Tag: 2025-11-14

6 Attack Reports | 95 Vulnerabilities

Attack reports

Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery

The Contagious Interview campaign, linked to North Korean actors, has evolved to use JSON storage services for hosting and delivering malware. This campaign targets software developers, particularly those in cryptocurrency and Web3 projects, across Windows, Linux, and macOS. The attackers use socia…
rat
social engineering
north korea
infostealer
cryptocurrency
beavertail
web3
invisibleferret
ottercookie
trojanized code
2025-11-14
json storage
tsunami payload
Published: November 14, 2025
Downloadable IOCs: 84

Analysis of Encryption Structure of Yurei Ransomware Go-based Builder

The Yurei ransomware group, first identified in September 2025, employs a typical ransomware operation model targeting corporate networks. Their attacks have affected Sri Lanka and Nigeria, focusing on transportation, IT, marketing, and food industries. The ransomware, developed in Go, uses ChaCha2…
ransomware
encryption
chacha20-poly1305
go-based
yurei
2025-11-14
darkweb
secp256k1-ecies
corporate networks
Published: November 14, 2025
Downloadable IOCs: 1

DarkComet RAT Malware Hidden Inside Fake Bitcoin Tool

A malware analysis reveals the reemergence of DarkComet RAT disguised as a Bitcoin-related application. The malware, packed with UPX to evade detection, is distributed as a RAR archive containing an executable file. Once unpacked, it installs itself as 'explorer.exe' in the user's AppData folder an…
rat
cryptocurrency
persistence
bitcoin
keylogging
c2 communication
darkcomet
upx packing
2025-11-14
darkcomet rat
Published: November 14, 2025
Downloadable IOCs: 5

NovaStealer - Apple Intelligence is leaving a plist.. it is legit, right?

A cryptostealer for macOS utilizes a bash-based script to establish persistence and execute malicious modules. The malware installs itself in the ~/.mdrivers directory, uses screen sessions for background execution, and employs a LaunchAgent for persistence. It exfiltrates crypto wallet data, colle…
phishing
persistence
macos
bash
modular
2025-11-14
cryptostealer
novastealer
wallet-targeting
Published: November 14, 2025
Downloadable IOCs: 7

Hurricane Melissa Relief Scams: How Criminals Exploit Disaster

In the aftermath of Hurricane Melissa's devastating impact on Jamaica in October 2025, cybercriminals swiftly exploited the crisis through various online scams. These included phishing campaigns, fake charity drives, and fraudulent financial-relief websites impersonating legitimate aid organization…
phishing
social engineering
cryptocurrency
scams
domain spoofing
2025-11-14
fake charities
hurricane
disaster relief
Published: November 14, 2025
Downloadable IOCs: 16

Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics

Trend Research observed a resurgence in Lumma Stealer activity since October 20, 2025, accompanied by new behaviors and C&C techniques. The malware now employs browser fingerprinting as part of its command-and-control tactics, collecting and exfiltrating system, network, hardware, and browser data …
infostealer
lumma stealer
data exfiltration
process injection
evasion techniques
command-and-control
ghostsocks
browser fingerprinting
2025-11-14
cybercriminal activity
Published: November 14, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-54339

10.0
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2025-64446

9.8
    Fortinet
  • Fortiweb
Published: November 14, 2025

CVE-2025-54343

9.6
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2021-4470

9.3
    tg8_firewall
Published: November 14, 2025

CVE-2025-13188

8.9
    Dlink
  • Dir-816l Firmware
  • Dir-816l
Published: November 14, 2025

CVE-2025-13161

8.7
    iq_support
Published: November 14, 2025

CVE-2016-15056

8.7
    evw3226
Published: November 14, 2025

CVE-2018-25125

8.7
    dl4322d
Published: November 14, 2025

CVE-2021-4465

8.7
    serious_play_f3_media_server
    serious_play_f3_media_server
    serious_play_f3_media_server
    serious_play_f3_media_server
    serious_play_f3_media_server
    serious_play_f3_media_server
Published: November 14, 2025

CVE-2021-4466

8.7
    ipcop
Published: November 14, 2025

CVE-2021-4467

8.7
    maxpatrol
    xspider
Published: November 14, 2025

CVE-2021-4468

8.7
    cs-qp50f-ing2
Published: November 14, 2025

CVE-2021-4469

8.7
    sho-110_ip_camera
Published: November 14, 2025

CVE-2021-4471

8.7
    firewall
Published: November 14, 2025

CVE-2022-4985

8.7
    h500s
    vfh500
Published: November 14, 2025

CVE-2025-64444

8.6
    ncp_hg100
Published: November 14, 2025

CVE-2025-63680

8.6
    backitup
Published: November 14, 2025

CVE-2025-8855

8.1
    brokerage_automation
Published: November 14, 2025

CVE-2025-54346

7.6
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2024-7017

7.5
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: November 14, 2025

CVE-2024-9126

7.5
    Google
  • Chrome
    Apple
Published: November 14, 2025

CVE-2025-54345

7.5
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2025-13033

7.5
    email_parsing_library
Published: November 14, 2025

CVE-2025-63891

7.5
    Oretnom23
  • Simple Online Book Store System
Published: November 14, 2025

CVE-2025-13204

7.3
    expr-eval
    expr-eval-fork
Published: November 14, 2025

CVE-2025-12904

7.2
    h5pxapikatchu
Published: November 14, 2025

CVE-2025-10686

7.2
    creta_testimonial_showcase
Published: November 14, 2025

CVE-2025-11918

7.1
    Rockwellautomation
  • Arena
Published: November 14, 2025

CVE-2024-21635

7.1
    Usememos
  • Memos
Published: November 14, 2025

CVE-2025-13160

6.9
    iq-support
Published: November 14, 2025

CVE-2025-9982

6.9
    Opensolution
  • Quick.Cms
Published: November 14, 2025

CVE-2025-13169

6.9
    Fabian
  • Simple Online Hotel Reservation System
Published: November 14, 2025

CVE-2025-13170

6.9
    Fabian
  • Simple Online Hotel Reservation System
Published: November 14, 2025

CVE-2023-7328

6.9
    dab_600_c
Published: November 14, 2025

CVE-2025-63701

6.8
    tp-3250
Published: November 14, 2025

CVE-2025-55070

6.5
    Mattermost
  • Mattermost Server
Published: November 14, 2025

CVE-2024-44630

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44632

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44633

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44636

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44639

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-44640

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2024-55016

6.5
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2025-54348

6.5
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2024-13983

6.3
    Google
  • Chrome
    Apple
Published: November 14, 2025

CVE-2024-42749

6.1
    Altocms
  • Alto Cms
Published: November 14, 2025

CVE-2024-44635

6.1
    Phpgurukul
  • Student Record System
Published: November 14, 2025

CVE-2025-63725

6.1
    svx_portal
Published: November 14, 2025

CVE-2025-63830

6.1
    Cksource
  • Ckfinder
Published: November 14, 2025

CVE-2025-12149

6.0
    search_guard_flx
Published: November 14, 2025

CVE-2025-63724

6.0
    portal
Published: November 14, 2025

CVE-2025-8870

5.6
    eos
Published: November 14, 2025

CVE-2025-63745

5.5
    Radare
  • Radare2
Published: November 14, 2025

CVE-2025-13187

5.5
    icip
Published: November 14, 2025

CVE-2025-13097

5.4
    Google
  • Chrome
    Linux
    Apple
    Microsoft
Published: November 14, 2025

CVE-2025-55073

5.4
    Mattermost
  • Mattermost Server
Published: November 14, 2025

CVE-2025-63291

5.4
    alteryx_server
    alteryx_server
Published: November 14, 2025

CVE-2025-64084

5.4
    Magicbug
  • Cloudlog
Published: November 14, 2025

CVE-2025-13168

5.3
    ury
Published: November 14, 2025

CVE-2025-13171

5.3
    Zzcms
  • Zzcms
Published: November 14, 2025

CVE-2025-13172

5.3
    Codeastro
  • Gym Management System
Published: November 14, 2025

CVE-2025-13174

5.3
    we-mp-rss
Published: November 14, 2025

CVE-2025-13177

5.3
    Bdtask
  • Saleserp
Published: November 14, 2025

CVE-2025-13179

5.3
    Bdtask
  • Wholesale
Published: November 14, 2025

CVE-2025-13178

5.1
    Bdtask
  • Saleserp
Published: November 14, 2025

CVE-2025-13180

5.1
    Bdtask
  • Wholesale
Published: November 14, 2025

CVE-2025-13181

5.1
    H3blog
  • H3blog
Published: November 14, 2025

CVE-2025-13182

5.1
    H3blog
  • H3blog
Published: November 14, 2025

CVE-2025-13185

5.1
    Bdtask
  • News365
Published: November 14, 2025

CVE-2025-11794

4.9
    Mattermost
  • Mattermost Server
Published: November 14, 2025

CVE-2025-11981

4.9
    wordpress
    plugin
Published: November 14, 2025

CVE-2025-10018

4.8
    Opensolution
  • Quick.Cms
Published: November 14, 2025

CVE-2025-13186

4.8
    Bdtask
  • Isshue
Published: November 14, 2025

CVE-2025-4618

4.4
    prisma_browser
Published: November 14, 2025

CVE-2024-11919

4.3
    Google
  • Chrome
  • Android
Published: November 14, 2025

CVE-2024-11920

4.3
    Google
  • Chrome
    Apple
Published: November 14, 2025

CVE-2024-13178

4.3
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: November 14, 2025

CVE-2024-7021

4.3
    Google
  • Chrome
    Microsoft
Published: November 14, 2025

CVE-2025-13102

4.3
    Google
  • Chrome
  • Android
Published: November 14, 2025

CVE-2025-13107

4.3
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: November 14, 2025

CVE-2025-9479

4.3
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: November 14, 2025

CVE-2025-11776

4.3
    Mattermost
  • Mattermost Server
Published: November 14, 2025

CVE-2025-54561

4.3
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2025-54562

4.3
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2025-63744

4.3
    Radare
  • Radare2
Published: November 14, 2025

CVE-2025-54340

4.1
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2025-54560

3.8
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2025-54559

3.7
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2025-54342

3.3
    Desktopalert
  • Pingalert Application Server
Published: November 14, 2025

CVE-2025-41436

3.1
    Mattermost
  • Mattermost Server
Published: November 14, 2025

CVE-2025-4616

1.1
    prisma_browser
Published: November 14, 2025

CVE-2025-4617

1.1
    prisma_browser
Published: November 14, 2025

CVE-2025-12897

None
    *
Published: November 14, 2025

CVE-2025-12187

None
    *
Published: November 14, 2025

CVE-2025-1256

None
    gitlab
Published: November 14, 2025
Click here to see more Vulnerabilities