Tag: 2025-11-18

3 Attack Reports | 189 Vulnerabilities

Attack reports

EVALUSION Campaign Delivers Amatera Stealer and NetSupport...

The eSentire Threat Response Unit identified a malware campaign using ClickFix as an initial access vector to deploy Amatera Stealer and NetSupport RAT. Amatera Stealer is a rebranded version of ACR Stealer, with advanced evasion techniques like WoW64 SysCalls to bypass security solutions. It targe…
powershell
information theft
clickfix
acr stealer
netsupport rat
c2 communication
evasion techniques
crypto-wallets
amatera stealer
2025-11-18
Published: November 18, 2025
Downloadable IOCs: 1

330 custom email domains, and what this tells us about how attackers build infrastructure for fake account creation

A large-scale fake account creation campaign was detected and blocked, involving tens of thousands of attempted registrations using bots. The attackers employed a modified Chrome browser with anti-detect techniques like canvas randomization. The campaign stood out due to the use of 330 unique custo…
domain registration
2025-11-18
anti-abuse
fake accounts
bot detection
fingerprinting
email infrastructure
behavioral analysis
Published: November 18, 2025
Downloadable IOCs: 330

Frontline Intelligence: Analysis of UNC1549 TTPs, Custom Tools, and Malware Targeting the Aerospace and Defense Ecosystem

UNC1549, an Iranian-linked threat group, has been targeting aerospace, aviation, and defense industries since mid-2024. They employ sophisticated initial access techniques, including exploiting third-party relationships and targeted phishing. The group uses custom malware like TWOSTROKE, LIGHTRAIL,…
espionage
phishing
defense
lateral movement
privilege escalation
aerospace
custom malware
minibike
2025-11-18
dcsyncer.slick
third-party compromise
sightgrab
trusttrap
lightrail
deeproot
crashpad
twostroke
pollblend
ghostline
Published: November 18, 2025
Downloadable IOCs: 16
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-63216

10.0
    Itel
  • Dab Gateway
Published: November 18, 2025

CVE-2025-41733

9.8
    *
  • *
Published: November 18, 2025

CVE-2025-41734

9.8
    *
  • *
Published: November 18, 2025

CVE-2025-9312

9.8
    Wso2
  • Wso2
  • Mutual Tls
Published: November 18, 2025

CVE-2025-63694

9.8
    Dzzoffice
  • Dzzoffice
Published: November 18, 2025

CVE-2025-63695

9.8
    Dzzoffice
  • Dzzoffice
Published: November 18, 2025

CVE-2025-54321

9.8
    Ascertia
  • Signinghub
Published: November 18, 2025

CVE-2025-63225

9.8
    Eurolab
  • Elts100 Ubx
Published: November 18, 2025

CVE-2025-63228

9.8
    Mozart
  • Fm Transmitter
Published: November 18, 2025

CVE-2025-63217

9.8
    Itel
  • Itamux
Published: November 18, 2025

CVE-2025-12383

9.4
    Eclipse
  • Jersey
Published: November 18, 2025

CVE-2025-41346

9.3
    Iest
  • Winplus
Published: November 18, 2025

CVE-2025-65015

9.2
    Joserfc
  • Joserfc
Published: November 18, 2025

CVE-2025-40547

9.1
    Solarwinds
  • Serv-U
Published: November 18, 2025

CVE-2025-40548

9.1
    Solarwinds
  • Serv U
Published: November 18, 2025

CVE-2025-40549

9.1
    Solarwinds
  • Serv-U
Published: November 18, 2025

CVE-2025-56643

9.1
    Requarks
  • Wiki.Js
Published: November 18, 2025

CVE-2025-13226

8.8
    Google
  • Chrome
    Linux
    Microsoft
    Apple
Published: November 18, 2025

CVE-2025-13227

8.8
    Google
  • Chrome
    Linux
    Microsoft
    Apple
Published: November 18, 2025

CVE-2025-13228

8.8
    Google
  • Chrome
    Linux
    Microsoft
    Apple
Published: November 18, 2025

CVE-2025-13229

8.8
    Google
  • Chrome
    Linux
    Microsoft
    Apple
Published: November 18, 2025

CVE-2025-13230

8.8
    Google
  • Chrome
    Linux
    Microsoft
    Apple
Published: November 18, 2025

CVE-2025-8693

8.8
    Zyxel
  • Dx3300-T0
Published: November 18, 2025

CVE-2025-12775

8.8
    Wordpress
  • Wp Dropzone
Published: November 18, 2025

CVE-2025-13088

8.8
    Woocommerce
  • Category And Product Tabs
Published: November 18, 2025

CVE-2025-13069

8.8
    Wordpress
  • Enable Svg Webp And Ico Upload
Published: November 18, 2025

CVE-2025-41735

8.8
    *
  • *
Published: November 18, 2025

CVE-2025-41736

8.8
    Python
  • Python
    Php
Published: November 18, 2025

CVE-2025-6670

8.8
    Wso2
  • Carbon
Published: November 18, 2025

CVE-2025-58692

8.8
    Fortinet
  • Fortivoice
Published: November 18, 2025

CVE-2025-41347

8.7
    Iest
  • Winplus
Published: November 18, 2025

CVE-2025-41348

8.7
    Iest
  • Winplus
Published: November 18, 2025

CVE-2025-64324

8.5
    Kubevirt
  • Kubevirt
Published: November 18, 2025

CVE-2025-60455

8.4
    Modular
  • Max Serve
Published: November 18, 2025

CVE-2025-64325

8.4
    Emby
  • Emby Server
Published: November 18, 2025

CVE-2025-12974

8.1
    Gravity Forms
  • Gravity Forms
Published: November 18, 2025

CVE-2025-12528

8.1
    Pie Forms
  • Plugin
Published: November 18, 2025

CVE-2025-62406

8.1
    Piwigo
  • Piwigo
Published: November 18, 2025

CVE-2025-48593

8.0
    Google
  • Android
Published: November 18, 2025

CVE-2025-33183

7.8
    Nvidia
  • Isaac-Gr00t
Published: November 18, 2025

CVE-2025-33184

7.8
    Nvidia
  • Isaac-Gr00t
Published: November 18, 2025

CVE-2025-46373

7.8
    Fortinet
  • Forticlient
Published: November 18, 2025

CVE-2025-47761

7.8
    Fortinet
  • Forticlient Windows
Published: November 18, 2025

CVE-2025-37155

7.8
    Hpe
  • Network Management Services
Published: November 18, 2025

CVE-2025-12955

7.5
    Woocommerce
  • Woocommerce
Published: November 18, 2025

CVE-2025-41737

7.5
    Php
  • Php
    Web Server
Published: November 18, 2025

CVE-2025-63800

7.5
    Open Source Point Of Sale
  • Point Of Sale
Published: November 18, 2025

CVE-2025-53843

7.5
    Fortinet
  • Fortios
Published: November 18, 2025

CVE-2025-55796

7.5
    Openml
  • Openml
Published: November 18, 2025

CVE-2025-56527

7.5
    Kotaemon
  • Kotaemon
Published: November 18, 2025

CVE-2025-58413

7.5
    Fortinet
  • Fortios
  • Fortisase
Published: November 18, 2025

CVE-2025-64076

7.5
    Cbor2
  • Cbor2
Published: November 18, 2025

CVE-2025-63955

7.5
    Phpgurukul
  • Student Record System
Published: November 18, 2025

CVE-2025-37161

7.5
    Hpe
  • Hpe Products
Published: November 18, 2025

CVE-2025-63602

7.3
    Awesome Miner
  • Awesome Miner
    Winring0
Published: November 18, 2025

CVE-2025-8076

7.2
    Supermicro
  • Mbd-X13sedw-F
  • Bmc
Published: November 18, 2025

CVE-2025-8727

7.2
    Supermicro
  • Mbd-X13sedw-F
Published: November 18, 2025

CVE-2025-11620

7.2
    Wordpress
  • Multiple Roles Per User
Published: November 18, 2025

CVE-2025-4212

7.2
    Woocommerce
  • Checkout Files Upload
Published: November 18, 2025

CVE-2025-58034

7.2
    Fortinet
  • Fortiweb
Published: November 18, 2025

CVE-2025-37163

7.2
    Hpe
  • Aruba Networking Airwave
Published: November 18, 2025

CVE-2025-63227

7.2
    Mozart Fm Transmitter
  • Mozart Fm Transmitter
Published: November 18, 2025

CVE-2025-63215

7.2
    Sound4
  • Impact
Published: November 18, 2025

CVE-2025-12411

7.1
    Premmerce
  • Wholesale Pricing
    Woocommerce
Published: November 18, 2025

CVE-2025-10089

7.0
    Mitsubishi
  • Milco.S Setting Application
  • Milco.S Setting Application Ir
  • Milco.S Easy Setting Application Ir
  • Milco.S Easy Switch Application Ir
Published: November 18, 2025

CVE-2025-34324

7.0
    Gopay
  • Gosing Desktop
Published: November 18, 2025

CVE-2025-13323

6.9
    Carmelo
  • Simple Pizza Ordering System
Published: November 18, 2025

CVE-2025-13344

6.9
    Oretnom23
  • Train Station Ticketing System
Published: November 18, 2025

CVE-2025-59111

6.9
    Windu
  • Cms
Published: November 18, 2025

CVE-2025-59113

6.9
    Windu
  • Cms
Published: November 18, 2025

CVE-2025-59116

6.9
    Windu
  • Cms
Published: November 18, 2025

CVE-2025-12119

6.9
    Mongodb
  • Mongodb
  • Mongoc
Published: November 18, 2025

CVE-2025-59110

6.8
    Windu
  • Cms
Published: November 18, 2025

CVE-2025-63892

6.8
    Sourcecodester
  • Student Grades Management System
Published: November 18, 2025

CVE-2025-8084

6.8
    Wordpress
  • Ai Engine
Published: November 18, 2025

CVE-2025-37156

6.8
    Hewlett Packard Enterprise
  • Arubaos-Cx
Published: November 18, 2025

CVE-2025-37157

6.7
    Hpe
  • Aos-Cx
Published: November 18, 2025

CVE-2025-37158

6.7
    Hpe
  • Aos-Cx
Published: November 18, 2025

CVE-2025-13133

6.6
    Wordpress
  • Simple User Import Export
Published: November 18, 2025

CVE-2025-48839

6.6
    Fortinet
  • Fortiadc
Published: November 18, 2025

CVE-2025-12937

6.5
    Acf
  • Flexible Layouts Manager
Published: November 18, 2025

CVE-2025-63603

6.5
    Reading-Plus-Ai
  • Mcp Server Data Exploration
Published: November 18, 2025

CVE-2025-63604

6.5
    Baryhuang
  • Mcp-Server-Aws-Resources-Python
Published: November 18, 2025

CVE-2025-63258

6.5
    H3c
  • Erg3
  • Erg5
  • Xiaobei
  • Cloud Gateway
  • Wireless Access Point
Published: November 18, 2025

CVE-2025-63512

6.5
    Kishan0725
  • Hospital Management System
Published: November 18, 2025

CVE-2025-63513

6.5
    Kishan0725
  • Hospital Management System
Published: November 18, 2025

CVE-2025-56499

6.5
    Mihomo
  • Mihomo
Published: November 18, 2025

CVE-2025-63749

6.5
    Pnetlab
  • Pnetlab
Published: November 18, 2025

CVE-2025-37162

6.5
    Hewlett Packard Enterprise
  • Device
Published: November 18, 2025

CVE-2025-11265

6.4
    Wordpress
  • Vk All In One Expansion Unit
Published: November 18, 2025

CVE-2025-11267

6.4
    Wordpress
  • Vk All In One Expansion Unit
Published: November 18, 2025

CVE-2025-11868

6.4
    Everviz
  • Everviz
Published: November 18, 2025

CVE-2025-12823

6.4
    Wordpress
  • Csv To Sorttable
Published: November 18, 2025

CVE-2025-12962

6.4
    Wordpress
  • Local Syndication Plugin
Published: November 18, 2025

CVE-2025-8605

6.4
    Wordpress
  • Gutenify
Published: November 18, 2025

CVE-2025-8609

6.4
    Rtmkit
  • Addons For Elementor
    Wordpress
Published: November 18, 2025

CVE-2025-12088

6.4
    Wordpress
  • Meta Display Block
Published: November 18, 2025

CVE-2025-12457

6.4
    Wordpress
  • Enable Svg Webp And Ico Upload
Published: November 18, 2025

CVE-2025-12691

6.4
    Photonic Gallery
  • Photonic Gallery Lightbox
Published: November 18, 2025

CVE-2025-12376

6.4
    Wordpress
  • Icon List Block
Published: November 18, 2025

CVE-2025-46776

6.4
    Fortinet
  • Fortiextender
Published: November 18, 2025

CVE-2025-65013

6.2
    Librenms
  • Librenms
Published: November 18, 2025

CVE-2025-12078

6.1
    Wordpress
  • Artibot Free Chat Bot
Published: November 18, 2025

CVE-2025-12404

6.1
    Wordpress
  • Like-It
Published: November 18, 2025

CVE-2025-12406

6.1
    Project Honey Pot
  • Spam Trap
Published: November 18, 2025

CVE-2025-12079

6.1
    Wordpress
  • Wp Twitter Auto Publish
Published: November 18, 2025

CVE-2025-56526

6.1
    Kotaemon
  • Kotaemon
Published: November 18, 2025

CVE-2025-63514

6.1
    Kishan0725
  • Hospital Management System
Published: November 18, 2025

CVE-2025-63828

6.1
    Backdrop
  • Backdrop
Published: November 18, 2025

CVE-2025-13081

5.9
    Drupal
  • Drupal Core
Published: November 18, 2025

CVE-2025-11427

5.8
    Wordpress
  • Wpmigrate Lite
Published: November 18, 2025

CVE-2025-37159

5.8
    Hpe
  • Aos-Cx
Published: November 18, 2025

CVE-2025-52457

5.7
    Gallagher
  • Command Centre Server
Published: November 18, 2025

CVE-2025-52578

5.7
    Gallagher
  • Command Centre Server
Published: November 18, 2025

CVE-2025-63226

5.7
    Sencore
  • Smp100
Published: November 18, 2025

CVE-2025-8404

5.5
    Supermicro
  • Bmc Shared Library
Published: November 18, 2025

CVE-2025-46775

5.5
    Fortinet
  • Fortiextender
Published: November 18, 2025

CVE-2025-54660

5.5
    Fortinet
  • Forticlient
Published: November 18, 2025

CVE-2025-65093

5.5
    Librenms
  • Librenms
Published: November 18, 2025

CVE-2025-12524

5.4
    Wordpress
  • Post Type Switcher
Published: November 18, 2025

CVE-2025-7623

5.4
    Smash
  • Smash-Clp Shell
Published: November 18, 2025

CVE-2025-26391

5.4
    Solarwinds
  • Observability
Published: November 18, 2025

CVE-2025-11734

5.4
    Aioseop
  • Broken Link Checker
Published: November 18, 2025

CVE-2025-13196

5.4
    Element Pack
  • Addons For Elementor
Published: November 18, 2025

CVE-2025-55179

5.4
    Whatsapp
  • Whatsapp
  • Whatsapp Business
Published: November 18, 2025

CVE-2025-63883

5.4
    Electic-Shop
  • Electic-Shop
Published: November 18, 2025

CVE-2025-12760

5.4
    Drupal
  • Email Tfa
Published: November 18, 2025

CVE-2025-63693

5.4
    Dzzoffice
  • Dzzoffice
Published: November 18, 2025

CVE-2025-63229

5.4
    Mozart
  • Fm Transmitter
Published: November 18, 2025

CVE-2025-13306

5.3
    D-Link
  • Dwr-M920
  • Dwr-M921
  • Dir-822k
  • Dir-825m
Published: November 18, 2025

CVE-2025-13325

5.3
    Facebook-Julykringcadayona
  • Student Information System
Published: November 18, 2025

CVE-2025-6599

5.3
    Zyxel
  • Dx3301-T0
Published: November 18, 2025

CVE-2025-12391

5.3
    Wordpress
  • Buddy Press
Published: November 18, 2025

CVE-2025-12392

5.3
    Woocommerce
  • Cryptocurrency Payment Gateway
Published: November 18, 2025

CVE-2025-13345

5.3
    Oretnom23
  • Train Station Ticketing System
Published: November 18, 2025

CVE-2025-12545

5.3
    Woo
  • Pixel Manager For Woocommerce
Published: November 18, 2025

CVE-2025-13346

5.3
    Oretnom23
  • Train Station Ticketing System
Published: November 18, 2025

CVE-2025-13347

5.3
    Oretnom23
  • Train Station Ticketing System
Published: November 18, 2025

CVE-2025-59115

5.3
    Windu
  • Windu Cms
Published: November 18, 2025

CVE-2025-58121

5.3
    Checkmk
  • Checkmk
Published: November 18, 2025

CVE-2025-58122

5.3
    Checkmk
  • Checkmk
Published: November 18, 2025

CVE-2025-9977

5.3
    Times Software
  • E-Payroll
Published: November 18, 2025

CVE-2025-13080

5.3
    Drupal
  • Drupal Core
Published: November 18, 2025

CVE-2025-46215

5.3
    Fortinet
  • Fortisandbox
Published: November 18, 2025

CVE-2025-59669

5.3
    Fortinet
  • Fortiweb
Published: November 18, 2025

CVE-2025-63829

5.3
    Eprosima
  • Fast-Dds
Published: November 18, 2025

CVE-2025-37160

5.3
    Hpe
  • Web Manager
Published: November 18, 2025

CVE-2025-54990

5.3
    Xwiki
  • Admintools
Published: November 18, 2025

CVE-2025-13343

5.1
    Sourcecodester
  • Interview Management System
Published: November 18, 2025

CVE-2025-41349

5.1
    Iest
  • Winplus
Published: November 18, 2025

CVE-2025-41350

5.1
    Iest
  • Winplus
Published: November 18, 2025

CVE-2025-13349

5.1
    Sourcecodester
  • Student Grades Management System
Published: November 18, 2025

CVE-2025-59112

5.1
    Windu
  • Cms
Published: November 18, 2025

CVE-2025-59114

5.1
    Windu
  • Cms
Published: November 18, 2025

CVE-2025-63408

5.1
    Local Agent
  • Dvr
Published: November 18, 2025

CVE-2025-65012

5.1
    Kirby
  • Kirby
Published: November 18, 2025

CVE-2025-54770

4.9
    Gnu
  • Grub2
Published: November 18, 2025

CVE-2025-54771

4.9
    Gnu
  • Grub
Published: November 18, 2025

CVE-2025-61662

4.9
    Gnu
  • Grub
Published: November 18, 2025

CVE-2025-61663

4.9
    Gnu
  • Grub2
Published: November 18, 2025

CVE-2025-61664

4.9
    Grub
  • Grub2
Published: November 18, 2025

CVE-2025-40545

4.8
    Solarwinds
  • Observability Self-Hosted
Published: November 18, 2025

CVE-2025-59117

4.8
    Windu
  • Cms
Published: November 18, 2025

CVE-2025-64996

4.8
    Checkmk
  • Checkmk
Published: November 18, 2025

CVE-2025-61661

4.8
    Redhat
  • Grub
Published: November 18, 2025

CVE-2025-12173

4.3
    Wordpress
  • Wp Admin Microblog
Published: November 18, 2025

CVE-2025-12372

4.3
    Wordpress
  • Permalinks Cascade
Published: November 18, 2025

CVE-2025-12827

4.3
    Wordpress
  • Top Friends
Published: November 18, 2025

CVE-2025-12961

4.3
    Wordpress
  • Download Panel
Published: November 18, 2025

CVE-2025-9625

4.3
    Coil
  • Web Monetization
Published: November 18, 2025

CVE-2025-12481

4.3
    Wordpress
  • Wp Duplicate Page
Published: November 18, 2025

CVE-2025-12639

4.3
    Wordpress
  • Wmodes Catalog Mode Product Pricing Enquiry Forms Promotions
Published: November 18, 2025

CVE-2025-10158

4.3
    Rsync
  • Rsync
Published: November 18, 2025

CVE-2025-13082

4.3
    Drupal
  • Drupal
Published: November 18, 2025

CVE-2025-53360

4.3
    Teclib
  • Glpi Database Inventory Plugin
Published: November 18, 2025

CVE-2025-54971

4.3
    Fortinet
  • Fortiadc
Published: November 18, 2025

CVE-2025-54972

4.3
    Fortinet
  • Fortimail
Published: November 18, 2025

CVE-2025-54320

4.3
    Ascertia
  • Signinghub
Published: November 18, 2025

CVE-2025-64515

4.3
    Open Forms
  • Open Forms
Published: November 18, 2025

CVE-2025-61713

4.2
    Fortinet
  • Fortipam
Published: November 18, 2025

CVE-2025-13083

3.7
    Drupal
  • Drupal Core
Published: November 18, 2025

CVE-2025-65014

3.7
    Librenms
  • Librenms
Published: November 18, 2025

CVE-2025-12761

3.5
    Drupal
  • Simple Multi Step Form
Published: November 18, 2025

CVE-2025-52639

3.5
    Hcl
  • Hcl Connections
Published: November 18, 2025

CVE-2025-12792

3.2
    Canva
  • Canva
Published: November 18, 2025

CVE-2025-55074

3.0
    Mattermost
  • Mattermost
Published: November 18, 2025

CVE-2025-64734

2.4
    Gallagher
  • Command Centre Server
Published: November 18, 2025

CVE-2025-54821

1.9
    Fortinet
  • Fortios
  • Fortipam
  • Fortiproxy
Published: November 18, 2025

CVE-2025-63994

None
    Richfilemanager
  • Richfilemanager
Published: November 18, 2025
Click here to see more Vulnerabilities