Tag: 2025-10-08

7 Attack Reports | 105 Vulnerabilities

Attack reports

The Evolution of Qilin RaaS

Qilin ransomware is used for domain-wide encryption, and a ransom is then demanded for the decryption keys and/or to prevent the publication of the stolen data. Qilin affiliates are recruited from cybercrime forums to use the Qilin RaaS platform, which handles payload generation, the publication of…
phishing
ransomware
bitcoin
qilin
ryuk
raas
tor
supply chain attack
nova
2025-10-08
onion
fin12
alphvblackcat
kela
agenda
wikileaks
Published: October 8, 2025
Downloadable IOCs: 5

APT Meets GPT: Targeted Operations with Untamed LLMs

Over the course of three months, Volexity observed UTA0388 using various themes and fictional identities across dozens of spear phishing campaigns. As time passed, Volexity observed UTA0388 broaden their targeting and send emails in a variety of different languages, including English, Chinese, Japa…
phishing
powershell
persistence
zip
websocket
rar
2025-10-08
uta0388
govershell
llms
randomdir8char
govershell c2
archive file
Published: October 8, 2025
Downloadable IOCs: 41

Shuyal Stealer: Advanced Infostealer Targeting 19 Browsers

Shuyal Stealer is a sophisticated infostealer malware targeting 19 different browsers. It conducts deep system reconnaissance, collecting detailed hardware information and user data. The malware disables Windows Task Manager, ensures persistence through startup folder insertion, and exfiltrates sto…
evasion
powershell
infostealer
persistence
data exfiltration
system reconnaissance
telegram bot
browser targeting
2025-10-08
shuyal stealer
Published: October 8, 2025
Downloadable IOCs: 1

Nezha Tool Used in New Cyber Campaign Targeting Web Applications

A sophisticated cyber campaign utilizing the open-source Nezha tool has been discovered targeting vulnerable web applications since August 2025. Attackers gained access through an exposed phpMyAdmin panel, employing creative log poisoning techniques to implant a PHP web shell. The intrusion involve…
antsword
ghost rat
2025-10-08
phpmyadmin
log poisoning
nezha
mariadb
china-linked
web applications
Published: October 8, 2025
Downloadable IOCs: 0

Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors | Google Cloud Blog

Google Threat Intelligence Group (GTIG) is tracking BRICKSTORM malware activity, which is being used to maintain persistent access to victim organizations in the United States. Since March 2025, Mandiant Consulting has responded to intrusions across a range of industry verticals, most notably legal…
linux
windows
zero-day
brickstorm
ssh
2025-10-08
unc5221
vpxd
backup scan
sentinel
silk typhoon
systemconfiguration
socks proxy
vcenter
Published: October 8, 2025
Downloadable IOCs: 12

Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors

Google Threat Intelligence Group (GTIG) is tracking BRICKSTORM malware activity, which is being used to maintain persistent access to victim organizations in the United States. Since March 2025, Mandiant Consulting has responded to intrusions across a range of industry verticals, most notably legal…
linux
windows
zero-day
brickstorm
ssh
2025-10-08
unc5221
vpxd
backup scan
sentinel
silk typhoon
systemconfiguration
socks proxy
vcenter
Published: October 8, 2025
Downloadable IOCs: 12

Oracle E-Business Suite CVE-2025-61882 - Malware Analysis

A critical vulnerability in Oracle E-Business Suite (CVE-2025-61882) is being actively exploited. The attack involves dropping malicious template files through a Python script, which are then activated by previewing. Two types of templates are used: one contacting a hardcoded IP address to execute …
backdoor
template injection
weblogic
CVE-2025-61882
oracle e-business suite
2025-10-08
java exploitation
arbitrary code execution
Published: October 8, 2025
Linked vulnerabilities : CVE-2025-61882 (CVSS 9.8)
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-61913

9.9
    Flowise
  • Flowise
Published: October 8, 2025

CVE-2025-10587

9.8
    Wordpress
  • Community Events
Published: October 8, 2025

CVE-2025-10351

9.3
    Melis Technology
  • Melis Cms
Published: October 8, 2025

CVE-2025-10352

9.3
    Melis Technology
  • Melis Platform
  • Melis Core
Published: October 8, 2025

CVE-2025-10353

9.3
    Melis Technology
  • Melis Platform
  • Melis Cms Slider
Published: October 8, 2025

CVE-2017-20201

9.3
    Piriform
  • Ccleaner
  • Ccleaner Cloud
Published: October 8, 2025

CVE-2017-20202

9.3
    Web Developer For Chrome
  • Web Developer
Published: October 8, 2025

CVE-2025-11418

8.9
    Tenda
  • Ch22 Firmware
  • Ch22
Published: October 8, 2025

CVE-2025-11423

8.9
    Tenda
  • Ch22
Published: October 8, 2025

CVE-2025-57457

8.8
    Curo
  • Uc300
Published: October 8, 2025

CVE-2025-60311

8.8
    Projectworlds
  • Gym Management System
Published: October 8, 2025

CVE-2025-11535

8.8
    Mongodb
  • Mongodb Connector For Bi
Published: October 8, 2025

CVE-2025-9868

8.7
    Sontatype
  • Nexus Repository
Published: October 8, 2025

CVE-2025-48981

8.6
    Cgm
  • Cgm Medico
Published: October 8, 2025

CVE-2025-61787

8.1
    Denoland
  • Deno
Published: October 8, 2025

CVE-2025-10494

8.1
    Motors
  • Motors Plugin
Published: October 8, 2025

CVE-2025-53967

8.0
    Framelink
  • Figma Mcp Server
Published: October 8, 2025

CVE-2025-10635

7.7
    Wordpress
  • Find Me On Wordpress Plugin
Published: October 8, 2025

CVE-2025-11444

7.4
    Totolink
  • N600r
Published: October 8, 2025

CVE-2025-11204

7.2
    Registrationmagic
  • Registrationmagic
Published: October 8, 2025

CVE-2025-61524

7.2
    Casdoor
  • Casdoor
Published: October 8, 2025

CVE-2025-11420

6.9
    Fabian
  • E-Commerce Website
Published: October 8, 2025

CVE-2025-11422

6.9
    Campcodes
  • Advanced Online Voting System
Published: October 8, 2025

CVE-2025-11424

6.9
    Fabian
  • Web-Based Inventory And Pos System
Published: October 8, 2025

CVE-2025-11430

6.9
    Janobe
  • Simple E-Commerce Bookstore
Published: October 8, 2025

CVE-2025-11432

6.9
    Itsourcecode
  • Leave Management System
Published: October 8, 2025

CVE-2025-11434

6.9
    Fabian
  • Student Transcript Processing System
Published: October 8, 2025

CVE-2025-11471

6.9
    Nikhil-Bhalerao
  • Hotel And Lodge Management System
Published: October 8, 2025

CVE-2025-11472

6.9
    Nikhil-Bhalerao
  • Hotel And Lodge Management System
Published: October 8, 2025

CVE-2025-11473

6.9
    Nikhil-Bhalerao
  • Hotel And Lodge Management System
Published: October 8, 2025

CVE-2025-11475

6.9
    Projectworlds
  • Advanced Library Management System
Published: October 8, 2025

CVE-2025-11476

6.9
    Janobe
  • Simple E-Commerce Bookstore
Published: October 8, 2025

CVE-2025-11477

6.9
    Janobe
  • Wedding Reservation Management System
Published: October 8, 2025

CVE-2025-11479

6.9
    Janobe
  • Wedding Reservation Management System
Published: October 8, 2025

CVE-2025-11480

6.9
    Janobe
  • Simple E-Commerce Bookstore
Published: October 8, 2025

CVE-2025-11488

6.9
    D-Link
  • Dir-852
Published: October 8, 2025

CVE-2025-11503

6.9
    Phpgurukul
  • Beauty Parlour Management System
Published: October 8, 2025

CVE-2025-11505

6.9
    Phpgurukul
  • Beauty Parlour Management System
Published: October 8, 2025

CVE-2025-11506

6.9
    Phpgurukul
  • Beauty Parlour Management System
Published: October 8, 2025

CVE-2025-11507

6.9
    Phpgurukul
  • Beauty Parlour Management System
Published: October 8, 2025

CVE-2025-10649

6.5
    Welcart
  • Welcart
Published: October 8, 2025

CVE-2025-60828

6.5
    Wukong
  • Wukongcrm
Published: October 8, 2025

CVE-2025-60830

6.5
    Redragon
  • Erp
Published: October 8, 2025

CVE-2025-60833

6.5
    Uzy-Ssm-Mall
  • Uzy-Ssm-Mall
Published: October 8, 2025

CVE-2025-60834

6.5
    Uzy-Ssm-Mall
  • Uzy-Ssm-Mall
    Fastjson
Published: October 8, 2025

CVE-2025-42706

6.5
    Crowdstrike
  • Falcon Sensor
Published: October 8, 2025

CVE-2025-59303

6.4
    Haproxy
  • Haproxy Kubernetes Ingress Controller
  • Haproxy Enterprise Kubernetes Ingress Controller
Published: October 8, 2025

CVE-2025-11441

6.3
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-11443

6.3
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-61183

6.1
    Webreinvent
  • Vaahcms
Published: October 8, 2025

CVE-2025-60313

6.1
    Rems
  • Link Status Checker
Published: October 8, 2025

CVE-2025-60318

6.1
    Mayurik
  • Pet Grooming Management Software
Published: October 8, 2025

CVE-2025-9970

5.7
    Abb
  • Mconfig
Published: October 8, 2025

CVE-2025-42701

5.6
    Crowdstrike
  • Falcon Sensor For Windows
Published: October 8, 2025

CVE-2025-60298

5.4
    Novel-Plus
  • Novel-Plus
Published: October 8, 2025

CVE-2025-60299

5.4
    Novel-Plus
  • Novel-Plus
Published: October 8, 2025

CVE-2025-60314

5.4
    Configuroweb
  • Sistema Web De Inventario
Published: October 8, 2025

CVE-2025-11417

5.3
    Campcodes
  • Advanced Online Voting System
Published: October 8, 2025

CVE-2025-11426

5.3
    Projectworlds
  • Advanced Library Management System
Published: October 8, 2025

CVE-2025-11431

5.3
    Fabian
  • Web-Based Inventory And Pos System
Published: October 8, 2025

CVE-2025-11171

5.3
    Wordpress
  • Chartify
Published: October 8, 2025

CVE-2025-11435

5.3
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-11436

5.3
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-11438

5.3
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-11439

5.3
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-11440

5.3
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-11442

5.3
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-11445

5.3
    Kilo Code
  • Kilo Code
Published: October 8, 2025

CVE-2025-11469

5.3
    Nikhil-Bhalerao
  • Hotel And Lodge Management System
Published: October 8, 2025

CVE-2025-11474

5.3
    Nikhil-Bhalerao
  • Hotel And Lodge Management System
Published: October 8, 2025

CVE-2025-11478

5.3
    Janobe
  • Farm Management System
Published: October 8, 2025

CVE-2025-61672

5.3
    Element
  • Matrix Synapse
Published: October 8, 2025

CVE-2025-11481

5.3
    Varunsardana004
  • Blood Bank And Donation Management System
Published: October 8, 2025

CVE-2025-11486

5.3
    Janobe
  • Farm Management System
Published: October 8, 2025

CVE-2025-11487

5.3
    Janobe
  • Farm Management System
Published: October 8, 2025

CVE-2025-11490

5.3
    Wonderwhy-Er
  • Desktopcommandermcp
Published: October 8, 2025

CVE-2025-11491

5.3
    Wonderwhy-Er
  • Desktopcommandermcp
Published: October 8, 2025

CVE-2025-11509

5.3
    Code-Projects
  • E-Commerce Website
Published: October 8, 2025

CVE-2025-11511

5.3
    Code-Projects
  • E-Commerce Website
Published: October 8, 2025

CVE-2025-11421

5.1
    Fabian
  • Voting System
Published: October 8, 2025

CVE-2025-11433

5.1
    Itsourcecode
  • Leave Management System
Published: October 8, 2025

CVE-2025-11470

5.1
    Nikhil-Bhalerao
  • Hotel And Lodge Management System
Published: October 8, 2025

CVE-2025-43830

5.1
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: October 8, 2025

CVE-2025-61788

5.1
    Apereo
  • Opencast
Published: October 8, 2025

CVE-2025-11508

5.1
    Code-Projects
  • Voting System
Published: October 8, 2025

CVE-2025-61996

4.8
    Opexus
  • Foiaxpress
Published: October 8, 2025

CVE-2025-61997

4.8
    Opexus
  • Foiaxpress
Published: October 8, 2025

CVE-2025-61998

4.8
    Opexus
  • Foiaxpress
Published: October 8, 2025

CVE-2025-61999

4.8
    Opexus
  • Foiaxpress
Published: October 8, 2025

CVE-2025-11425

4.8
    Projectworlds
  • Advanced Library Management System
Published: October 8, 2025

CVE-2025-11437

4.8
    Jhumanj
  • Opnform
Published: October 8, 2025

CVE-2025-43821

4.8
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: October 8, 2025

CVE-2025-43829

4.8
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: October 8, 2025

CVE-2025-43771

4.8
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: October 8, 2025

CVE-2025-11485

4.8
    Remyandrade
  • Student Grades Management System
Published: October 8, 2025

CVE-2025-11494

4.8
    Gnu
  • Binutils
Published: October 8, 2025

CVE-2025-11495

4.8
    Gnu
  • Binutils
Published: October 8, 2025

CVE-2025-48464

4.7
    *
  • Sync
Published: October 8, 2025

CVE-2025-43724

4.4
    Dell
  • Powerscale Onefs
Published: October 8, 2025

CVE-2025-36636

4.3
    Tenable
  • Security Center
Published: October 8, 2025

CVE-2025-61785

3.3
    Deno
  • Deno
Published: October 8, 2025

CVE-2025-61786

3.3
    Deno Land
  • Deno
Published: October 8, 2025

CVE-2025-61906

2.3
    Apereo
  • Opencast
Published: October 8, 2025

CVE-2025-11489

2.0
    Wonderwhy-Er
  • Desktopcommandermcp
Published: October 8, 2025

CVE-2025-5009

1.0
    Google
  • Gemini
Published: October 8, 2025
Click here to see more Vulnerabilities