Tag: 2025-11-07

8 Attack Reports | 113 Vulnerabilities

Attack reports

The Rise of Online Casino Spam

This analysis explores the growing prevalence of online casino spam, particularly targeting WordPress websites. The report details a sophisticated malware infection that employs multiple layers of redundancy and reinfection mechanisms. The malware injects spam content into existing pages, stores pa…
malware
spam
wordpress
gambling
indonesia
seo
2025-11-07
online casino
Published: November 7, 2025
Downloadable IOCs: 0

New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices

Unit 42 researchers have uncovered LANDFALL, a previously unknown Android spyware family targeting Samsung Galaxy devices. The spyware exploits CVE-2025-21042, a zero-day vulnerability in Samsung's image processing library, to deliver commercial-grade surveillance capabilities. LANDFALL is embedded…
android
whatsapp
zero-day
spyware
samsung
CVE-2025-43300
CVE-2025-55177
2025-11-07
CVE-2025-21042
CVE-2025-21043
landfall
dng
commercial-grade
Published: November 7, 2025
Downloadable IOCs: 18

Booking.com Phishing Campaign Targeting Hotels and Customers

A sophisticated phishing campaign is targeting the hospitality industry, specifically Booking.com partners and their customers. The attackers first compromise hotel administrators' systems using malware like PureRAT, gaining access to booking management accounts. They then use this access to conduc…
phishing
social engineering
cybercrime
clickfix
hospitality
booking.com
purerat
2025-11-07
Published: November 7, 2025
Downloadable IOCs: 100

New Kimsuky Malware "EndClient RAT": Technical Report and IOCs

A novel Remote Access Trojan (RAT) called 'EndClient RAT' has been discovered targeting North Korean Human Rights Defenders. The malware, attributed to the Kimsuky group, is delivered via a signed Microsoft Installer package disguised as 'StressClear.msi'. It uses AutoIT scripts for execution and e…
north korea
persistence
autoit
remote access trojan
c2 protocol
2025-11-07
code signing
human rights defenders
endclient rat
Published: November 7, 2025
Downloadable IOCs: 3

Cavalry Werewolf hacker group attacks Russian state institutions

A Russian government organization was targeted by the Cavalry Werewolf hacker group, aiming to collect confidential information and network data. The attack began with phishing emails containing malware disguised as documents. The group utilized various tools including backdoors, trojans, and modif…
phishing
data theft
backdoors
network infiltration
russian government
reverse-shell
open-source tools
2025-11-07
trojan.packed2.49708
telegram api
backdoor.shellnet.2
backdoor.reverseshell.10
backdoor.tunnel.41
trojan.inject5.57968
bat.downloader.1138
trojan.siggen31.54011
backdoor.shellnet.1
trojan.filespynet.5
backdoor.reverseproxy.1
backdoor.rshell.169
backdoor.siggen2.5463
trojan.packed2.49862
Published: November 7, 2025
Downloadable IOCs: 27

China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy

Chinese threat actors continue to target U.S. organizations involved in policy issues. A recent intrusion into a non-profit organization active in influencing U.S. government policy on international matters occurred in April 2025. The attackers, likely Chinese-based, used various techniques to esta…
espionage
china
persistence
CVE-2021-44228
dll sideloading
apt41
CVE-2017-9805
2025-11-07
dcsync
CVE-2022-26134
CVE-2017-17562
deed rat
policy influence
domain controllers
space pirates
kelp
Published: November 7, 2025
Linked vulnerabilities : CVE-2021-44228, CVE-2022-26134, CVE-2017-9805, CVE-2017-17562
Downloadable IOCs: 7

LeakyInjector and LeakyStealer Duo Hunts For Crypto and Browser History

A new two-stage malware named LeakyInjector and LeakyStealer has been identified, targeting cryptocurrency wallets and browser history. LeakyInjector uses low-level APIs for injection to avoid detection and injects LeakyStealer into explorer.exe. LeakyStealer implements a polymorphic engine to modi…
cryptocurrency
persistence
injection
polymorphic
data-exfiltration
2025-11-07
two-stage
leakystealer
browser-history
leakyinjector
Published: November 7, 2025
Downloadable IOCs: 5

Remember, remember the fifth of November

The article discusses the historical significance of November 5th in the UK, known as Bonfire Night or Guy Fawkes Night. It recounts the failed Gunpowder Plot of 1605, where conspirators attempted to assassinate King James I by blowing up the House of Lords. The plot was foiled due to an anonymous …
hacktivism
cybersecurity
threat intelligence
uk
history
2025-11-07
gunpowder plot
guy fawkes
Published: November 7, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-64180

10.0
    Manager-Io
  • Manager
Published: November 7, 2025

CVE-2025-63689

10.0
    Ycf1998
  • Money-Pos System
Published: November 7, 2025

CVE-2025-10230

10.0
    Samba
  • Samba
Published: November 7, 2025

CVE-2025-12352

9.8
    Wordpress
  • Gravity Forms
Published: November 7, 2025

CVE-2025-63691

9.6
    Pig
  • Pig
Published: November 7, 2025

CVE-2025-52425

9.5
    Qnap
  • Qumagie
Published: November 7, 2025

CVE-2025-11546

9.3
    Nec Corporation
  • Univerge Ix
  • Univerge Ix-R Ix-V
Published: November 7, 2025

CVE-2025-10870

9.3
    Dial
  • Centrosnet
Published: November 7, 2025

CVE-2025-34299

9.3
    Monsta Ftp
  • Monsta Ftp
Published: November 7, 2025

CVE-2025-3222

9.3
    Ge
  • Smallworld
Published: November 7, 2025

CVE-2020-36870

9.2
    Ruijie
  • Ruijie Gateway
Published: November 7, 2025

CVE-2025-63690

9.1
    Pig
  • Pig-Mesh
    Apache
Published: November 7, 2025

CVE-2025-64184

8.8
    Dosage
  • Dosage
Published: November 7, 2025

CVE-2025-4519

8.8
    Wordpress
  • Idonate
Published: November 7, 2025

CVE-2025-10968

8.8
    Gg Soft Software Services Inc
  • Paperwork
Published: November 7, 2025

CVE-2025-37736

8.8
    Elastic
  • Elastic Cloud Enterprise
Published: November 7, 2025

CVE-2025-64431

8.7
    Zitadel
  • Zitadel
Published: November 7, 2025

CVE-2025-64328

8.6
    Freepbx
  • Endpoint Manager
Published: November 7, 2025

CVE-2025-5483

8.1
    Wordpress
  • Lc Wizard
Published: November 7, 2025

CVE-2025-64343

7.8
    Conda
  • Constructor
Published: November 7, 2025

CVE-2025-58464

7.8
    Qnap
  • Qumagie
Published: November 7, 2025

CVE-2025-9458

7.8
    Autodesk
  • *
Published: November 7, 2025

CVE-2025-64347

7.5
    Apollo
  • Router Core
Published: November 7, 2025

CVE-2025-64430

7.5
    Parse
  • Parse Server
Published: November 7, 2025

CVE-2025-12863

7.5
    Gnome
  • Libxml2
Published: November 7, 2025

CVE-2025-36186

7.4
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-64439

7.4
    Langgraph
  • Checkpoint Saver
  • Langgraph
Published: November 7, 2025

CVE-2025-64336

7.2
    Clipbucket
  • Clipbucket
Published: November 7, 2025

CVE-2025-64339

7.2
    Clipbucket
  • Clipbucket
Published: November 7, 2025

CVE-2025-54167

7.2
    Qnap
  • Notification Center
Published: November 7, 2025

CVE-2025-64442

7.1
    Humhub
  • Humhub
Published: November 7, 2025

CVE-2025-52662

6.9
    Nuxt
  • Nuxt Devtools
Published: November 7, 2025

CVE-2025-64329

6.9
    Containerd
  • Containerd
Published: November 7, 2025

CVE-2025-12829

6.9
    Amazon
  • Ion-C
Published: November 7, 2025

CVE-2025-64436

6.9
    Kubevirt
  • Kubevirt
Published: November 7, 2025

CVE-2025-4522

6.5
    Wordpress
  • Idonate
Published: November 7, 2025

CVE-2024-47118

6.5
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-12890

6.5
    Zephyr
  • Zephyr
Published: November 7, 2025

CVE-2025-36006

6.5
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-36008

6.5
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-64433

6.5
    Kubevirt
  • Kubevirt
Published: November 7, 2025

CVE-2025-12854

6.3
    Newbee
  • Newbee-Mall-Plus
Published: November 7, 2025

CVE-2025-33012

6.3
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-36185

6.2
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-12789

6.1
    Redhat
  • Red Hat Single Sign-On
Published: November 7, 2025

CVE-2025-64346

6.0
    Archives
  • Go Library Archives
Published: November 7, 2025

CVE-2025-12418

5.6
    Revenera
  • Installshield
Published: November 7, 2025

CVE-2025-36135

5.4
    Ibm
  • Sterling B2b Integrator
  • Sterling File Gateway
Published: November 7, 2025

CVE-2025-61261

5.4
    Ckeditor
  • Ckeditor
    Angular
Published: November 7, 2025

CVE-2025-64323

5.3
    Kgateway
  • Kgateway
Published: November 7, 2025

CVE-2025-46413

5.3
    Buffalo
  • Wsr-1800ax4
Published: November 7, 2025

CVE-2025-47207

5.3
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-12862

5.3
    Projectworlds
  • Online Notes Sharing Platform
Published: November 7, 2025

CVE-2025-7719

5.3
    Ge
  • Vernova Smallworld
Published: November 7, 2025

CVE-2025-2534

5.3
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-7700

5.3
    Ffmpeg
  • Ffmpeg
Published: November 7, 2025

CVE-2025-64435

5.3
    Kubevirt
  • Kubevirt
Published: November 7, 2025

CVE-2025-12853

5.1
    Sourcecodester
  • Best House Rental Management System
Published: November 7, 2025

CVE-2025-12855

5.1
    Code-Projects
  • Responsive Hotel Site
Published: November 7, 2025

CVE-2025-12856

5.1
    Code-Projects
  • Responsive Hotel Site
Published: November 7, 2025

CVE-2025-12857

5.1
    Code-Projects
  • Responsive Hotel Site
Published: November 7, 2025

CVE-2025-12859

5.1
    Dede
  • Dedebiz
Published: November 7, 2025

CVE-2025-12860

5.1
    Dede
  • Dedebiz
Published: November 7, 2025

CVE-2025-12861

5.1
    Dede
  • Dede Biz
Published: November 7, 2025

CVE-2025-12873

5.1
    Campcodes
  • School File Management
Published: November 7, 2025

CVE-2025-36136

5.1
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-64437

5.0
    Kubevirt
  • Kubevirt
Published: November 7, 2025

CVE-2025-53409

4.9
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-53410

4.9
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-53413

4.9
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-12875

4.8
    Mruby
  • Mruby
Published: November 7, 2025

CVE-2025-64432

4.7
    Kubevirt
  • Kubevirt
Published: November 7, 2025

CVE-2025-64434

4.7
    Kubevirt
  • Kubevirt
Published: November 7, 2025

CVE-2025-64187

4.6
    Octoprint
  • Octoprint
Published: November 7, 2025

CVE-2025-36131

4.6
    Ibm
  • Db2
Published: November 7, 2025

CVE-2025-12896

4.4
    Solidigm
  • Dc Products
Published: November 7, 2025

CVE-2025-12902

4.4
    Solidigm
  • Dc Products
Published: November 7, 2025

CVE-2025-12527

4.3
    Wordpress
  • Page Post Notes Plugin
Published: November 7, 2025

CVE-2025-12520

4.0
    Wordpress
  • Wp Airbnb Review Slider
Published: November 7, 2025

CVE-2025-57712

4.0
    Qnap
  • Qsync Central
Published: November 7, 2025

CVE-2025-48985

3.7
    Vercel
  • Ai Sdk
Published: November 7, 2025

CVE-2025-58463

2.3
    Qnap
  • Download Station
Published: November 7, 2025

CVE-2025-54168

2.2
    Qnap
  • Qulog Center
Published: November 7, 2025

CVE-2025-57706

2.2
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-58465

2.2
    Qnap
  • Download Station
Published: November 7, 2025

CVE-2025-52865

1.3
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-53408

1.3
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-53411

1.2
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-58469

1.2
    Qnap
  • Qulog Center
Published: November 7, 2025

CVE-2025-53412

0.6
    Qnap
  • File Station
Published: November 7, 2025

CVE-2025-64481

0.0
    Datasette
  • Datasette
Published: November 7, 2025

CVE-2025-64338

None
    *
  • *
Published: November 7, 2025

CVE-2025-10966

None
    Curl
  • Curl
Published: November 7, 2025

CVE-2025-63686

None
    Guominjim
  • Personmanage
Published: November 7, 2025

CVE-2025-63687

None
    Rymcu
  • Forest
Published: November 7, 2025

CVE-2025-63783

None
    Onlook
  • Onlook Web Application
    Trpc
Published: November 7, 2025

CVE-2025-57698

None
    Astrbot
  • Astrbot
Published: November 7, 2025

CVE-2025-63784

None
    Onlook
  • Onlook Web Application
Published: November 7, 2025

CVE-2025-63785

None
    Onlook
  • Onlook
Published: November 7, 2025

CVE-2025-12858

None
    Wordpress
  • *
Published: November 7, 2025

CVE-2025-57697

None
    Astrbot
  • Astrbot
Published: November 7, 2025

CVE-2025-63713

None
    Sourcecodester
  • Matchmaster
Published: November 7, 2025

CVE-2025-63714

None
    Sourcecodester
  • User Account Generator
Published: November 7, 2025

CVE-2025-63716

None
    Sourcecodester
  • Leads Manager Tool
Published: November 7, 2025

CVE-2025-63718

None
    Sourcecodester
  • Pqms
Published: November 7, 2025

CVE-2025-63717

None
    Sourcecodester
  • Pet Grooming Management Software
Published: November 7, 2025

CVE-2025-63638

None
    Sourcecodester
  • Ai-Powered Todo List App
Published: November 7, 2025

CVE-2025-63639

None
    Sourcecodester
  • Faq Bot
Published: November 7, 2025

CVE-2025-63640

None
    Sourcecodester
  • Medicine Reminder App
Published: November 7, 2025

CVE-2025-63543

None
    Techstore
  • Techstore
Published: November 7, 2025

CVE-2025-63544

None
    Techstore
  • Techstore
Published: November 7, 2025

CVE-2025-60574

None
    Tquadra
  • Tquadra Cms
Published: November 7, 2025

CVE-2025-63420

None
    Crushftp
  • Crushftp
Published: November 7, 2025
Click here to see more Vulnerabilities