Tag: 2025-11-25

1 Attack Reports | 129 Vulnerabilities

Attack reports

Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine

Arctic Wolf Labs identified a U.S.-based company targeted by the Russian-aligned threat group RomCom via SocGholish, operated by TA569. This marks the first observed instance of a RomCom payload being distributed through SocGholish. The attack chain involved compromising legitimate websites, using …
malvertising
ukraine
socgholish
fakeupdate
gru
2025-11-25
ta569
mythic agent
vipertunnel
Published: November 25, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-6389

9.8
    Wordpress
  • Sneeit Framework
Published: November 25, 2025

CVE-2025-13559

9.8
    Edukart
  • Edukart Pro
Published: November 25, 2025

CVE-2025-61168

9.8
    Sigb
  • Pmb
Published: November 25, 2025

CVE-2025-64063

9.8
    Primakon
  • Pi Portal
Published: November 25, 2025

CVE-2025-51742

9.8
    Jishenghua
  • Jsh Erp
Published: November 25, 2025

CVE-2025-51743

9.8
    Jishenghua
  • Jsh Erp
Published: November 25, 2025

CVE-2025-51744

9.8
    Jishenghua
  • Jsh Erp
Published: November 25, 2025

CVE-2025-51745

9.8
    Jishenghua
  • Jsh Erp
Published: November 25, 2025

CVE-2025-51746

9.8
    Jishenghua
  • Jsh Erp
Published: November 25, 2025

CVE-2025-13595

9.8
    Wordpress
  • Cibeles Ai Plugin
Published: November 25, 2025

CVE-2025-13597

9.8
    Wordpress
  • Ai Feeds Plugin
Published: November 25, 2025

CVE-2025-60739

9.6
    Ilevia
  • Eve X1 Server Firmware
  • Logic
Published: November 25, 2025

CVE-2025-9803

9.3
    Lunary-Ai
  • Lunary
Published: November 25, 2025

CVE-2025-62691

9.3
    Malion
  • Malion
  • Malioncloud
Published: November 25, 2025

CVE-2025-64693

9.3
    Malion
  • Malion
  • Malioncloud
Published: November 25, 2025

CVE-2025-33187

9.3
    Nvidia
  • Dgx Spark
Published: November 25, 2025

CVE-2025-66016

9.3
    Cggmp24
  • Cggmp24
Published: November 25, 2025

CVE-2025-59366

9.2
    Asus
  • Aicloud
Published: November 25, 2025

CVE-2025-63729

9.0
    Syrotech
  • Sy-Gpon-1110-Wdont
Published: November 25, 2025

CVE-2025-13483

8.8
    Sircom
  • Smart Alert
Published: November 25, 2025

CVE-2025-64062

8.8
    Primakon
  • Pi Portal
Published: November 25, 2025

CVE-2025-64064

8.8
    Primakon
  • Pi Portal
Published: November 25, 2025

CVE-2025-64065

8.8
    Primakon
  • Pi Portal
Published: November 25, 2025

CVE-2025-62703

8.8
    *
  • Fugue
Published: November 25, 2025

CVE-2025-65951

8.7
    Inside Track Entropy Derby
  • Inside Track Entropy Derby
Published: November 25, 2025

CVE-2025-34350

8.7
    Unform
  • Unform Server
Published: November 25, 2025

CVE-2025-65952

8.7
    Unknown
  • Gorilla Tag
Published: November 25, 2025

CVE-2025-64066

8.6
    Primakon
  • Primakon Pi Portal
Published: November 25, 2025

CVE-2025-12816

8.6
    Node-Forge
  • Node-Forge
Published: November 25, 2025

CVE-2025-62155

8.5
    Ai
  • Large Language Model
Published: November 25, 2025

CVE-2025-59373

8.5
    Asus
  • System Control Interface
Published: November 25, 2025

CVE-2025-65084

8.4
    Ashlar-Vellum
  • Cobalt
  • Xenon
  • Argon
  • Lithium
  • Cobalt Share
Published: November 25, 2025

CVE-2025-65085

8.4
    Ashlar-Vellum
  • Cobalt
  • Xenon
  • Argon
  • Lithium
  • Cobalt Share
Published: November 25, 2025

CVE-2025-9624

8.3
    Opensearch
  • Opensearch
Published: November 25, 2025

CVE-2025-12003

8.2
    Asus
  • Router Firmware
Published: November 25, 2025

CVE-2025-65965

8.2
    Anchore
  • Grype
Published: November 25, 2025

CVE-2025-66017

8.2
    Cggmp
  • Cggmp21
  • Cggmp24
Published: November 25, 2025

CVE-2025-58360

8.2
    Geoserver
  • Geoserver
Published: November 25, 2025

CVE-2025-0248

8.1
    Hcl
  • Inotes
Published: November 25, 2025

CVE-2025-33188

8.0
    Nvidia
  • Dgx Spark Gb10
Published: November 25, 2025

CVE-2025-33189

7.8
    Nvidia
  • Dgx Spark
  • Sroot Firmware
Published: November 25, 2025

CVE-2025-33204

7.8
    Nvidia
  • Nemo Framework
Published: November 25, 2025

CVE-2025-33203

7.6
    Nvidia
  • Nemo Agent Toolkit Ui
Published: November 25, 2025

CVE-2025-64761

7.5
    Openbao
  • Openbao
Published: November 25, 2025

CVE-2025-12742

7.5
    Looker
  • Looker
Published: November 25, 2025

CVE-2025-13502

7.5
    Webkitgtk
  • Webkit
    Wpe
Published: November 25, 2025

CVE-2025-59370

7.5
    Asus
  • Bwdpi
Published: November 25, 2025

CVE-2025-59371

7.5
    Asus
  • Router
Published: November 25, 2025

CVE-2025-51741

7.5
    Veal98
  • Echo Open-Source Community System
Published: November 25, 2025

CVE-2025-33205

7.3
    Nvidia
  • Nemo
Published: November 25, 2025

CVE-2025-13068

7.2
    Wordpress
  • Telegram Bot And Channel Plugin
Published: November 25, 2025

CVE-2025-13376

7.2
    Wordpress
  • Projectlist
Published: November 25, 2025

CVE-2025-64050

7.2
    Redaxo
  • Redaxo Cms
Published: November 25, 2025

CVE-2025-64720

7.1
    Libpng
  • Libpng
Published: November 25, 2025

CVE-2025-65018

7.1
    Libpng
  • Libpng
Published: November 25, 2025

CVE-2025-13507

7.1
    Mongodb
  • Mongodb Server
Published: November 25, 2025

CVE-2025-13644

7.1
    Mongodb
  • Mongodb Server
Published: November 25, 2025

CVE-2025-59365

6.9
    Asus
  • Router
Published: November 25, 2025

CVE-2025-59372

6.9
    Asus
  • Router
Published: November 25, 2025

CVE-2025-33190

6.7
    Nvidia
  • Dgx Spark
Published: November 25, 2025

CVE-2025-65960

6.6
    Contao
  • Contao
Published: November 25, 2025

CVE-2025-12040

6.5
    Woocommerce
  • Wishlist
Published: November 25, 2025

CVE-2025-13380

6.5
    Wordpress
  • Ai Engine Chatgpt Plugin
Published: November 25, 2025

CVE-2025-61167

6.5
    Sigb
  • Pmb
Published: November 25, 2025

CVE-2025-12645

6.4
    Wordpress
  • Iframe
Published: November 25, 2025

CVE-2025-64505

6.1
    Libpng
  • Libpng
Published: November 25, 2025

CVE-2025-64506

6.1
    Libpng
  • Libpng
Published: November 25, 2025

CVE-2025-13383

6.1
    Bestwebsoft
  • Job Board
Published: November 25, 2025

CVE-2025-21621

6.1
    Geoserver
  • Geoserver
Published: November 25, 2025

CVE-2025-63735

6.1
    Ruckus
  • Ruckus Unleashed
Published: November 25, 2025

CVE-2025-59368

6.0
    Asus
  • Aicloud
Published: November 25, 2025

CVE-2025-65953

6.0
    Nanomq
  • Nanomq Mqtt Broker
Published: November 25, 2025

CVE-2025-59369

5.9
    Asus
  • Router
  • Bwdpi
Published: November 25, 2025

CVE-2025-40890

5.8
    Nozomi Networks
  • Nozomi Networks
Published: November 25, 2025

CVE-2025-33191

5.7
    Nvidia
  • Dgx Spark Gb10
Published: November 25, 2025

CVE-2025-33192

5.7
    Nvidia
  • Dgx Spark
Published: November 25, 2025

CVE-2025-33193

5.7
    Nvidia
  • Dgx Spark
  • Sroot Firmware
Published: November 25, 2025

CVE-2025-33194

5.7
    Nvidia
  • Dgx Spark
Published: November 25, 2025

CVE-2025-13467

5.5
    Keycloak
  • Keycloak
Published: November 25, 2025

CVE-2025-13558

5.4
    Blog2social
  • Blog2social
Published: November 25, 2025

CVE-2025-12043

5.3
    Wordpress
  • Autochat Automatic Conversation
Published: November 25, 2025

CVE-2025-12525

5.3
    Wordpress
  • Locker Content Plugin
Published: November 25, 2025

CVE-2025-13386

5.3
    Wordpress
  • Social Images Widget
Published: November 25, 2025

CVE-2025-13389

5.3
    Wordpress
  • Orderconvo
    Woocommerce
Published: November 25, 2025

CVE-2025-13404

5.3
    Atec
  • Duplicate Page Post
Published: November 25, 2025

CVE-2025-13405

5.3
    Wordpress
  • Ace Post Type Builder
Published: November 25, 2025

CVE-2025-13414

5.3
    Wordpress
  • Chamber Dashboard Business Directory Plugin
Published: November 25, 2025

CVE-2025-64067

5.3
    Primakon
  • Pi Portal
Published: November 25, 2025

CVE-2025-65944

5.1
    Sentry
  • Sentry-Javascript
Published: November 25, 2025

CVE-2025-64304

5.1
    Fod
  • Fod App
Published: November 25, 2025

CVE-2025-64713

5.1
    Wagr
  • Wagr
Published: November 25, 2025

CVE-2025-13370

4.9
    Wordpress
  • Plugin
  • Projectlist
Published: November 25, 2025

CVE-2025-13385

4.9
    Wordpress
  • Bookme
Published: November 25, 2025

CVE-2025-64730

4.8
    Snc
  • Snc-Cx600w
Published: November 25, 2025

CVE-2025-59485

4.8
    Malion
  • Security Point
Published: November 25, 2025

CVE-2025-64049

4.8
    Redaxo
  • Redaxo Cms
Published: November 25, 2025

CVE-2025-64704

4.7
    Webassembly
  • Micro Runtime
Published: November 25, 2025

CVE-2025-12025

4.4
    Wordpress
  • Youtube Subscribe Plugin
Published: November 25, 2025

CVE-2025-12032

4.4
    Wordpress
  • Zweb Social Mobile
Published: November 25, 2025

CVE-2025-13311

4.4
    Wordpress
  • Just Highlight
Published: November 25, 2025

CVE-2025-33195

4.4
    Nvidia
  • Dgx Spark
Published: November 25, 2025

CVE-2025-33196

4.4
    Nvidia
  • Dgx Spark Gb10
Published: November 25, 2025

CVE-2025-10646

4.3
    Wordpress
  • Search Exclude
Published: November 25, 2025

CVE-2025-12586

4.3
    Wordpress
  • Conditional Maintenance Mode
Published: November 25, 2025

CVE-2025-12587

4.3
    Wordpress
  • Peer Publish Plugin
Published: November 25, 2025

CVE-2025-12634

4.3
    Woocommerce
  • Refund Request For Woocommerce
Published: November 25, 2025

CVE-2025-13382

4.3
    Wordpress
  • Frontend File Manager
Published: November 25, 2025

CVE-2025-13452

4.3
    Woocommerce
  • Orderconvo
Published: November 25, 2025

CVE-2025-64061

4.3
    Primakon
  • Pi Portal
Published: November 25, 2025

CVE-2025-33197

4.3
    Nvidia
  • Dgx Spark Gb10
Published: November 25, 2025

CVE-2025-65647

4.3
    Phpgurukul
  • Online Shopping Portal
Published: November 25, 2025

CVE-2025-36134

3.7
    Ibm
  • Sterling B2b Integrator
  • Sterling File Gateway
Published: November 25, 2025

CVE-2025-33198

3.3
    Nvidia
  • Dgx Spark Gb10
  • Sroot Firmware
Published: November 25, 2025

CVE-2025-65961

3.3
    Contao
  • Contao
Published: November 25, 2025

CVE-2025-33199

3.2
    Nvidia
  • Dgx Spark Gb10
Published: November 25, 2025

CVE-2025-65942

2.7
    Victoriametrics
  • Victoria Metrics
Published: November 25, 2025

CVE-2025-12893

2.3
    Mongodb
  • Mongodb Server
Published: November 25, 2025

CVE-2025-13643

2.3
    Mongodb
  • Mongodb Server
Published: November 25, 2025

CVE-2025-33200

2.3
    Nvidia
  • Dgx Spark G10
Published: November 25, 2025

CVE-2025-62497

2.1
    Snc
  • Snc-Cx600w
Published: November 25, 2025

CVE-2025-66179

None
    Fortinet
  • Fortinet
Published: November 25, 2025

CVE-2025-66180

None
    Fortinet
  • Fortinet
Published: November 25, 2025

CVE-2025-66181

None
    Fortinet
  • Fortinet
Published: November 25, 2025

CVE-2025-66182

None
    Fortinet
  • *
Published: November 25, 2025

CVE-2025-66183

None
    Fortinet
  • Fortinet
Published: November 25, 2025

CVE-2025-66184

None
    Fortinet
  • Fortinet
Published: November 25, 2025

CVE-2025-66185

None
    Fortinet
  • Fortinet Product
Published: November 25, 2025

CVE-2025-66186

None
    Fortinet
  • *
Published: November 25, 2025

CVE-2025-66187

None
    Fortinet
  • Fortinet
Published: November 25, 2025
Click here to see more Vulnerabilities