Tag: 2025-12-07

2 Attack Reports | 22 Vulnerabilities

Attack reports

Inside Shanya, a packer-as-a-service fueling modern attacks

The Shanya crypter is a new packer-as-a-service offering gaining popularity among ransomware groups. It features advanced capabilities like non-standard module loading, unique stubs for each customer, AMSI bypass, anti-VM measures, and runtime protection. Early samples contained revealing artifacts…
ransomware
evasion
dll sideloading
medusa
stealc
akira
qilin
lumma
crypter
bumblebee
edr killer
packer-as-a-service
crytox
castlerat
2025-12-07
chuchuka
wht downloader
Published: December 7, 2025
Linked vulnerabilities : CVE-2022-26134, CVE-2023-3519, CVE-2022-3236, CVE-2022-30190, CVE-2020-15069, CVE-2018-0798, CVE-2023-40044
Downloadable IOCs: 5

Microsoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild (Updated November 3)

A critical vulnerability in Microsoft's Windows Server Update Services (WSUS) allows unauthenticated remote code execution with system privileges. Initially patched on October 14, 2025, the flaw required an emergency update on October 23 due to incomplete mitigation. Active exploitation was observe…
cisa
rce
patch management
CVE-2025-59287
2025-12-07
active exploitation
kev catalog
windows server
wsus
Published: December 7, 2025
Linked vulnerabilities : CVE-2024-36401, CVE-2025-32433 (CVSS 10.0), CVE-2025-52905 (CVSS 7.0), CVE-2025-52906 (CVSS 9.3), CVE-2025-52907 (CVSS 7.3), CVE-2025-59287 (CVSS 9.8), CVE-2025-53868 (CVSS 8.5), CVE-2025-61955 (CVSS 8.5), CVE-2025-57780 (CVSS 8.5), CVE-2025-55182 (CVSS 10.0), CVE-2025-66478, CVE-2025-21042
Downloadable IOCs: 1
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-14191

7.4
    jinqv
Published: December 7, 2025

CVE-2025-14196

7.4
    magic_b1
Published: December 7, 2025

CVE-2025-14187

7.3
    dh2100_plus
Published: December 7, 2025

CVE-2025-14188

7.3
    dh2100+
Published: December 7, 2025

CVE-2025-14189

6.9
    chanjet_crm
Published: December 7, 2025

CVE-2025-14190

6.9
    tplus
Published: December 7, 2025

CVE-2025-14192

6.9
    online-banking
Published: December 7, 2025

CVE-2025-14197

5.5
    verysync
Published: December 7, 2025

CVE-2025-14198

5.5
    Verysync
  • Verysync
Published: December 7, 2025

CVE-2025-14182

5.3
    Sobey
  • Media Convergence System
Published: December 7, 2025

CVE-2025-14183

5.3
    space1_nas
Published: December 7, 2025

CVE-2025-14184

5.3
    space1_nas
Published: December 7, 2025

CVE-2025-14185

5.3
    u8_cloud
    u8_cloud
    u8_cloud
    u8_cloud
Published: December 7, 2025

CVE-2025-14193

5.3
    Carmelogarcia
  • Employee Profile Management System
Published: December 7, 2025

CVE-2025-14195

5.3
    Carmelogarcia
  • Employee Profile Management System
Published: December 7, 2025

CVE-2025-14199

5.3
    Verysync
  • Verysync
Published: December 7, 2025

CVE-2025-14203

5.3
    Carmelo
  • Question Paper Generator
Published: December 7, 2025

CVE-2025-14204

5.3
    cherry-studio-tykofork
Published: December 7, 2025

CVE-2025-14186

5.1
    gxp1625
Published: December 7, 2025

CVE-2025-14194

5.1
    Carmelogarcia
  • Employee Profile Management System
Published: December 7, 2025

CVE-2025-14200

5.1
    Alokjaiswal
  • Hotel-Management-Services-Using-Mysql-And-Php
Published: December 7, 2025

CVE-2025-14201

4.8
    Alokjaiswal
  • Hotel-Management-Services-Using-Mysql-And-Php
Published: December 7, 2025
Click here to see more Vulnerabilities