Tag: 2025-12-08

5 Attack Reports | 241 Vulnerabilities

Attack reports

Campaign uses ClickFix page to push NetSupport RAT

The SmartApeSG campaign, also known as ZPHP or HANEYMANEY, has evolved from using fake browser update pages to employing ClickFix-style fake CAPTCHA pages. This campaign distributes malicious NetSupport RAT packages as its initial infection vector. The attack chain begins with an injected script on…
persistence
clickfix
netsupport rat
fake captcha
clipboard injection
2025-12-08
haneymaney
zphp
Published: December 8, 2025
Downloadable IOCs: 3

Operation FrostBeacon: Multi-Cluster Cobalt Strike Campaign Targets Russia

Operation FrostBeacon is a targeted malware campaign delivering Cobalt Strike beacons to companies in Russia. It uses two infection clusters: one leveraging malicious archive files with LNK shortcuts, and another exploiting CVE-2017-0199 and CVE-2017-11882 vulnerabilities. Both clusters lead to rem…
phishing
powershell
russia
cobalt strike
CVE-2017-0199
CVE-2017-11882
lnk files
hta
2025-12-08
Published: December 8, 2025
Linked vulnerabilities : CVE-2017-11882, CVE-2017-0199
Downloadable IOCs: 60

Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat Actors

A critical vulnerability dubbed 'React2Shell' (CVE-2025-55182) in React Server Components is being actively exploited by Chinese threat actors. The flaw affects multiple versions and packages, allowing arbitrary code execution through crafted HTTP requests. Approximately 39% of scanned cloud enviro…
gobrat
chinese threat actors
arbitrary code execution
CVE-2025-55182
react2shell
2025-12-08
active exploitation
react server components
Published: December 8, 2025
Linked vulnerabilities : CVE-2025-55182 (CVSS 10.0)
Downloadable IOCs: 2

LummaStealer dropped via fake updates from itch.io and Patreon

A malicious campaign targeting indie game platforms like Itch.io and Patreon has been discovered. Attackers are using newly created accounts to spam comments on legitimate games, claiming to offer game updates through Patreon links. These links lead to downloads containing LummaStealer malware. The…
anti-analysis
lummastealer
fake updates
javascript obfuscation
2025-12-08
indie games
itch.io
nexe
patreon
Published: December 8, 2025
Downloadable IOCs: 5

AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows

An undocumented Linux backdoor called GhostPenguin was discovered using AI-driven threat hunting. This multi-threaded C++ malware provides remote shell access and file system operations over an encrypted UDP channel. It uses a structured handshake mechanism and synchronizes threads for registration…
c++
linux backdoor
remote shell
multi-threaded
2025-12-08
ai threat hunting
ghostpenguin
rc5 encryption
udp communication
zero-detection malware
Published: December 8, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-27019

9.8
    Nokia
  • Infinera Mtc-9 Firmware
  • Infinera Mtc-9
Published: December 8, 2025

CVE-2025-27020

9.8
    Nokia
  • Infinera Mtc-9 Firmware
  • Infinera Mtc-9
Published: December 8, 2025

CVE-2025-48626

9.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-64081

9.8
    Pamzey
  • Patients Waiting Area Queue Management System
Published: December 8, 2025

CVE-2025-61318

9.1
    Emlog
  • Emlog
Published: December 8, 2025

CVE-2025-65548

9.1
    Cashu
  • Nutshell
Published: December 8, 2025

CVE-2025-65849

9.1
    proof-of-work_obfuscation_mode
Published: December 8, 2025

CVE-2025-63721

8.8
    Hummerrisk
  • Hummerrisk
Published: December 8, 2025

CVE-2025-65271

8.8
    Azuriom
  • Azuriom
Published: December 8, 2025

CVE-2025-12956

8.7
    enovia_collaborative_industry_innovator
Published: December 8, 2025

CVE-2025-26487

8.6
    Nokia
  • Infinera Mtc-9 Firmware
  • Infinera Mtc-9
Published: December 8, 2025

CVE-2025-66324

8.4
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-66328

8.4
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-66461

8.4
    fullback_manager_pro
Published: December 8, 2025

CVE-2025-42620

8.3
    vulnerability-lookup
Published: December 8, 2025

CVE-2025-42615

8.1
    vulnerability-lookup
Published: December 8, 2025

CVE-2025-22420

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-32328

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-32329

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48525

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48536

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48555

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48565

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48566

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48572

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48573

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48575

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48580

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48583

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48586

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48588

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48589

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48596

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48597

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48599

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48612

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48615

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48620

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48623

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48624

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48627

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48628

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48629

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48632

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48637

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48638

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-48606

7.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-26488

7.5
    Nokia
  • Infinera Mtc-9 Firmware
  • Infinera Mtc-9
Published: December 8, 2025

CVE-2025-48592

7.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48631

7.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-65795

7.5
    Usememos
  • Memos
Published: December 8, 2025

CVE-2025-48594

7.3
    Google
  • Android
Published: December 8, 2025

CVE-2025-48621

7.3
    Google
  • Android
Published: December 8, 2025

CVE-2025-48639

7.3
    Google
  • Android
Published: December 8, 2025

CVE-2025-65363

7.2
    Ruijie
  • Rg-Ap720-L Firmware
  • Rg-Ap720-L
Published: December 8, 2025

CVE-2025-14254

7.1
    vitals_esp
Published: December 8, 2025

CVE-2025-14255

7.1
    vitals_esp
Published: December 8, 2025

CVE-2025-66327

7.1
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-14261

7.1
    litmus
Published: December 8, 2025

CVE-2025-42616

7.0
    vulnerability-lookup
Published: December 8, 2025

CVE-2025-48564

7.0
    Google
  • Android
Published: December 8, 2025

CVE-2025-48625

7.0
    Google
  • Android
Published: December 8, 2025

CVE-2025-14206

6.9
    Senior-Walter
  • Online Student Clearance System
Published: December 8, 2025

CVE-2025-14207

6.9
    hotel_management_system
Published: December 8, 2025

CVE-2025-14209

6.9
    Campcodes
  • School File Management System
Published: December 8, 2025

CVE-2025-14210

6.9
    Projectworlds
  • Advanced Library Management System
Published: December 8, 2025

CVE-2025-14211

6.9
    Projectworlds
  • Advanced Library Management System
Published: December 8, 2025

CVE-2025-14212

6.9
    Projectworlds
  • Advanced Library Management System
Published: December 8, 2025

CVE-2025-14215

6.9
    Fabian
  • Currency Exchange System
Published: December 8, 2025

CVE-2025-14216

6.9
    Fabian
  • Currency Exchange System
Published: December 8, 2025

CVE-2025-14217

6.9
    Fabian
  • Currency Exchange System
Published: December 8, 2025

CVE-2025-14218

6.9
    Fabian
  • Currency Exchange System
Published: December 8, 2025

CVE-2025-14223

6.9
    Carmelo
  • Simple Leave Manager
Published: December 8, 2025

CVE-2025-14253

6.9
    vitals_esp
Published: December 8, 2025

CVE-2025-14226

6.9
    Angeljudesuarez
  • Student Management System
Published: December 8, 2025

CVE-2025-14245

6.9
    Ideacms
  • Ideacms
Published: December 8, 2025

CVE-2025-14248

6.9
    Fabian
  • Simple Shopping Cart
Published: December 8, 2025

CVE-2025-14249

6.9
    Fabian
  • Online Ordering System
Published: December 8, 2025

CVE-2025-14250

6.9
    Fabian
  • Online Ordering System
Published: December 8, 2025

CVE-2025-14251

6.9
    Fabian
  • Online Ordering System
Published: December 8, 2025

CVE-2025-14256

6.9
    Angeljudesuarez
  • Student Management System
Published: December 8, 2025

CVE-2025-14257

6.9
    Angeljudesuarez
  • Student Management System
Published: December 8, 2025

CVE-2025-14258

6.9
    Angeljudesuarez
  • Student Management System
Published: December 8, 2025

CVE-2025-48618

6.8
    Google
  • Android
Published: December 8, 2025

CVE-2025-66326

6.7
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-22432

6.7
    Google
  • Android
Published: December 8, 2025

CVE-2025-32319

6.7
    Google
  • Android
Published: December 8, 2025

CVE-2025-48598

6.6
    Google
  • Android
Published: December 8, 2025

CVE-2025-26489

6.5
    Nokia
  • Infinera Mtc-9 Firmware
  • Infinera Mtc-9
Published: December 8, 2025

CVE-2025-59391

6.5
    Libcoap
  • Libcoap
Published: December 8, 2025

CVE-2025-65797

6.5
    Usememos
  • Memos
Published: December 8, 2025

CVE-2025-65804

6.5
    Tenda
  • Ax3 Firmware
  • Ax3
Published: December 8, 2025

CVE-2025-36015

6.5
    Ibm
  • Cognos Controller
  • Controller
Published: December 8, 2025

CVE-2025-36017

6.5
    Ibm
  • Controller
Published: December 8, 2025

CVE-2025-64650

6.5
    Ibm
  • Storage Defender Resiliency Service
Published: December 8, 2025

CVE-2025-36140

6.5
    Ibm
  • Watsonx.Data
Published: December 8, 2025

CVE-2025-64497

6.5
    Enalean
  • Tuleap
Published: December 8, 2025

CVE-2025-14276

6.3
    eve_x1_server
Published: December 8, 2025

CVE-2025-66325

6.2
    Huawei
  • Emui
  • Harmonyos
Published: December 8, 2025

CVE-2025-65231

6.1
    Barix
  • Instreamer Firmware
  • Instreamer
Published: December 8, 2025

CVE-2025-62408

5.9
    c-ares
    c-ares
Published: December 8, 2025

CVE-2025-48576

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48584

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48590

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48591

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48600

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48601

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48603

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48604

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48607

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48610

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48622

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48633

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48569

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-48608

5.5
    Google
  • Android
Published: December 8, 2025

CVE-2025-65798

5.4
    Usememos
  • Memos
Published: December 8, 2025

CVE-2025-65230

5.4
    Barix
  • Instreamer Firmware
  • Instreamer
Published: December 8, 2025

CVE-2025-12635

5.4
    Ibm
  • Websphere Application Server
Published: December 8, 2025

CVE-2025-14208

5.3
    dir-823x
Published: December 8, 2025

CVE-2025-14214

5.3
    Angeljudesuarez
  • Student Management System
Published: December 8, 2025

CVE-2025-14220

5.3
    cd3510
Published: December 8, 2025

CVE-2025-14222

5.3
    Carmelogarcia
  • Employee Profile Management System
Published: December 8, 2025

CVE-2025-66323

5.3
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-14224

5.3
    Yottamaster
  • Dm2 Firmware
  • Dm2
  • Dm3 Firmware
  • Dm3
  • Dm200 Firmware
  • Dm200
Published: December 8, 2025

CVE-2025-14225

5.3
    Dlink
  • Dcs-930l Firmware
  • Dcs-930l
Published: December 8, 2025

CVE-2025-14227

5.3
    simple-php-blog
Published: December 8, 2025

CVE-2025-14262

5.3
    knime_business_hub
Published: December 8, 2025

CVE-2025-14230

5.3
    Carmelo
  • Daily Time Recording System
Published: December 8, 2025

CVE-2025-14246

5.3
    Fabian
  • Simple Shopping Cart
Published: December 8, 2025

CVE-2025-14247

5.3
    Fabian
  • Simple Shopping Cart
Published: December 8, 2025

CVE-2025-14259

5.3
    jshop_miniprogram_mall_system
Published: December 8, 2025

CVE-2025-14219

5.1
    Campcodes
  • Retro Basketball Shoes Online Store
Published: December 8, 2025

CVE-2025-14221

5.1
    Oretnom23
  • Banking System
Published: December 8, 2025

CVE-2025-66320

5.1
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-66321

5.1
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-66322

5.1
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-14228

5.1
    sip-t21p_e2
Published: December 8, 2025

CVE-2025-14229

5.1
    Warren-Daloyan
  • Inventory Management System
Published: December 8, 2025

CVE-2025-66330

4.9
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-14205

4.8
    Fabian
  • Chamber Of Commerce Membership Management System
Published: December 8, 2025

CVE-2025-14244

4.8
    Njtech
  • Greencms
Published: December 8, 2025

CVE-2025-48614

4.6
    Google
  • Android
Published: December 8, 2025

CVE-2025-65229

4.6
    Lyrion
  • Lyrion Music Server
Published: December 8, 2025

CVE-2025-12832

4.6
    Ibm
  • Infosphere Information Server
Published: December 8, 2025

CVE-2025-64498

4.6
    Enalean
  • Tuleap
Published: December 8, 2025

CVE-2025-64499

4.6
    Enalean
  • Tuleap
Published: December 8, 2025

CVE-2025-64760

4.6
    Enalean
  • Tuleap
Published: December 8, 2025

CVE-2025-58279

4.4
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-65796

4.3
    Usememos
  • Memos
Published: December 8, 2025

CVE-2025-65799

4.3
    Usememos
  • Memos
Published: December 8, 2025

CVE-2025-33111

4.3
    Ibm
  • Cognos Controller
  • Controller
Published: December 8, 2025

CVE-2025-66329

4.0
    Huawei
  • Emui
  • Harmonyos
Published: December 8, 2025

CVE-2025-65228

3.5
    Rvr
  • Tlk302t Firmware
  • Tlk302t
Published: December 8, 2025

CVE-2025-66331

3.3
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-66332

3.3
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-66333

3.3
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-66334

3.3
    Huawei
  • Harmonyos
Published: December 8, 2025

CVE-2025-60912

3.3
    Phpipam
  • Phpipam
Published: December 8, 2025

CVE-2025-36102

2.7
    Ibm
  • Cognos Controller
  • Controller
Published: December 8, 2025

CVE-2025-40290

None
    kernel
Published: December 8, 2025

CVE-2025-40291

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40292

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40293

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40294

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40295

None
    kernel
Published: December 8, 2025

CVE-2025-40296

None
    linux_kernel
    thinkpad_x9
Published: December 8, 2025

CVE-2025-40297

None
    kernel
Published: December 8, 2025

CVE-2025-40298

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40299

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40301

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40302

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40303

None
    linux_kernel
    btrfs
    raidd
Published: December 8, 2025

CVE-2025-40304

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40305

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40306

None
    kernel
Published: December 8, 2025

CVE-2025-40307

None
    kernel
Published: December 8, 2025

CVE-2025-40308

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40309

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40310

None
    linux_kernel
    amdgpu
Published: December 8, 2025

CVE-2025-40311

None
    kernel
Published: December 8, 2025

CVE-2025-40312

None
    linux_kernel
    linux_kernel
Published: December 8, 2025

CVE-2025-40313

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40314

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40315

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40316

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40317

None
    linux_kernel
    dragonboard_845c
Published: December 8, 2025

CVE-2025-40318

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40319

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40320

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40321

None
    kernel
Published: December 8, 2025

CVE-2025-40322

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40323

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40324

None
    linux_kernel
Published: December 8, 2025

CVE-2025-40326

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50583

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50614

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50615

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50616

None
    kernel
Published: December 8, 2025

CVE-2022-50617

None
    linux_kernel
    drm
Published: December 8, 2025

CVE-2022-50618

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50619

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50620

None
    linux_kernel
    linux_kernel
Published: December 8, 2025

CVE-2022-50621

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50622

None
    linux_kernel
    ext4
Published: December 8, 2025

CVE-2022-50623

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50624

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50625

None
    linux_kernel
    amba_pl011
Published: December 8, 2025

CVE-2022-50626

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50627

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50628

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50629

None
    linux_kernel
Published: December 8, 2025

CVE-2022-50630

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53742

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53743

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53744

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53745

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53746

None
    linux_kernel
    vfio_ap
Published: December 8, 2025

CVE-2023-53747

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53748

None
    linux_kernel
    vcodec
Published: December 8, 2025

CVE-2023-53749

None
    kernel
Published: December 8, 2025

CVE-2023-53750

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53751

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53752

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53753

None
    kernel
Published: December 8, 2025

CVE-2023-53754

None
    kernel
Published: December 8, 2025

CVE-2023-53755

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53756

None
    linux_kernel
    kvm
Published: December 8, 2025

CVE-2023-53757

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53758

None
    linux_kernel
    atmel_quadspi
Published: December 8, 2025

CVE-2023-53759

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53760

None
    linux_kernel
    ufs
Published: December 8, 2025

CVE-2023-53761

None
    kernel
Published: December 8, 2025

CVE-2023-53762

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53763

None
    linux_kernel
    f2fs
Published: December 8, 2025

CVE-2023-53764

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53765

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53766

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53767

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53768

None
    linux_kernel
Published: December 8, 2025

CVE-2023-53769

None
    linux_kernel
Published: December 8, 2025

CVE-2025-14271

None
Published: December 8, 2025
Click here to see more Vulnerabilities