Tag: 2025-11-24

5 Attack Reports | 100 Vulnerabilities

Attack reports

Build script exposes PyPI to domain takeover attacks

ReversingLabs researchers discovered vulnerable code in legacy Python packages that could enable an attack on the Python Package Index (PyPI) via a domain compromise. The vulnerability lies in bootstrap files for a build tool that installs the Python package 'distribute' and performs other tasks. W…
python
supply chain
vulnerability
pypi
2025-11-24
packaging
legacy code
domain takeover
CVE-2023-45311
bootstrap script
Published: November 24, 2025
Linked vulnerabilities : CVE-2023-45311
Downloadable IOCs: 0

Stories from the SOC: Mystery of the postponed proxyware install

A suspicious PowerShell alert led to the discovery of an attack chain aimed at installing proxyware on a compromised system. The infection originated from a disk-cleaning utility installed three days prior, which included malicious scripts and established a connection to a C2 server. The attack uti…
powershell
node.js
c2 server
in-memory execution
proxyware
2025-11-24
download cradle
unauthorized software
disk-cleaning utility
Published: November 24, 2025
Downloadable IOCs: 5

ClickFix Gets Creative: Malware Buried in Images

A multi-stage malware execution chain originating from a ClickFix lure has been discovered, leading to the delivery of infostealing malware like LummaC2 and Rhadamanthys. The campaign utilizes steganography to hide malicious code within PNG images. Two distinct ClickFix lures were observed: a stand…
social engineering
lummac2
rhadamanthys
infostealer
steganography
clickfix
multi-stage
2025-11-24
windows update
Published: November 24, 2025
Downloadable IOCs: 12

Brazilian Campaign: Spreading the Malware via WhatsApp

A massive phishing campaign targeting Brazil is spreading malware through WhatsApp Web using an open-source automation script and loading a banking trojan into memory. The attack begins with a phishing email containing a malicious VBS script that downloads and executes an MSI file and another VBS f…
phishing
whatsapp
autoit
banking trojan
brazil
in-memory execution
selenium
sorvepotel
2025-11-24
water-saci
Published: November 24, 2025
Downloadable IOCs: 4

Kimsuky's Ongoing Evolution of KimJongRAT and Expanding Threats

This analysis examines the latest attack flow of the KimJongRAT variant, attributed to the North Korean threat actor Kimsuky. The malware has evolved to include both PE-based and PowerShell-based attack chains, which have been merged into a single workflow. The attackers use phishing emails for ini…
phishing
north korea
babyshark
powershell
credential theft
keylogging
data exfiltration
spear-phishing
browser credentials
kimjongrat
2025-11-24
pe executable
Published: November 24, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-54347

9.9
    Desktopalert
  • Pingalert Application Server
Published: November 24, 2025

CVE-2025-63958

9.8
    vision_tools_workspace
Published: November 24, 2025

CVE-2024-47856

9.8
    authentication_agent
Published: November 24, 2025

CVE-2018-25126

9.3
    nvms-9000
    ipc
    dvr
    nvr
Published: November 24, 2025

CVE-2023-7330

9.3
    nbr
Published: November 24, 2025

CVE-2025-12977

9.1
    Treasuredata
  • Fluent Bit
Published: November 24, 2025

CVE-2025-12970

8.8
    Treasuredata
  • Fluent Bit
Published: November 24, 2025

CVE-2025-63434

8.8
    Xtooltech
  • Xtool Anyscan
Published: November 24, 2025

CVE-2025-56400

8.8
    tuya_sdk
    tuya_smart
    smartlife
Published: November 24, 2025

CVE-2025-41016

8.7
    dfusion
Published: November 24, 2025

CVE-2025-10554

8.7
    enovia_product_manager
Published: November 24, 2025

CVE-2025-10555

8.7
    delmia_service_process_engineer
Published: November 24, 2025

CVE-2024-14007

8.7
    nvms-9000
Published: November 24, 2025

CVE-2025-11921

8.5
    istat
Published: November 24, 2025

CVE-2025-44018

8.3
    gl-axt1800
Published: November 24, 2025

CVE-2025-13609

8.2
    keylime
Published: November 24, 2025

CVE-2025-60915

8.1
    Craws
  • Openatlas
Published: November 24, 2025

CVE-2025-52538

8.0
    xocl_driver
Published: November 24, 2025

CVE-2025-12740

7.7
    looker
    looker
    looker
    looker
    looker
Published: November 24, 2025

CVE-2025-12741

7.7
    looker
    looker
    looker
    looker
    looker
    looker
    looker
Published: November 24, 2025

CVE-2025-56401

7.6
    wbrm
Published: November 24, 2025

CVE-2025-7402

7.5
    ads_pro_plugin
Published: November 24, 2025

CVE-2025-41729

7.5
    modbus
Published: November 24, 2025

CVE-2025-65493

7.5
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65494

7.5
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65495

7.5
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65998

7.5
    Apache
  • Syncope
Published: November 24, 2025

CVE-2025-60638

7.5
    Free5gc
  • Free5gc
Published: November 24, 2025

CVE-2025-54338

7.5
    Desktopalert
  • Pingalert Application Server
Published: November 24, 2025

CVE-2025-54563

7.5
    Desktopalert
  • Pingalert Application Server
Published: November 24, 2025

CVE-2025-12739

7.3
    looker
    looker
    looker
    looker
    looker
    looker
    looker
    looker
Published: November 24, 2025

CVE-2025-0005

7.3
    xocl
Published: November 24, 2025

CVE-2025-52539

7.3
    run_time_environment
Published: November 24, 2025

CVE-2025-0003

7.3
    xilinx_runtime
Published: November 24, 2025

CVE-2024-14015

7.1
    ecommerce_plugin
Published: November 24, 2025

CVE-2025-12629

7.1
    broken_link_manager
Published: November 24, 2025

CVE-2025-48510

7.1
    Amd
  • Uprof
Published: November 24, 2025

CVE-2025-13578

6.9
    Code-Projects
  • Library System
Published: November 24, 2025

CVE-2025-13582

6.9
    Anisha
  • Jonnys Liquor
Published: November 24, 2025

CVE-2025-13583

6.9
    Carmelo
  • Question Paper Generator
Published: November 24, 2025

CVE-2025-13585

6.9
    Angeljudesuarez
  • Covid Tracking System
Published: November 24, 2025

CVE-2025-41017

6.9
    ddfusion
Published: November 24, 2025

CVE-2025-12969

6.5
    Treasuredata
  • Fluent Bit
Published: November 24, 2025

CVE-2025-60632

6.5
    Free5gc
  • Free5gc
Published: November 24, 2025

CVE-2025-60633

6.5
    Free5gc
  • Free5gc
Published: November 24, 2025

CVE-2025-63953

6.5
    pro_convert
Published: November 24, 2025

CVE-2025-63914

6.5
    kotaemon
Published: November 24, 2025

CVE-2025-10144

6.5
    perfect_brands_for_woocommerce
Published: November 24, 2025

CVE-2025-12628

6.3
    wP_2fa
Published: November 24, 2025

CVE-2025-64047

6.1
    Openrapid
  • Rapidcms
Published: November 24, 2025

CVE-2025-64048

6.1
    Yccms
  • Yccms
Published: November 24, 2025

CVE-2025-63498

6.1
    sogo
Published: November 24, 2025

CVE-2025-63674

6.1
    lumi_security_camera
Published: November 24, 2025

CVE-2025-12394

5.9
    backup_migration
Published: November 24, 2025

CVE-2025-36150

5.9
    Ibm
  • Concert
Published: November 24, 2025

CVE-2025-63952

5.7
    pro_convert
Published: November 24, 2025

CVE-2025-0007

5.7
    xilinx_run_time_framework
Published: November 24, 2025

CVE-2025-65503

5.5
    Redboltz
  • Async Mqtt
Published: November 24, 2025

CVE-2025-13466

5.5
    body-parser
    body-parser
Published: November 24, 2025

CVE-2025-29933

5.5
    Amd
  • Uprof
Published: November 24, 2025

CVE-2025-48511

5.5
    Amd
  • Uprof
Published: November 24, 2025

CVE-2025-12978

5.4
    Treasuredata
  • Fluent Bit
Published: November 24, 2025

CVE-2025-60916

5.4
    Craws
  • Openatlas
Published: November 24, 2025

CVE-2025-13573

5.3
    Projectworlds
  • Advanced Library Management System
Published: November 24, 2025

CVE-2025-13575

5.3
    Fabian
  • Blog Site
Published: November 24, 2025

CVE-2025-13576

5.3
    Fabian
  • Blog Site
Published: November 24, 2025

CVE-2025-13579

5.3
    Code-Projects
  • Library System
Published: November 24, 2025

CVE-2025-13580

5.3
    Code-Projects
  • Library System
Published: November 24, 2025

CVE-2025-13581

5.3
    Facebook-Julykringcadayona
  • Student Information System
Published: November 24, 2025

CVE-2025-13588

5.3
    streamity_xtream_ipTV_player
Published: November 24, 2025

CVE-2025-12972

5.3
    Treasuredata
  • Fluent Bit
Published: November 24, 2025

CVE-2025-56423

5.3
    Craws
  • Openatlas
Published: November 24, 2025

CVE-2025-36112

5.3
    Ibm
  • Sterling B2b Integrator
  • Sterling File Gateway
Published: November 24, 2025

CVE-2025-54341

5.3
    Desktopalert
  • Pingalert Application Server
Published: November 24, 2025

CVE-2025-13574

5.1
    Fabian
  • Online Bidding System
Published: November 24, 2025

CVE-2025-13577

5.1
    Phpgurukul
  • Hostel Management System
Published: November 24, 2025

CVE-2025-13589

5.1
    fms
Published: November 24, 2025

CVE-2025-13584

5.1
    eigenfocus
Published: November 24, 2025

CVE-2025-13586

5.1
    Senior-Walter
  • Online Student Clearance System
Published: November 24, 2025

CVE-2025-41087

5.1
    taclia
Published: November 24, 2025

CVE-2025-12569

4.7
    plugin
Published: November 24, 2025

CVE-2025-60914

4.6
    Craws
  • Openatlas
Published: November 24, 2025

CVE-2025-60917

4.6
    Craws
  • Openatlas
Published: November 24, 2025

CVE-2025-63432

4.6
    Xtooltech
  • Xtool Anyscan
Published: November 24, 2025

CVE-2025-63433

4.6
    Xtooltech
  • Xtool Anyscan
Published: November 24, 2025

CVE-2025-65496

4.3
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65497

4.3
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65498

4.3
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65499

4.3
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65500

4.3
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65501

4.3
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65502

4.3
    Cesanta
  • Mongoose
Published: November 24, 2025

CVE-2025-63435

4.3
    Xtooltech
  • Xtool Anyscan
Published: November 24, 2025

CVE-2025-13596

2.7
    ciges
Published: November 24, 2025

CVE-2025-40212

None
    linux_kernel
Published: November 24, 2025

CVE-2025-13541

None
    *
Published: November 24, 2025

CVE-2025-13598

None
    unknown
Published: November 24, 2025

CVE-2025-40213

None
    linux_kernel
Published: November 24, 2025

CVE-2025-13511

None
    wordpress
Published: November 24, 2025

CVE-2025-13594

None
    plugin
Published: November 24, 2025
Click here to see more Vulnerabilities