The 2024 Ransomware Landscape: Looking back on another painful year

The ransomware landscape in 2024 continued to evolve at a rapid pace, outgrowing many of the trends we saw in 2023. Threat actors remained relentless and innovative, targeting organizations of all sizes and sectors. In this post, we’ll examine the latest data points, discuss notable groups, and...

CERTFR-2024-CTI-011

creationtimestamp| type| source ---|---|--- 2025-01-27 08:07:56+00:00| seen| https://bsky.app/profile/ag6218ent.bsky.social/post/3lgpidi2zo22s 2025-02-17 08:18:05+00:00| seen| https://bsky.app/profile/test-cvp.bsky.social/post/3liecoxl54w2p...

PT-2025-1619 · WordPress · Membership Plugin – Restrict Content

Name of the Vulnerable Software and Affected Versions: The Membership Plugin – Restrict Content plugin for WordPress versions up to, and including, 3.2.13 Description: The issue allows unauthenticated attackers to extract sensitive data from posts restricted to higher-level roles, such as...

CVE-2024-10636

creationtimestamp| type| source ---|---|--- 2025-01-25 16:50:08+00:00| seen| https://bsky.app/profile/abrahack.bsky.social/post/3lgleldspy223 2025-01-26 05:46:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113893074318909236 2025-01-26 06:15:48+00:00| seen|...

WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability

Arbitrary File Read vulnerability discovered by l8BL in WordPress Plugin WP Ultimate Exporter versions = 2.9...

CVE-2025-24733: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows PHP Local File Inclusion.This issue affects Post Grid Master: from n/a through = 3.4.12...

CVE-2025-0693

creationtimestamp| type| source ---|---|--- 2025-01-23 21:27:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113879787711896884 2025-01-23 22:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvup7obk2h 2025-01-23 23:55:33+00:00| seen|...

CVE-2025-20014

creationtimestamp| type| source ---|---|--- 2025-01-23 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-01 2025-01-29 19:50:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113913377924306687 2025-01-29 20:16:00+00:00| seen|...

CVE-2024-9310

creationtimestamp| type| source ---|---|--- 2025-01-22 19:02:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2612 2025-01-22 19:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lge3civtrb2c 2025-01-22 19:55:03+00:00| seen|...

Improper Input Validation

Mattermost is vulnerable to Improper Input Validation. The vulnerability is due to a failure to properly validate post props, which can result in a crash when malicious posts are processed...

CVE-2024-52975

creationtimestamp| type| source ---|---|--- 2025-01-22 16:02:59+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113872848727322418 2025-01-23 07:29:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113876493631662291 2025-01-23 08:03:12+00:00| seen|...

CVE-2025-23809

creationtimestamp| type| source ---|---|--- 2025-01-22 16:01:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2558 2025-01-22 16:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdrc7hgsg2x 2025-01-22 16:44:53+00:00| seen|...

CVE-2025-23949

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoao5m742f 2025-01-22 15:49:26+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113872795409374014 2025-01-22 15:49:48+00:00| seen|...

CVE-2025-23942

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoafvryg27 2025-01-22 15:49:22+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113872795181985844 2025-01-22 15:49:54+00:00| seen|...

CVE-2024-13361

creationtimestamp| type| source ---|---|--- 2025-01-22 08:02:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2527 2025-01-22 08:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcwhdfn4z2p 2025-01-22 08:54:28+00:00| seen|...

CVE-2024-11218

creationtimestamp| type| source ---|---|--- 2025-01-22 05:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcmfcomg62x 2025-01-22 05:39:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgcnp44vdz2e 2025-01-22 05:39:18+00:00| seen|...

CVE-2024-13590

creationtimestamp| type| source ---|---|--- 2025-01-22 04:00:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2514 2025-01-22 04:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcizal6u52x 2025-01-22 04:34:15+00:00| seen|...

CVE-2025-23087

creationtimestamp| type| source ---|---|--- 2025-01-22 02:00:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2510 2025-01-22 02:17:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgccgjo4we2b 2025-01-22 02:48:42+00:00| seen|...

CVE-2025-23088

creationtimestamp| type| source ---|---|--- 2025-01-22 02:00:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2508 2025-01-22 02:17:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgccgmiffs2c 2025-01-22 02:48:42+00:00| seen|...

CVE-2025-23089

creationtimestamp| type| source ---|---|--- 2025-01-22 02:00:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2509 2025-01-22 02:17:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgccgpm7zk2r 2025-01-22 02:48:42+00:00| seen|...