Tag: 2025-11-25

1 Attack Reports | 129 Vulnerabilities

Attack reports

Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine

Arctic Wolf Labs identified a U.S.-based company targeted by the Russian-aligned threat group RomCom via SocGholish, operated by TA569. This marks the first observed instance of a RomCom payload being distributed through SocGholish. The attack chain involved compromising legitimate websites, using …
malvertising
ukraine
socgholish
fakeupdate
gru
2025-11-25
ta569
mythic agent
vipertunnel
Published: November 25, 2025
Linked vulnerabilities : CVE-2025-64446 (CVSS 9.8)
Downloadable IOCs: 8
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-6389

9.8
    sneeit_framework
Published: November 25, 2025

CVE-2025-13559

9.8
    edukart_pro
Published: November 25, 2025

CVE-2025-61168

9.8
    Sigb
  • Pmb
Published: November 25, 2025

CVE-2025-64063

9.8
    Primakon
  • Project Contract Management
Published: November 25, 2025

CVE-2025-51742

9.8
    Jishenghua
  • Jsherp
Published: November 25, 2025

CVE-2025-51743

9.8
    Jishenghua
  • Jsherp
Published: November 25, 2025

CVE-2025-51744

9.8
    Jishenghua
  • Jsherp
Published: November 25, 2025

CVE-2025-51745

9.8
    Jishenghua
  • Jsherp
Published: November 25, 2025

CVE-2025-51746

9.8
    Jishenghua
  • Jsherp
Published: November 25, 2025

CVE-2025-13595

9.8
    cibeles_ai_plugin
Published: November 25, 2025

CVE-2025-13597

9.8
    ai_feeds_plugin
Published: November 25, 2025

CVE-2025-60739

9.6
    eve_x1_server_firmware
    logic
Published: November 25, 2025

CVE-2025-9803

9.3
    lunary
Published: November 25, 2025

CVE-2025-62691

9.3
    malion
    malioncloud
Published: November 25, 2025

CVE-2025-64693

9.3
    malion
    malioncloud
Published: November 25, 2025

CVE-2025-33187

9.3
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-66016

9.3
    cggmp24
    cggmp24
Published: November 25, 2025

CVE-2025-59366

9.2
    aicloud
Published: November 25, 2025

CVE-2025-63729

9.0
    sy-gpon-1110-wdont
Published: November 25, 2025

CVE-2025-13483

8.8
    smart_alert
Published: November 25, 2025

CVE-2025-64062

8.8
    Primakon
  • Project Contract Management
Published: November 25, 2025

CVE-2025-64064

8.8
    Primakon
  • Project Contract Management
Published: November 25, 2025

CVE-2025-64065

8.8
    Primakon
  • Project Contract Management
Published: November 25, 2025

CVE-2025-62703

8.8
    fugue
Published: November 25, 2025

CVE-2025-65951

8.7
    inside_track_entropy_derby
Published: November 25, 2025

CVE-2025-34350

8.7
    unform_server
Published: November 25, 2025

CVE-2025-65952

8.7
    gorilla_tag
Published: November 25, 2025

CVE-2025-64066

8.6
    Primakon
  • Project Contract Management
Published: November 25, 2025

CVE-2025-12816

8.6
    node-forge
Published: November 25, 2025

CVE-2025-62155

8.5
    large_language_model
Published: November 25, 2025

CVE-2025-59373

8.5
    system_control_interface
Published: November 25, 2025

CVE-2025-65084

8.4
    Ashlar
  • Argon
  • Cobalt
  • Cobalt Share
  • Lithium
  • Xenon
Published: November 25, 2025

CVE-2025-65085

8.4
    Ashlar
  • Argon
  • Cobalt
  • Cobalt Share
  • Lithium
  • Xenon
Published: November 25, 2025

CVE-2025-9624

8.3
    Amazon
  • Opensearch
Published: November 25, 2025

CVE-2025-12003

8.2
    router_firmware
Published: November 25, 2025

CVE-2025-65965

8.2
    grype
    grype
Published: November 25, 2025

CVE-2025-66017

8.2
    cggmp21
    cggmp24
    cggmp24
Published: November 25, 2025

CVE-2025-58360

8.2
    Geoserver
  • Geoserver
Published: November 25, 2025

CVE-2025-0248

8.1
    inotes
Published: November 25, 2025

CVE-2025-33188

8.0
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-33189

7.8
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-33204

7.8
    Nvidia
  • Nemo
Published: November 25, 2025

CVE-2025-33203

7.6
    nemo_agent_toolkit_ui
Published: November 25, 2025

CVE-2025-64761

7.5
    Openbao
  • Openbao
Published: November 25, 2025

CVE-2025-12742

7.5
    looker
    looker
    looker
    looker
    looker
    looker
    looker
Published: November 25, 2025

CVE-2025-13502

7.5
    webkit
    webkit
Published: November 25, 2025

CVE-2025-59370

7.5
    bwdpi
Published: November 25, 2025

CVE-2025-59371

7.5
    router
Published: November 25, 2025

CVE-2025-51741

7.5
    echo_open-source_community_system
Published: November 25, 2025

CVE-2025-33205

7.3
    Nvidia
  • Nemo
Published: November 25, 2025

CVE-2025-13068

7.2
    telegram_bot_and_channel_plugin
Published: November 25, 2025

CVE-2025-13376

7.2
    projectlist
Published: November 25, 2025

CVE-2025-64050

7.2
    Redaxo
  • Redaxo
Published: November 25, 2025

CVE-2025-64720

7.1
    Libpng
  • Libpng
Published: November 25, 2025

CVE-2025-65018

7.1
    Libpng
  • Libpng
Published: November 25, 2025

CVE-2025-13507

7.1
    Mongodb
  • Mongodb
Published: November 25, 2025

CVE-2025-13644

7.1
    Mongodb
  • Mongodb
Published: November 25, 2025

CVE-2025-59365

6.9
    router
Published: November 25, 2025

CVE-2025-59372

6.9
    router
Published: November 25, 2025

CVE-2025-33190

6.7
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-65960

6.6
    Contao
  • Contao
Published: November 25, 2025

CVE-2025-12040

6.5
    wishlist
Published: November 25, 2025

CVE-2025-13380

6.5
    ai_engine_chatgpt_plugin
Published: November 25, 2025

CVE-2025-61167

6.5
    Sigb
  • Pmb
Published: November 25, 2025

CVE-2025-12645

6.4
    iframe
Published: November 25, 2025

CVE-2025-64505

6.1
    Libpng
  • Libpng
Published: November 25, 2025

CVE-2025-64506

6.1
    Libpng
  • Libpng
Published: November 25, 2025

CVE-2025-13383

6.1
    job_board
Published: November 25, 2025

CVE-2025-21621

6.1
    Geoserver
  • Geoserver
Published: November 25, 2025

CVE-2025-63735

6.1
    ruckus_unleashed
Published: November 25, 2025

CVE-2025-59368

6.0
    aicloud
Published: November 25, 2025

CVE-2025-65953

6.0
    nanomq_mqtt_broker
Published: November 25, 2025

CVE-2025-59369

5.9
    router
    bwdpi
Published: November 25, 2025

CVE-2025-40890

5.8
    nozomi_networks
Published: November 25, 2025

CVE-2025-33191

5.7
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-33192

5.7
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-33193

5.7
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-33194

5.7
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-13467

5.5
    keycloak
Published: November 25, 2025

CVE-2025-13558

5.4
    blog2social
Published: November 25, 2025

CVE-2025-12043

5.3
    autochat_automatic_conversation
Published: November 25, 2025

CVE-2025-12525

5.3
    locker_content_plugin
Published: November 25, 2025

CVE-2025-13386

5.3
    social_images_widget
Published: November 25, 2025

CVE-2025-13389

5.3
    woocommerce
    orderconvo
Published: November 25, 2025

CVE-2025-13404

5.3
    duplicate_page_post
Published: November 25, 2025

CVE-2025-13405

5.3
    ace_post_type_builder
Published: November 25, 2025

CVE-2025-13414

5.3
    chamber_dashboard_business_directory_plugin
Published: November 25, 2025

CVE-2025-64067

5.3
    Primakon
  • Project Contract Management
Published: November 25, 2025

CVE-2025-65944

5.1
    sentry-javascript
Published: November 25, 2025

CVE-2025-64304

5.1
    fod_app
Published: November 25, 2025

CVE-2025-64713

5.1
    Bytecodealliance
  • Webassembly Micro Runtime
Published: November 25, 2025

CVE-2025-13370

4.9
    plugin
    projectlist
Published: November 25, 2025

CVE-2025-13385

4.9
    bookme
Published: November 25, 2025

CVE-2025-64730

4.8
    Sony
  • Snc-Cx600w Firmware
  • Snc-Cx600w
Published: November 25, 2025

CVE-2025-59485

4.8
    security_point
Published: November 25, 2025

CVE-2025-64049

4.8
    Redaxo
  • Redaxo
Published: November 25, 2025

CVE-2025-64704

4.7
    Bytecodealliance
  • Webassembly Micro Runtime
Published: November 25, 2025

CVE-2025-12025

4.4
    youtube_subscribe_plugin
Published: November 25, 2025

CVE-2025-12032

4.4
    zweb_social_mobile
Published: November 25, 2025

CVE-2025-13311

4.4
    just_highlight
Published: November 25, 2025

CVE-2025-33195

4.4
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-33196

4.4
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-10646

4.3
    search_exclude
Published: November 25, 2025

CVE-2025-12586

4.3
    conditional_maintenance_mode
Published: November 25, 2025

CVE-2025-12587

4.3
    peer_publish_plugin
Published: November 25, 2025

CVE-2025-12634

4.3
    refund_request_for_woocommerce
Published: November 25, 2025

CVE-2025-13382

4.3
    frontend_file_manager
Published: November 25, 2025

CVE-2025-13452

4.3
    orderconvo
Published: November 25, 2025

CVE-2025-64061

4.3
    Primakon
  • Project Contract Management
Published: November 25, 2025

CVE-2025-33197

4.3
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-65647

4.3
    Phpgurukul
  • Online Shopping Portal
Published: November 25, 2025

CVE-2025-36134

3.7
    Ibm
  • Sterling B2b Integrator
  • Sterling File Gateway
Published: November 25, 2025

CVE-2025-33198

3.3
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-65961

3.3
    Contao
  • Contao
Published: November 25, 2025

CVE-2025-33199

3.2
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-65942

2.7
    victoria_metrics
    victoria_metrics
    victoria_metrics
Published: November 25, 2025

CVE-2025-12893

2.3
    Mongodb
  • Mongodb
Published: November 25, 2025

CVE-2025-13643

2.3
    Mongodb
  • Mongodb
Published: November 25, 2025

CVE-2025-33200

2.3
    Nvidia
  • Dgx Os
  • Dgx Spark
Published: November 25, 2025

CVE-2025-62497

2.1
    Sony
  • Snc-Cx600w Firmware
  • Snc-Cx600w
Published: November 25, 2025

CVE-2025-66179

None
    fortinet
Published: November 25, 2025

CVE-2025-66180

None
    fortinet
Published: November 25, 2025

CVE-2025-66181

None
    fortinet
Published: November 25, 2025

CVE-2025-66182

None
    *
Published: November 25, 2025

CVE-2025-66183

None
    fortinet
Published: November 25, 2025

CVE-2025-66184

None
    fortinet
Published: November 25, 2025

CVE-2025-66185

None
    fortinet_product
Published: November 25, 2025

CVE-2025-66186

None
    *
Published: November 25, 2025

CVE-2025-66187

None
    fortinet
Published: November 25, 2025
Click here to see more Vulnerabilities