Tag: 2025-11-20

4 Attack Reports | 103 Vulnerabilities

Attack reports

Cooking up trouble: How TamperedChef uses signed apps to deliver stealthy payloads

The TamperedChef campaign is a global malvertising and SEO operation that distributes seemingly legitimate software with valid code signing to trick users into executing malicious installers. These fake applications mimic common software and establish persistence through scheduled tasks, delivering…
social engineering
malvertising
persistence
javascript
remote access
scheduled tasks
seo
code-signing
javascript payload
2025-11-20
shell companies
2025-11-26
code-signing certificates
signed applications
Published: November 26, 2025
Downloadable IOCs: 0

The Tsundere botnet uses the Ethereum blockchain to infect its targets

The Tsundere botnet, discovered in mid-2025, is an active threat targeting Windows users. It utilizes the Ethereum blockchain to retrieve C2 addresses and employs Node.js for its operations. The botnet spreads through MSI installers and PowerShell scripts, often disguised as popular games. It uses …
powershell
javascript
node.js
botnet
msi
ethereum
websocket
2025-11-20
123 stealer
aes-256
tsundere bot
koneko
tsundere
Published: November 20, 2025
Downloadable IOCs: 21

APT24 Pivot to Multi-Vector Attacks

APT24, a Chinese threat actor, has conducted a three-year cyber espionage campaign using BADAUDIO, a highly obfuscated first-stage downloader. The group has evolved from broad strategic web compromises to more sophisticated tactics, including supply chain attacks and targeted phishing. They comprom…
obfuscation
phishing
supply chain
cobalt strike
china
cobalt strike beacon
cyber espionage
2025-11-20
badaudio
strategic web compromise
Published: November 20, 2025
Downloadable IOCs: 0

New Banking Trojan Identified, Distributed Through WhatsApp

A new banking Trojan dubbed Eternidade Stealer has been identified, distributed through WhatsApp hijacking and social engineering. The malware, written in Delphi, uses IMAP to retrieve C2 addresses dynamically. It's spread via a WhatsApp worm campaign using a Python script. The attack chain involve…
social engineering
whatsapp
credential theft
banking trojan
brazil
delphi
2025-11-20
eternidade stealer
imap
Published: November 20, 2025
Linked vulnerabilities : CVE-2025-59287 (CVSS 9.8)
Downloadable IOCs: 23
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-49752

10.0
    Microsoft
  • Azure Bastion Developer
Published: November 20, 2025

CVE-2025-60738

9.8
    Ilevia
  • Eve X1 Server Firmware
  • Logic Version
Published: November 20, 2025

CVE-2025-52410

9.8
    Institute-Of-Current-Students
  • Institute-Of-Current-Students
Published: November 20, 2025

CVE-2025-63888

9.8
    Thinkphp
  • Thinkphp
Published: November 20, 2025

CVE-2025-63685

9.8
    Quark
  • Cloud Drive
Published: November 20, 2025

CVE-2025-63807

9.8
    Weijiang1994
  • University-Bbs
Published: November 20, 2025

CVE-2025-59245

9.8
    Microsoft
  • Sharepoint Online
Published: November 20, 2025

CVE-2025-10571

9.4
    Abb
  • Abb Ability Edgenius
Published: November 20, 2025

CVE-2025-34320

9.3
    Basis
  • Bbj
Published: November 20, 2025

CVE-2025-12414

9.2
    Looker
  • Looker
Published: November 20, 2025

CVE-2025-64428

8.9
    Dataease
  • Dataease
Published: November 20, 2025

CVE-2025-48986

8.8
    Revive Adserver
  • Revive Adserver
Published: November 20, 2025

CVE-2025-36072

8.8
    Ibm
  • Webmethods Integration
Published: November 20, 2025

CVE-2025-64655

8.8
    Microsoft
  • Dynamics Omnichannel Sdk
Published: November 20, 2025

CVE-2025-62294

8.7
    Soplanning
  • Soplanning
Published: November 20, 2025

CVE-2025-62730

8.7
    Soplanning
  • Soplanning
Published: November 20, 2025

CVE-2025-52668

8.7
    Revive
  • Revive Adserver
Published: November 20, 2025

CVE-2025-62207

8.6
    Microsoft
  • Azure Monitor
Published: November 20, 2025

CVE-2025-62459

8.3
    Microsoft
  • Defender Portal
Published: November 20, 2025

CVE-2025-40601

7.5
    Sonicwall
  • Sonicos
Published: November 20, 2025

CVE-2025-63889

7.5
    Thinkphp
  • Thinkphp
Published: November 20, 2025

CVE-2025-63700

7.5
    Clerk
  • Clerk-Js
Published: November 20, 2025

CVE-2025-25613

7.5
    Fs Inc
  • S3150 8t2f
Published: November 20, 2025

CVE-2025-13087

7.5
    Opto22
  • Groov Manage Rest Api
  • Grv-Epic
  • Groov Rio
Published: November 20, 2025

CVE-2025-61138

7.5
    Qlik
  • Qlik Sense Enterprise
Published: November 20, 2025

CVE-2025-13445

7.4
    Tenda
  • Ac21 Firmware
  • Ac21
Published: November 20, 2025

CVE-2025-13446

7.4
    Tenda
  • Ac21 Firmware
  • Ac21
Published: November 20, 2025

CVE-2025-13433

7.3
    Muse Group
  • Musehub
Published: November 20, 2025

CVE-2025-12120

7.3
    Lite Xl
  • Lite Xl
Published: November 20, 2025

CVE-2025-12121

7.3
    Lite Xl
  • Lite Xl
Published: November 20, 2025

CVE-2025-0643

7.2
    Narkom Communication And Software Technologies Trade Ltd Co
  • Pyxis Signage
Published: November 20, 2025

CVE-2025-0645

7.2
    Narkom Communication And Software Technologies Trade Ltd Co
  • Pyxis Signage
Published: November 20, 2025

CVE-2025-11676

7.1
    Tp-Link
  • Tl-Wr940n
Published: November 20, 2025

CVE-2025-52670

7.1
    Revive Adserver
  • Revive Adserver
Published: November 20, 2025

CVE-2025-62674

7.0
    *
  • *
  • Camera
Published: November 20, 2025

CVE-2025-64770

7.0
    Onvif
  • Onvif
    Camera
Published: November 20, 2025

CVE-2025-13422

6.9
    Freeprojectscodes
  • Sports Club Management System
Published: November 20, 2025

CVE-2025-13442

6.9
    Utt
  • Progress
Published: November 20, 2025

CVE-2025-13449

6.9
    Oretnom23
  • Online Shop Project
Published: November 20, 2025

CVE-2025-13451

6.9
    Oretnom23
  • Online Shop Project
Published: November 20, 2025

CVE-2025-41074

6.9
    Limesurvey
  • Limesurvey
Published: November 20, 2025

CVE-2025-41075

6.9
    Limesurvey
  • Limesurvey
Published: November 20, 2025

CVE-2025-41076

6.9
    Limesurvey
  • Limesurvey
Published: November 20, 2025

CVE-2025-62875

6.9
    Opensmtpd
  • Opensmtpd
    Suse
Published: November 20, 2025

CVE-2025-64185

6.9
    Opendondemand
  • Opendondemand
Published: November 20, 2025

CVE-2025-12502

6.8
    Wordpress
  • Attention-Bar
Published: November 20, 2025

CVE-2025-62346

6.8
    Hcl
  • Hcl Glovius Cloud
Published: November 20, 2025

CVE-2025-62709

6.8
    Clipbucket
  • Clipbucket
Published: November 20, 2025

CVE-2025-40604

6.5
    Sonicwall
  • Email Security Appliance
Published: November 20, 2025

CVE-2025-60794

6.5
    Couch-Auth
  • Couch-Auth
Published: November 20, 2025

CVE-2025-60797

6.5
    Phppgadmin
  • Phppgadmin
Published: November 20, 2025

CVE-2025-60798

6.5
    Phppgadmin
  • Phppgadmin
Published: November 20, 2025

CVE-2025-55126

6.5
    Hackerone
  • Hackerone
Published: November 20, 2025

CVE-2025-55128

6.5
    *
  • *
Published: November 20, 2025

CVE-2025-5092

6.4
    Wordpress
  • Plugin
    Lightgallery
Published: November 20, 2025

CVE-2025-13435

6.3
    Dreampie
  • Resty
Published: November 20, 2025

CVE-2025-48987

6.3
    Revive
  • Revive Adserver
Published: November 20, 2025

CVE-2025-36159

6.2
    Ibm
  • Concert
Published: November 20, 2025

CVE-2025-60796

6.1
    Phppgadmin
  • Phppgadmin
Published: November 20, 2025

CVE-2025-60799

6.1
    Phppgadmin
  • Phppgadmin
Published: November 20, 2025

CVE-2025-60737

6.1
    Ilevia
  • Eve X1 Server
Published: November 20, 2025

CVE-2025-63848

6.1
    Swish
  • Prolog
Published: November 20, 2025

CVE-2025-64027

6.1
    Snipe-It
  • Snipe-It
Published: November 20, 2025

CVE-2025-55124

6.1
    Revive
  • Revive Adserver
Published: November 20, 2025

CVE-2025-36153

6.1
    Ibm
  • Concert
Published: November 20, 2025

CVE-2025-36161

5.9
    Ibm
  • Concert
Published: November 20, 2025

CVE-2025-64660

5.7
    Microsoft
  • Visual Studio Code
Published: November 20, 2025

CVE-2025-13437

5.6
    Google
  • Zx
Published: November 20, 2025

CVE-2025-13434

5.5
    Jameschz
  • Hush Framework
Published: November 20, 2025

CVE-2025-55127

5.4
    Hackerone
  • Hackerone
Published: November 20, 2025

CVE-2025-12778

5.3
    Ultimate Member
  • Widgets For Elementor
Published: November 20, 2025

CVE-2025-13443

5.3
    Macrozheng
  • Mall
Published: November 20, 2025

CVE-2025-13468

5.3
    Oretnom23
  • Alumni Management System
Published: November 20, 2025

CVE-2025-40605

5.3
    Sonicwall
  • Email Security Appliance
Published: November 20, 2025

CVE-2025-62293

5.3
    Soplanning
  • So Planning
Published: November 20, 2025

CVE-2025-36160

5.3
    Ibm
  • Concert
Published: November 20, 2025

CVE-2025-13423

5.1
    Campcodes
  • Retro Basketball Shoes Online Store
Published: November 20, 2025

CVE-2025-13424

5.1
    Campcodes
  • Supplier Management System
Published: November 20, 2025

CVE-2025-13450

5.1
    Oretnom23
  • Online Shop Project
Published: November 20, 2025

CVE-2025-64984

5.1
    Kaspersky
  • Endpoint Security For Linux
  • Industrial Cybersecurity For Linux Nodes
  • Endpoint Security For Mac
Published: November 20, 2025

CVE-2025-62295

5.1
    Soplanning
  • Soplanning
Published: November 20, 2025

CVE-2025-62296

5.1
    Soplanning
  • Soplanning
Published: November 20, 2025

CVE-2025-62297

5.1
    Soplanning
  • Soplanning
Published: November 20, 2025

CVE-2025-62729

5.1
    Soplanning
  • Soplanning
Published: November 20, 2025

CVE-2025-62731

5.1
    Soplanning
  • Soplanning
Published: November 20, 2025

CVE-2025-36158

5.1
    Ibm
  • Concert
Published: November 20, 2025

CVE-2025-13469

4.8
    Public Knowledge Project
  • Ojs
Published: November 20, 2025

CVE-2025-35029

4.8
    Medical Informatics Engineering
  • Enterprise Health
Published: November 20, 2025

CVE-2025-13484

4.8
    Campcodes
  • Online Beauty Parlor Management System
Published: November 20, 2025

CVE-2025-65220

4.3
    Tenda
  • Ac21 Firmware
  • Ac21
Published: November 20, 2025

CVE-2025-65221

4.3
    Tenda
  • Ac21 Firmware
  • Ac21
Published: November 20, 2025

CVE-2025-65222

4.3
    Tenda
  • Ac21 Firmware
  • Ac21
Published: November 20, 2025

CVE-2025-65223

4.3
    Tenda
  • Ac21 Firmware
  • Ac21
Published: November 20, 2025

CVE-2025-65226

4.3
    Tenda
  • Ac21 Firmware
  • Ac21
Published: November 20, 2025

CVE-2025-62724

4.3
    Openondemand
  • Openondemand
Published: November 20, 2025

CVE-2025-52669

4.3
    Revive Adserver
  • Revive Adserver
Published: November 20, 2025

CVE-2025-52671

4.3
    Revive Adserver
  • Revive Adserver
Published: November 20, 2025

CVE-2025-52667

3.5
    Revive
  • Revive Adserver
Published: November 20, 2025

CVE-2025-55123

3.5
    Revive Adserver
  • Revive Adserver
Published: November 20, 2025

CVE-2025-64524

3.3
    Cups-Filters
  • Cups
Published: November 20, 2025

CVE-2025-52666

2.7
    Revive Adserver
  • Revive Adserver
Published: November 20, 2025

CVE-2025-13425

1.9
    Osv-Scalibr
  • *
Published: November 20, 2025

CVE-2024-31405

None
    Ubuntu
  • *
Published: November 20, 2025
Click here to see more Vulnerabilities