Tag: 2025-12-03

8 Attack Reports | 94 Vulnerabilities

Attack reports

4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign

A threat actor named ShadyPanda has been identified as responsible for a seven-year browser extension campaign that has infected 4.3 million Chrome and Edge users. The campaign includes two active operations: a 300,000-user RCE backdoor and a 4-million-user spyware operation. ShadyPanda's extension…
spyware
data exfiltration
malware campaign
chrome
edge
browser extension
trust exploitation
2025-12-03
infinity v+
clean master
wetab
rce backdoor
Published: December 3, 2025
Downloadable IOCs: 0

Albiriox Exposed: A New RAT Mobile Malware Targeting Global Finance and Crypto Wallets

Albiriox is a newly identified Android malware offered as Malware-as-a-Service, likely managed by Russian-speaking threat actors. It employs a two-stage deployment chain using dropper applications and packing techniques to evade detection. The malware exhibits advanced On-Device Fraud capabilities,…
rat
android
cryptocurrency
banking trojan
maas
evasion techniques
overlay attacks
on-device fraud
2025-12-03
vnc
albiriox
Published: December 3, 2025
Downloadable IOCs: 0

Bootstrap script exposes PyPI to domain takeover attacks

A vulnerability in legacy Python packages could enable an attack on PyPI through a domain compromise. The issue stems from bootstrap files for a build tool that installs the 'distribute' package, which fetch and execute an installation script from a now-available domain. Affected packages include t…
supply chain
vulnerability
open-source
pypi
domain takeover
bootstrap script
2025-12-03
python packaging
Published: December 3, 2025
Downloadable IOCs: 0

DNS Uncovers Infrastructure Used in SSO Attacks

The threat actor leveraged Evilginx (likely version 3.0), an open source, advanced phishing adversary-in-the-middle (AITM, aka MITM) framework designed to steal login credentials and session cookies. Evilginx is widely used by cybercriminals to undermine multi-factor authentication (MFA) security, …
phishing
aitm
reverse proxy
evilginx
2025-12-03
tinyurl
mitm
sso
Published: December 3, 2025
Downloadable IOCs: 82

Operation DupeHike: Targeting Russian employees with DUPERUNNER and AdaptixC2

A campaign targeting Russian corporate entities, particularly HR, payroll, and administrative departments, has been uncovered. The attack uses realistic decoy documents themed around employee bonuses and financial policies. The malware ecosystem involves a malicious LNK file leading to an implant d…
process injection
c2 communication
spear-phishing
adaptixc2
2025-12-03
employee bonus lure
duperunner
russian corporate
Published: December 3, 2025
Downloadable IOCs: 12

Teams Social Engineering Attack: Threat Actors Impersonate IT to Steal Credentials via Quick Assist

A sophisticated social engineering attack utilizing Microsoft Teams' new 'Chat with Anyone' feature has been uncovered. Threat actors impersonated IT support to trick users into initiating Quick Assist sessions, ultimately leading to credential theft and potential data exfiltration. The attack invo…
phishing
social engineering
infostealer
credential theft
reconnaissance
microsoft teams
2025-12-03
quick assist
Published: December 3, 2025
Downloadable IOCs: 1

ValleyRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading

A ValleyRAT campaign is targeting job seekers through email, disguising itself as a Foxit PDF reader and using DLL side-loading for initial system access. The campaign exploits job seekers' eagerness by using recruitment-related lures in archive files. The attack employs sophisticated techniques, i…
social engineering
data theft
valleyrat
dll side-loading
remote access trojan
job seekers
2025-12-03
foxit pdf reader
Published: December 3, 2025
Downloadable IOCs: 25

Shai-Hulud V2 Poses Risk to NPM Supply Chain

A second wave of the Shai-Hulud malware campaign, dubbed 'The Second Coming', has emerged targeting the npm ecosystem. This advanced software supply chain attack has compromised over 700 npm packages and created more than 27,000 malicious GitHub repositories. Shai-Hulud V2 introduces critical advan…
backdoor
supply chain
worm
exfiltration
credential theft
github
2025-12-03
shai-hulud v2
Published: December 3, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-13390

10.0
    Wordpress
  • Wp Directory Kit
Published: December 3, 2025

CVE-2025-55182

10.0
    Facebook
  • React Server Components
  • React Server Dom Parcel
  • React Server Dom Turbopack
  • React Server Dom Webpack
Published: December 3, 2025

CVE-2025-66489

9.9
    Cal.Com
  • Cal
Published: December 3, 2025

CVE-2025-13486

9.8
    Wordpress
  • Advanced Custom Fields Extended
Published: December 3, 2025

CVE-2025-13342

9.8
    Dynamiapps
  • Frontend Admin
    Wordpress
Published: December 3, 2025

CVE-2024-32641

9.8
    Masa
  • Masa Cms
Published: December 3, 2025

CVE-2025-66222

9.6
    Deepchat
  • Deepchat
Published: December 3, 2025

CVE-2025-34319

9.3
    Totolink
  • N300rt
  • N300rt Firmware
Published: December 3, 2025

CVE-2025-65267

9.0
    Erpnext
  • Erpnext
    Frappe
Published: December 3, 2025

CVE-2025-12744

8.8
    Redhat
  • Abrt
Published: December 3, 2025

CVE-2025-57198

8.8
    Avtech Security
  • Dgm1104
Published: December 3, 2025

CVE-2025-57199

8.8
    Avtech Security
  • Dgm1104
Published: December 3, 2025

CVE-2025-57201

8.8
    Avtech Security Corporation
  • Dgm1104
Published: December 3, 2025

CVE-2024-32642

8.8
    Masa Cms
  • Masa Cms
Published: December 3, 2025

CVE-2025-33208

8.8
    Nvidia
  • Tao
Published: December 3, 2025

CVE-2025-66032

8.7
    Claude
  • Claude Code
Published: December 3, 2025

CVE-2025-12385

8.7
    The Qt Company
  • Qt
Published: December 3, 2025

CVE-2025-50360

8.4
    Pepper
  • Pepper
Published: December 3, 2025

CVE-2025-20386

8.0
    Splunk
  • Splunk Enterprise
Published: December 3, 2025

CVE-2025-20387

8.0
    Splunk
  • Universal Forwarder
Published: December 3, 2025

CVE-2025-54065

7.9
    Gzdoom
  • Gzdoom
Published: December 3, 2025

CVE-2025-53841

7.8
    Akamai
  • Guardicore Platform Agent
Published: December 3, 2025

CVE-2025-66431

7.8
    Webpros
  • Plesk
Published: December 3, 2025

CVE-2025-66411

7.8
    Coder
  • Coder
Published: December 3, 2025

CVE-2025-7044

7.7
    Ubuntu
  • Maas
Published: December 3, 2025

CVE-2025-65843

7.7
    Aquarius
  • Aquarius Desktop
Published: December 3, 2025

CVE-2025-65027

7.6
    Romm
  • Rom Manager
Published: December 3, 2025

CVE-2025-13646

7.5
    Modula
  • Modula Image Gallery
Published: December 3, 2025

CVE-2025-65320

7.5
    Abacre
  • Restaurant Point Of Sale
Published: December 3, 2025

CVE-2024-32643

7.5
    Masa Cms
  • Masa Cms
Published: December 3, 2025

CVE-2025-54326

7.5
    Samsung
  • Exynos 1280
  • Exynos 2200
Published: December 3, 2025

CVE-2024-3884

7.5
    Jboss
  • Undertow
Published: December 3, 2025

CVE-2025-12819

7.5
    Pgbouncer
  • Pgbouncer
Published: December 3, 2025

CVE-2025-33201

7.5
    Nvidia
  • Triton Inference Server
Published: December 3, 2025

CVE-2025-33211

7.5
    Nvidia
  • Triton Server
Published: December 3, 2025

CVE-2025-13947

7.4
    Webkitgtk
  • Webkitgtk
Published: December 3, 2025

CVE-2025-64443

7.3
    Mcp
  • Gateway
Published: December 3, 2025

CVE-2025-13645

7.2
    Modula
  • Modula Image Gallery
Published: December 3, 2025

CVE-2025-66208

7.2
    Collabora
  • Collabora Online
  • Richdocumentscode
Published: December 3, 2025

CVE-2025-65097

7.1
    Romm
  • Rom Manager
Published: December 3, 2025

CVE-2025-66293

7.1
    Libpng
  • Libpng
Published: December 3, 2025

CVE-2025-39665

6.9
    Checkmk
  • Checkmk
Published: December 3, 2025

CVE-2025-13359

6.5
    Wordpress
  • Tag Category And Taxonomy Manager
Published: December 3, 2025

CVE-2025-57200

6.5
    Avtech Security
  • Dgm1104
Published: December 3, 2025

CVE-2025-64527

6.5
    Envoy
  • Envoy
Published: December 3, 2025

CVE-2025-61727

6.5
    Golang
  • Go
  • Certificate
Published: December 3, 2025

CVE-2025-13448

6.4
    Cssigniter
  • Shortcodes
Published: December 3, 2025

CVE-2025-13401

6.4
    Wordpress
  • Autoptimize
Published: December 3, 2025

CVE-2025-66404

6.4
    Mcp
  • Mcp-Server-Kubernetes
Published: December 3, 2025

CVE-2025-13948

6.3
    Opsre
  • Go-Ldap-Admin
Published: December 3, 2025

CVE-2025-12084

6.3
    Python
  • Python
Published: December 3, 2025

CVE-2025-29864

6.2
    Estsoft
  • Alzip
Published: December 3, 2025

CVE-2025-55076

6.2
    Plugin Alliance
  • Installation Manager
Published: December 3, 2025

CVE-2025-62686

6.2
    Pluginalliance
  • Installation Manager
Published: December 3, 2025

CVE-2025-57202

6.1
    Avtech Security
  • Dgm1104
Published: December 3, 2025

CVE-2025-13945

5.5
    Wireshark
  • Wireshark
Published: December 3, 2025

CVE-2025-13946

5.5
    Wireshark
  • Wireshark
Published: December 3, 2025

CVE-2025-63401

5.5
    Hcl Technologies
  • Hcltech Dragon
Published: December 3, 2025

CVE-2025-63402

5.5
    Hcl Technologies
  • Hcltech Gragon
Published: December 3, 2025

CVE-2025-66453

5.5
    Rhino
  • Rhino
Published: December 3, 2025

CVE-2025-12887

5.4
    Wordpress
  • Post Smtp
Published: December 3, 2025

CVE-2025-13492

5.4
    Hp
  • Hp Image Assistant
Published: December 3, 2025

CVE-2025-20381

5.4
    Splunk
  • Mcp Server App
Published: December 3, 2025

CVE-2025-10304

5.3
    Wordpress
  • Everest Backup
Published: December 3, 2025

CVE-2025-12585

5.3
    Mxchat
  • Mxchat
Published: December 3, 2025

CVE-2025-13472

5.3
    Blazemeter
  • Jenkins Plugin
Published: December 3, 2025

CVE-2025-13949

5.3
    Proudmubai
  • Gofilm
Published: December 3, 2025

CVE-2025-20384

5.3
    Splunk
  • Splunk Enterprise
  • Splunk Cloud Platform
Published: December 3, 2025

CVE-2025-53965

5.3
    Samsung
  • Mobile Processor
  • Wearable Processor
  • Modem Exynos
Published: December 3, 2025

CVE-2025-65096

5.3
    Romm
  • Rom Manager
Published: December 3, 2025

CVE-2025-50361

5.1
    Smallbasic
  • Smallbasic
Published: December 3, 2025

CVE-2025-66220

5.0
    Envoy
  • Envoy
Published: December 3, 2025

CVE-2025-66406

5.0
    Step
  • Step Ca
Published: December 3, 2025

CVE-2025-13495

4.9
    Wordpress
  • Fluentcart
Published: December 3, 2025

CVE-2025-13992

4.7
    Google
  • Chrome
Published: December 3, 2025

CVE-2025-13086

4.6
    Openvpn
  • Openvpn
Published: December 3, 2025

CVE-2025-12358

4.3
    Shopengine
  • Shopengine
Published: December 3, 2025

CVE-2025-13109

4.3
    Woozh
  • Husky Products Filter Professional For Woocommerce
Published: December 3, 2025

CVE-2025-13354

4.3
    Wordpress
  • Tag Category And Taxonomy Manager
Published: December 3, 2025

CVE-2025-13756

4.3
    Wordpress
  • Fluent Booking
Published: December 3, 2025

CVE-2025-20383

4.3
    Splunk
  • Splunk Enterprise
  • Splunk Secure Gateway
Published: December 3, 2025

CVE-2025-20389

4.3
    Splunk
  • Splunk Enterprise
  • Splunk Secure Gateway App
Published: December 3, 2025

CVE-2025-64763

3.7
    Envoy Proxy
  • Envoy
Published: December 3, 2025

CVE-2025-20382

3.5
    Splunk
  • Splunk Enterprise
  • Splunk Cloud Platform
Published: December 3, 2025

CVE-2025-12954

2.7
    Motopress
  • Timetable And Event Schedule
Published: December 3, 2025

CVE-2025-20388

2.7
    Splunk
  • Splunk Enterprise
  • Splunk Cloud Platform
Published: December 3, 2025

CVE-2025-20385

2.4
    Splunk
  • Splunk Enterprise
  • Splunk Cloud Platform
Published: December 3, 2025

CVE-2025-13751

1.3
    Openvpn
  • Openvpn
Published: December 3, 2025

CVE-2025-65841

None
    Aquarius
  • Aquarius Desktop
Published: December 3, 2025

CVE-2025-65842

None
    Aquarius
  • Helpertool
    Apple
Published: December 3, 2025

CVE-2025-66478

None
    *
  • *
Published: December 3, 2025

CVE-2025-65345

None
    Alexusmai
  • Laravel-File-Manager
Published: December 3, 2025

CVE-2025-64055

None
    Fanvil
  • X210 V2
Published: December 3, 2025

CVE-2025-65868

None
    Eyoucms
  • Eyoucms
Published: December 3, 2025
Click here to see more Vulnerabilities