Tag: 2025-10-06

7 Attack Reports | 114 Vulnerabilities

Attack reports

XWorm V6: Exploring Pivotal Plugins

Since the release of XWorm V6.0 on June 4, 2025, we have noted a surge in samples identified as XWorm V6.0 on VirusTotal, reflecting its rapid adoption by threat actors. One prominent campaign illustrates its delivery: a malicious JavaScript (JS) file initiates a PowerShell (PS1) script, which depl…
xworm
rat
phishing
powershell
javascript
remote desktop
amsi bypass
2025-10-06
file manager
Published: October 6, 2025
Downloadable IOCs: 22

Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users | Trend Micro (US)

SORVEPOTEL has been observed to spread across Windows systems through convincing phishing messages with malicious ZIP file attachments. Interestingly, the phishing message that contains the malicious file attachment requires users to open it on a desktop, suggesting that threat actors might be more…
malware
loader
phishing
whatsapp
powershell
persistence
brazil
c server
lnk file
telegram
format
2025-10-06
whatsapp web
water saci
bradesco
brazilian
turn
watsonclient
sorvepotel
Published: October 6, 2025
Downloadable IOCs: 23

Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users

SORVEPOTEL has been observed to spread across Windows systems through convincing phishing messages with malicious ZIP file attachments. Interestingly, the phishing message that contains the malicious file attachment requires users to open it on a desktop, suggesting that threat actors might be more…
malware
loader
phishing
whatsapp
powershell
persistence
brazil
c server
lnk file
telegram
format
2025-10-06
whatsapp web
water saci
bradesco
brazilian
turn
watsonclient
sorvepotel
Published: October 6, 2025
Downloadable IOCs: 0

SecuritySnack: 18+E-Crime

A financially motivated cybercrime operation has been identified, targeting users with over 80 spoofed domain names and lure websites. The campaign, which began in September 2024, focuses on government tax sites, consumer banking, age 18+ social media content, and Windows assistant applications. Th…
social engineering
credential theft
spoofed domains
android malware
trojans
lure websites
2025-10-06
windows malware
Published: October 6, 2025
Downloadable IOCs: 140

Operation SouthNet: SideWinder Expands Phishing and Malware Operations in South Asia

APT SideWinder has launched a new targeted operation dubbed Operation SouthNet, focusing on the maritime sector in South Asia, particularly Pakistan and Sri Lanka. The group leverages free hosting platforms to deploy credential-harvesting portals and weaponized lure documents, while staging malware…
apt
phishing
government
credential harvesting
south asia
military
2025-10-06
Published: October 6, 2025
Downloadable IOCs: 0

WARMCOOKIE One Year Later: New Features and Fresh Insights

The WARMCOOKIE backdoor continues to evolve, with ongoing updates and new infections observed. Recent developments include new handlers for executing various file types, a string bank for defense evasion, and code optimizations. A campaign ID field has been added, providing context for operators. I…
backdoor
malware-as-a-service
warmcookie
castlebot
2025-10-06
Published: October 6, 2025
Downloadable IOCs: 0

Oracle Security Alert Advisory - CVE-2025-61882

A critical security vulnerability (CVE-2025-61882) has been identified in Oracle E-Business Suite versions 12.2.3-12.2.14. This flaw is remotely exploitable without authentication, potentially leading to remote code execution. The vulnerability affects the BI Publisher Integration component of Orac…
remote code execution
CVE-2025-61882
2025-10-06
security alert
oracle e-business suite
Published: October 6, 2025
Linked vulnerabilities : CVE-2025-61882 (CVSS 9.8)
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-10363

10.0
    Topal Solutions Ag
  • Topal Finanzbuchhaltung
Published: October 6, 2025

CVE-2025-60957

9.9
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2023-49886

9.8
    Ibm
  • Standards Processing Engine
Published: October 6, 2025

CVE-2025-57515

9.8
    Uniclare
  • Uniclare Student Portal
Published: October 6, 2025

CVE-2025-59159

9.6
    Sillytavern
  • Sillytavern
Published: October 6, 2025

CVE-2025-61777

9.4
    Flag Forge
  • Flag Forge
Published: October 6, 2025

CVE-2025-52472

9.3
    Xwiki
  • Xwiki Platform
Published: October 6, 2025

CVE-2025-36356

9.3
    Ibm
  • Security Verify Access
  • Security Verify Access Docker
Published: October 6, 2025

CVE-2025-61778

9.3
    Akka
  • Akka.Remote
Published: October 6, 2025

CVE-2025-61774

9.3
    Pyvista
  • Pyvista
Published: October 6, 2025

CVE-2025-49594

9.2
    Xwiki
  • Oidc
Published: October 6, 2025

CVE-2025-57247

9.1
    Batbtoken
  • Batbtoken
    Erc20
Published: October 6, 2025

CVE-2025-60964

9.1
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-60965

9.1
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-61197

8.9
    Orban
  • Optimod 5950
  • Optimod 5950hd
  • Optimod 5750
  • Optimod 5750hd
  • Optimod Trio
Published: October 6, 2025

CVE-2025-59728

8.7
    *
  • Mpeg Dash
Published: October 6, 2025

CVE-2025-59732

8.7
    Openexr
  • Openexr
Published: October 6, 2025

CVE-2025-59733

8.7
    Openexr
  • Openexr
Published: October 6, 2025

CVE-2025-59734

8.7
    *
  • *
  • Sanm
Published: October 6, 2025

CVE-2025-36355

8.5
    Ibm
  • Security Verify Access
  • Security Verify Access Docker
Published: October 6, 2025

CVE-2025-57781

8.4
    Denso
  • Ten Drive Recorder Viewer
Published: October 6, 2025

CVE-2025-61687

8.3
    Flowiseai
  • Flowise
Published: October 6, 2025

CVE-2025-29192

8.2
    Flowiseai
  • Flowise
Published: October 6, 2025

CVE-2025-50538

8.2
    Flowiseai
  • Flowise
Published: October 6, 2025

CVE-2025-60959

8.2
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-60960

8.2
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-60962

8.2
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-60963

8.2
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-60956

8.0
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-59152

7.5
    Litestar
  • Litestar
Published: October 6, 2025

CVE-2025-6985

7.5
    Langchain
  • Langchain-Text-Splitters
    Lxml
Published: October 6, 2025

CVE-2025-11323

7.4
    Utt
  • 1250gw
Published: October 6, 2025

CVE-2025-11324

7.4
    Tenda
  • Ac18 Firmware
  • Ac18
Published: October 6, 2025

CVE-2025-11325

7.4
    Tenda
  • Ac18 Firmware
  • Ac18
Published: October 6, 2025

CVE-2025-11326

7.4
    Tenda
  • Ac18 Firmware
  • Ac18
Published: October 6, 2025

CVE-2025-11327

7.4
    Tenda
  • Ac18 Firmware
  • Ac18
Published: October 6, 2025

CVE-2025-11328

7.4
    Tenda
  • Ac18 Firmware
  • Ac18
Published: October 6, 2025

CVE-2025-11338

7.4
    D-Link
  • Di-7100g
Published: October 6, 2025

CVE-2025-11339

7.4
    D-Link
  • Di-7100g
Published: October 6, 2025

CVE-2025-36354

7.3
    Ibm
  • Ibm Security Verify Access
  • Ibm Security Verify Access Docker
Published: October 6, 2025

CVE-2025-60958

7.3
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-60967

7.3
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-11310

6.9
    Tipray
  • Data Leakage Prevention System
Published: October 6, 2025

CVE-2025-11311

6.9
    Tipray
  • Data Leakage Prevention System
Published: October 6, 2025

CVE-2025-11312

6.9
    Tipray
  • Data Leakage Prevention System
Published: October 6, 2025

CVE-2025-11313

6.9
    Tipray
  • Data Leakage Prevention System
Published: October 6, 2025

CVE-2025-11314

6.9
    Tipray
  • Xiamen Tianrui Kongjian Gufen Youxiangongsi
Published: October 6, 2025

CVE-2025-11315

6.9
    Tipray
  • Data Leakage Prevention System
Published: October 6, 2025

CVE-2025-11316

6.9
    Tipray
  • Data Leakage Prevention System
Published: October 6, 2025

CVE-2025-11317

6.9
    Tipray
  • Data Leakage Prevention System
Published: October 6, 2025

CVE-2025-11318

6.9
    Tipray
  • Data Leakage Prevention System
Published: October 6, 2025

CVE-2025-59731

6.9
    Openexr
  • Openexr
Published: October 6, 2025

CVE-2025-11329

6.9
    Fabian
  • Online Course Registration Site
Published: October 6, 2025

CVE-2025-11334

6.9
    Campcodes
  • Online Apartment Visitor Management System
Published: October 6, 2025

CVE-2025-11341

6.9
    Jinher
  • Oa
Published: October 6, 2025

CVE-2025-11343

6.9
    Code-Projects
  • Student Crud Operation
Published: October 6, 2025

CVE-2025-0038

6.6
    Amd
  • Zynq Ultrascale+
Published: October 6, 2025

CVE-2025-58580

6.5
    Sick
  • Sick Device
Published: October 6, 2025

CVE-2025-58587

6.5
    Sick
  • Application
Published: October 6, 2025

CVE-2025-58590

6.5
    *
  • *
Published: October 6, 2025

CVE-2025-58591

6.5
    Application
  • *
Published: October 6, 2025

CVE-2025-61224

6.5
    Dokuwiki
  • Dokuwiki
Published: October 6, 2025

CVE-2025-61766

6.5
    Mediawiki
  • Bucket
Published: October 6, 2025

CVE-2025-61765

6.4
    Python-Socketio
  • Python-Socketio
Published: October 6, 2025

CVE-2025-11322

6.3
    Mangati
  • Novosga
Published: October 6, 2025

CVE-2025-9710

6.3
    Responsive Lightbox And Gallery
  • Responsive Lightbox And Gallery
Published: October 6, 2025

CVE-2025-60961

6.1
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-56382

6.1
    Lioncoders
  • Salepro Pos
Published: October 6, 2025

CVE-2025-0606

6.0
    Logo Software Inc
  • Logo Cloud
Published: October 6, 2025

CVE-2025-59452

5.8
    Yosmart
  • Yolink
Published: October 6, 2025

CVE-2025-59729

5.7
    *
  • Dhav Reader
Published: October 6, 2025

CVE-2025-59730

5.7
    Anim
  • Anim
Published: October 6, 2025

CVE-2025-60969

5.7
    Endrun Technologies
  • Sonoma D12 Network Time Server
Published: October 6, 2025

CVE-2025-0608

5.5
    Logo Software Inc
  • Logo Cloud
Published: October 6, 2025

CVE-2025-11336

5.5
    Four-Faith
  • Water Conservancy Informatization Platform
Published: October 6, 2025

CVE-2025-11337

5.5
    Four-Faith
  • Water Conservancy Informatization Platform
Published: October 6, 2025

CVE-2025-61198

5.4
    Optimod
  • Optimod 5950
  • Optimod 5950hd
  • Optimod 5750
  • Optimod 5750hd
  • Optimod Trio
Published: October 6, 2025

CVE-2025-28129

5.4
    Phpgurukul
  • Hostel Management System
Published: October 6, 2025

CVE-2025-11319

5.3
    Nahiduddinahammed
  • Hospital-Management-System-Website
Published: October 6, 2025

CVE-2025-11320

5.3
    Zhuimengshaonian
  • Wisdom-Education
Published: October 6, 2025

CVE-2025-11321

5.3
    Zhuimengshaonian
  • Wisdom-Education
Published: October 6, 2025

CVE-2025-58579

5.3
    Sick
  • *
Published: October 6, 2025

CVE-2025-58582

5.3
    Sick
  • Unknown Product
Published: October 6, 2025

CVE-2025-58583

5.3
    H2 Database
  • H2
Published: October 6, 2025

CVE-2025-58584

5.3
    Sick
  • Sick Product
Published: October 6, 2025

CVE-2025-58585

5.3
    Sick
  • Application
Published: October 6, 2025

CVE-2025-58586

5.3
    Application
  • Login Error Handling
Published: October 6, 2025

CVE-2025-11330

5.3
    Phpgurukul
  • Beauty Parlour Management System
Published: October 6, 2025

CVE-2025-11344

5.3
    Ilias
  • Ilias
Published: October 6, 2025

CVE-2025-11346

5.3
    Ilias
  • Ilias
Published: October 6, 2025

CVE-2025-11331

5.1
    Ideacms
  • Ideacms
Published: October 6, 2025

CVE-2025-11332

5.1
    Cmseasy
  • Cmseasy
Published: October 6, 2025

CVE-2025-11335

5.1
    D-Link
  • Di-7100g
Published: October 6, 2025

CVE-2025-11342

5.1
    Code-Projects
  • Online Course Registration
Published: October 6, 2025

CVE-2025-11345

5.1
    Ilias
  • Ilias
Published: October 6, 2025

CVE-2025-61768

5.1
    Kuno
  • Kuno Cms
Published: October 6, 2025

CVE-2025-59449

4.9
    Yosmart
  • Yolink
Published: October 6, 2025

CVE-2025-11333

4.8
    Langleyfcu
  • Online Banking System
Published: October 6, 2025

CVE-2025-43824

4.8
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: October 6, 2025

CVE-2025-0609

4.7
    Logo Software Inc
  • Logo Cloud
Published: October 6, 2025

CVE-2025-59448

4.7
    Yosmart
  • Yolink Hub
  • Yolink Mobile Application
  • Yolink Mqtt Broker
Published: October 6, 2025

CVE-2025-9913

4.5
    Sick
  • Application
Published: October 6, 2025

CVE-2025-9703

4.3
    Wordpress
  • Ultimate Addons For Elementor
Published: October 6, 2025

CVE-2025-58581

4.3
    *
  • *
Published: October 6, 2025

CVE-2025-9914

4.3
    *
  • Application
Published: October 6, 2025

CVE-2025-0607

4.3
    Logo Software Inc
  • Logo Cloud
Published: October 6, 2025

CVE-2025-59450

4.3
    Yosmart
  • Yolink Smart Hub
Published: October 6, 2025

CVE-2025-58578

3.8
    Vendor
  • *
Published: October 6, 2025

CVE-2025-61984

3.6
    Openssh
  • Openssh
Published: October 6, 2025

CVE-2025-61985

3.6
    Openssh
  • Openssh
Published: October 6, 2025

CVE-2025-59451

3.5
    Yosmart
  • Yolink
Published: October 6, 2025

CVE-2025-58589

2.7
    Application
  • *
Published: October 6, 2025

CVE-2025-59447

2.2
    Yosmart
  • Yolink Smart Hub
Published: October 6, 2025

CVE-2025-61769

2.1
    Emlog
  • Emlog
Published: October 6, 2025
Click here to see more Vulnerabilities