Tag: 2025-11-14

6 Attack Reports | 95 Vulnerabilities

Attack reports

Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery

The Contagious Interview campaign, linked to North Korean actors, has evolved to use JSON storage services for hosting and delivering malware. This campaign targets software developers, particularly those in cryptocurrency and Web3 projects, across Windows, Linux, and macOS. The attackers use socia…
rat
social engineering
north korea
infostealer
cryptocurrency
beavertail
web3
invisibleferret
ottercookie
trojanized code
2025-11-14
json storage
tsunami payload
Published: November 14, 2025
Downloadable IOCs: 84

Analysis of Encryption Structure of Yurei Ransomware Go-based Builder

The Yurei ransomware group, first identified in September 2025, employs a typical ransomware operation model targeting corporate networks. Their attacks have affected Sri Lanka and Nigeria, focusing on transportation, IT, marketing, and food industries. The ransomware, developed in Go, uses ChaCha2…
ransomware
encryption
chacha20-poly1305
go-based
yurei
2025-11-14
darkweb
secp256k1-ecies
corporate networks
Published: November 14, 2025
Downloadable IOCs: 1

DarkComet RAT Malware Hidden Inside Fake Bitcoin Tool

A malware analysis reveals the reemergence of DarkComet RAT disguised as a Bitcoin-related application. The malware, packed with UPX to evade detection, is distributed as a RAR archive containing an executable file. Once unpacked, it installs itself as 'explorer.exe' in the user's AppData folder an…
rat
cryptocurrency
persistence
bitcoin
keylogging
c2 communication
darkcomet
upx packing
2025-11-14
darkcomet rat
Published: November 14, 2025
Downloadable IOCs: 5

NovaStealer - Apple Intelligence is leaving a plist.. it is legit, right?

A cryptostealer for macOS utilizes a bash-based script to establish persistence and execute malicious modules. The malware installs itself in the ~/.mdrivers directory, uses screen sessions for background execution, and employs a LaunchAgent for persistence. It exfiltrates crypto wallet data, colle…
phishing
persistence
macos
bash
modular
2025-11-14
cryptostealer
novastealer
wallet-targeting
Published: November 14, 2025
Downloadable IOCs: 7

Hurricane Melissa Relief Scams: How Criminals Exploit Disaster

In the aftermath of Hurricane Melissa's devastating impact on Jamaica in October 2025, cybercriminals swiftly exploited the crisis through various online scams. These included phishing campaigns, fake charity drives, and fraudulent financial-relief websites impersonating legitimate aid organization…
phishing
social engineering
cryptocurrency
scams
domain spoofing
2025-11-14
fake charities
hurricane
disaster relief
Published: November 14, 2025
Downloadable IOCs: 16

Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics

Trend Research observed a resurgence in Lumma Stealer activity since October 20, 2025, accompanied by new behaviors and C&C techniques. The malware now employs browser fingerprinting as part of its command-and-control tactics, collecting and exfiltrating system, network, hardware, and browser data …
infostealer
lumma stealer
data exfiltration
process injection
evasion techniques
command-and-control
ghostsocks
browser fingerprinting
2025-11-14
cybercriminal activity
Published: November 14, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-54339

10.0
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-64446

9.8
    Fortinet
  • Fortiweb
Published: November 14, 2025

CVE-2025-54343

9.6
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2021-4470

9.3
    Unknown
  • Tg8 Firewall
Published: November 14, 2025

CVE-2025-13188

8.9
    Dlink
  • Dir-816l
Published: November 14, 2025

CVE-2025-13161

8.7
    Iq Service International
  • Iq Support
Published: November 14, 2025

CVE-2016-15056

8.7
    Ubee
  • Evw3226
Published: November 14, 2025

CVE-2018-25125

8.7
    Netis
  • Dl4322d
Published: November 14, 2025

CVE-2021-4465

8.7
    Request
  • Serious Play F3 Media Server
Published: November 14, 2025

CVE-2021-4466

8.7
    Ipcop
  • Ipcop
Published: November 14, 2025

CVE-2021-4467

8.7
    Positive Technologies
  • Maxpatrol
  • Xspider
Published: November 14, 2025

CVE-2021-4468

8.7
    Planex
  • Cs-Qp50f-Ing2
Published: November 14, 2025

CVE-2021-4469

8.7
    Denver
  • Sho-110 Ip Camera
Published: November 14, 2025

CVE-2021-4471

8.7
    Tg8
  • Firewall
Published: November 14, 2025

CVE-2022-4985

8.7
    Vodafone
  • H500s
    Sercomm
Published: November 14, 2025

CVE-2025-64444

8.6
    Ncp
  • Ncp Hg100
Published: November 14, 2025

CVE-2025-63680

8.6
    Nero
  • Backitup
Published: November 14, 2025

CVE-2025-8855

8.1
    Optimus
  • Brokerage Automation
Published: November 14, 2025

CVE-2025-54346

7.6
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2024-7017

7.5
    Google
  • Chrome
Published: November 14, 2025

CVE-2024-9126

7.5
    Google
  • Chrome
Published: November 14, 2025

CVE-2025-54345

7.5
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-13033

7.5
    *
  • Email Parsing Library
Published: November 14, 2025

CVE-2025-63891

7.5
    Sourcecodester
  • Simple Online Book Store System
Published: November 14, 2025

CVE-2025-13204

7.3
    Npm
  • Expr-Eval
  • Expr-Eval-Fork
Published: November 14, 2025

CVE-2025-12904

7.2
    Snordian
  • H5pxapikatchu
Published: November 14, 2025

CVE-2025-10686

7.2
    Wordpress
  • Creta Testimonial Showcase
Published: November 14, 2025

CVE-2025-11918

7.1
    Rockwell Automation
  • Arena
Published: November 14, 2025

CVE-2024-21635

7.1
    Memos
  • Memos
Published: November 14, 2025

CVE-2025-13160

6.9
    Iq Service International
  • Iq-Support
Published: November 14, 2025

CVE-2025-9982

6.9
    Quickcms
  • Quickcms
Published: November 14, 2025

CVE-2025-13169

6.9
    Code-Projects
  • Simple Online Hotel Reservation System
Published: November 14, 2025

CVE-2025-13170

6.9
    Code-Projects
  • Simple Online Hotel Reservation System
Published: November 14, 2025

CVE-2023-7328

6.9
    Sft
  • Dab 600 C
Published: November 14, 2025

CVE-2025-63701

6.8
    Advantech
  • Tp-3250
Published: November 14, 2025

CVE-2025-55070

6.5
    Mattermost
  • Mattermost
Published: November 14, 2025

CVE-2024-44630

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44632

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44633

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44636

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44639

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44640

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-55016

6.5
    Phpgurukul
  • Student Record Management System
Published: November 14, 2025

CVE-2025-54348

6.5
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-63291

6.5
    Alteryx
  • Alteryx Server
Published: November 14, 2025

CVE-2025-64084

6.5
    Cloudlog
  • Cloudlog
Published: November 14, 2025

CVE-2024-13983

6.3
    Google
  • Chrome
Published: November 14, 2025

CVE-2024-42749

6.1
    Alto
  • Cms
Published: November 14, 2025

CVE-2024-44635

6.1
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2025-63725

6.1
    Svx
  • Svx Portal
Published: November 14, 2025

CVE-2025-63830

6.1
    Ckfinder
  • Ckfinder
Published: November 14, 2025

CVE-2025-12149

6.0
    Search Guard
  • Search Guard Flx
Published: November 14, 2025

CVE-2025-63724

6.0
    Svx
  • Portal
Published: November 14, 2025

CVE-2025-8870

5.6
    Arista
  • Eos
Published: November 14, 2025

CVE-2025-63745

5.5
    Radare2
  • Radare2
Published: November 14, 2025

CVE-2025-13187

5.5
    Intelbras
  • Icip
Published: November 14, 2025

CVE-2025-13097

5.4
    Google
  • Chrome
Published: November 14, 2025

CVE-2025-55073

5.4
    Mattermost
  • Mattermost
Published: November 14, 2025

CVE-2025-13168

5.3
    Ury-Erp
  • Ury
Published: November 14, 2025

CVE-2025-13171

5.3
    Zzcms
  • Zzcms
Published: November 14, 2025

CVE-2025-13172

5.3
    Codeastro
  • Gym Management System
Published: November 14, 2025

CVE-2025-13174

5.3
    Rachelos
  • We-Mp-Rss
Published: November 14, 2025

CVE-2025-13177

5.3
    Bdtask
  • Codecanyon Saleserp
Published: November 14, 2025

CVE-2025-13179

5.3
    Bdtask
  • Wholesale Inventory Control
Published: November 14, 2025

CVE-2025-63744

5.3
    Radare2
  • Radare2
Published: November 14, 2025

CVE-2025-13178

5.1
    Bdtask
  • Saleserp
Published: November 14, 2025

CVE-2025-13180

5.1
    Bdtask
  • Wholesale Inventory Control
  • Inventory Management System
Published: November 14, 2025

CVE-2025-13181

5.1
    Pojoin
  • H3blog
Published: November 14, 2025

CVE-2025-13182

5.1
    Pojoin
  • H3blog
Published: November 14, 2025

CVE-2025-13185

5.1
    Bdtask
  • News365
Published: November 14, 2025

CVE-2025-11794

4.9
    Mattermost
  • Mattermost
Published: November 14, 2025

CVE-2025-11981

4.9
    Wordpress
  • Plugin
  • Wordpress
Published: November 14, 2025

CVE-2025-10018

4.8
    Quickcms
  • Quickcms
Published: November 14, 2025

CVE-2025-13186

4.8
    Bdtask
  • Codacanyon Isshue
Published: November 14, 2025

CVE-2025-4618

4.4
    Palo Alto Networks
  • Prisma Browser
Published: November 14, 2025

CVE-2024-11919

4.3
    Google
  • Chrome
Published: November 14, 2025

CVE-2024-11920

4.3
    Google
  • Chrome
Published: November 14, 2025

CVE-2024-13178

4.3
    Google
  • Chrome
Published: November 14, 2025

CVE-2024-7021

4.3
    Google
  • Chrome
Published: November 14, 2025

CVE-2025-13102

4.3
    Google
  • Chrome
Published: November 14, 2025

CVE-2025-13107

4.3
    Google
  • Chrome
Published: November 14, 2025

CVE-2025-9479

4.3
    Google
  • Chrome
Published: November 14, 2025

CVE-2025-11776

4.3
    Mattermost
  • Mattermost
Published: November 14, 2025

CVE-2025-54561

4.3
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-54562

4.3
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-54340

4.1
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-54560

3.8
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-54559

3.7
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-54342

3.3
    Desktop Alert
  • Pingalert
Published: November 14, 2025

CVE-2025-41436

3.1
    Mattermost
  • Mattermost
Published: November 14, 2025

CVE-2025-4616

1.1
    Palo Alto Networks
  • Prisma Browser
Published: November 14, 2025

CVE-2025-4617

1.1
    Palo Alto Networks
  • Prisma Browser
Published: November 14, 2025

CVE-2025-12897

None
    Wordpress
  • *
Published: November 14, 2025

CVE-2025-12187

None
    *
  • *
Published: November 14, 2025

CVE-2025-1256

None
    Gitlab
  • Gitlab
Published: November 14, 2025
Click here to see more Vulnerabilities