Tag: 2025-11-24

5 Attack Reports | 100 Vulnerabilities

Attack reports

Build script exposes PyPI to domain takeover attacks

ReversingLabs researchers discovered vulnerable code in legacy Python packages that could enable an attack on the Python Package Index (PyPI) via a domain compromise. The vulnerability lies in bootstrap files for a build tool that installs the Python package 'distribute' and performs other tasks. W…
python
supply chain
vulnerability
pypi
2025-11-24
packaging
legacy code
domain takeover
CVE-2023-45311
bootstrap script
Published: November 24, 2025
Linked vulnerabilities : CVE-2023-45311
Downloadable IOCs: 0

Stories from the SOC: Mystery of the postponed proxyware install

A suspicious PowerShell alert led to the discovery of an attack chain aimed at installing proxyware on a compromised system. The infection originated from a disk-cleaning utility installed three days prior, which included malicious scripts and established a connection to a C2 server. The attack uti…
powershell
node.js
c2 server
in-memory execution
proxyware
2025-11-24
download cradle
unauthorized software
disk-cleaning utility
Published: November 24, 2025
Downloadable IOCs: 11

ClickFix Gets Creative: Malware Buried in Images

A multi-stage malware execution chain originating from a ClickFix lure has been discovered, leading to the delivery of infostealing malware like LummaC2 and Rhadamanthys. The campaign utilizes steganography to hide malicious code within PNG images. Two distinct ClickFix lures were observed: a stand…
social engineering
lummac2
rhadamanthys
infostealer
steganography
clickfix
multi-stage
2025-11-24
windows update
Published: November 24, 2025
Downloadable IOCs: 32

Brazilian Campaign: Spreading the Malware via WhatsApp

A massive phishing campaign targeting Brazil is spreading malware through WhatsApp Web using an open-source automation script and loading a banking trojan into memory. The attack begins with a phishing email containing a malicious VBS script that downloads and executes an MSI file and another VBS f…
phishing
whatsapp
autoit
banking trojan
brazil
in-memory execution
selenium
sorvepotel
2025-11-24
water-saci
Published: November 24, 2025
Downloadable IOCs: 5

Kimsuky's Ongoing Evolution of KimJongRAT and Expanding Threats

This analysis examines the latest attack flow of the KimJongRAT variant, attributed to the North Korean threat actor Kimsuky. The malware has evolved to include both PE-based and PowerShell-based attack chains, which have been merged into a single workflow. The attackers use phishing emails for ini…
phishing
north korea
babyshark
powershell
credential theft
keylogging
data exfiltration
spear-phishing
browser credentials
kimjongrat
2025-11-24
pe executable
Published: November 24, 2025
Downloadable IOCs: 13
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-54347

9.9
    Desktop Alert
  • Pingalert
Published: November 24, 2025

CVE-2025-63958

9.8
    Millensys
  • Vision Tools Workspace
Published: November 24, 2025

CVE-2024-47856

9.8
    Rsa
  • Authentication Agent
Published: November 24, 2025

CVE-2025-11921

9.3
    Fluidattacks
  • Istat
Published: November 24, 2025

CVE-2018-25126

9.3
    Shenzhen Tvt Digital Technology
  • Nvms-9000
  • Ipc
  • Dvr
  • Nvr
Published: November 24, 2025

CVE-2023-7330

9.3
    Ruijie
  • Nbr
Published: November 24, 2025

CVE-2025-12977

9.1
    Fluentbit
  • Fluent Bit
  • In Http
  • In Splunk
  • In Elasticsearch
Published: November 24, 2025

CVE-2025-12970

8.8
    Fluent Bit
  • In Docker
Published: November 24, 2025

CVE-2025-63434

8.8
    Xtooltech
  • Xtool Anyscan
Published: November 24, 2025

CVE-2025-56400

8.8
    Tuya
  • Tuya Sdk
  • Tuya Smart
  • Smartlife
Published: November 24, 2025

CVE-2025-41016

8.7
    Davantis
  • Dfusion
Published: November 24, 2025

CVE-2025-10554

8.7
    3ds
  • Enovia Product Manager
Published: November 24, 2025

CVE-2025-10555

8.7
    Dassault Systemes
  • Delmia Service Process Engineer
Published: November 24, 2025

CVE-2024-14007

8.7
    Shenzhen Tvt Digital Technology
  • Nvms-9000
Published: November 24, 2025

CVE-2025-44018

8.3
    Gl-Inet
  • Gl-Axt1800
Published: November 24, 2025

CVE-2025-13609

8.2
    Keylime
  • Keylime
Published: November 24, 2025

CVE-2025-60915

8.1
    Austrian Archaeological Institute
  • Openatlas
Published: November 24, 2025

CVE-2025-52538

8.0
    Amd
  • Xocl Driver
Published: November 24, 2025

CVE-2025-12740

7.7
    Looker
  • Looker
Published: November 24, 2025

CVE-2025-12741

7.7
    Looker
  • Looker
Published: November 24, 2025

CVE-2025-56401

7.6
    Zira
  • Wbrm
Published: November 24, 2025

CVE-2025-7402

7.5
    Wordpress
  • Ads Pro Plugin
Published: November 24, 2025

CVE-2025-41729

7.5
    *
  • Modbus
Published: November 24, 2025

CVE-2025-65493

7.5
    Oism
  • Libcoap
Published: November 24, 2025

CVE-2025-65494

7.5
    Oism
  • Libcoap
Published: November 24, 2025

CVE-2025-65495

7.5
    Oism
  • Libcoap
Published: November 24, 2025

CVE-2025-65503

7.5
    Redboltz
  • Async Mqtt
Published: November 24, 2025

CVE-2025-65998

7.5
    Apache
  • Syncope
Published: November 24, 2025

CVE-2025-60638

7.5
    Free5gc
  • Free5gc
Published: November 24, 2025

CVE-2025-54338

7.5
    Desktop Alert
  • Pingalert
Published: November 24, 2025

CVE-2025-54563

7.5
    Desktop Alert
  • Pingalert
Published: November 24, 2025

CVE-2025-12739

7.3
    Looker
  • Looker
Published: November 24, 2025

CVE-2025-0005

7.3
    Amd
  • Xocl
Published: November 24, 2025

CVE-2025-52539

7.3
    Xilinx
  • Run Time Environment
Published: November 24, 2025

CVE-2025-0003

7.3
    Amd
  • Xilinx Runtime
Published: November 24, 2025

CVE-2024-14015

7.1
    Wordpress
  • Ecommerce Plugin
Published: November 24, 2025

CVE-2025-12629

7.1
    Wordpress
  • Broken Link Manager
Published: November 24, 2025

CVE-2025-48510

7.1
    Amd
  • Uprof
Published: November 24, 2025

CVE-2025-13578

6.9
    Code-Projects
  • Library System
Published: November 24, 2025

CVE-2025-13582

6.9
    Code-Projects
  • Jonnys Liquor
Published: November 24, 2025

CVE-2025-13583

6.9
    Code-Projects
  • Question Paper Generator
Published: November 24, 2025

CVE-2025-13585

6.9
    Code-Projects
  • Covid Tracking System
Published: November 24, 2025

CVE-2025-41017

6.9
    Davantis
  • Ddfusion
Published: November 24, 2025

CVE-2025-12969

6.5
    Fluentbit
  • Fluent Bit
  • In Forward Input Plugin
Published: November 24, 2025

CVE-2025-60632

6.5
    Free5gc
  • Free5gc
Published: November 24, 2025

CVE-2025-60633

6.5
    Free5gc
  • Free5gc
Published: November 24, 2025

CVE-2025-63953

6.5
    Magewell
  • Pro Convert
Published: November 24, 2025

CVE-2025-63914

6.5
    Cinnamon
  • Kotaemon
Published: November 24, 2025

CVE-2025-10144

6.5
    Perfect Brands
  • Perfect Brands For Woocommerce
Published: November 24, 2025

CVE-2025-12628

6.3
    Wordpress
  • Wp 2fa
Published: November 24, 2025

CVE-2025-64047

6.1
    Openrapid
  • Rapidcms
Published: November 24, 2025

CVE-2025-64048

6.1
    Yccms
  • Yccms
Published: November 24, 2025

CVE-2025-63498

6.1
    Alinto
  • Sogo
Published: November 24, 2025

CVE-2025-63674

6.1
    Blurams
  • Lumi Security Camera
Published: November 24, 2025

CVE-2025-12394

5.9
    Wordpress
  • Backup Migration
Published: November 24, 2025

CVE-2025-36150

5.9
    Ibm
  • Concert
Published: November 24, 2025

CVE-2025-63952

5.7
    Magewell
  • Pro Convert
Published: November 24, 2025

CVE-2025-0007

5.7
    Xilinx
  • Xilinx Run Time Framework
Published: November 24, 2025

CVE-2025-13466

5.5
    Body-Parser
  • Body-Parser
Published: November 24, 2025

CVE-2025-29933

5.5
    Amd
  • Uprof
Published: November 24, 2025

CVE-2025-48511

5.5
    Amd
  • Uprof
Published: November 24, 2025

CVE-2025-12978

5.4
    Fluent
  • Bit
Published: November 24, 2025

CVE-2025-60916

5.4
    Austrian Archaeological Institute
  • Openatlas
Published: November 24, 2025

CVE-2025-13573

5.3
    Projectworlds
  • Projectworlds
Published: November 24, 2025

CVE-2025-13575

5.3
    Code-Projects
  • Blog Site
Published: November 24, 2025

CVE-2025-13576

5.3
    Code-Projects
  • Blog Site
Published: November 24, 2025

CVE-2025-13579

5.3
    Code-Projects
  • Library System
Published: November 24, 2025

CVE-2025-13580

5.3
    Code-Projects
  • Library System
Published: November 24, 2025

CVE-2025-13581

5.3
    Itsourcecode
  • Student Information System
Published: November 24, 2025

CVE-2025-13588

5.3
    Kinderbueno
  • Streamity Xtream Iptv Player
Published: November 24, 2025

CVE-2025-12972

5.3
    Fluent
  • Fluent Bit
Published: November 24, 2025

CVE-2025-56423

5.3
    Austrian Academy Of Sciences
  • Openatlas
Published: November 24, 2025

CVE-2025-36112

5.3
    Ibm
  • Sterling B2b Integrator
  • Sterling File Gateway
Published: November 24, 2025

CVE-2025-54341

5.3
    Desktop Alert
  • Pingalert
Published: November 24, 2025

CVE-2025-13574

5.1
    Code-Projects
  • Online Bidding System
Published: November 24, 2025

CVE-2025-13577

5.1
    Phpgurukul
  • Hostel Management System
Published: November 24, 2025

CVE-2025-13589

5.1
    Otsuka Information Technology
  • Fms
Published: November 24, 2025

CVE-2025-13584

5.1
    Eigenfocus
  • Eigenfocus
Published: November 24, 2025

CVE-2025-13586

5.1
    Sourcecodester
  • Online Student Clearance System
Published: November 24, 2025

CVE-2025-41087

5.1
    Incibe
  • Taclia
Published: November 24, 2025

CVE-2025-12569

4.7
    Wordpress
  • Plugin
Published: November 24, 2025

CVE-2025-60914

4.6
    Austrian Archaeological Institute
  • Openatlas
Published: November 24, 2025

CVE-2025-60917

4.6
    Austrian Archaeological Institute
  • Openatlas
Published: November 24, 2025

CVE-2025-63432

4.6
    Xtooltech
  • Xtool Anyscan
Published: November 24, 2025

CVE-2025-63433

4.6
    Xtooltech
  • Xtool Anyscan
Published: November 24, 2025

CVE-2025-65496

4.3
    Libcoap
  • Libcoap
Published: November 24, 2025

CVE-2025-65497

4.3
    Oism
  • Libcoap
Published: November 24, 2025

CVE-2025-65498

4.3
    Oism
  • Libcoap
Published: November 24, 2025

CVE-2025-65499

4.3
    Oism
  • Libcoap
Published: November 24, 2025

CVE-2025-65500

4.3
    Oism
  • Libcoap
Published: November 24, 2025

CVE-2025-65501

4.3
    Oism
  • Libcoap
Published: November 24, 2025

CVE-2025-65502

4.3
    Cesanta
  • Mongoose
Published: November 24, 2025

CVE-2025-63435

4.3
    Xtooltech
  • Xtool Anyscan Android Application
Published: November 24, 2025

CVE-2025-13596

2.7
    Atisoluciones
  • Ciges
Published: November 24, 2025

CVE-2025-40212

None
    Linux
  • Linux Kernel
Published: November 24, 2025

CVE-2025-13541

None
    *
  • *
Published: November 24, 2025

CVE-2025-13598

None
    Wordfence
  • Unknown
Published: November 24, 2025

CVE-2025-40213

None
    Linux
  • Linux Kernel
Published: November 24, 2025

CVE-2025-13511

None
    Wordpress
  • Wordpress
Published: November 24, 2025

CVE-2025-13594

None
    Wordpress
  • Plugin
Published: November 24, 2025
Click here to see more Vulnerabilities