • Workplanner
Published: September 30, 2025

CVE-2025-41094

7.1
    Bold
  • Workplanner
Published: September 30, 2025

CVE-2025-41095

7.1
    Bold
  • Workplanner
Published: September 30, 2025

CVE-2025-41096

7.1
    Bold
  • Workplanner
Published: September 30, 2025

CVE-2025-41097

7.1
    Bold
  • Workplanner
Published: September 30, 2025

CVE-2025-41098

7.1
    Bold
  • Workplanner
Published: September 30, 2025

CVE-2025-41099

7.1
    Bold
  • Workplanner
Published: September 30, 2025

CVE-2025-10991

7.0
    Tapo
  • D230s1
Published: September 30, 2025

CVE-2025-61586

6.9
    Freshrss
  • Freshrss
Published: September 30, 2025

CVE-2025-8118

6.9
    Pad
  • Pad Cms
Published: September 30, 2025

CVE-2025-59950

6.7
    Freshrss
  • Freshrss
Published: September 30, 2025

CVE-2025-59956

6.5
    Agentapi
  • Agentapi
Published: September 30, 2025

CVE-2025-8559

6.5
    Wordpress
  • All In One Music Player
Published: September 30, 2025

CVE-2025-52043

6.5
    Frappe
  • Erpnext
Published: September 30, 2025

CVE-2025-52047

6.5
    Frappe
  • Erpnext
Published: September 30, 2025

CVE-2025-52049

6.5
    Frappe
  • Erpnext
Published: September 30, 2025

CVE-2025-52050

6.5
    Frappe
  • Erpnext
Published: September 30, 2025

CVE-2025-9231

6.5
    Openssl
  • Openssl
  • Sm2 Algorithm
Published: September 30, 2025

CVE-2025-55797

6.5
    Formcms
  • Formcms
Published: September 30, 2025

CVE-2025-56207

6.5
    Money Making Opportunity
  • Money Making Opportunity
Published: September 30, 2025

CVE-2025-57254

6.5
    Karthikg1908
  • Hospital Management System
Published: September 30, 2025

CVE-2025-55191

6.5
    Argo
  • Argo Cd
Published: September 30, 2025

CVE-2025-10000

6.4
    Wordpress
  • Qyrr
Published: September 30, 2025

CVE-2025-10128

6.4
    Wordpress
  • Eulerpool Research Systems Plugin
Published: September 30, 2025

CVE-2025-10130

6.4
    Wordpress
  • Layers
Published: September 30, 2025

CVE-2025-10131

6.4
    Wordpress
  • All Social Share Options
Published: September 30, 2025

CVE-2025-10168

6.4
    Wordpress
  • Any News Ticker
Published: September 30, 2025

CVE-2025-10179

6.4
    Wordpress
  • My Askai Plugin
Published: September 30, 2025

CVE-2025-10182

6.4
    Wordpress
  • Dbview
Published: September 30, 2025

CVE-2025-10189

6.4
    Wordpress
  • Bp Direct Menus
Published: September 30, 2025

CVE-2025-10191

6.4
    Woocommerce
  • Big Post Shipping
Published: September 30, 2025

CVE-2025-10196

6.4
    Wordpress
  • Survey Anyplace
Published: September 30, 2025

CVE-2025-6941

6.4
    Latepoint
  • Calendar Booking Plugin
Published: September 30, 2025

CVE-2025-8214

6.4
    Elementor
  • Pack Elementor
Published: September 30, 2025

CVE-2025-8560

6.4
    Wordpress
  • Fancytabs
Published: September 30, 2025

CVE-2025-8566

6.4
    Wordpress
  • Gutenbee
Published: September 30, 2025

CVE-2025-8608

6.4
    Mihdan
  • Elementor Yandex Maps
Published: September 30, 2025

CVE-2025-8623

6.4
    Wordpress
  • Weedmaps Menu
Published: September 30, 2025

CVE-2025-8624

6.4
    Wordpress
  • Nexablocks
Published: September 30, 2025

CVE-2025-8777

6.4
    Wordpress
  • Planetcalc
Published: September 30, 2025

CVE-2025-9852

6.4
    Wordpress
  • Plugin
Published: September 30, 2025

CVE-2025-61792

6.4
    Quadient
  • Ds-700 Iq
Published: September 30, 2025

CVE-2025-9946

6.1
    Lockerpress
  • Lockerpress
Published: September 30, 2025

CVE-2025-56018

6.1
    Sourcecodester
  • Pharmacy Product Management System
Published: September 30, 2025

CVE-2025-56200

6.1
    Validator.Js
  • Validator.Js
Published: September 30, 2025

CVE-2025-10217

6.0
    Hitachi
  • Asset Suite
Published: September 30, 2025

CVE-2025-9232

5.9
    Openssl
  • Openssl
Published: September 30, 2025

CVE-2025-6815

5.5
    Wordpress
  • Latepoint Calendar Booking Plugin
Published: September 30, 2025

CVE-2025-56676

5.4
    Titansystems
  • Zender
Published: September 30, 2025

CVE-2025-36132

5.4
    Ibm
  • Planning Analytics Local
Published: September 30, 2025

CVE-2025-54477

5.3
    Joomla
  • Joomla
Published: September 30, 2025

CVE-2025-56520

5.3
    Dify
  • Dify
Published: September 30, 2025

CVE-2025-43827

5.3
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: September 30, 2025

CVE-2025-57852

5.2
    Kserve
  • Modelmesh
Published: September 30, 2025

CVE-2025-8116

5.1
    Pad
  • Cms
Published: September 30, 2025

CVE-2025-8119

5.1
    Pad Cms
  • Pad Cms
Published: September 30, 2025

CVE-2025-36262

4.9
    Ibm
  • Planning Analytics
Published: September 30, 2025

CVE-2025-28016

4.8
    Phpgurukul
  • User Registration And Login
Published: September 30, 2025

CVE-2025-54476

4.8
    Joomla
  • Joomla
Published: September 30, 2025

CVE-2025-43826

4.8
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: September 30, 2025

CVE-2025-23292

4.6
    Nvidia
  • Delegated Licensing Service
Published: September 30, 2025

CVE-2025-11163

4.3
    Wordpress
  • Smartcrawl
Published: September 30, 2025

CVE-2025-9948

4.3
    Chatwee
  • Chatwee Plugin
Published: September 30, 2025

CVE-2025-10859

4.0
    Mozilla
  • Firefox Ios
Published: September 30, 2025

CVE-2025-56675

3.5
    Eken
  • Video Doorbell
Published: September 30, 2025

CVE-2025-11195

3.3
    Rapid7
  • Appspider Pro
Published: September 30, 2025

CVE-2025-23291

2.4
    Nvidia
  • Delegated Licensing Service
Published: September 30, 2025

CVE-2025-61626

None
    Fortinet
  • Fortinet
Published: September 30, 2025

CVE-2025-61627

None
    Fortinet
  • Fortinet
Published: September 30, 2025

CVE-2025-61628

None
    Fortinet
  • Fortinet
Published: September 30, 2025

CVE-2025-61629

None
    Fortinet
  • Fortinet
Published: September 30, 2025

CVE-2025-61630

None
    Fortinet
  • Fortinet
Published: September 30, 2025

CVE-2025-61631

None
    Fortinet
  • *
Published: September 30, 2025

CVE-2025-61632

None
    Fortinet
  • Fortigate
Published: September 30, 2025

CVE-2025-61633

None
    Fortinet
  • Fortigate
  • Forticlient
Published: September 30, 2025

CVE-2025-56571

None
    Finance.Js
  • Finance.Js
Published: September 30, 2025

CVE-2025-56572

None
    *
  • Finance.Js
Published: September 30, 2025

CVE-2025-56513

None
    Nicehash
  • Quickminer
Published: September 30, 2025

CVE-2025-56392

None
    Syaqui
  • Syaqui Collegetivity
Published: September 30, 2025

CVE-2022-40285

None
    *
  • *
Published: September 30, 2025
Click here to see more Vulnerabilities