Tag: 2025-11-01

1 Attack Reports | 34 Vulnerabilities

Attack reports

Cloud Abuse at Scale

A large-scale attack infrastructure dubbed TruffleNet has been identified, built around the open-source tool TruffleHog. This infrastructure is used to systematically test compromised credentials and perform reconnaissance across AWS environments. The campaign involves over 800 unique hosts across …
xmrig
aws
bec
coroxy
systembc
trufflehog
credential abuse
cloud infrastructure
2025-11-01
identity compromise
portainer
trufflenet
ses
Published: November 1, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-12599

10.0
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: November 1, 2025

CVE-2025-12600

10.0
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: November 1, 2025

CVE-2025-12601

10.0
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: November 1, 2025

CVE-2025-11833

9.8
    Wordpress
  • Post Smtp
Published: November 1, 2025

CVE-2025-11499

9.8
    Tablesome
  • Contact Form Db
Published: November 1, 2025

CVE-2025-11920

8.8
    Wordpress
  • Wpcom Member
Published: November 1, 2025

CVE-2025-5949

8.8
    Wordpress
  • Service Finder Bookings
Published: November 1, 2025

CVE-2025-11755

8.8
    Wordpress
  • Wp Delicious Recipe Plugin
Published: November 1, 2025

CVE-2025-12171

8.8
    Wordpress
  • Restful Content Syndication
Published: November 1, 2025

CVE-2025-6574

8.8
    Wordpress
  • Service Finder Bookings
Published: November 1, 2025

CVE-2025-6990

8.8
    Wordpress
  • Kallyas
Published: November 1, 2025

CVE-2025-36367

8.8
    Ibm
  • Ibm I
Published: November 1, 2025

CVE-2025-10487

7.3
    Wordpress
  • Advanced Ads
Published: November 1, 2025

CVE-2025-11995

7.2
    Wordpress
  • Community Events
Published: November 1, 2025

CVE-2025-62275

6.9
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: November 1, 2025

CVE-2025-11740

6.5
    Wpforo
  • Wpforo Forum
Published: November 1, 2025

CVE-2025-11922

6.4
    Wordpress
  • Inactive Logout
Published: November 1, 2025

CVE-2025-12118

6.4
    Wordpress
  • Schema Scalpel
Published: November 1, 2025

CVE-2025-11502

6.4
    Wordpress
  • Plugin
Published: November 1, 2025

CVE-2025-12090

6.4
    Wordpress
  • Employee Spotlight
Published: November 1, 2025

CVE-2025-6988

6.4
    Kallyas
  • Kallyas
Published: November 1, 2025

CVE-2025-11174

5.3
    Wordpress
  • Document Library Lite
Published: November 1, 2025

CVE-2025-11816

5.3
    Wordpress
  • Wp Legal Pages
Published: November 1, 2025

CVE-2025-12137

4.9
    Wordpress
  • Import Wp
Published: November 1, 2025

CVE-2025-62276

4.6
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: November 1, 2025

CVE-2025-11928

4.4
    Wordpress
  • Css And Javascript Toolbox
Published: November 1, 2025

CVE-2025-11927

4.4
    Wordpress
  • Plugin
Published: November 1, 2025

CVE-2025-12367

4.3
    Wordpress
  • Siteseo
Published: November 1, 2025

CVE-2025-11377

4.3
    Wordpress
  • List Category Posts Plugin
Published: November 1, 2025

CVE-2025-11983

4.3
    Wordpress
  • Wp Discourse
Published: November 1, 2025

CVE-2025-12038

4.3
    Folderly
  • Folderly
Published: November 1, 2025

CVE-2025-12180

4.3
    Wordpress
  • Qi Blocks
Published: November 1, 2025

CVE-2025-12602

2.3
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: November 1, 2025

CVE-2025-12603

2.3
    Blu
  • Blu-Ic2
  • Blu-Ic4
Published: November 1, 2025
Click here to see more Vulnerabilities