Tag: 2025-10-09

6 Attack Reports | 171 Vulnerabilities

Attack reports

Oracle E-Business Suite Zero-Day Exploited in Widespread Extortion Campaign

A large-scale extortion campaign targeting Oracle E-Business Suite (EBS) customers began on September 29, 2025. The threat actor, claiming affiliation with the CL0P extortion brand, exploited a zero-day vulnerability (CVE-2025-61882) in EBS as early as August 9, 2025. The campaign involved sending …
CVE-2025-61882
oracle e-business suite
2025-10-09
goldvein.java
sagegift
sagewave
goldvein
Published: October 9, 2025
Downloadable IOCs: 0

AdaptixC2 Uncovered: Capabilities, Tactics & Hunting Strategies

AdaptixC2 is a lightweight, modular command-and-control framework designed for flexibility and customization. The analysis reveals its sophisticated capabilities, including multi-protocol communication, advanced evasion techniques, and a BOF execution system for extensibility. The discovery of 102 …
infrastructure analysis
adaptixc2
2025-10-09
Published: October 9, 2025
Downloadable IOCs: 0

Velociraptor leveraged in ransomware attacks

A ransomware attack involving the use of Velociraptor, an open-source digital forensics tool, has been linked to the threat actor Storm-2603. The attackers deployed Warlock, LockBit, and Babuk ransomware to encrypt virtual machines and servers. They exploited a vulnerability in an outdated version …
ransomware
windows
privilege-escalation
lockbit
data-exfiltration
babuk
vmware
warlock
2025-10-09
CVE-2025-6264
velociraptor
open-source-tools
Published: October 9, 2025
Linked vulnerabilities : CVE-2025-6264
Downloadable IOCs: 5

Attackers Actively Exploiting Critical Vulnerability in Service Finder Bookings Plugin

On June 8th, 2025, we received a submission through our Bug Bounty Program for an Authentication Bypass vulnerability in Service Finder Bookings, a WordPress plugin bundled with the Service Finder theme. This theme has been sold to approximately 6,000 customers. This vulnerability makes it possible…
exploit
vulnerability
wordpress
authentication bypass
2025-10-09
wordfence
service finder bookings
service finder
Published: October 9, 2025
Downloadable IOCs: 5

The Crown Prince, Nezha: A New Tool Favored by China-Nexus Threat Actors

A sophisticated cyber intrusion campaign utilizing log poisoning and a new tool called Nezha has been uncovered. The attackers exploited a vulnerable phpMyAdmin interface to deploy a web shell, followed by the installation of Nezha, an open-source server monitoring tool repurposed for malicious act…
china chopper
web shell
remote access trojan
antsword
ghost rat
log poisoning
nezha
2025-10-09
server monitoring
Published: October 9, 2025
Downloadable IOCs: 11

The Evolution of Chaos Ransomware: Faster, Smarter, and More Dangerous

Chaos ransomware has evolved with a new C++ variant in 2025, marking a significant shift from its .NET origins. This new version combines destructive encryption, clipboard hijacking for cryptocurrency theft, and speed-focused attack strategies. It employs a sophisticated downloader masquerading as …
ransomware
cryptocurrency theft
lucky_gh0$t
2025-10-09
blacksnake
Published: October 9, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-11539

9.9
    Grafana
  • Grafana-Image-Renderer
Published: October 9, 2025

CVE-2025-10586

9.8
    Wordpress
  • Community Events
Published: October 9, 2025

CVE-2025-7526

9.8
    Wordpress
  • Wp Travel Engine
Published: October 9, 2025

CVE-2025-7634

9.8
    Wp Travel Engine
  • Tour Booking Plugin
Published: October 9, 2025

CVE-2025-11522

9.8
    Wordpress
  • Search And Go Directory
Published: October 9, 2025

CVE-2025-59246

9.8
    Microsoft
  • Azure Entra Id
Published: October 9, 2025

CVE-2025-10283

9.6
    Bbot
  • Gitdumper
Published: October 9, 2025

CVE-2025-10284

9.6
    Bbot
  • Unarchive Module
Published: October 9, 2025

CVE-2025-59218

9.6
    Microsoft
  • Azure Entra Id
Published: October 9, 2025

CVE-2025-59978

9.4
    Juniper
  • Junos Space
Published: October 9, 2025

CVE-2025-60316

9.4
    Sourcecodester
  • Pet Grooming Management Software
Published: October 9, 2025

CVE-2025-59974

9.3
    Juniper
  • Junos Space Security Director
Published: October 9, 2025

CVE-2017-20203

9.3
    Netsarang
  • Xmanager Enterprise
  • Xmanager
  • Xshell
  • Xftp
  • Xlpd
Published: October 9, 2025

CVE-2025-35050

9.3
    Newforma
  • Info Exchange
  • Project Center Server
Published: October 9, 2025

CVE-2025-61928

9.3
    Better Auth
  • Library
Published: October 9, 2025

CVE-2025-27059

8.8
    Qualcomm
  • Scm
Published: October 9, 2025

CVE-2025-27060

8.8
    Qualcomm
  • Product
Published: October 9, 2025

CVE-2025-6038

8.8
    Lisfinity
  • Lisfinity Core
Published: October 9, 2025

CVE-2025-10240

8.8
    Progress
  • Flowmon
Published: October 9, 2025

CVE-2025-11561

8.8
    Redhat
  • Sssd
Published: October 9, 2025

CVE-2025-32919

8.8
    Checkmk
  • Checkmk Windows Agent
Published: October 9, 2025

CVE-2025-59247

8.8
    Microsoft
  • Playfab
Published: October 9, 2025

CVE-2025-59964

8.7
    Juniper
  • Junos
Published: October 9, 2025

CVE-2025-59975

8.7
    Juniper
  • Juniper Junos Space
Published: October 9, 2025

CVE-2025-60004

8.7
    Juniper
  • Junos Os
  • Junos Os Evolved
Published: October 9, 2025

CVE-2025-11573

8.7
    Amazon
  • Iondotnet
Published: October 9, 2025

CVE-2016-15047

8.7
    Avtech
  • Avtech Devices
Published: October 9, 2025

CVE-2025-35055

8.7
    Newforma
  • Newforma Info Exchange
Published: October 9, 2025

CVE-2025-55321

8.7
    Microsoft
  • Azure Monitor
Published: October 9, 2025

CVE-2025-59271

8.7
    Redis
  • Enterprise
Published: October 9, 2025

CVE-2025-61779

8.7
    Confidential Containers
  • Trustee
Published: October 9, 2025

CVE-2025-11198

8.5
    Juniper
  • Security Director Policy Enforcer
Published: October 9, 2025

CVE-2025-59146

8.5
    New-Api
  • Large Language Model Gateway
  • Ai Asset Management System
Published: October 9, 2025

CVE-2025-52960

8.2
    Juniper
  • Juniper Junos Os
Published: October 9, 2025

CVE-2025-35058

8.2
    Newforma
  • Info Exchange
Published: October 9, 2025

CVE-2025-35061

8.2
    Newforma
  • Newforma Info Exchange
Published: October 9, 2025

CVE-2025-61773

8.1
    Pyload
  • Pyload
Published: October 9, 2025

CVE-2025-27048

7.8
    Qualcomm
  • Camera Platform Driver
Published: October 9, 2025

CVE-2025-27053

7.8
    Qualcomm
  • Playready
Published: October 9, 2025

CVE-2025-27054

7.8
    Qualcomm
  • *
Published: October 9, 2025

CVE-2025-47338

7.8
    Qualcomm
  • Unknown Product
Published: October 9, 2025

CVE-2025-47340

7.8
    Qualcomm
  • *
Published: October 9, 2025

CVE-2025-47341

7.8
    Qualcomm
  • Image Processing
Published: October 9, 2025

CVE-2025-47347

7.8
    Qualcomm
  • Virtual Memory Management
Published: October 9, 2025

CVE-2025-47349

7.8
    Qualcomm
  • Unknown
Published: October 9, 2025

CVE-2025-47351

7.8
    Qualcomm
  • Software
Published: October 9, 2025

CVE-2025-47354

7.8
    Qualcomm
  • Dsp Service
Published: October 9, 2025

CVE-2025-47355

7.8
    Qualcomm
  • Remote Procedure Ioctl
Published: October 9, 2025

CVE-2025-11340

7.7
    Gitlab
  • Gitlab Ee
Published: October 9, 2025

CVE-2025-59968

7.7
    Juniper
  • Junosc Space Security Director
Published: October 9, 2025

CVE-2025-35051

7.7
    Newforma
  • Project Center Server
Published: October 9, 2025

CVE-2025-10862

7.5
    Wordpress
  • Popup Builder
Published: October 9, 2025

CVE-2025-10004

7.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: October 9, 2025

CVE-2025-61577

7.5
    D-Link
  • Dir-816a2
Published: October 9, 2025

CVE-2025-61601

7.5
    Bigbluebutton
  • Bigbluebutton
Published: October 9, 2025

CVE-2025-61602

7.5
    Bigbluebutton
  • Bigbluebutton
Published: October 9, 2025

CVE-2025-11524

7.4
    Tenda
  • Ac7 Firmware
  • Ac7
Published: October 9, 2025

CVE-2025-11525

7.4
    Tenda
  • Ac7 Firmware
  • Ac7
Published: October 9, 2025

CVE-2025-11526

7.4
    Tenda
  • Ac7 Firmware
  • Ac7
Published: October 9, 2025

CVE-2025-11527

7.4
    Tenda
  • Ac7 Firmware
  • Ac7
Published: October 9, 2025

CVE-2025-11528

7.4
    Tenda
  • Ac7 Firmware
  • Ac7
Published: October 9, 2025

CVE-2025-11549

7.4
    Tenda
  • W12
Published: October 9, 2025

CVE-2025-45095

7.3
    Lavasoft
  • Web Companion
Published: October 9, 2025

CVE-2025-60375

7.3
    Perfex
  • Crm
Published: October 9, 2025

CVE-2025-10496

7.2
    Wordpress
  • Cookie Notice And Consent
Published: October 9, 2025

CVE-2025-10239

7.2
    Progress
  • Flowmon
Published: October 9, 2025

CVE-2025-34248

7.2
    D-Link
  • Nuclias Connect
Published: October 9, 2025

CVE-2025-47342

7.1
    Qualcomm
  • Qualcomm
Published: October 9, 2025

CVE-2025-39664

7.1
    Checkmk
  • Checkmk
Published: October 9, 2025

CVE-2025-52961

7.1
    Juniper
  • Junose
Published: October 9, 2025

CVE-2025-59967

7.1
    Juniper
  • Jnos
Published: October 9, 2025

CVE-2025-59976

7.1
    Juniper
  • Juniper Networks Junos Space
Published: October 9, 2025

CVE-2025-11550

7.1
    Tenda
  • W12
Published: October 9, 2025

CVE-2025-55200

7.1
    Bigbluebutton
  • Bigbluebutton
Published: October 9, 2025

CVE-2025-59957

7.0
    Juniper
  • Juniper Junos Os
Published: October 9, 2025

CVE-2025-4615

7.0
    Paloaltonetworks
  • Pan-Os
Published: October 9, 2025

CVE-2025-11513

6.9
    Fabian
  • E-Commerce Website
Published: October 9, 2025

CVE-2025-11529

6.9
    Churchcrm
  • Churchcrm
Published: October 9, 2025

CVE-2025-59958

6.9
    Juniper
  • Juniper Junos Os Evolved
Published: October 9, 2025

CVE-2025-59980

6.9
    Juniper Networks
  • Junos Os
Published: October 9, 2025

CVE-2025-11555

6.9
    Campcodes
  • Online Learning Management System
Published: October 9, 2025

CVE-2025-11556

6.9
    Code-Projects
  • Simple Leave Manager
Published: October 9, 2025

CVE-2025-11557

6.9
    Projectworlds
  • Gate Pass Management System
Published: October 9, 2025

CVE-2025-11558

6.9
    Code-Projects
  • E-Commerce Website
Published: October 9, 2025

CVE-2025-35062

6.9
    Newforma
  • Newforma Info Exchange
Published: October 9, 2025

CVE-2025-27039

6.6
    Qualcomm
  • *
Published: October 9, 2025

CVE-2025-27040

6.5
    Qualcomm
  • Hypervisor
Published: October 9, 2025

CVE-2025-10249

6.5
    Slider Revolution
  • Slider Revolution
Published: October 9, 2025

CVE-2025-56426

6.5
    Webkul
  • Bagisto
Published: October 9, 2025

CVE-2025-60265

6.5
    Xckk
  • Xckk
Published: October 9, 2025

CVE-2025-60266

6.5
    Xckk
  • Xckk
Published: October 9, 2025

CVE-2025-60267

6.5
    Xckk
  • Xckk
Published: October 9, 2025

CVE-2025-59252

6.5
    Microsoft
  • M365 Copilot
Published: October 9, 2025

CVE-2025-59272

6.5
    Microsoft
  • Copilot
Published: October 9, 2025

CVE-2025-59286

6.5
    Microsoft
  • Copilot
Published: October 9, 2025

CVE-2025-9371

6.4
    Themeforest
  • Betheme
Published: October 9, 2025

CVE-2025-35052

6.3
    Newforma
  • Newforma Info Exchange
Published: October 9, 2025

CVE-2025-61783

6.3
    Python Social Auth
  • Python Social Auth
Published: October 9, 2025

CVE-2025-11371

6.2
    Gladinet
  • Centrestack
  • Triofox
Published: October 9, 2025

CVE-2025-27045

6.1
    Qualcomm
  • Video Driver
Published: October 9, 2025

CVE-2025-60302

6.1
    Code-Projects
  • Client Details System
Published: October 9, 2025

CVE-2025-61532

6.1
    Svx
  • Portal
Published: October 9, 2025

CVE-2025-60304

6.1
    Code-Projects
  • Simple Scheduling System
Published: October 9, 2025

CVE-2025-35053

6.1
    Newforma
  • Info Exchange
Published: October 9, 2025

CVE-2025-59962

6.0
    Juniper
  • Junos Os
  • Junos Os Evolved
Published: October 9, 2025

CVE-2025-35057

6.0
    Newforma
  • Info Exchange
Published: October 9, 2025

CVE-2025-27041

5.5
    Qualcomm
  • Video Firmware
Published: October 9, 2025

CVE-2025-27049

5.5
    Qualcomm
  • Image Encoding
Published: October 9, 2025

CVE-2025-43296

5.5
    Apple
  • Macos Tahoe
Published: October 9, 2025

CVE-2025-11166

5.4
    Wordpress
  • Wp Go Maps
Published: October 9, 2025

CVE-2025-11512

5.3
    Fabian
  • Voting System
Published: October 9, 2025

CVE-2025-11514

5.3
    Fabian
  • Online Complaint Site
Published: October 9, 2025

CVE-2025-11515

5.3
    Fabian
  • Online Complaint Site
Published: October 9, 2025

CVE-2025-11516

5.3
    Code-Projects
  • Online Complaint Site
Published: October 9, 2025

CVE-2025-11523

5.3
    Tenda
  • Ac7 Firmware
  • Ac7
Published: October 9, 2025

CVE-2025-11530

5.3
    Fabian
  • Online Complaint Site
Published: October 9, 2025

CVE-2023-37401

5.3
    Ibm
  • Aspera Faspex
Published: October 9, 2025

CVE-2025-60010

5.3
    Juniper
  • Junos Os
  • Junos Os Evolved
Published: October 9, 2025

CVE-2025-11551

5.3
    Code-Projects
  • Student Result Manager
Published: October 9, 2025

CVE-2025-11552

5.3
    Code-Projects
  • Online Complaint Site
Published: October 9, 2025

CVE-2025-11553

5.3
    Code-Projects
  • Courier Management System
Published: October 9, 2025

CVE-2025-11554

5.3
    Portabilis
  • I-Educar
Published: October 9, 2025

CVE-2025-35056

5.3
    Newforma
  • Info Exchange
Published: October 9, 2025

CVE-2025-35059

5.3
    Newforma
  • Nix
Published: October 9, 2025

CVE-2025-62228

5.1
    Apache
  • Flink Cdc
Published: October 9, 2025

CVE-2025-59981

5.1
    Juniper Networks
  • Junos Space
Published: October 9, 2025

CVE-2025-59982

5.1
    Juniper
  • Junos Space
Published: October 9, 2025

CVE-2025-59983

5.1
    Juniper
  • Networks
Published: October 9, 2025

CVE-2025-59984

5.1
    Juniper
  • Juniper Junos Space
Published: October 9, 2025

CVE-2025-59985

5.1
    Juniper
  • Juniper Space
Published: October 9, 2025

CVE-2025-59986

5.1
    Juniper Networks
  • Junos Space
Published: October 9, 2025

CVE-2025-59987

5.1
    Juniper
  • Juniper Networks Junos Space
Published: October 9, 2025

CVE-2025-59988

5.1
    Juniper Networks
  • Junos Space
Published: October 9, 2025

CVE-2025-59989

5.1
    Juniper
  • Junos Space
Published: October 9, 2025

CVE-2025-59990

5.1
    Juniper
  • Junos Space
Published: October 9, 2025

CVE-2025-59991

5.1
    Juniper
  • Junos Space
Published: October 9, 2025

CVE-2025-59992

5.1
    Juniper
  • Junos Space
Published: October 9, 2025

CVE-2025-59993

5.1
    Juniper
  • Juniper Junos Space
Published: October 9, 2025

CVE-2025-59994

5.1
    Juniper Networks
  • Junos Space
Published: October 9, 2025

CVE-2025-59995

5.1
    Juniper
  • Junos Space
Published: October 9, 2025

CVE-2025-59996

5.1
    Juniper
  • Juniper Networks Junos Space
Published: October 9, 2025

CVE-2025-59997

5.1
    Juniper
  • Juniper Networks Junos Space
Published: October 9, 2025

CVE-2025-59998

5.1
    Juniper
  • Juniper Networks Junos Space
Published: October 9, 2025

CVE-2025-59999

5.1
    Juniper
  • Juniper Space
Published: October 9, 2025

CVE-2025-60000

5.1
    Juniper
  • Juniper Networks Junos Space
Published: October 9, 2025

CVE-2025-60001

5.1
    Juniper Networks
  • Junos Space
Published: October 9, 2025

CVE-2025-60002

5.1
    Juniper
  • Juniper Space
Published: October 9, 2025

CVE-2025-60009

5.1
    Juniper
  • Juniper Junos Space
Published: October 9, 2025

CVE-2025-35060

5.1
    Newforma
  • Info Exchange
Published: October 9, 2025

CVE-2025-36171

4.9
    Ibm
  • Aspera Faspex
Published: October 9, 2025

CVE-2025-60006

4.8
    Juniper
  • Junos Os Evolved
Published: October 9, 2025

CVE-2025-4614

4.8
    Palo Alto Networks
  • Pan-Os
Published: October 9, 2025

CVE-2025-35054

4.8
    Newforma
  • Info Exchange
Published: October 9, 2025

CVE-2025-62240

4.8
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: October 9, 2025

CVE-2025-10281

4.7
    Bbot
  • Git Clone
Published: October 9, 2025

CVE-2025-10282

4.7
    Bbot
  • Gitlab Module
Published: October 9, 2025

CVE-2025-61926

4.6
    Github
  • Allstar
Published: October 9, 2025

CVE-2025-2934

4.3
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: October 9, 2025

CVE-2025-36225

4.3
    Ibm
  • Aspera
Published: October 9, 2025

CVE-2025-32916

1.0
    Checkmk
  • Checkmk
Published: October 9, 2025

CVE-2025-39954

None
    Linux
  • Linux Kernel
Published: October 9, 2025

CVE-2025-39955

None
    Linux
  • Kernel
Published: October 9, 2025

CVE-2025-39956

None
    Linux
  • Linux Kernel
    Intel
Published: October 9, 2025

CVE-2025-39957

None
    Linux
  • Linux Kernel
Published: October 9, 2025

CVE-2025-39958

None
    Linux
  • Kernel
Published: October 9, 2025

CVE-2025-39959

None
    Linux
  • Linux Kernel
Published: October 9, 2025

CVE-2025-39960

None
    Linux
  • Linux Kernel
Published: October 9, 2025

CVE-2025-39961

None
    Linux
  • Linux Kernel
Published: October 9, 2025

CVE-2025-39962

None
    Linux
  • Linux Kernel
Published: October 9, 2025

CVE-2025-39963

None
    Linux
  • Kernel
Published: October 9, 2025

CVE-2025-56683

None
    Logseq
  • Logseq
Published: October 9, 2025
Click here to see more Vulnerabilities