Tag: 2025-07-22

3 Attack Reports | 121 Vulnerabilities

Attack reports

CVE-2025-53770 and CVE-2025-53771: Actively Exploited SharePoint Vulnerabilities

Two critical vulnerabilities, CVE-2025-53770 and CVE-2025-53771, are affecting Microsoft SharePoint Servers, enabling attackers to upload malicious files and extract cryptographic secrets. These flaws are evolutions of previously patched vulnerabilities, CVE-2025-49704 and CVE-2025-49706, which wer…
remote code execution
CVE-2025-53770
CVE-2025-53771
2025-07-22
CVE-2025-49704
CVE-2025-49706
microsoft sharepoint
viewstate abuse
deserialization
unauthenticated attacks
Published: July 22, 2025
Linked vulnerabilities : CVE-2025-53770 (CVSS 9.8), CVE-2025-53771 (CVSS 7.1), CVE-2025-49704, CVE-2025-49706
Downloadable IOCs: 8

SharePoint ToolShell | Zero-Day Exploited in-the-Wild Targets Enterprise Servers

A zero-day vulnerability dubbed 'ToolShell' targeting on-premises Microsoft SharePoint Servers has been actively exploited. The flaw, identified as CVE-2025-53770 with an accompanying bypass CVE-2025-53771, allows unauthenticated remote code execution. Three distinct attack clusters have been obser…
vulnerability
zero-day
webshell
remote code execution
sharepoint
CVE-2025-53770
CVE-2025-53771
toolshell
2025-07-22
CVE-2025-49704
CVE-2025-49706
Published: July 22, 2025
Linked vulnerabilities : CVE-2025-53770 (CVSS 9.8), CVE-2025-49704
Downloadable IOCs: 3

Active Exploitation of Microsoft SharePoint Vulnerabilities

Unit 42 is tracking ongoing threat activity targeting on-premises Microsoft SharePoint servers, particularly within government, schools, healthcare, and large enterprises. Multiple vulnerabilities (CVE-2025-49704, CVE-2025-49706, CVE-2025-53770, CVE-2025-53771) allow unauthenticated attackers to ac…
vulnerability
government
healthcare
exploitation
education
cve
CVE-2025-53770
CVE-2025-53771
2025-07-22
CVE-2025-49704
CVE-2025-49706
microsoft sharepoint
on-premises
Published: July 22, 2025
Linked vulnerabilities : CVE-2024-1182 (CVSS 7.0), CVE-2024-7587 (CVSS 7.8), CVE-2024-0012 (CVSS 9.8), CVE-2024-9474 (CVSS 7.2), CVE-2024-8299 (CVSS 7.8), CVE-2025-0282 (CVSS 9.0), CVE-2025-0283 (CVSS 7.0), CVE-2024-53870 (CVSS 3.3), CVE-2025-31324 (CVSS 10.0), CVE-2025-53770 (CVSS 9.8), CVE-2025-53771 (CVSS 7.1), CVE-2025-49704, CVE-2025-49706
Downloadable IOCs: 24
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-4285

10.0
    Rolantis
  • Agentis
Published: July 22, 2025

CVE-2012-10020

9.8
    Wordpress
  • Foxypress
Published: July 22, 2025

CVE-2015-10137

9.8
    Wordpress
  • Website Contact Form With File Upload
Published: July 22, 2025

CVE-2025-6187

9.8
    Wordpress
  • Plugins
Published: July 22, 2025

CVE-2025-8028

9.8
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-8031

9.8
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-8038

9.8
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
Published: July 22, 2025

CVE-2025-8043

9.8
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-8044

9.8
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-34143

9.3
    Etq
  • Etq Reliance
Published: July 22, 2025

CVE-2025-8037

9.1
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2015-10140

8.8
    Ajaxloadmore
  • Ajax Load More
Published: July 22, 2025

CVE-2025-51865

8.8
    Allenai
  • Playground
Published: July 22, 2025

CVE-2025-51480

8.8
    Onnx
  • Onnx
Published: July 22, 2025

CVE-2025-51482

8.8
    Letta-Ai
  • Letta
Published: July 22, 2025

CVE-2025-51464

8.8
    Aimhubio
  • Aim
Published: July 22, 2025

CVE-2025-8034

8.8
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
Published: July 22, 2025

CVE-2025-8035

8.8
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
  • Thunderbird Esr
Published: July 22, 2025

CVE-2025-8040

8.8
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
  • Thunderbird Esr
Published: July 22, 2025

CVE-2025-8010

8.8
    Google
  • Chrome
Published: July 22, 2025

CVE-2025-8011

8.8
    Google
  • Chrome
Published: July 22, 2025

CVE-2025-7945

8.7
    D-Link
  • Dir-513
Published: July 22, 2025

CVE-2025-34140

8.7
    Etq
  • Reliance
Published: July 22, 2025

CVE-2025-7724

8.7
    Vigi
  • Nvr1104h-4p
  • Nvr2016h-16mp
Published: July 22, 2025

CVE-2025-48733

8.7
    Duracomm
  • Spm-500
Published: July 22, 2025

CVE-2025-53703

8.7
    Duracomm
  • Spm-500
Published: July 22, 2025

CVE-2025-53472

8.6
    Wrc
  • Wrc-Be36qs-B
  • Wrc-W701-B
Published: July 22, 2025

CVE-2025-7705

8.6
    Abb
  • Switch Actuator 4 Du-83330
  • Switch Actuator Door Light 4 Du-83330-500
Published: July 22, 2025

CVE-2025-7766

8.6
    Lantronix
  • Provisioning Manager
Published: July 22, 2025

CVE-2025-7723

8.5
    Vigi
  • Nvr1104h-4p
  • Nvr2016h-16mp
Published: July 22, 2025

CVE-2025-6585

8.1
    Wordpress
  • Wp Jobhunt
Published: July 22, 2025

CVE-2025-7645

8.1
    Wordpress
  • Extensions For Cf7
  • Contact Form 7
Published: July 22, 2025

CVE-2025-7692

8.1
    Wordpress
  • Orion Login With Sms
Published: July 22, 2025

CVE-2025-8029

8.1
    Mozilla
  • Thunderbird
  • Firefox
  • Firefox Esr
Published: July 22, 2025

CVE-2025-8030

8.1
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-8032

8.1
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-8036

8.1
    Mozilla
  • Firefox
  • Firefox Esr
  • Thunderbird
  • Thunderbird Esr
Published: July 22, 2025

CVE-2025-8039

8.1
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-5042

7.8
    Autodesk
  • Revit
Published: July 22, 2025

CVE-2025-6523

7.7
    Devolutions
  • Devolutions Server
Published: July 22, 2025

CVE-2025-6741

7.7
    Devolutions
  • Devolutions Server
Published: July 22, 2025

CVE-2025-35966

7.5
    Bloomberg
  • Comdb2
Published: July 22, 2025

CVE-2025-36512

7.5
    Bloomberg
  • Comdb2
Published: July 22, 2025

CVE-2025-36520

7.5
    Bloomberg
  • Comdb2
Published: July 22, 2025

CVE-2025-46354

7.5
    Bloomberg
  • Comdb2
Published: July 22, 2025

CVE-2025-48498

7.5
    Bloomberg
  • Comdb2
Published: July 22, 2025

CVE-2025-53538

7.5
    Oisf
  • Suricata
Published: July 22, 2025

CVE-2025-54072

7.5
    Yt-Dlp
  • Yt-Dlp
Published: July 22, 2025

CVE-2025-54138

7.5
    Librenms
  • Librenms
Published: July 22, 2025

CVE-2025-54140

7.5
    Pyload
  • Pyload
Published: July 22, 2025

CVE-2025-54141

7.5
    Viewvc
  • Viewvc
Published: July 22, 2025

CVE-2025-8017

7.4
    Tenda
  • Ac7
Published: July 22, 2025

CVE-2025-8019

7.4
    Shenzhen Libituo Technology
  • Lbt-T300-T310
Published: July 22, 2025

CVE-2025-31511

7.3
    Alertenterprise
  • Guardian
Published: July 22, 2025

CVE-2025-31512

7.3
    Alertenterprise
  • Guardian
Published: July 22, 2025

CVE-2025-54137

7.3
    Hax
  • Hax Cms
Published: July 22, 2025

CVE-2025-43022

7.3
    Hp
  • Poly Clariti Manager
Published: July 22, 2025

CVE-2025-6213

7.2
    Wordpress
  • Nginx Cache Purge Preload Plugin
Published: July 22, 2025

CVE-2025-41425

7.2
    Duracomm
  • Spm-500
Published: July 22, 2025

CVE-2025-51463

7.0
    Aim
  • Aim
Published: July 22, 2025

CVE-2025-7950

6.9
    Code-Projects
  • Public Chat Room
Published: July 22, 2025

CVE-2025-46267

6.9
    *
  • Wrc-Be36qs-B
  • Wrc-W701-B
Published: July 22, 2025

CVE-2025-34142

6.9
    Etq
  • Reliance
Published: July 22, 2025

CVE-2025-51471

6.9
    Ollama
  • Ollama
Published: July 22, 2025

CVE-2025-7371

6.8
    Okta
  • On-Premises Provisioning
Published: July 22, 2025

CVE-2025-51481

6.6
    Dagster
  • Dagster
Published: July 22, 2025

CVE-2025-51867

6.5
    Deepfiction
  • Deepfiction Ai
Published: July 22, 2025

CVE-2025-51859

6.5
    Chaindesk
  • Chaindesk
Published: July 22, 2025

CVE-2025-51864

6.5
    Aibox
  • Aibox Llm Chat
Published: July 22, 2025

CVE-2025-48964

6.5
    Netinet
  • Iputils
Published: July 22, 2025

CVE-2025-51459

6.5
    Eosphoros-Ai
  • Db-Gpt
Published: July 22, 2025

CVE-2025-31513

6.5
    Alertenterprise
  • Guardian
Published: July 22, 2025

CVE-2025-51458

6.5
    Eosphoros-Ai
  • Db-Gpt
Published: July 22, 2025

CVE-2025-51472

6.5
    Transformeroptimus
  • Superagi
Published: July 22, 2025

CVE-2025-8027

6.5
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-8033

6.5
    Mozilla
  • Firefox
  • Thunderbird
Published: July 22, 2025

CVE-2025-5240

6.4
    Vcita
  • Crm And Lead Management
Published: July 22, 2025

CVE-2025-6831

6.4
    Wordpress
  • User Registration
Published: July 22, 2025

CVE-2025-7495

6.4
    Wordpress
  • Wpmembers Membership Plugin
Published: July 22, 2025

CVE-2025-7644

6.4
    Pixel Gallery
  • Addons For Elementor
Published: July 22, 2025

CVE-2025-8015

6.4
    Wordpress
  • Shortcodes Ultimate
Published: July 22, 2025

CVE-2025-7685

6.1
    Wordpress
  • Like And Share My Site
Published: July 22, 2025

CVE-2025-7687

6.1
    Wordpress
  • Latest Post Accordian Slider
Published: July 22, 2025

CVE-2025-4284

6.1
    Rolantis Information Technologies
  • Agentis
Published: July 22, 2025

CVE-2025-51858

6.1
    Chatplayground
  • Chatplayground
Published: July 22, 2025

CVE-2025-51860

6.1
    Telegai
  • Telegai
Published: July 22, 2025

CVE-2025-51862

6.1
    Telegai
  • Telegai
Published: July 22, 2025

CVE-2025-51863

6.1
    Chatgpt
  • Chatgpt Unli
Published: July 22, 2025

CVE-2025-51462

6.1
    Ragflow
  • Ragflow
Published: July 22, 2025

CVE-2025-7899

6.0
    Typo3
  • Powermail
Published: July 22, 2025

CVE-2025-7427

5.9
    Arm
  • Development Studio
Published: July 22, 2025

CVE-2025-43021

5.9
    Hp
  • Poly Clariti Manager
Published: July 22, 2025

CVE-2025-43020

5.7
    Hp
  • Poly Clariti Manager
Published: July 22, 2025

CVE-2025-51479

5.4
    Onyx
  • Onyx Enterprise Edition
Published: July 22, 2025

CVE-2025-7946

5.3
    Phpgurukul
  • Apartment Visitors Management System
Published: July 22, 2025

CVE-2025-7947

5.3
    Jsherp
  • Jsherp
Published: July 22, 2025

CVE-2025-7948

5.3
    Jsherp
  • Jsherp
Published: July 22, 2025

CVE-2025-7952

5.3
    Totolink
  • T6 Firmware
  • T6
Published: July 22, 2025

CVE-2025-6082

5.3
    Wordpress
  • Plugin
Published: July 22, 2025

CVE-2025-7900

5.3
    Typo3
  • Femanager
Published: July 22, 2025

CVE-2025-8018

5.3
    Code-Projects
  • Food Ordering Review System
Published: July 22, 2025

CVE-2025-7949

5.1
    Sanluan
  • Publiccms
Published: July 22, 2025

CVE-2025-7951

5.1
    Code-Projects
  • Public Chat Room
Published: July 22, 2025

CVE-2025-7953

5.1
    Sanluan
  • Publiccms
Published: July 22, 2025

CVE-2025-34141

5.1
    Etq
  • Reliance Cg
Published: July 22, 2025

CVE-2025-51475

5.0
    Superagi
  • Transformeroptimus Superagi
Published: July 22, 2025

CVE-2025-4294

4.8
    Hotelrunner
  • Hotelrunner B2b
Published: July 22, 2025

CVE-2025-4295

4.6
    Hotelrunner
  • Hotelrunner B2b
Published: July 22, 2025

CVE-2024-38335

4.5
    Ibm
  • Qradar Network Threat Analytics
Published: July 22, 2025

CVE-2025-4878

3.6
    Libssh
  • Libssh
Published: July 22, 2025

CVE-2025-52580

2.4
    Region Pay
  • Region Pay
Published: July 22, 2025

CVE-2025-54354

None
    Fortinet
  • Fortinet
Published: July 22, 2025

CVE-2025-54355

None
    Fortinet
  • Fortinet
Published: July 22, 2025

CVE-2025-54356

None
    Fortinet
  • Fortinet
Published: July 22, 2025

CVE-2025-54357

None
    Fortinet
  • *
Published: July 22, 2025

CVE-2025-54358

None
    Fortinet
  • Fortinet
Published: July 22, 2025

CVE-2025-54359

None
    Fortinet
  • Fortinet
Published: July 22, 2025

CVE-2025-54360

None
    Fortinet
  • *
Published: July 22, 2025

CVE-2025-54361

None
    Fortinet
  • Unknown
Published: July 22, 2025

CVE-2025-54362

None
    Fortinet
  • Fortinet
Published: July 22, 2025

CVE-2025-38352

None
    Linux
  • Linux Kernel
Published: July 22, 2025
Click here to see more Vulnerabilities