Phishing & fraudcritical
⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More
- CVEs
- CVE-2025-1094CVE-2025-0108CVE-2025-23359CVE-2025-21391CVE-2025-21418CVE-2024-38657CVE-2025-22467CVE-2024-10644CVE-2024-47908CVE-2024-56131CVE-2024-56132CVE-2024-56133CVE-2024-56134CVE-2024-56135CVE-2025-24200CVE-2024-12797CVE-2025-21298CVE-2025-1240CVE-2024-32838CVE-2024-52577CVE-2025-26793CVE-2024-12562CVE-2024-13513CVE-2025-26506CVE-2025-22896CVE-2025-25067CVE-2025-24865CVE-2024-13182CVE-2024-10763CVE-2024-7102CVE-2024-12213CVE-2024-13365CVE-2024-13421CVE-2025-1126
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-22467+1 related CVE | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution | 8.8 group max | 5% | ||
| CVE-2024-10763 | The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the… | 9.8 | 4% | ||
| CVE-2024-12213 | The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to 2.3.16 | 9.8 | <1% | ||
| CVE-2024-12562 | The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input… | 9.8 | <1% | ||
| CVE-2024-12797 | Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because… | 6.3 | 3% | ||
| CVE-2024-13182 | The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5 | 9.8 | <1% | ||
| CVE-2024-13365 | The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives… | 9.8 | 2% | ||
| CVE-2024-13421 | The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1 | 9.8 | <1% | ||
| CVE-2024-13513 | The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including… | 9.8 | <1% | ||
| CVE-2024-32838 | SQL Injection vulnerability in various API endpoints - offices, dashboards, etc | 9.4 | 2% | ||
| CVE-2024-38657 | External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated… | 4.9 | 2% | ||
| CVE-2024-47908 | OS Command Injection in Ivanti Cloud Services Appliance Admin Console Enables Admin RCE | 7.2 | 22% | ||
| CVE-2024-52577 | In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for some Ignite endpoints | 9.5 | 3% | ||
CVE-2024-56132+4 related CVEs | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows | 6.8 | 6% | ||
| CVE-2024-7102 | An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as another… | 7.5 | <1% | ||
| CVE-2025-0108 | Authentication Bypass in Palo Alto Networks PAN-OS Management Interface | 8.8 | 98% | KEVPoC ×3 | KEV |
| CVE-2025-1094 | SQL Injection in PostgreSQL libpq escaping functions and command-line tools | 8.1 | 90% | ||
| CVE-2025-1126 | A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client | 9.3 | <1% | ||
| CVE-2025-1240 | WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | 8.8 | 10% | ||
| CVE-2025-21298 | Use-After-Free RCE in Windows OLE (CVE-2025-21298) | 9.8 | 74% | PoC | |
CVE-2025-21418+1 related CVE | Local Privilege Escalation via Heap Overflow in Windows WinSock AFD Driver | 7.8 group max | 2% | KEV | KEV |
CVE-2025-24865+2 related CVEs | The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve… | 10.0 group max | 7% | ||
| CVE-2025-23359 | NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container… | 8.1 | 4% | PoC | |
| CVE-2025-24200 | Incorrect Authorization in Apple iOS/iPadOS Lets Attackers Disable USB Restricted Mode | 6.1 | 4% | KEV | KEV |
| CVE-2025-26506 | Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of… | 9.2 | 1% | ||
| CVE-2025-26793 | The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (username freedom… | 9.3 | 2% |
From the original article
13 min read at thehackernews.com
Ravie Lakshmanan Feb 17, 2025 Cyber Threats / Cybersecurity Welcome to this week’s Cybersecurity News Recap. Discover how cyber attackers are using clever tricks like fake codes and sneaky emails to gain access to sensitive data. We cover everything from device code phishing to cloud exploits, breaking down the technical details into simple, easy-to-follow insights.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.