Tag: 2025-12-12

4 Attack Reports | 227 Vulnerabilities

Attack reports

RTO Challan Fraud: A Technical Report on APK-Based Financial and Identity Theft

A sophisticated mobile fraud operation has been uncovered, distributing a malicious 'RTO Challan / e-Challan' Android application via WhatsApp. The APK uses advanced obfuscation and hidden installation techniques to establish persistent control over victims' devices. It creates a custom VPN tunnel …
social engineering
android
whatsapp
financial fraud
apk
identity theft
otp interception
2025-12-12
e-challan
rto challan / e-challan
vpn abuse
Published: December 12, 2025
Downloadable IOCs: 2

React2Shell flaw (CVE-2025-55182) exploited for remote code execution

A critical vulnerability called 'React2Shell' (CVE-2025-55182) affecting React Server Components has been widely exploited. The flaw allows remote code execution through unsafe handling of incoming data during deserialization. Over 165,000 vulnerable IP addresses have been identified. Post-exploita…
persistence
remote code execution
obfuscated javascript
vshell
snowlight
deserialization
CVE-2025-55182
react2shell
2025-12-12
etherrat
linux loaders
state-sponsored attacks
Published: December 12, 2025
Linked vulnerabilities : CVE-2025-55182 (CVSS 10.0)
Downloadable IOCs: 3

Technical Analysis of the BlackForce Phishing Kit

The BlackForce phishing kit, first observed in August 2025, has evolved through multiple versions and is capable of stealing credentials and performing Man-in-the-Browser attacks to bypass multi-factor authentication. It impersonates various brands and uses sophisticated evasion techniques, includi…
phishing
credential theft
mfa bypass
telegram
evasion techniques
2025-12-12
blackforce
mitb
Published: December 12, 2025
Downloadable IOCs: 0

Operation MoneyMount, ISO Deploying Phantom Stealer

A Russian phishing campaign targeting finance and accounting sectors uses fake payment confirmation emails to deliver Phantom stealer malware. The attack chain involves a ZIP file containing an ISO, which when mounted reveals an executable that loads the stealer. The malware employs anti-analysis t…
phishing
russia
exfiltration
steganography
credential theft
finance
multi-stage attack
phantom stealer
2025-12-12
iso
Published: December 12, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-12963

9.8
Published: December 12, 2025

CVE-2025-14344

9.8
Published: December 12, 2025

CVE-2025-67728

9.8
    Shaneisrael
  • Fireshare
Published: December 12, 2025

CVE-2025-54947

9.8
    Apache
  • Streampark
Published: December 12, 2025

CVE-2025-65854

9.8
    Mineadmin
  • Mineadmin
Published: December 12, 2025

CVE-2024-58299

9.3
Published: December 12, 2025

CVE-2025-58130

9.1
    Apache
  • Fineract
Published: December 12, 2025

CVE-2025-66430

9.1
Published: December 12, 2025

CVE-2025-12824

8.8
Published: December 12, 2025

CVE-2025-12968

8.8
Published: December 12, 2025

CVE-2025-26866

8.8
Published: December 12, 2025

CVE-2025-13506

8.8
Published: December 12, 2025

CVE-2025-65530

8.8
    Cloudlinux
  • Ai-Bolit
Published: December 12, 2025

CVE-2025-14174

8.8
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: December 12, 2025

CVE-2025-43539

8.8
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-67731

8.7
Published: December 12, 2025

CVE-2024-58311

8.7
Published: December 12, 2025

CVE-2024-58314

8.7
Published: December 12, 2025

CVE-2024-58316

8.7
    Puneethreddyhc
  • Online Shopping System Advanced
Published: December 12, 2025

CVE-2025-36743

8.6
    Solaredge
  • Se3680h Firmware
  • Se3680h
Published: December 12, 2025

CVE-2025-36745

8.6
    Solaredge
  • Se3680h Firmware
  • Se3680h
Published: December 12, 2025

CVE-2024-58305

8.6
Published: December 12, 2025

CVE-2025-8083

8.6
Published: December 12, 2025

CVE-2025-23408

8.5
    Apache
  • Fineract
Published: December 12, 2025

CVE-2025-13733

8.5
Published: December 12, 2025

CVE-2024-14010

8.5
Published: December 12, 2025

CVE-2025-67750

8.4
Published: December 12, 2025

CVE-2025-10451

8.2
Published: December 12, 2025

CVE-2025-66492

8.2
    Masacms
  • Masacms
Published: December 12, 2025

CVE-2025-13334

8.1
Published: December 12, 2025

CVE-2025-14044

8.1
Published: December 12, 2025

CVE-2025-58137

8.1
    Apache
  • Fineract
Published: December 12, 2025

CVE-2025-67508

8.0
Published: December 12, 2025

CVE-2025-43320

7.8
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43402

7.8
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43467

7.8
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43510

7.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: December 12, 2025

CVE-2025-43512

7.8
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43527

7.8
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-46285

7.8
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-67779

7.5
    Facebook
  • React
    Vercel
Published: December 12, 2025

CVE-2025-13886

7.5
Published: December 12, 2025

CVE-2025-67725

7.5
    Tornadoweb
  • Tornado
Published: December 12, 2025

CVE-2025-14068

7.5
Published: December 12, 2025

CVE-2025-67726

7.5
    Tornadoweb
  • Tornado
Published: December 12, 2025

CVE-2025-14169

7.5
Published: December 12, 2025

CVE-2025-54981

7.5
    Apache
  • Streampark
Published: December 12, 2025

CVE-2025-43494

7.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Visionos
  • Watchos
Published: December 12, 2025

CVE-2025-43506

7.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43542

7.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-14572

7.4
Published: December 12, 2025

CVE-2025-40829

7.3
    Siemens
  • Simcenter Femap
Published: December 12, 2025

CVE-2025-12835

7.3
Published: December 12, 2025

CVE-2025-12570

7.2
Published: December 12, 2025

CVE-2025-58770

7.2
Published: December 12, 2025

CVE-2025-67818

7.2
    Weaviate
  • Weaviate
Published: December 12, 2025

CVE-2025-14611

7.1
    Gladinet
  • Centrestack
  • Triofox
Published: December 12, 2025

CVE-2025-43520

7.1
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: December 12, 2025

CVE-2025-13052

7.0
Published: December 12, 2025

CVE-2025-13053

7.0
Published: December 12, 2025

CVE-2025-61987

6.9
Published: December 12, 2025

CVE-2025-67727

6.9
    Parseplatform
  • Parse-Server
Published: December 12, 2025

CVE-2025-12843

6.9
Published: December 12, 2025

CVE-2025-14565

6.9
    Kidaze
  • Courseselectionsystem
Published: December 12, 2025

CVE-2025-14566

6.9
    Kidaze
  • Courseselectionsystem
Published: December 12, 2025

CVE-2025-14570

6.9
    Projectworlds
  • Advanced Library Management System
Published: December 12, 2025

CVE-2025-14571

6.9
    Projectworlds
  • Advanced Library Management System
Published: December 12, 2025

CVE-2025-14578

6.9
    Angeljudesuarez
  • Student Management System
Published: December 12, 2025

CVE-2025-14583

6.9
    Campcodes
  • Online Student Enrollment System
Published: December 12, 2025

CVE-2025-14584

6.9
    Angeljudesuarez
  • Covid Tracking System
Published: December 12, 2025

CVE-2025-14585

6.9
    Angeljudesuarez
  • Covid Tracking System
Published: December 12, 2025

CVE-2025-13320

6.8
Published: December 12, 2025

CVE-2025-11266

6.8
Published: December 12, 2025

CVE-2025-14064

6.5
Published: December 12, 2025

CVE-2025-13891

6.5
Published: December 12, 2025

CVE-2025-12960

6.5
Published: December 12, 2025

CVE-2025-43464

6.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43511

6.5
    Apple
  • Ipados
  • Iphone Os
Published: December 12, 2025

CVE-2025-46287

6.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-13839

6.4
Published: December 12, 2025

CVE-2025-12650

6.4
Published: December 12, 2025

CVE-2025-12830

6.4
Published: December 12, 2025

CVE-2025-13747

6.4
Published: December 12, 2025

CVE-2025-13840

6.4
Published: December 12, 2025

CVE-2025-13843

6.4
Published: December 12, 2025

CVE-2025-13846

6.4
Published: December 12, 2025

CVE-2025-13850

6.4
Published: December 12, 2025

CVE-2025-13866

6.4
Published: December 12, 2025

CVE-2025-13884

6.4
Published: December 12, 2025

CVE-2025-13885

6.4
Published: December 12, 2025

CVE-2025-13889

6.4
Published: December 12, 2025

CVE-2025-13904

6.4
Published: December 12, 2025

CVE-2025-13906

6.4
Published: December 12, 2025

CVE-2025-13960

6.4
Published: December 12, 2025

CVE-2025-13961

6.4
Published: December 12, 2025

CVE-2025-13962

6.4
Published: December 12, 2025

CVE-2025-13963

6.4
Published: December 12, 2025

CVE-2025-13966

6.4
Published: December 12, 2025

CVE-2025-13969

6.4
Published: December 12, 2025

CVE-2025-13989

6.4
Published: December 12, 2025

CVE-2025-14032

6.4
Published: December 12, 2025

CVE-2025-14119

6.4
Published: December 12, 2025

CVE-2025-14143

6.4
Published: December 12, 2025

CVE-2025-14393

6.4
Published: December 12, 2025

CVE-2025-11876

6.4
Published: December 12, 2025

CVE-2025-12965

6.4
Published: December 12, 2025

CVE-2025-14030

6.4
Published: December 12, 2025

CVE-2025-8082

6.3
Published: December 12, 2025

CVE-2025-67721

6.3
Published: December 12, 2025

CVE-2025-12834

6.1
Published: December 12, 2025

CVE-2025-13988

6.1
Published: December 12, 2025

CVE-2025-14125

6.1
Published: December 12, 2025

CVE-2025-14129

6.1
Published: December 12, 2025

CVE-2025-14132

6.1
Published: December 12, 2025

CVE-2025-14137

6.1
Published: December 12, 2025

CVE-2025-14138

6.1
Published: December 12, 2025

CVE-2025-14049

6.1
Published: December 12, 2025

CVE-2025-14372

6.1
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: December 12, 2025

CVE-2025-53960

5.9
    Apache
  • Streampark
Published: December 12, 2025

CVE-2025-4970

5.5
Published: December 12, 2025

CVE-2025-13993

5.5
Published: December 12, 2025

CVE-2025-14567

5.5
    Haxxorsid
  • Stock-Management-System
Published: December 12, 2025

CVE-2025-43351

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43381

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43388

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43406

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43416

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43461

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43463

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43465

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43466

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43470

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43471

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43473

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43482

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43509

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43513

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43519

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43521

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43523

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43530

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43538

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-46276

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-46289

5.5
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-13665

5.4
Published: December 12, 2025

CVE-2025-13669

5.4
Published: December 12, 2025

CVE-2025-13670

5.4
Published: December 12, 2025

CVE-2025-67724

5.4
    Tornadoweb
  • Tornado
Published: December 12, 2025

CVE-2025-12883

5.3
Published: December 12, 2025

CVE-2025-13314

5.3
Published: December 12, 2025

CVE-2025-13440

5.3
Published: December 12, 2025

CVE-2025-14166

5.3
Published: December 12, 2025

CVE-2025-14170

5.3
Published: December 12, 2025

CVE-2025-61950

5.3
Published: December 12, 2025

CVE-2025-62192

5.3
Published: December 12, 2025

CVE-2025-12655

5.3
Published: December 12, 2025

CVE-2025-13660

5.3
Published: December 12, 2025

CVE-2025-12348

5.3
Published: December 12, 2025

CVE-2025-14074

5.3
Published: December 12, 2025

CVE-2025-12841

5.3
Published: December 12, 2025

CVE-2025-12408

5.3
Published: December 12, 2025

CVE-2025-14065

5.3
Published: December 12, 2025

CVE-2025-14442

5.3
Published: December 12, 2025

CVE-2025-14568

5.3
Published: December 12, 2025

CVE-2025-67749

5.3
Published: December 12, 2025

CVE-2025-43393

5.2
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43497

5.2
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-54407

5.1
Published: December 12, 2025

CVE-2025-57883

5.1
Published: December 12, 2025

CVE-2025-58576

5.1
Published: December 12, 2025

CVE-2025-64781

5.1
Published: December 12, 2025

CVE-2025-65120

5.1
Published: December 12, 2025

CVE-2025-67730

5.1
    Frappe
  • Learning
Published: December 12, 2025

CVE-2025-67734

5.1
    Frappe
  • Learning
Published: December 12, 2025

CVE-2025-14580

5.1
    Qualitor
  • Qualitor
Published: December 12, 2025

CVE-2025-14582

5.1
    Campcodes
  • Online Student Enrollment System
Published: December 12, 2025

CVE-2025-13972

4.9
Published: December 12, 2025

CVE-2025-67819

4.9
    Weaviate
  • Weaviate
Published: December 12, 2025

CVE-2025-53523

4.8
Published: December 12, 2025

CVE-2025-66284

4.8
Published: December 12, 2025

CVE-2025-36746

4.8
    Solaredge
  • Solaredge Monitoring Platform
Published: December 12, 2025

CVE-2025-14569

4.8
Published: December 12, 2025

CVE-2025-67341

4.6
    Jishenghua
  • Jsherp
Published: December 12, 2025

CVE-2025-67344

4.6
    Jishenghua
  • Jsherp
Published: December 12, 2025

CVE-2025-67342

4.6
    Ruoyi
  • Ruoyi
Published: December 12, 2025

CVE-2025-67634

4.6
Published: December 12, 2025

CVE-2025-13971

4.4
Published: December 12, 2025

CVE-2025-13975

4.4
Published: December 12, 2025

CVE-2025-14035

4.4
Published: December 12, 2025

CVE-2025-14048

4.4
Published: December 12, 2025

CVE-2025-14467

4.4
Published: December 12, 2025

CVE-2025-12783

4.3
Published: December 12, 2025

CVE-2025-13363

4.3
Published: December 12, 2025

CVE-2025-13366

4.3
Published: December 12, 2025

CVE-2025-13408

4.3
Published: December 12, 2025

CVE-2025-13987

4.3
Published: December 12, 2025

CVE-2025-14045

4.3
Published: December 12, 2025

CVE-2025-14062

4.3
Published: December 12, 2025

CVE-2025-14158

4.3
Published: December 12, 2025

CVE-2025-14160

4.3
Published: December 12, 2025

CVE-2025-14161

4.3
Published: December 12, 2025

CVE-2025-14162

4.3
Published: December 12, 2025

CVE-2025-14165

4.3
Published: December 12, 2025

CVE-2025-14354

4.3
Published: December 12, 2025

CVE-2025-14391

4.3
Published: December 12, 2025

CVE-2025-14392

4.3
Published: December 12, 2025

CVE-2025-10684

4.3
Published: December 12, 2025

CVE-2025-14356

4.3
Published: December 12, 2025

CVE-2025-12407

4.3
Published: December 12, 2025

CVE-2025-14159

4.3
Published: December 12, 2025

CVE-2025-64011

4.3
    Nextcloud
  • Nextcloud Server
Published: December 12, 2025

CVE-2025-14373

4.3
    Google
  • Chrome
    Apple
    Linux
    Microsoft
Published: December 12, 2025

CVE-2025-10583

3.5
Published: December 12, 2025

CVE-2023-29144

3.3
    Malwarebytes
  • Malwarebytes
Published: December 12, 2025

CVE-2025-43404

3.3
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43437

3.3
    Apple
  • Ipados
  • Iphone Os
Published: December 12, 2025

CVE-2025-43516

3.3
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43517

3.3
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43518

3.3
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-43522

3.3
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-67737

3.1
Published: December 12, 2025

CVE-2025-43532

2.8
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-36744

2.4
    Solaredge
  • Se3680h Firmware
  • Se3680h
Published: December 12, 2025

CVE-2025-36755

2.4
Published: December 12, 2025

CVE-2025-43410

2.4
    Apple
  • Macos
Published: December 12, 2025

CVE-2025-40345

None
Published: December 12, 2025

CVE-2025-14066

None
Published: December 12, 2025
Click here to see more Vulnerabilities