Tag: 2025-10-28

3 Attack Reports | 155 Vulnerabilities

Attack reports

New Android Malware Mimics Human Behavior to Evade Detection

A new Android malware called Herodotus has been discovered, designed to perform device takeover while mimicking human behavior to bypass biometric detection. Active campaigns have been observed in Italy and Brazil. Herodotus is being offered as Malware-as-a-Service and shows links to the previously…
android
credential theft
malware-as-a-service
banking trojan
device takeover
hook
mqtt
remote control
2025-10-28
octo
behavior mimicry
herodotus
brokewell
Published: October 28, 2025
Downloadable IOCs: 1

Crypto wasted: BlueNoroff’s ghost mirage of funding and jobs

BlueNoroff, a financially motivated threat actor, has been conducting two sophisticated campaigns dubbed GhostCall and GhostHire. GhostCall targets macOS devices of tech executives and venture capitalists through fake Zoom-like meetings, while GhostHire targets Web3 developers through fake recruitm…
cryptocurrency
2025-10-28
zoomclutch
rootroy
sysphon
silentsiphon
sneakmain
cosmicdoor
Published: October 28, 2025
Downloadable IOCs: 90

Earth Entries alive and kicking

Earth Estries, a China-nexus APT actor, has launched a new campaign exploiting a recent WinRAR vulnerability. The attack chain involves multiple stages, including the use of encrypted stubs, hijacked DLLs, and fake PDFs with ADS streams. The group, known for using implants like Snappybee and Shadow…
shadowpad
winrar
snappybee
CVE-2025-8088
2025-10-28
Published: October 28, 2025
Linked vulnerabilities : CVE-2025-8088
Downloadable IOCs: 10
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-12422

10.0
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: October 28, 2025

CVE-2025-12423

10.0
    Blu
  • Bluc2
  • Bluc4
Published: October 28, 2025

CVE-2025-12424

10.0
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: October 28, 2025

CVE-2025-12425

10.0
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: October 28, 2025

CVE-2025-64095

10.0
    Dnn
  • Dnn
Published: October 28, 2025

CVE-2025-36386

9.8
    Ibm
  • Maximo Application Suite
Published: October 28, 2025

CVE-2025-9313

9.3
    Asseco
  • Medica
Published: October 28, 2025

CVE-2025-62368

9.0
    Taiga
  • Taiga
Published: October 28, 2025

CVE-2025-62777

8.7
    Mzk
  • Dp300n
Published: October 28, 2025

CVE-2025-10150

8.7
    Softing
  • Smartlink Hw-Pn
  • Smartlink Hw-Dp
Published: October 28, 2025

CVE-2025-1036

8.7
    Hitachi
  • Tropos
Published: October 28, 2025

CVE-2025-34311

8.7
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34312

8.7
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-12341

8.5
    Ermig1979
  • Antidupl
Published: October 28, 2025

CVE-2025-43017

8.5
    Hp
  • Thinpro
Published: October 28, 2025

CVE-2025-53814

7.8
    Gcc Productions Inc
  • Fade In
Published: October 28, 2025

CVE-2025-53855

7.8
    Gcc Productions Inc
  • Fade In
Published: October 28, 2025

CVE-2025-10145

7.7
    Wordpress
  • Auto Featured Image
Published: October 28, 2025

CVE-2025-41090

7.6
    Microclaudia
  • Microclaudia
Published: October 28, 2025

CVE-2025-11735

7.5
    Husky
  • Products Filter Professional
Published: October 28, 2025

CVE-2025-1037

7.5
    Hitachi
  • Energy
Published: October 28, 2025

CVE-2025-1038

7.5
    Hitachi Energy
  • Tropos
Published: October 28, 2025

CVE-2025-61103

7.5
    Frr
  • Frr
Published: October 28, 2025

CVE-2025-61104

7.5
    Frrouting
  • Frr
Published: October 28, 2025

CVE-2025-61106

7.5
    Frr
  • Frr
Published: October 28, 2025

CVE-2025-61107

7.5
    Frr
  • Frr
Published: October 28, 2025

CVE-2025-62727

7.5
    Starlette
  • Starlette
Published: October 28, 2025

CVE-2025-10151

7.2
    Softing
  • Smartlink Hw Pn
  • Smartlink Hw Dp
Published: October 28, 2025

CVE-2025-59837

7.2
    Astro
  • Astro
Published: October 28, 2025

CVE-2025-34304

7.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34294

7.1
    Wazuh
  • Wazuh
Published: October 28, 2025

CVE-2025-12336

6.9
    Campcodes
  • Retro Basketball Shoes Online Store
Published: October 28, 2025

CVE-2025-12337

6.9
    Campcodes
  • Retro Basketball Shoes Online Store
Published: October 28, 2025

CVE-2025-12338

6.9
    Campcodes
  • Retro Basketball Shoes Online Store
Published: October 28, 2025

CVE-2025-12339

6.9
    Campcodes
  • Retro Basketball Shoes Online Store
Published: October 28, 2025

CVE-2025-12342

6.9
    Serdar Bayram
  • Ghost Hot Spot
Published: October 28, 2025

CVE-2025-12378

6.9
    Code-Projects
  • Simple Food Ordering System
Published: October 28, 2025

CVE-2025-33126

6.5
    Ibm
  • Db2 High Performance Unload
Published: October 28, 2025

CVE-2025-33131

6.5
    Ibm
  • Db2 High Performance Unload
Published: October 28, 2025

CVE-2025-33132

6.5
    Ibm
  • Db2 High Performance Unload
Published: October 28, 2025

CVE-2025-33133

6.5
    Ibm
  • Db2 High Performance Unload
Published: October 28, 2025

CVE-2025-11374

6.5
    Hashicorp
  • Consul
Published: October 28, 2025

CVE-2025-11375

6.5
    Hashicorp
  • Consul
  • Consul Enterprise
Published: October 28, 2025

CVE-2025-64094

6.4
    Dnn
  • Dnn
    Dotnetnuke
Published: October 28, 2025

CVE-2025-27093

6.3
    *
  • Sliver
Published: October 28, 2025

CVE-2025-61598

6.3
    Discourse
  • Discourse
Published: October 28, 2025

CVE-2025-36083

6.2
    Ibm
  • Concert Software
Published: October 28, 2025

CVE-2025-12390

6.0
    Keycloak
  • Keycloak
Published: October 28, 2025

CVE-2025-40843

5.9
    Codechecker
  • Codechecker
Published: October 28, 2025

CVE-2025-62796

5.8
    Privatebin
  • Privatebin
Published: October 28, 2025

CVE-2025-55758

5.4
    Joomla
  • Jdownloads
Published: October 28, 2025

CVE-2025-36085

5.4
    Ibm
  • Concert
Published: October 28, 2025

CVE-2025-61080

5.4
    Clear2pay
  • Bank Visibility Application Payment Execution
Published: October 28, 2025

CVE-2025-62798

5.4
    Sharp
  • Sharp
Published: October 28, 2025

CVE-2025-62801

5.4
    Fastmcp
  • Fastmcp
Published: October 28, 2025

CVE-2025-12335

5.3
    Code-Projects
  • E-Commerce Website
Published: October 28, 2025

CVE-2025-12344

5.3
    Yonyou
  • U8 Cloud
Published: October 28, 2025

CVE-2025-12346

5.3
    Maxsite
  • Maxsite Cms
Published: October 28, 2025

CVE-2025-12347

5.3
    Maxsite
  • Cms
Published: October 28, 2025

CVE-2025-36081

5.3
    Ibm
  • Concert Software
Published: October 28, 2025

CVE-2025-62800

5.3
    Fastmcp
  • Fastmcp
Published: October 28, 2025

CVE-2025-43024

5.1
    Hp
  • Application
Published: October 28, 2025

CVE-2025-34301

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34302

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34303

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34305

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34306

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34307

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34308

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34309

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34310

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34313

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34314

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34315

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34316

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34317

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-34318

5.1
    Ipfire
  • Ipfire
Published: October 28, 2025

CVE-2025-12103

5.0
    Redhat
  • Openshift Ai Service
  • Trustyai
Published: October 28, 2025

CVE-2025-12332

4.8
    Sourcecodester
  • Student Grades Management System
Published: October 28, 2025

CVE-2025-62367

4.8
    Taiga
  • Taiga
Published: October 28, 2025

CVE-2025-62802

4.3
    Dnn
  • Dotnetnuke
Published: October 28, 2025

CVE-2025-62794

3.8
    Github
  • Workflow Updater
Published: October 28, 2025

CVE-2025-10939

3.7
    Keycloak
  • Keycloak
Published: October 28, 2025

CVE-2025-40025

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40026

None
    Linux
  • Linux Kernel
    Kvm
Published: October 28, 2025

CVE-2025-40027

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40028

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40029

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40030

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40031

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40032

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40033

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40034

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40035

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40036

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40037

None
    Linux
  • Linux Kernel
  • Fbdev
Published: October 28, 2025

CVE-2025-40038

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40039

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40040

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40041

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40042

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40043

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40044

None
    Linux
  • Linux
Published: October 28, 2025

CVE-2025-40045

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40046

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40047

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40048

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40049

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40050

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40051

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40052

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40053

None
    Linux
  • Linux Kernel
    D-Link
Published: October 28, 2025

CVE-2025-40054

None
    Linux
  • Linux Kernel
  • F2fs
Published: October 28, 2025

CVE-2025-40055

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40056

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40057

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40058

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40059

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40060

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40061

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40062

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40063

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40064

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40065

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40066

None
    Linux
  • Linux Kernel
    Mt76
Published: October 28, 2025

CVE-2025-40067

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40068

None
    Linux
  • Linux Kernel
  • Ntfs3
Published: October 28, 2025

CVE-2025-40069

None
    Linux
  • Linux
  • Drm Msm
Published: October 28, 2025

CVE-2025-40070

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40071

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40072

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40073

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40074

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40075

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-40076

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40077

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40078

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40079

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40080

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40081

None
    Linux
  • Linux Kernel
Published: October 28, 2025

CVE-2025-40082

None
    Linux
  • Kernel
Published: October 28, 2025

CVE-2025-12380

None
    Mozilla
  • Firefox
Published: October 28, 2025

CVE-2025-61043

None
    Monkey
  • Monkey Audio
Published: October 28, 2025

CVE-2025-61128

None
    Wavlink
  • Quantum D3g
  • Device
Published: October 28, 2025

CVE-2025-56399

None
    Alexusmai
  • Laravel-File-Manager
Published: October 28, 2025

CVE-2025-60349

None
    Prevx
  • Prevx
Published: October 28, 2025

CVE-2025-60858

None
    Reolink
  • Video Doorbell
Published: October 28, 2025

CVE-2025-61155

None
    Hotta Studio
  • Gamedriverx64.Sys
Published: October 28, 2025

CVE-2025-54604

None
    Bitcoin
  • Bitcoin Core
Published: October 28, 2025

CVE-2025-54605

None
    Bitcoin
  • Bitcoin Core
Published: October 28, 2025

CVE-2025-60354

None
    Blog-Vue-Springboot
  • Blog-Vue-Springboot
Published: October 28, 2025

CVE-2025-60355

None
    Zhangyd-C
  • Oneblog
Published: October 28, 2025

CVE-2025-60800

None
    Jsherp
  • Jsherp
Published: October 28, 2025

CVE-2025-60805

None
    Bes System
  • Bes Application Server
Published: October 28, 2025

CVE-2025-61235

None
    Dataphone
  • A920
Published: October 28, 2025
Click here to see more Vulnerabilities