Tag: 2025-12-23

4 Attack Reports | 170 Vulnerabilities

Attack reports

Webrat, disguised as exploits, is spreading via GitHub repositories

A new malware campaign targeting security professionals and students has been uncovered. The threat actor behind Webrat is now disguising the backdoor as exploits and proof-of-concept code for high-profile vulnerabilities, distributing it through GitHub repositories. The malware, which previously s…
malware
backdoor
exploit
vulnerability
trojan
information-stealing
social-engineering
cybersecurity
github
webrat
CVE-2025-59230
CVE-2025-59295
CVE-2025-10294
2025-12-23
Published: December 23, 2025
Linked vulnerabilities : CVE-2025-59230 (CVSS 7.8), CVE-2025-59295 (CVSS 8.8), CVE-2025-10294 (CVSS 9.8), CVE-2025-11833 (CVSS 9.8), CVE-2025-11499 (CVSS 9.8), CVE-2025-12595 (CVSS 7.4), CVE-2025-12596 (CVSS 7.4), CVE-2025-55234, CVE-2025-54106, CVE-2025-54897
Downloadable IOCs: 5

2025 Holiday Scams: Docusign Phishing Meets Loan Spam

During the holiday season, threat actors exploit overloaded inboxes and financial stress through two main patterns: Docusign-themed phishing for corporate credential harvesting and loan offer spam for personal data theft. The Docusign campaign uses spoofed emails with authentic-looking branding, re…
phishing
credential harvesting
identity theft
docusign
holiday-themed
email security
2025-12-23
loan scams
Published: December 23, 2025
Downloadable IOCs: 3

MacSync Stealer Evolves: From ClickFix to Code-Signed Swift Malware

MacSync Stealer malware has evolved from using drag-to-terminal and ClickFix techniques to a more sophisticated approach. The new variant is delivered as a code-signed and notarized Swift application within a disk image, eliminating the need for direct terminal interaction. The malware retrieves an…
evasion
infostealer
macos
dropper
notarized
2025-12-23
code-signed
macsync stealer
odyssey infostealer
swift
Published: December 23, 2025
Downloadable IOCs: 11

Trial, Error, and Typos: Why Some Malware Attacks Aren't as 'Sophisticated' as You Think

This analysis challenges the notion that cyber threat actors are always sophisticated and organized. Through examining three incidents, it reveals that attackers often make mistakes, face obstacles, and adapt their tactics based on trial and error. The incidents showcase how threat actors struggled…
sparkrat
persistence techniques
iis web server
warlock
2025-12-23
malware deployment
shellcoderunner
Published: December 23, 2025
Downloadable IOCs: 10
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-67108

10.0
    Eprosima
  • Fast-Dds
Published: December 23, 2025

CVE-2025-67109

10.0
    Eclipse
  • Eclipse Cyclone Dds
Published: December 23, 2025

CVE-2024-57521

10.0
    Ruoyi
  • Ruoyi
Published: December 23, 2025

CVE-2025-14931

10.0
    Huggingface
  • Smolagents
Published: December 23, 2025

CVE-2025-68667

9.9
    Continuwuity
  • Homeserver
Published: December 23, 2025

CVE-2025-68615

9.8
    Net-Snmp
  • Net-Snmp
Published: December 23, 2025

CVE-2025-14388

9.8
    Phastpress
  • Phastpress
Published: December 23, 2025

CVE-2025-50526

9.8
    Netgear
  • Ex8000
Published: December 23, 2025

CVE-2025-29228

9.8
    Linksys
  • E5600
Published: December 23, 2025

CVE-2025-29229

9.8
    Linksys
  • E5600
Published: December 23, 2025

CVE-2025-33222

9.8
    Nvidia
  • Isaac Launchable
Published: December 23, 2025

CVE-2025-33223

9.8
    Nvidia
  • Isaac Launchable
Published: December 23, 2025

CVE-2025-33224

9.8
    Nvidia
  • Isaac Launchable
Published: December 23, 2025

CVE-2025-51511

9.8
    Cadmium
  • Cadmium Cms
Published: December 23, 2025

CVE-2025-65354

9.8
    Puneethreddihc
  • Event-Management
Published: December 23, 2025

CVE-2025-14500

9.8
    Icewarp
  • Icewarp
Published: December 23, 2025

CVE-2025-68669

9.6
    5ire
  • 5ire
Published: December 23, 2025

CVE-2025-66209

9.4
    Coolify
  • Coolify
Published: December 23, 2025

CVE-2025-66210

9.4
    Coolify
  • Coolify
Published: December 23, 2025

CVE-2025-66211

9.4
    Coolify
  • Coolify
    Postgresql
Published: December 23, 2025

CVE-2025-66212

9.4
    Coolify
  • Coolify
Published: December 23, 2025

CVE-2025-66213

9.4
    Coolify
  • Coolify
Published: December 23, 2025

CVE-2023-53982

9.3
    Pmb
  • Pmb
Published: December 23, 2025

CVE-2025-68664

9.3
    Langchain
  • Langchain
Published: December 23, 2025

CVE-2025-15044

8.9
    Tenda
  • Wh450
Published: December 23, 2025

CVE-2025-15045

8.9
    Tenda
  • Wh450
Published: December 23, 2025

CVE-2025-15046

8.9
    Tenda
  • Wh450
Published: December 23, 2025

CVE-2025-15047

8.9
    Tenda
  • Wh450
Published: December 23, 2025

CVE-2025-59886

8.8
    Eaton
  • Xcomfort Eci
Published: December 23, 2025

CVE-2025-14499

8.8
    Icewarp
  • Icewarp
Published: December 23, 2025

CVE-2025-68696

8.8
    Httparty
  • Httparty
Published: December 23, 2025

CVE-2021-47720

8.7
    Orangescrum
  • Orangescrum
Published: December 23, 2025

CVE-2021-47721

8.7
    Orangescrum
  • Orangescrum
Published: December 23, 2025

CVE-2021-47734

8.6
    Cmsimple
  • Cmsimple
Published: December 23, 2025

CVE-2021-47735

8.6
    Cmsimple
  • Cmsimple
Published: December 23, 2025

CVE-2021-47736

8.6
    Cmsimple
  • Cmsimple Xh
Published: December 23, 2025

CVE-2025-68665

8.6
    Langchain
  • Langchain
  • Core
Published: December 23, 2025

CVE-2021-47739

8.5
    Epic Games
  • Easy Anti-Cheat
Published: December 23, 2025

CVE-2025-25364

8.4
    Speedify
  • Speedify Vpn
Published: December 23, 2025

CVE-2025-12934

8.1
    Beaverbuilder
  • Beaver Builder
Published: December 23, 2025

CVE-2025-14920

7.8
    Huggingface
  • Transformers
Published: December 23, 2025

CVE-2025-14921

7.8
    Hugging Face
  • Transformers
Published: December 23, 2025

CVE-2025-14922

7.8
    Huggingface
  • Diffusers
Published: December 23, 2025

CVE-2025-14924

7.8
    Hugging Face
  • Transformers
Published: December 23, 2025

CVE-2025-14925

7.8
    Hugging Face
  • Accelerate
Published: December 23, 2025

CVE-2025-14926

7.8
    Huggingface
  • Transformers
Published: December 23, 2025

CVE-2025-14927

7.8
    Huggingface
  • Transformers
Published: December 23, 2025

CVE-2025-14928

7.8
    Huggingface
  • Transformers
Published: December 23, 2025

CVE-2025-14929

7.8
    Huggingface
  • Transformers
Published: December 23, 2025

CVE-2025-14930

7.8
    Huggingface
  • Transformers
Published: December 23, 2025

CVE-2025-14932

7.8
    Nsf
  • Unidata Netcdf-C
Published: December 23, 2025

CVE-2025-14933

7.8
    Nsf
  • Unidata Netcdf-C
Published: December 23, 2025

CVE-2025-14934

7.8
    Nsf
  • Unidata Netcdf-C
Published: December 23, 2025

CVE-2025-14935

7.8
    Nsf
  • Unidata Netcdf-C
Published: December 23, 2025

CVE-2025-14936

7.8
    Nsf
  • Unidata Netcdf-C
Published: December 23, 2025

CVE-2025-12495

7.8
    Academy Software Foundation
  • Openexr
Published: December 23, 2025

CVE-2025-12839

7.8
    Academy Software Foundation
  • Openexr
Published: December 23, 2025

CVE-2025-12840

7.8
    Academy Software Foundation
  • Openexr
Published: December 23, 2025

CVE-2025-13703

7.8
    Trend Micro
  • Vipre Advanced Security
Published: December 23, 2025

CVE-2025-13706

7.8
    Tencent
  • Patrickstar
Published: December 23, 2025

CVE-2025-13707

7.8
    Tencent
  • Hunyuan Dit
Published: December 23, 2025

CVE-2025-13708

7.8
    Tencent
  • Neuralnlp-Neuralclassifier
Published: December 23, 2025

CVE-2025-13709

7.8
    Tencent
  • Tface
Published: December 23, 2025

CVE-2025-13710

7.8
    Tencent
  • Hunyuanvideo
Published: December 23, 2025

CVE-2025-13711

7.8
    Tencent
  • Tface
Published: December 23, 2025

CVE-2025-13712

7.8
    Tencent
  • Hunyuan
Published: December 23, 2025

CVE-2025-13713

7.8
    Tencent
  • Hunyuan3d
Published: December 23, 2025

CVE-2025-13714

7.8
    Tencent
  • Medicalnet
Published: December 23, 2025

CVE-2025-13715

7.8
    Tencent
  • Facedetection-Dsfd
Published: December 23, 2025

CVE-2025-13716

7.8
    Tencent
  • Mimicmotion
Published: December 23, 2025

CVE-2025-14401

7.8
    Pdfsam
  • Enhanced
Published: December 23, 2025

CVE-2025-14403

7.8
    Pdfsam
  • Pdfsam Enhanced
Published: December 23, 2025

CVE-2025-14406

7.8
    Lulu Software
  • Soda Pdf Desktop
    Openssl
Published: December 23, 2025

CVE-2025-14409

7.8
    Foxit
  • Soda Pdf Desktop
Published: December 23, 2025

CVE-2025-14412

7.8
    Incadre
  • Soda Pdf Desktop
Published: December 23, 2025

CVE-2025-14413

7.8
    Pdftron
  • Soda Pdf Desktop
Published: December 23, 2025

CVE-2025-14414

7.8
    Osoftware
  • Soda Pdf Desktop
Published: December 23, 2025

CVE-2025-14417

7.8
    Pdfforge
  • Pdf Architect
Published: December 23, 2025

CVE-2025-14419

7.8
    Pdfforge
  • Pdf Architect
Published: December 23, 2025

CVE-2025-14420

7.8
    Pdfforge
  • Pdf Architect
Published: December 23, 2025

CVE-2025-14422

7.8
    Gimp
  • Gimp
Published: December 23, 2025

CVE-2025-14423

7.8
    Gimp
  • Gimp
Published: December 23, 2025

CVE-2025-14424

7.8
    Gimp
  • Gimp
Published: December 23, 2025

CVE-2025-14425

7.8
    Gimp
  • Gimp
Published: December 23, 2025

CVE-2025-14488

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14489

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14490

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14491

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14492

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14493

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14494

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14495

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14496

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14497

7.8
    Realdefense
  • Superantispyware
Published: December 23, 2025

CVE-2025-14498

7.8
    Tradingview
  • Tradingview Desktop
Published: December 23, 2025

CVE-2025-68550

7.6
    Villatheme
  • Wpbulky
Published: December 23, 2025

CVE-2025-68561

7.6
    Ruben Garcia
  • Automatorwp
Published: December 23, 2025

CVE-2024-24844

7.5
    Ideabox Creations
  • Powerpack Pro For Elementor
Published: December 23, 2025

CVE-2025-68544

7.5
    Thembay
  • Diza
Published: December 23, 2025

CVE-2025-68546

7.5
    Thembay
  • Nika
Published: December 23, 2025

CVE-2025-68560

7.5
    Codexthemes
  • Thegem Theme Elements
Published: December 23, 2025

CVE-2024-9684

7.5
    Freyrscada
  • Iec-60870-5-104 Server
Published: December 23, 2025

CVE-2025-65865

7.5
    Eprosima
  • Fast-Dds
Published: December 23, 2025

CVE-2025-67111

7.5
    Opendds
  • Opendds
Published: December 23, 2025

CVE-2025-11419

7.5
    Keycloak
  • Keycloak
Published: December 23, 2025

CVE-2025-12491

7.5
    Senstar
  • Symphony
Published: December 23, 2025

CVE-2025-14501

7.5
    Sante
  • Pacs Server
Published: December 23, 2025

CVE-2025-13183

7.3
    Hotech Software Inc
  • Otello
Published: December 23, 2025

CVE-2025-12838

7.3
    Msp360
  • Msp360 Free Backup
Published: December 23, 2025

CVE-2025-13700

7.2
    Dreamfactory
  • Dreamfactory
Published: December 23, 2025

CVE-2025-13699

7.0
    Mariadb
  • Mariadb
  • Mariadb-Dump
Published: December 23, 2025

CVE-2025-14402

7.0
    Pdfsam
  • Enhanced
Published: December 23, 2025

CVE-2025-14404

7.0
    Pdfsam
  • Pdfsam Enhanced
Published: December 23, 2025

CVE-2025-14415

7.0
    Soda
  • Soda Pdf Desktop
Published: December 23, 2025

CVE-2025-14416

7.0
    Pdfforge
  • Pdf Architect
Published: December 23, 2025

CVE-2025-14418

7.0
    Pdfforge
  • Pdf Architect
Published: December 23, 2025

CVE-2025-68617

7.0
    Fluidsynth
  • Fluidsynth
Published: December 23, 2025

CVE-2025-15034

6.9
    Angeljudesuarez
  • Student Management System
Published: December 23, 2025

CVE-2025-15048

6.9
    Tenda
  • Wh450
Published: December 23, 2025

CVE-2025-15049

6.9
    Code-Projects
  • Online Farm System
Published: December 23, 2025

CVE-2025-14405

6.6
    Pdfsam
  • Enhanced
    Openssl
Published: December 23, 2025

CVE-2025-68548

6.5
    Webcodingplace
  • Responsive Posts Carousel Pro
Published: December 23, 2025

CVE-2025-68551

6.5
    Vikas Ratudi
  • Vpsuform
Published: December 23, 2025

CVE-2025-68559

6.5
    Codexthemes
  • Thegem Theme Elements
Published: December 23, 2025

CVE-2025-45493

6.5
    Netgear
  • Ex8000
Published: December 23, 2025

CVE-2025-14548

6.4
    Wordpress
  • Calendar Plugin
Published: December 23, 2025

CVE-2025-14000

6.4
    Wordpress
  • Membership Plugin Restrict Content
Published: December 23, 2025

CVE-2025-14635

6.4
    Happy Addons
  • Happy Addons
Published: December 23, 2025

CVE-2025-67743

6.3
    Local Deep Research
  • Local Deep Research
Published: December 23, 2025

CVE-2025-65410

6.2
    Gnu
  • Unrtf
Published: December 23, 2025

CVE-2025-66845

6.1
    Techstore
  • Techstore
Published: December 23, 2025

CVE-2025-14155

5.3
    Premium Addons
  • Premium Addons For Elementor
Published: December 23, 2025

CVE-2023-52210

5.3
    Tyche Softwares
  • Product Delivery Date For Woocommerce Lite
Published: December 23, 2025

CVE-2025-68556

5.3
    Villatheme
  • Happy
Published: December 23, 2025

CVE-2021-47716

5.1
    Orangescrum
  • Orangescrum
Published: December 23, 2025

CVE-2021-47722

5.1
    Zucchetti
  • Cloki Access Control
Published: December 23, 2025

CVE-2021-47732

5.1
    Cmsimple
  • Cmsimple
Published: December 23, 2025

CVE-2021-47733

5.1
    Cmsimple
  • Cmsimple
Published: December 23, 2025

CVE-2021-47737

5.1
    Csz Cms
  • Csz Cms
Published: December 23, 2025

CVE-2021-47738

5.1
    Csz
  • Cms
Published: December 23, 2025

CVE-2025-13698

4.5
    Deciso
  • Opnsense
Published: December 23, 2025

CVE-2025-68614

4.3
    Librenms
  • Librenms
Published: December 23, 2025

CVE-2025-14163

4.3
    Wordpress
  • Premium Addons
Published: December 23, 2025

CVE-2025-68557

4.3
    Vikas Ratudi
  • Chakra Test
Published: December 23, 2025

CVE-2025-65713

4.0
    Home Assistant
  • Core
Published: December 23, 2025

CVE-2025-14407

3.3
    Soda
  • Pdf Desktop
Published: December 23, 2025

CVE-2025-14408

3.3
    Soda
  • Pdf Desktop
Published: December 23, 2025

CVE-2025-14410

3.3
    Soda Pdf
  • Soda Pdf Desktop
Published: December 23, 2025

CVE-2025-14411

3.3
    Soda
  • Soda Pdf Desktop
Published: December 23, 2025

CVE-2025-14421

3.3
    Pdfforge
  • Pdf Architect
Published: December 23, 2025

CVE-2025-68650

None
    Fortinet
  • Fortinet
Published: December 23, 2025

CVE-2025-68651

None
    Fortinet
  • Fortinet
Published: December 23, 2025

CVE-2025-68652

None
    Fortinet
  • Fortinet
Published: December 23, 2025

CVE-2025-68653

None
    Fortinet
  • Fortigate
  • Fortinet
Published: December 23, 2025

CVE-2025-68654

None
    Fortinet
  • Fortinet
Published: December 23, 2025

CVE-2025-68655

None
    Fortinet
  • Fortinet
Published: December 23, 2025

CVE-2023-5092

None
    *
  • *
Published: December 23, 2025

CVE-2023-5093

None
    *
  • *
Published: December 23, 2025

CVE-2023-5094

None
    *
  • *
Published: December 23, 2025

CVE-2025-68338

None
    Linux
  • Linux Kernel
    Microchip
Published: December 23, 2025

CVE-2025-68339

None
    Linux
  • Linux Kernel
  • Atm Fore200e
Published: December 23, 2025

CVE-2025-68340

None
    Linux
  • Linux Kernel
Published: December 23, 2025

CVE-2025-68341

None
    Linux
  • Linux Kernel
Published: December 23, 2025

CVE-2025-68342

None
    Linux
  • Linux Kernel
  • Gs Usb
Published: December 23, 2025

CVE-2025-68343

None
    Linux
  • Linux Kernel
  • Gs Usb
Published: December 23, 2025

CVE-2024-10398

None
    *
  • *
Published: December 23, 2025

CVE-2025-48863

None
    *
  • *
Published: December 23, 2025

CVE-2025-48864

None
    *
  • *
Published: December 23, 2025

CVE-2025-13074

None
    *
  • *
Published: December 23, 2025

CVE-2025-10863

None
    *
  • *
Published: December 23, 2025
Click here to see more Vulnerabilities