Tag: 2025-12-05

1 Attack Reports | 154 Vulnerabilities

Attack reports

China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)

Within hours of the public disclosure of CVE-2025-55182 (React2Shell) on December 3, 2025, Amazon threat intelligence teams observed active exploitation attempts by multiple China state-nexus threat groups, including Earth Lamia and Jackpot Panda. This critical vulnerability in React Server Compone…
exploit
china-nexus
CVE-2025-1338
next.js
earth lamia
CVE-2025-55182
2025-12-05
jackpot panda
state sponsored
react2shell
react server
app router
Published: December 5, 2025
Linked vulnerabilities : CVE-2025-1338 (CVSS 7.3), CVE-2025-55182 (CVSS 10.0)
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-34256

10.0
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-66570

10.0
    Yhirose
  • Cpp-Httplib
Published: December 5, 2025

CVE-2025-13313

9.8
    crm_memberships
Published: December 5, 2025

CVE-2025-12374

9.8
    user_verification
Published: December 5, 2025

CVE-2025-64054

9.6
    Tenda
  • X210 Firmware
  • X210
Published: December 5, 2025

CVE-2025-34291

9.4
    langflow
Published: December 5, 2025

CVE-2020-36877

9.3
    serious_play_f3_media_server
Published: December 5, 2025

CVE-2025-66418

8.9
    Python
  • Urllib3
Published: December 5, 2025

CVE-2025-66471

8.9
    Python
  • Urllib3
Published: December 5, 2025

CVE-2025-66562

8.9
    tuui
Published: December 5, 2025

CVE-2025-13066

8.8
    wordpress
    demo_importer_plus
Published: December 5, 2025

CVE-2025-12153

8.8
    featured_image_via_url
Published: December 5, 2025

CVE-2025-12154

8.8
    auto_thumbnailer
Published: December 5, 2025

CVE-2025-12181

8.8
    plugin
Published: December 5, 2025

CVE-2025-12879

8.8
    user_generator_and_importer
Published: December 5, 2025

CVE-2025-65730

8.8
    Pommee
  • Goaway
Published: December 5, 2025

CVE-2025-65897

8.8
    Zhaoyachao
  • Zdh Web
Published: December 5, 2025

CVE-2020-36876

8.7
    serious_play_f3_media_server
    serious_play_f3_media_server
    serious_play_f3_media_server
    serious_play_f3_media_server
    serious_play_f3_media_server
    serious_play_f3_media_server
Published: December 5, 2025

CVE-2020-36878

8.7
    serious_play_media_player
Published: December 5, 2025

CVE-2020-36882

8.7
    Flexense
  • Diskboss
Published: December 5, 2025

CVE-2025-13426

8.7
    apigee_hybrid
    apigee_hybrid
    apigee_hybrid
    apigee_hybrid
    apigee_opdk
    apigee_opdk
Published: December 5, 2025

CVE-2020-36880

8.6
    Flexense
  • Diskboss
Published: December 5, 2025

CVE-2020-36881

8.6
    Flexense
  • Diskboss
Published: December 5, 2025

CVE-2020-36879

8.5
    diskboss
Published: December 5, 2025

CVE-2025-58098

8.3
    Apache
  • Http Server
Published: December 5, 2025

CVE-2025-64057

8.3
    Tenda
  • X210 Firmware
  • X210
Published: December 5, 2025

CVE-2025-65036

8.3
    xwiki_remote_macros
Published: December 5, 2025

CVE-2025-66566

8.2
    lz4-java
Published: December 5, 2025

CVE-2025-12851

8.1
    my_auctions_allegro
Published: December 5, 2025

CVE-2025-13614

8.1
    cool_tag_cloud
Published: December 5, 2025

CVE-2025-65879

8.1
    Yeqifu
  • Warehouse Management System
Published: December 5, 2025

CVE-2024-9183

7.7
    Gitlab
  • Gitlab
Published: December 5, 2025

CVE-2025-12850

7.5
    my_auctions_allegro_plugin
Published: December 5, 2025

CVE-2025-55753

7.5
    Apache
  • Http Server
Published: December 5, 2025

CVE-2025-59775

7.5
    Apache
  • Http Server
Published: December 5, 2025

CVE-2025-13654

7.5
    Zevv
  • Duc
Published: December 5, 2025

CVE-2025-64053

7.5
    Tenda
  • X210 Firmware
  • X210
Published: December 5, 2025

CVE-2025-65878

7.5
    Yeqifu
  • Warehouse Management System
Published: December 5, 2025

CVE-2025-66624

7.5
    bacnet_protocol_stack
Published: December 5, 2025

CVE-2025-66623

7.4
    strimzi
Published: December 5, 2025

CVE-2025-14106

7.4
    Zspace
  • Q2c Nas Firmware
  • Q2c Nas
Published: December 5, 2025

CVE-2025-14107

7.4
    Zspace
  • Q2c Nas Firmware
  • Q2c Nas
Published: December 5, 2025

CVE-2025-14108

7.4
    Zspace
  • Q2c Nas Firmware
  • Q2c Nas
Published: December 5, 2025

CVE-2025-66644

7.2
    Arraynetworks
  • Arrayos Ag
  • Ag1000
  • Ag1000t
  • Ag1000v5
  • Ag1100
  • Ag1100v5
  • Ag1150
  • Ag1200
  • Ag1200v5
  • Ag1500
  • Ag1500fips
  • Ag1500v5
  • Ag1600
  • Ag1600v5
  • Vxag
Published: December 5, 2025

CVE-2025-46603

7.0
    cloudboost_virtual_appliance
Published: December 5, 2025

CVE-2025-6966

6.9
    python-apt
Published: December 5, 2025

CVE-2025-14091

6.9
    php-guitar-shop
Published: December 5, 2025

CVE-2025-65082

6.5
    Apache
  • Http Server
Published: December 5, 2025

CVE-2025-12804

6.4
    booking_calendar
Published: December 5, 2025

CVE-2025-12417

6.4
    surveyfunnel
Published: December 5, 2025

CVE-2025-12163

6.4
    omnipress
Published: December 5, 2025

CVE-2025-12368

6.4
    sermon_manager
Published: December 5, 2025

CVE-2025-13860

6.4
    easy_jump_links_menus
Published: December 5, 2025

CVE-2025-13678

6.4
    thailottery
Published: December 5, 2025

CVE-2025-13739

6.4
    cryptx
Published: December 5, 2025

CVE-2025-66551

6.3
    Nextcloud
  • Tables
Published: December 5, 2025

CVE-2025-13512

6.1
    cosign_single_signon
Published: December 5, 2025

CVE-2025-13621

6.1
    dream_gallery
Published: December 5, 2025

CVE-2025-13622

6.1
    jabbernotification
Published: December 5, 2025

CVE-2025-13623

6.1
    twitscription
Published: December 5, 2025

CVE-2025-13625

6.1
    wp-sos-donate
Published: December 5, 2025

CVE-2025-13515

6.1
    nouri.sh_newsletter
Published: December 5, 2025

CVE-2025-14104

6.1
    util-linux
Published: December 5, 2025

CVE-2025-66550

5.7
    Nextcloud
  • Calendar
Published: December 5, 2025

CVE-2025-12191

5.4
    pdf_catalog_for_woocommerce
Published: December 5, 2025

CVE-2025-66200

5.4
    Apache
  • Http Server
Published: December 5, 2025

CVE-2025-66512

5.4
    Nextcloud
  • Nextcloud Server
Published: December 5, 2025

CVE-2025-66557

5.4
    Nextcloud
  • Deck
Published: December 5, 2025

CVE-2025-14052

5.3
    Youlai
  • Youlai-Mall
Published: December 5, 2025

CVE-2025-13006

5.3
    wordpress
    survey_plugin
Published: December 5, 2025

CVE-2025-13312

5.3
    crm_memberships
Published: December 5, 2025

CVE-2025-13494

5.3
    ssp_debug
Published: December 5, 2025

CVE-2025-13528

5.3
    feedback_modal_for_website
Published: December 5, 2025

CVE-2025-12093

5.3
    employee_portal
Published: December 5, 2025

CVE-2025-12355

5.3
    payaza_plugin
Published: December 5, 2025

CVE-2025-12876

5.3
    wordpress
    projectopia
Published: December 5, 2025

CVE-2025-13620

5.3
    wp_social_login
Published: December 5, 2025

CVE-2025-14085

5.3
    Youlai
  • Youlai-Mall
Published: December 5, 2025

CVE-2025-14086

5.3
    Youlai
  • Youlai-Mall
Published: December 5, 2025

CVE-2025-14088

5.3
    jepaas
Published: December 5, 2025

CVE-2025-14089

5.3
    himool_erp
Published: December 5, 2025

CVE-2025-66577

5.3
    Yhirose
  • Cpp-Httplib
Published: December 5, 2025

CVE-2025-14105

5.3
    zlt_m30s
    zlt_m30s_pro
Published: December 5, 2025

CVE-2025-27389

5.1
    coloros
Published: December 5, 2025

CVE-2025-14090

5.1
    Amttgroup
  • Hibos
Published: December 5, 2025

CVE-2025-14092

5.1
    Edimax
  • Br-6478ac V3 Firmware
  • Br-6478ac V3
Published: December 5, 2025

CVE-2025-64052

5.1
    Tenda
  • X210 Firmware
  • X210
Published: December 5, 2025

CVE-2025-14093

5.1
    Edimax
  • Br-6478ac V3 Firmware
  • Br-6478ac V3
Published: December 5, 2025

CVE-2025-14094

5.1
    Edimax
  • Br-6478ac V3 Firmware
  • Br-6478ac V3
Published: December 5, 2025

CVE-2025-34257

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34258

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34259

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34260

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34261

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34262

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34263

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34264

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34265

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-34266

5.1
    Advantech
  • Wise-Deviceon Server
Published: December 5, 2025

CVE-2025-14116

5.1
    xerrors
Published: December 5, 2025

CVE-2016-20023

5.0
    Cksource
  • Ckfinder
Published: December 5, 2025

CVE-2025-66511

4.8
    Nextcloud
  • Calendar
Published: December 5, 2025

CVE-2025-32898

4.7
    kde_connect
    kde_connect
    kde_connect
    valent
    gsconnect
Published: December 5, 2025

CVE-2025-66270

4.7
    kde_connect
    kde_connect
    kde_connect
    gsconnect
    valent
Published: December 5, 2025

CVE-2025-66510

4.5
    Nextcloud
  • Nextcloud Server
Published: December 5, 2025

CVE-2025-12124

4.4
    fitvids
Published: December 5, 2025

CVE-2025-12186

4.4
    weekly_planner
Published: December 5, 2025

CVE-2025-13682

4.4
    trail_manager_plugin
Published: December 5, 2025

CVE-2025-62223

4.3
    Microsoft
  • Edge Chromium
Published: December 5, 2025

CVE-2025-11759

4.3
    xcloner
Published: December 5, 2025

CVE-2025-13362

4.3
    norby_ai_plugin
Published: December 5, 2025

CVE-2025-32899

4.3
    kde_connect
Published: December 5, 2025

CVE-2025-32901

4.3
    kde_connect
Published: December 5, 2025

CVE-2025-10055

4.3
    time_sheets
Published: December 5, 2025

CVE-2025-12128

4.3
    hide_categories_or_products_on_shop_page
Published: December 5, 2025

CVE-2025-12133

4.3
    dropshipping_plugin
Published: December 5, 2025

CVE-2025-12165

4.3
    webcake_landing_page_builder
Published: December 5, 2025

CVE-2025-12189

4.3
    Breadbutter
  • Bread And Butter
Published: December 5, 2025

CVE-2025-12190

4.3
    image_optimizer
Published: December 5, 2025

CVE-2025-12370

4.3
    takeads_plugin
Published: December 5, 2025

CVE-2025-13144

4.3
    contentstudio_plugin
Published: December 5, 2025

CVE-2025-13360

4.3
    quantic_social_image_hover
Published: December 5, 2025

CVE-2025-32900

4.3
    kde_connect
    kde_connect
    kde_connect
    valent
    gsconnect
Published: December 5, 2025

CVE-2025-12354

4.3
    live_css_preview
Published: December 5, 2025

CVE-2025-12373

4.3
    torod
Published: December 5, 2025

CVE-2025-12130

4.3
    wcvendors
Published: December 5, 2025

CVE-2025-13684

4.3
    ark_related_posts_plugin
Published: December 5, 2025

CVE-2025-64056

4.3
    Tenda
  • X210 Firmware
  • X210
Published: December 5, 2025

CVE-2025-66547

4.3
    Nextcloud
  • Nextcloud Server
Published: December 5, 2025

CVE-2025-66552

4.3
    Nextcloud
  • Nextcloud Server
Published: December 5, 2025

CVE-2025-66513

4.3
    Nextcloud
  • Tables
Published: December 5, 2025

CVE-2025-66553

4.3
    Nextcloud
  • Tables
Published: December 5, 2025

CVE-2025-8148

4.2
    goanywhere_mft
Published: December 5, 2025

CVE-2025-66629

3.7
    Hedgedoc
  • Hedgedoc
Published: December 5, 2025

CVE-2025-66514

3.5
    Nextcloud
  • Mail
Published: December 5, 2025

CVE-2025-66545

3.5
    Nextcloud
  • Group Folders
Published: December 5, 2025

CVE-2025-66554

3.5
    Nextcloud
  • Contacts
Published: December 5, 2025

CVE-2025-66556

3.5
    Nextcloud
  • Talk
Published: December 5, 2025

CVE-2025-66546

3.3
    Nextcloud
  • Calendar
Published: December 5, 2025

CVE-2025-66548

3.3
    Nextcloud
  • Deck
Published: December 5, 2025

CVE-2025-66558

3.1
    Nextcloud
  • Two-Factor Webauthn
Published: December 5, 2025

CVE-2025-66515

2.7
    Nextcloud
  • Approval
Published: December 5, 2025

CVE-2025-66549

2.4
    Nextcloud
  • Desktop
Published: December 5, 2025

CVE-2025-14111

2.3
    Rarlab
  • Rar
    Google
Published: December 5, 2025

CVE-2025-66581

1.3
    Frappe
  • Learning
Published: December 5, 2025

CVE-2025-66536

None
    *
Published: December 5, 2025

CVE-2025-66537

None
    fortinet
Published: December 5, 2025

CVE-2025-66538

None
    fortinet
Published: December 5, 2025

CVE-2025-66539

None
    fortinet
Published: December 5, 2025

CVE-2025-66540

None
    fortinet
Published: December 5, 2025

CVE-2025-66541

None
    fortinet
Published: December 5, 2025

CVE-2025-66542

None
    *
Published: December 5, 2025

CVE-2025-66543

None
    *
Published: December 5, 2025

CVE-2025-66544

None
    fortinet
Published: December 5, 2025
Click here to see more Vulnerabilities