Tag: 2026-01-26

6 Attack Reports | 115 Vulnerabilities

Attack reports

APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL | Part 1

A Pakistan-linked APT group conducted two campaigns targeting Indian government entities. The Gopher Strike campaign used PDFs with malicious links to deliver an ISO file containing GOGITTER, a Golang downloader that fetches payloads from private GitHub repositories. GITSHELLPAD, a Golang backdoor,…
apt
cobalt strike
pakistan
cobalt strike beacon
india
government
golang
github
2026-01-26
gitshellpad
gogitter
goshell
Published: January 26, 2026
Downloadable IOCs: 33

A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups

PeckBirdy is a sophisticated JScript-based C&C framework employed by China-aligned APT groups since 2023. It exploits LOLBins across multiple environments to deliver advanced backdoors, targeting gambling industries and Asian government entities. The framework's versatility allows it to be used in …
apt
government
jscript
gambling
darknimbus
lolbins
wizardnet
china-aligned
2026-01-26
biopass rat
c&c framework
CVE-2020-16040
grayrabbit
holodonut
mkdoor
peckbirdy
Published: January 26, 2026
Linked vulnerabilities : CVE-2020-16040
Downloadable IOCs: 21

Chrome Extensions: Are you getting more than you bargained for?

This analysis reveals the hidden dangers of certain Chrome extensions available on the Google Chrome Web Store. Despite the store's vetting process, some malicious extensions have slipped through, compromising user security. The study examines four examples of extensions with combined user bases ex…
data exfiltration
remote code execution
malicious extensions
chrome extensions
2026-01-26
clipboard access
CVE-2020-28707
search hijacking
security risks
xss vulnerability
Published: January 26, 2026
Linked vulnerabilities : CVE-2024-40766 (CVSS 9.8), CVE-2024-40711 (CVSS 9.8), CVE-2024-57727 (CVSS 7.5), CVE-2020-1472, CVE-2023-46604, CVE-2023-22515, CVE-2023-20269, CVE-2020-3259, CVE-2023-3519, CVE-2023-27997, CVE-2025-29824 (CVSS 7.8), CVE-2022-41082, CVE-2022-41040, CVE-2025-53770 (CVSS 9.8), CVE-2025-61882 (CVSS 9.8), CVE-2023-29357, CVE-2023-34362, CVE-2020-28707
Downloadable IOCs: 13

Malware MoonPeak Executed via LNK Files

In January 2026, IIJ observed malicious LNK files targeting Korean users to execute the MoonPeak malware, attributed to North Korean threat actors. The infection chain begins with a LNK file that runs an obfuscated PowerShell script, which checks for analysis environments, creates additional script…
powershell
persistence
korea
xenorat
github
moonpeak
lnk files
confuserex
2026-01-26
lots
Published: January 26, 2026
Downloadable IOCs: 4

MacSync Stealer Returns: SEO Poisoning and Fake GitHub Repositories Target macOS Users

An active infostealer campaign is targeting macOS and Windows users across various sectors. The threat actors are using SEO poisoning to direct victims to fake GitHub repositories impersonating legitimate tools like PagerDuty. The campaign involves over 20 malicious repositories active since Septem…
windows
infostealer
seo poisoning
macos
github
applescript
macsync
2026-01-26
pagerduty
Published: January 26, 2026
Downloadable IOCs: 3

A $6,000 Russian Malware Toolkit with Chrome Web Store Guarantee

A new malware-as-a-service toolkit called 'Stanley' is being sold on Russian cybercrime forums for $2,000 to $6,000. It provides a turnkey website-spoofing operation disguised as a Chrome extension, with the premium tier promising guaranteed publication on the Chrome Web Store. The toolkit allows f…
phishing
credential theft
chrome web store
browser extension
malware-as-service
2026-01-26
russian cybercrime
stanley
website spoofing
Published: January 26, 2026
Linked vulnerabilities : CVE-2025-14847 (CVSS 8.7)
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2016-15057

9.9
    Apache
  • Continuum
Published: January 26, 2026

CVE-2025-70982

9.9
    Springblade
  • Springblade
Published: January 26, 2026

CVE-2026-22709

9.8
    Vm2
  • Vm2
Published: January 26, 2026

CVE-2025-59090

9.3
    Exos
  • Exos Server
Published: January 26, 2026

CVE-2025-59091

9.3
    Kaba
  • Exos 9300
Published: January 26, 2026

CVE-2025-59097

9.3
    Dormakaba
  • Exos 9300
  • Access Manager
Published: January 26, 2026

CVE-2026-24429

9.3
    Tenda
  • W30e V2
Published: January 26, 2026

CVE-2026-22696

9.3
    Phala
  • Dcap-Qvl
Published: January 26, 2026

CVE-2025-59103

9.2
    Access Manager
  • Access Manager 92xx
Published: January 26, 2026

CVE-2025-59108

9.2
    Access Manager
  • Access Manager
Published: January 26, 2026

CVE-2026-24436

9.2
    Tenda
  • W30e
Published: January 26, 2026

CVE-2025-30248

8.9
    Wdc
  • Wd Discovery
Published: January 26, 2026

CVE-2025-59099

8.8
    Compactwebserver
  • Compactwebserver
Published: January 26, 2026

CVE-2025-59106

8.8
    Unknown
  • Web Server
Published: January 26, 2026

CVE-2026-1427

8.7
    Wellchoose
  • Organization Portal System
Published: January 26, 2026

CVE-2026-1428

8.7
    Wellchoose
  • Single Sign-On Portal System
Published: January 26, 2026

CVE-2025-59092

8.7
    Kaba
  • Exos 9300
Published: January 26, 2026

CVE-2025-59098

8.7
    Dormakaba
  • Access Manager
Published: January 26, 2026

CVE-2026-24428

8.7
    Shenzhen
  • Tenda W30e V2
Published: January 26, 2026

CVE-2026-24440

8.7
    Tenda
  • W30e
Published: January 26, 2026

CVE-2025-59093

8.5
    Exos
  • Exos 9300
Published: January 26, 2026

CVE-2025-59107

8.5
    Dormakaba
  • Fwservicetool
Published: January 26, 2026

CVE-2020-36952

8.5
    Iobit
  • Iobit Uninstaller
Published: January 26, 2026

CVE-2020-36953

8.5
    Minitool
  • Shadowmaker
Published: January 26, 2026

CVE-2020-36957

8.5
    Pdf Complete
  • Pdf Complete
Published: January 26, 2026

CVE-2020-36958

8.5
    Kite
  • Kite
Published: January 26, 2026

CVE-2020-36959

8.5
    Idt
  • Pc Audio
Published: January 26, 2026

CVE-2025-14756

8.5
    Tp-Link
  • Archer Mr600
Published: January 26, 2026

CVE-2025-14459

8.5
    Kubevirt
  • Containerized Data Importer
Published: January 26, 2026

CVE-2025-59094

8.4
    Kaba
  • Exos 9300 System Management Application
Published: January 26, 2026

CVE-2025-9520

8.3
    Omada
  • Omada Controllers
Published: January 26, 2026

CVE-2026-24430

8.2
    Shenzhen
  • Tenda W30e V2
  • Tenda W30e V2 Firmware
Published: January 26, 2026

CVE-2026-24400

8.2
    Assertj
  • Assertj
Published: January 26, 2026

CVE-2026-24470

8.1
    Skipper
  • Skipper
Published: January 26, 2026

CVE-2026-1283

7.8
    3ds
  • Solidworks Edrawings
Published: January 26, 2026

CVE-2026-1284

7.8
    3ds
  • Solidworks Edrawings
Published: January 26, 2026

CVE-2026-21509

7.8
    Microsoft
  • 365 Apps
  • Office
  • Office Long Term Servicing Channel
Published: January 26, 2026

CVE-2025-59101

7.7
    *
  • *
Published: January 26, 2026

CVE-2025-67274

7.5
    Continuous.Software
  • Aangine
Published: January 26, 2026

CVE-2026-23864

7.5
    Facebook
  • React-Server-Dom-Parcel
  • React-Server-Dom-Turbopack
  • React-Server-Dom-Webpack
Published: January 26, 2026

CVE-2026-1420

7.4
    Tenda
  • Ac23
Published: January 26, 2026

CVE-2026-24123

7.4
    Bentoml
  • Bentoml
Published: January 26, 2026

CVE-2025-27821

7.3
    Apache
  • Hadoop
Published: January 26, 2026

CVE-2025-14316

7.1
    Ahachat
  • Aha Chat Messenger Marketing
Published: January 26, 2026

CVE-2025-71178

7.1
    Crucial
  • Storage Executive
Published: January 26, 2026

CVE-2026-24431

7.1
    Tenda
  • W30e
Published: January 26, 2026

CVE-2026-24435

7.1
    Tenda
  • W30e V2
  • W30e V2 Firmware
Published: January 26, 2026

CVE-2025-59104

7.0
    *
  • *
  • Linux
Published: January 26, 2026

CVE-2025-59105

7.0
    *
  • K7
  • K5
Published: January 26, 2026

CVE-2026-1412

6.9
    Sangfor
  • Operation And Maintenance Security Management System
Published: January 26, 2026

CVE-2026-1422

6.9
    Code-Projects
  • Online Examination System
Published: January 26, 2026

CVE-2025-41082

6.9
    Altitude
  • Altitude Communication Server
Published: January 26, 2026

CVE-2025-59102

6.9
    Access Manager
  • Access Manager
Published: January 26, 2026

CVE-2026-1443

6.9
    Code-Projects
  • Online Music Site
Published: January 26, 2026

CVE-2025-14973

6.8
    Recipe Card Blocks Lite
  • Recipe Card Blocks Lite
Published: January 26, 2026

CVE-2025-59095

6.8
    Exos
  • 9300
Published: January 26, 2026

CVE-2026-0810

6.8
    Gix
  • Gix-Date
Published: January 26, 2026

CVE-2026-24056

6.7
    Pnpm
  • Pnpm
Published: January 26, 2026

CVE-2026-24131

6.7
    P Npm
  • Pnpm
Published: January 26, 2026

CVE-2025-57785

6.5
    Hiawatha
  • Hiawatha
Published: January 26, 2026

CVE-2026-23888

6.5
    Pnpm
  • Pnpm
Published: January 26, 2026

CVE-2026-23889

6.5
    Pnpm
  • Pnpm
Published: January 26, 2026

CVE-2026-23890

6.5
    Pnpm
  • Pnpm
Published: January 26, 2026

CVE-2025-14525

6.4
    Redhat
  • Kubevirt
Published: January 26, 2026

CVE-2026-1425

6.3
    Pymumu
  • Smartdns
Published: January 26, 2026

CVE-2025-11687

6.1
    Redhat
  • Gi-Docgen
Published: January 26, 2026

CVE-2025-59473

6.0
    *
  • Structure
Published: January 26, 2026

CVE-2025-59100

5.9
    Unknown
  • Sqlite
  • Web Interface
Published: January 26, 2026

CVE-2025-59471

5.9
    Vercel
  • Next.Js
Published: January 26, 2026

CVE-2025-59472

5.9
    Vercel
  • Next.Js
Published: January 26, 2026

CVE-2025-50537

5.5
    Eslint
  • Eslint
Published: January 26, 2026

CVE-2026-1410

5.4
    Beetel
  • Beetel 777vr1
Published: January 26, 2026

CVE-2026-1411

5.4
    Beetel
  • 777vr1
Published: January 26, 2026

CVE-2025-70368

5.4
    Worklenz
  • Worklenz
Published: January 26, 2026

CVE-2026-1413

5.3
    Sangfor
  • Operation And Maintenance Security Management System
Published: January 26, 2026

CVE-2026-1414

5.3
    Sangfor
  • Operation And Maintenance Security Management System
Published: January 26, 2026

CVE-2026-1423

5.3
    Code-Projects
  • Online Examination System
Published: January 26, 2026

CVE-2025-57783

5.3
    Hiawatha
  • Hiawatha Webserver
Published: January 26, 2026

CVE-2025-11065

5.3
    Go-Viper
  • Mapstructure
Published: January 26, 2026

CVE-2026-24476

5.3
    Shaarli
  • Shaarli
Published: January 26, 2026

CVE-2026-1419

5.1
    D-Link
  • Dcs700l
Published: January 26, 2026

CVE-2026-1421

5.1
    Code-Projects
  • Online Examination System
Published: January 26, 2026

CVE-2026-1424

5.1
    Phpgurukul
  • News Portal
Published: January 26, 2026

CVE-2025-41083

5.1
    Altitude
  • Altitude Authentication Service
  • Altitude Communication Server
Published: January 26, 2026

CVE-2025-59109

5.1
    Dormakaba
  • Registration Units 9002
Published: January 26, 2026

CVE-2020-36954

5.1
    Xeroneit
  • Xeroneit Library Management System
Published: January 26, 2026

CVE-2020-36955

5.1
    Grav
  • Grav Cms
  • Admin Plugin
Published: January 26, 2026

CVE-2020-36956

5.1
    Igniterealtime
  • Openfire
Published: January 26, 2026

CVE-2020-36960

5.1
    Forma
  • Lms
Published: January 26, 2026

CVE-2026-24432

5.1
    Tenda
  • W30e
Published: January 26, 2026

CVE-2026-24433

5.1
    Tenda
  • W30e
Published: January 26, 2026

CVE-2025-9522

5.1
    Omada
  • Controllers
Published: January 26, 2026

CVE-2026-1445

5.1
    Ijason-Liu
  • Books Manager
Published: January 26, 2026

CVE-2026-1446

5.0
    Esri
  • Arcgis Pro
Published: January 26, 2026

CVE-2026-1224

4.9
    Tanium
  • Discover
Published: January 26, 2026

CVE-2026-1415

4.8
    Gpac
  • Gpac
Published: January 26, 2026

CVE-2026-1416

4.8
    Gpac
  • Gpac
Published: January 26, 2026

CVE-2026-1417

4.8
    Gpac
  • Gpac
Published: January 26, 2026

CVE-2026-1418

4.8
    Gpac
  • Gpac
Published: January 26, 2026

CVE-2026-1429

4.8
    Wellchoose
  • Single Sign On Portal
Published: January 26, 2026

CVE-2026-24437

4.8
    Tenda
  • W30e
Published: January 26, 2026

CVE-2026-1444

4.8
    Ijason-Liu
  • Books Manager
Published: January 26, 2026

CVE-2025-59096

4.6
    Kaba
  • 9300 Administration
  • U9exosadmin
Published: January 26, 2026

CVE-2025-14969

4.3
    Redhat
  • Hibernate Reactive
Published: January 26, 2026

CVE-2026-24003

4.3
    Everest
  • Everest
Published: January 26, 2026

CVE-2025-57784

4.0
    Hiawatha
  • Hiawatha
Published: January 26, 2026

CVE-2025-9820

4.0
    Gnutls
  • Gnutls
Published: January 26, 2026

CVE-2026-24656

3.7
    Apache
  • Karaf Decanter
Published: January 26, 2026

CVE-2025-9615

3.3
    Redhat
  • Networkmanager
Published: January 26, 2026

CVE-2026-1190

3.1
    Keycloak
  • Keycloak
Published: January 26, 2026

CVE-2026-0925

2.7
    Tanium
  • Discover
Published: January 26, 2026

CVE-2026-24439

2.1
    Tenda
  • W30e
Published: January 26, 2026

CVE-2025-9521

2.1
    Omada
  • Controllers
Published: January 26, 2026

CVE-2026-1409

1.0
    Beetel
  • Beetel 777vr1
Published: January 26, 2026

CVE-2026-24408

0.0
    Sigstore
  • Sigstore-Python
Published: January 26, 2026
Click here to see more Vulnerabilities