Tag: 2025-12-04

3 Attack Reports | 171 Vulnerabilities

Attack reports

Prolific Zero-Day Exploits Continue

Despite sanctions, Intellexa continues to operate, developing and selling spyware to various clients. The company has been linked to 15 unique zero-day vulnerabilities since 2021, targeting mobile browsers and operating systems. Their exploit chain, known as 'smack', uses a framework called JSKit f…
ios
surveillance
android
zero-day
spyware
CVE-2024-4610
chrome
CVE-2025-6554
2025-12-04
predator
CVE-2023-41991
CVE-2023-41992
CVE-2023-41993
exploit-chain
CVE-2023-2033
preyhunter
CVE-2023-4762
CVE-2021-37976
CVE-2023-2136
CVE-2023-3079
CVE-2021-37973
CVE-2021-38003
CVE-2021-1048
CVE-2025-48543
CVE-2021-38000
Published: December 4, 2025
Linked vulnerabilities : CVE-2024-4610, CVE-2025-6554 (CVSS 8.1), CVE-2025-12480 (CVSS 9.1), CVE-2025-48543, CVE-2021-1048, CVE-2023-2136, CVE-2021-38003, CVE-2021-37976, CVE-2023-2033, CVE-2023-41993, CVE-2023-41992, CVE-2023-41991, CVE-2023-4762, CVE-2023-3079, CVE-2021-38000, CVE-2021-37973, CVE-2022-42856
Downloadable IOCs: 2

Malicious VSCode Extension Launches Multi-Stage Attack Chain with Anivia Loader and OctoRAT

A malicious Visual Studio Code extension named 'prettier-vscode-plus' was discovered on the official VSCode Marketplace, impersonating the legitimate Prettier formatter. This extension served as the entry point for a multi-stage malware chain, starting with the Anivia loader, which decrypted and ex…
supply-chain
developers
process-hollowing
extension
multi-stage
vscode
uac-bypass
2025-12-04
remote-access-toolkit
anivia
octorat
Published: December 4, 2025
Downloadable IOCs: 8

Global Corporate Web

This analysis explores the corporate structure and operations of Intellexa, a mercenary spyware vendor. It reveals new companies likely tied to Intellexa's network, particularly within a Czech cluster, and examines their roles in product shipment and potential infection vectors. The report traces I…
spyware
infrastructure
2025-12-04
predator
export data
corporate structure
ad-based infection
aladdin
Published: December 4, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-66516

10.0
    Apache
  • Tika-Core
  • Tika-Pdf-Module
  • Tika-Parsers
Published: December 4, 2025

CVE-2024-45538

9.6
    Synology
  • Dsm
  • Dsmuc
Published: December 4, 2025

CVE-2025-66571

9.3
    Una
  • Una Cms
Published: December 4, 2025

CVE-2025-66576

8.9
    Remote Keyboard
  • Remote Keyboard
Published: December 4, 2025

CVE-2025-66509

8.9
    Laradashboard
  • Laradashboard
Published: December 4, 2025

CVE-2025-66287

8.8
    Webkitgtk
  • Webkitgtk
Published: December 4, 2025

CVE-2025-13543

8.8
    Wordpress
  • Postgallery
Published: December 4, 2025

CVE-2025-66555

8.8
    Airkeyboard
  • Airkeyboard
Published: December 4, 2025

CVE-2025-12097

8.7
    National Instruments
  • Ni System Web Server
Published: December 4, 2025

CVE-2023-53734

8.7
    Dawa-Pharma
  • Dawa-Pharma
Published: December 4, 2025

CVE-2024-58275

8.7
    Easywall
  • Easywall
Published: December 4, 2025

CVE-2024-58276

8.7
    Obi08
  • Enrollment System
Published: December 4, 2025

CVE-2024-58277

8.7
    R
  • Radio Network Fm Transmitter
Published: December 4, 2025

CVE-2025-65959

8.7
    Open-Webui
  • Open Webui
Published: December 4, 2025

CVE-2025-11838

8.7
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-53704

8.7
    Pivot
  • Pivot Client
Published: December 4, 2025

CVE-2025-13373

8.7
    Advantech
  • Iview
Published: December 4, 2025

CVE-2025-62173

8.6
    Unknown
  • Endpoint Module
Published: December 4, 2025

CVE-2025-27935

8.6
    Pingidentity
  • Pingfederate
Published: December 4, 2025

CVE-2025-12026

8.6
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-12195

8.6
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-12196

8.6
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-65958

8.5
    Openwebui
  • Openwebui
Published: December 4, 2025

CVE-2024-58278

8.5
    Perl2exe
  • Perl2exe
Published: December 4, 2025

CVE-2025-66575

8.5
    Veepn
  • Veevpn
Published: December 4, 2025

CVE-2025-9127

8.4
    Purestorage
  • Px Enterprise
Published: December 4, 2025

CVE-2025-66237

8.4
    Dcim
  • Dctrack
Published: December 4, 2025

CVE-2025-13932

8.3
    Soliscloud
  • Api
Published: December 4, 2025

CVE-2025-1545

8.2
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-12995

8.1
    Medtronic
  • Carelink Network
Published: December 4, 2025

CVE-2025-66559

8.0
    Taiko
  • Taiko Alethia
Published: December 4, 2025

CVE-2025-54158

7.8
    Synology
  • Beedrive
Published: December 4, 2025

CVE-2025-54160

7.8
    Synology
  • Beedrive
Published: December 4, 2025

CVE-2024-45539

7.5
    Synology
  • Diskstation Manager
  • Unified Controller
Published: December 4, 2025

CVE-2025-54159

7.5
    Synology
  • Beedrive
Published: December 4, 2025

CVE-2025-65945

7.5
    Auth0
  • Node-Jws
Published: December 4, 2025

CVE-2025-1547

7.5
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-66506

7.5
    Github
  • Fulcio
Published: December 4, 2025

CVE-2025-66564

7.5
    Sigstore
  • Sigstore Timestamp Authority
Published: December 4, 2025

CVE-2025-14015

7.4
    H3c
  • Magic B0
Published: December 4, 2025

CVE-2025-10285

7.4
    Silicon Labs
  • Simplicity Device Manager
Published: December 4, 2025

CVE-2025-66238

7.4
    Dcim
  • Dctrack
Published: December 4, 2025

CVE-2025-66561

7.3
    Sysreptor
  • Sysreptor
Published: December 4, 2025

CVE-2025-11727

7.2
    Codisto
  • Omnichannel For Woocommerce
Published: December 4, 2025

CVE-2025-29846

7.2
    Synology
  • Portenable
Published: December 4, 2025

CVE-2025-66563

7.1
    *
  • Monkeytype
Published: December 4, 2025

CVE-2025-66572

6.9
    Loaded Commerce
  • Loaded Commerce
Published: December 4, 2025

CVE-2025-66573

6.9
    Solstice
  • Pod Api
Published: December 4, 2025

CVE-2025-13940

6.7
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-59788

6.4
    Nextcloud
  • Nextcloud
Published: December 4, 2025

CVE-2025-2848

6.3
    Synology
  • Mail Server
Published: December 4, 2025

CVE-2025-1910

6.3
    Watchguard
  • Mobile Vpn With Ssl Client
Published: December 4, 2025

CVE-2025-13513

6.1
    Wordpress
  • Clik Stats
Published: December 4, 2025

CVE-2025-11222

6.1
    Linecorp
  • Central Dogma
Published: December 4, 2025

CVE-2025-12986

6.0
    Silabs
  • Wf200
  • Wgm160p
Published: December 4, 2025

CVE-2025-8074

5.6
    Synology
  • Beedrive
Published: December 4, 2025

CVE-2025-14010

5.5
    Ansible
  • Ansible-Collection-Community-General
Published: December 4, 2025

CVE-2025-29843

5.4
    Synology
  • File Station
Published: December 4, 2025

CVE-2025-11379

5.3
    Wordpress
  • Webp Express
Published: December 4, 2025

CVE-2025-14016

5.3
    Macrozheng
  • Mall-Swarm
Published: December 4, 2025

CVE-2025-12994

5.3
    Medtronic
  • Carelink Network
Published: December 4, 2025

CVE-2023-53735

5.3
    Webigniter
  • Webigniter
Published: December 4, 2025

CVE-2025-66574

5.3
    Tranzaxis
  • Tranzaxis
Published: December 4, 2025

CVE-2025-14051

5.3
    Youlaitech
  • Youlai-Mall
Published: December 4, 2025

CVE-2025-41079

5.1
    Seafile
  • Seafile
Published: December 4, 2025

CVE-2025-41080

5.1
    Seafile
  • Seafile
Published: December 4, 2025

CVE-2025-14004

5.1
    Dayrui
  • Xunruicms
Published: December 4, 2025

CVE-2025-14006

5.1
    Dayrui
  • Xunruicms
Published: December 4, 2025

CVE-2025-14008

5.1
    Dayrui
  • Xunruicms
Published: December 4, 2025

CVE-2025-14011

5.1
    Jizhcms
  • Jizhcms
Published: December 4, 2025

CVE-2025-14012

5.1
    Jizhicms
  • Jizhicms
Published: December 4, 2025

CVE-2025-13488

5.1
    *
  • *
Published: December 4, 2025

CVE-2025-12826

4.8
    Wordpress
  • Custom Post Type Ui
  • Wordpress
Published: December 4, 2025

CVE-2025-14005

4.8
    Dayrui
  • Xunruicms
Published: December 4, 2025

CVE-2025-14013

4.8
    Jizhichms
  • Jizhichms
Published: December 4, 2025

CVE-2025-13936

4.8
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-13937

4.8
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-13938

4.8
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-13939

4.8
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-6946

4.8
    Watchguard
  • Fireware Os
Published: December 4, 2025

CVE-2025-12782

4.3
    Wpbeaver
  • Beaver Builder
Published: December 4, 2025

CVE-2024-5401

4.3
    Synology
  • D2024
  • Synology Unified Controller
Published: December 4, 2025

CVE-2025-29844

4.3
    Synology
  • File Station
Published: December 4, 2025

CVE-2025-29845

4.3
    Synology
  • Videoplayer2
Published: December 4, 2025

CVE-2025-63681

4.3
    Openwebui
  • Open Webui
Published: December 4, 2025

CVE-2025-12996

4.1
    Medtronic
  • Carelink Network
Published: December 4, 2025

CVE-2025-12997

2.2
    Medtronic
  • Carelink Network
Published: December 4, 2025

CVE-2025-14007

2.0
    Xunruicms
  • Xunruicms
Published: December 4, 2025

CVE-2025-66479

1.8
    Anthropic
  • Sandbox Runtime
Published: December 4, 2025

CVE-2025-40214

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40215

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40216

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40217

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40218

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40219

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40220

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40221

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-53963

None
    Thermo Fisher
  • Ion Torrent Onetouch 2
Published: December 4, 2025

CVE-2025-54303

None
    Thermo Fisher
  • Torrent Suite
Published: December 4, 2025

CVE-2025-54304

None
    Thermo Fisher
  • Ion Torrent Onetouch 2
Published: December 4, 2025

CVE-2025-54305

None
    Thermo Fisher
  • Thermo Fisher Torrent Suite
Published: December 4, 2025

CVE-2025-54306

None
    Thermo Fisher
  • Thermo Fisher Torrent Suite
Published: December 4, 2025

CVE-2025-54307

None
    Thermo Fisher
  • Torrent Suite
Published: December 4, 2025

CVE-2025-65346

None
    Alexusmai
  • Laravel-File-Manager
Published: December 4, 2025

CVE-2025-14024

None
    Wordpress
  • Wordpress
Published: December 4, 2025

CVE-2025-40222

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40223

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40224

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40225

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40226

None
    Linux
  • Linux Kernel
    Firmware
Published: December 4, 2025

CVE-2025-40227

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40228

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40229

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40230

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40231

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40232

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40233

None
    Linux
  • Linux Kernel
  • Ocfs2
Published: December 4, 2025

CVE-2025-40234

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40235

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40236

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40237

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40238

None
    Linux
  • Linux Kernel
    Mlx
Published: December 4, 2025

CVE-2025-40239

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40240

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40241

None
    Linux
  • Linux Kernel
  • Erofs
Published: December 4, 2025

CVE-2025-40242

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40243

None
    Linux
  • Linux Kernel
  • Hfs
Published: December 4, 2025

CVE-2025-40244

None
    Linux
  • Linux Kernel
  • Module
Published: December 4, 2025

CVE-2025-40245

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40246

None
    Linux
  • Kernel
  • Xfs
Published: December 4, 2025

CVE-2025-40247

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40248

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40249

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40250

None
    Linux
  • Linux Kernel
    Mlx
Published: December 4, 2025

CVE-2025-40251

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40252

None
    Qlogic
  • Qede
    Linux
Published: December 4, 2025

CVE-2025-40253

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40254

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40255

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40256

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40257

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40258

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40259

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40260

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40261

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40262

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40263

None
    Linux
  • Kernel
  • Cros Ec Keyb
Published: December 4, 2025

CVE-2025-40264

None
    Linux
  • Linux Kernel
Published: December 4, 2025

CVE-2025-40265

None
    Linux
  • Kernel
Published: December 4, 2025

CVE-2025-40266

None
    Linux
  • Linux Kernel
  • Kvm
Published: December 4, 2025

CVE-2025-56427

None
    Composiohq
  • Composiohq
Published: December 4, 2025

CVE-2025-57210

None
    Platform
  • V1.0.0
Published: December 4, 2025

CVE-2025-57212

None
    Platform
  • Platform
Published: December 4, 2025

CVE-2025-57213

None
    Platform
  • Platform
Published: December 4, 2025

CVE-2025-61148

None
    Eduplus
  • Edupluscampus
Published: December 4, 2025

CVE-2025-65516

None
    Seafile
  • Seafile Community Edition
Published: December 4, 2025

CVE-2025-63364

None
    Waveshare
  • Rs232/485 To Wifi Eth
Published: December 4, 2025

CVE-2025-66373

None
    Akamai
  • Ghost
Published: December 4, 2025

CVE-2025-63363

None
    Waveshare
  • Rs232 485 To Wifi Eth B
Published: December 4, 2025

CVE-2025-63361

None
    Waveshare
  • Rs232 485 To Wifi Eth
Published: December 4, 2025

CVE-2025-63362

None
    Waveshare
  • Rs232/485 To Wifi Eth
Published: December 4, 2025

CVE-2025-65637

None
    Sirupsen
  • Logrus
Published: December 4, 2025

CVE-2025-29268

None
    Allnet
  • All Rut22gw
Published: December 4, 2025

CVE-2025-29269

None
    Allnet
  • All-Rut22gw
Published: December 4, 2025

CVE-2025-63499

None
    Alinto
  • Sogo
Published: December 4, 2025

CVE-2025-65806

None
    E-Point
  • Eagle
Published: December 4, 2025

CVE-2025-65883

None
    Genexis
  • Platinum P4410
Published: December 4, 2025

CVE-2025-55948

None
    Yzcheng90
  • X-Springboot
Published: December 4, 2025

CVE-2025-63896

None
    Jxl
  • Android Double Din Player
Published: December 4, 2025

CVE-2025-65899

None
    Kalmia
  • Kalmia Cms
Published: December 4, 2025

CVE-2025-65900

None
    Kalmia
  • Kalmia Cms
Published: December 4, 2025
Click here to see more Vulnerabilities