Tag: 2025-12-10

12 Attack Reports | 284 Vulnerabilities

Attack reports

Browser Hijacking Techniques: Some education required

This article examines three distinct browser hijacking techniques. The first involves directly modifying browser preference files, such as Firefox's pref.js and Chrome's Preferences and Secure Preferences. The second technique, dubbed BRAT (Browser Remote Access Tool), simulates key presses to cont…
adware
chrome
malicious extensions
firefox
tamperedchef
appsuite
browser hijacking
2025-12-10
baoloader
brat
key simulation
registry manipulation
Published: December 10, 2025
Downloadable IOCs: 5

Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users

An active phishing campaign has been identified targeting organizations using Microsoft 365 and Okta for single sign-on. The campaign employs modern techniques to bypass multi-factor authentication and hijack legitimate SSO flows. It uses lookalike domains to impersonate Okta authentication pages a…
phishing
credential theft
adversary-in-the-middle
microsoft 365
session hijacking
sso
2025-12-10
okta
Published: December 10, 2025
Downloadable IOCs: 1

Gogs Zero-Day RCE (CVE-2025-8110) Actively Exploited

A zero-day vulnerability in Gogs, a popular self-hosted Git service, has been discovered and is being actively exploited. The flaw, identified as CVE-2025-8110, is a symlink bypass of a previously patched RCE vulnerability. It allows authenticated users to overwrite files outside the repository, le…
vulnerability
zero-day
cloud security
supershell
rce
CVE-2024-55947
2025-12-10
CVE-2025-8110
git service
gogs
symlink bypass
Published: December 10, 2025
Linked vulnerabilities : CVE-2024-54148 (CVSS 9.8), CVE-2024-55947, CVE-2023-46747, CVE-2024-56731 (CVSS 10.0), CVE-2025-55182 (CVSS 10.0), CVE-2025-8110 (CVSS 8.7)
Downloadable IOCs: 0

NANOREMOTE, cousin of FINALDRAFT

A newly discovered Windows backdoor called NANOREMOTE shares similarities with previously known malware FINALDRAFT. NANOREMOTE's key feature is using the Google Drive API for data exfiltration and payload staging, making detection challenging. The malware includes a task management system for file …
command execution
finaldraft
2025-12-10
custom pe loader
file exfiltration
google drive api
nanoremote
task management
windows backdoor
wmloader
Published: December 10, 2025
Downloadable IOCs: 5

Russian Ruse: ValleyRAT Hits China via Fake Microsoft Teams Attack

The Chinese APT group Silver Fox has launched an SEO poisoning campaign targeting Chinese-speaking users, impersonating Microsoft Teams. The campaign uses a modified ValleyRAT loader with Cyrillic elements to mislead attribution. Silver Fox aims to conduct espionage and financial fraud, posing a si…
apt
espionage
seo poisoning
china
financial fraud
valleyrat
microsoft teams
2025-12-10
false flag
Published: December 10, 2025
Downloadable IOCs: 37

PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182

A critical vulnerability in React Server Components (CVE-2025-55182) is being exploited across various organizations. Attackers are deploying cryptominer malware, a Linux backdoor called PeerBlight, a reverse proxy tunnel named CowTunnel, and a Go-based post-exploitation implant dubbed ZinFoq. Peer…
post-exploitation
linux backdoor
CVE-2025-55182
react2shell
2025-12-10
bittorrent dht
cowtunnel
kaiji
peerblight
zinfoq
Published: December 10, 2025
Linked vulnerabilities : CVE-2025-30406, CVE-2025-55182 (CVSS 10.0), CVE-2025-66478
Downloadable IOCs: 36

Multi-Platform Ransomware Written in Rust

A new ransomware family named 01flip, written in Rust, has been observed targeting victims in the Asia-Pacific region. The malware supports multi-platform architectures and has been used in attacks on critical infrastructure. Initial access was gained through exploitation of vulnerabilities in inte…
ransomware
rust
sliver
aes encryption
data leak
critical infrastructure
multi-platform
asia-pacific
2025-12-10
01flip
CVE-2019-11580
Published: December 10, 2025
Linked vulnerabilities : CVE-2019-11580
Downloadable IOCs: 3

AI-Poisoning & AMOS Stealer: How Trust Became the Biggest Mac Threat

A sophisticated malware campaign exploits user trust in AI platforms to deliver the AMOS stealer. Attackers use SEO poisoning to surface malicious ChatGPT and Grok conversations offering 'helpful' macOS disk cleanup advice. These conversations contain Terminal commands that, when executed, deploy A…
social engineering
stealer
persistence
macos
credential harvesting
chatgpt
amos
atomic macos stealer
seo manipulation
2025-12-10
ai-poisoning
grok
Published: December 10, 2025
Downloadable IOCs: 8

UDPGangster Campaigns Target Multiple Countries

UDPGangster, a UDP-based backdoor associated with the MuddyWater threat group, has been observed targeting users in Turkey, Israel, and Azerbaijan. The malware is delivered through malicious Microsoft Word documents with embedded VBA macros, employing sophisticated anti-analysis techniques to evade…
backdoor
espionage
phishing
anti-analysis
vba macros
2025-12-10
phoenix backdoor
udpgangster
Published: December 10, 2025
Downloadable IOCs: 15

New BYOVD loader behind DeadLock ransomware attack

A new loader exploiting a Baidu Antivirus driver vulnerability (CVE-2024-51324) has been discovered in connection with DeadLock ransomware attacks. The threat actor uses the Bring Your Own Vulnerable Driver (BYOVD) technique to terminate endpoint detection and response processes. A PowerShell scrip…
ransomware
edr evasion
byovd
CVE-2024-51324
2025-12-10
deadlock
Published: December 10, 2025
Linked vulnerabilities : CVE-2024-51324 (CVSS 3.8)
Downloadable IOCs: 5

The ChimeraWire trojan boosts website popularity by skillfully pretending to be human

Doctor Web experts have discovered a unique malware called Trojan.ChimeraWire targeting Windows computers. This trojan simulates user actions to artificially boost website rankings in search engine results. It uses the Google Chrome browser in debug mode and employs various techniques to avoid dete…
2025-12-10
chimerawire
clicker
Published: December 10, 2025
Downloadable IOCs: 32

Threat Spotlight: Storm-0249 Moves from Mass Phishing to Precision EDR Exploitation

Storm-0249, a seasoned initial access broker, has evolved from mass phishing to sophisticated post-exploitation tactics. The group now abuses legitimate Endpoint Detection and Response processes, particularly SentinelOne's SentinelAgentWorker.exe, through DLL sideloading. This allows them to concea…
ransomware
dll sideloading
domain spoofing
initial access broker
fileless execution
stealth tactics
2025-12-10
edr exploitation
Published: December 10, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-34392

10.0
    Barracuda
  • Rmm
Published: December 10, 2025

CVE-2025-34393

10.0
    Barracuda
  • Rmm
Published: December 10, 2025

CVE-2025-34394

10.0
    Barracuda
  • Rmm
Published: December 10, 2025

CVE-2025-67506

9.8
    pipeshub
Published: December 10, 2025

CVE-2025-13613

9.8
    membership
Published: December 10, 2025

CVE-2025-41730

9.8
    Wago
  • 0852-1328 Firmware
  • 0852-1328
  • 0852-1322 Firmware
  • 0852-1322
Published: December 10, 2025

CVE-2025-41732

9.8
    Wago
  • 0852-1328 Firmware
  • 0852-1328
  • 0852-1322 Firmware
  • 0852-1322
Published: December 10, 2025

CVE-2025-13184

9.8
    Totolink
  • X5000r Firmware
  • X5000r
Published: December 10, 2025

CVE-2025-65602

9.8
    Chancms
  • Chancms
Published: December 10, 2025

CVE-2025-65820

9.8
    Meatmeet
  • Meatmeet
Published: December 10, 2025

CVE-2025-65823

9.8
    meatmeet_pro
Published: December 10, 2025

CVE-2025-65826

9.8
    *
Published: December 10, 2025

CVE-2025-65294

9.8
    Aqara
  • Hub M2 Firmware
  • Hub M2
  • Hub M3 Firmware
  • Hub M3
  • Camera Hub G3 Firmware
  • Camera Hub G3
Published: December 10, 2025

CVE-2025-67501

9.4
    Wegia
  • Wegia
Published: December 10, 2025

CVE-2025-65950

9.4
    Wbce
  • Wbce Cms
Published: December 10, 2025

CVE-2025-67510

9.4
    neuron
Published: December 10, 2025

CVE-2025-13954

9.3
    ezcast_pro_ii
Published: December 10, 2025

CVE-2025-13955

9.3
    ezcast_pro_ii
Published: December 10, 2025

CVE-2025-13953

9.3
    tax_information_system
Published: December 10, 2025

CVE-2025-13607

9.3
    *
Published: December 10, 2025

CVE-2025-64537

9.3
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64538

9.3
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64539

9.3
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2020-36885

9.3
    ipela_network_camera
Published: December 10, 2025

CVE-2020-36892

9.3
    Eibiz
  • I-Media Server Digital Signage
Published: December 10, 2025

CVE-2020-36894

9.3
    Eibiz
  • I-Media Server Digital Signage
Published: December 10, 2025

CVE-2020-36897

9.3
    Howfor
  • Qihang Media Web Digital Signage
Published: December 10, 2025

CVE-2020-36902

9.3
    medivision_digital_signage
Published: December 10, 2025

CVE-2025-61808

9.1
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-61809

9.1
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-61811

9.1
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-65792

9.1
    Datagear
  • Datagear
Published: December 10, 2025

CVE-2025-65827

9.1
    mobile_application
    api_server
Published: December 10, 2025

CVE-2025-65830

9.1
    *
Published: December 10, 2025

CVE-2025-14390

8.8
    video_merchant
Published: December 10, 2025

CVE-2025-7073

8.8
    total_security
Published: December 10, 2025

CVE-2024-2104

8.8
    ble_device
Published: December 10, 2025

CVE-2020-36883

8.8
    fusion_digital_signage
Published: December 10, 2025

CVE-2020-36898

8.8
    Howfor
  • Qihang Media Web Digital Signage
Published: December 10, 2025

CVE-2025-65824

8.8
    device
Published: December 10, 2025

CVE-2025-9571

8.7
    cloud_data_fusion
    cloud_data_fusion
Published: December 10, 2025

CVE-2025-12952

8.7
    dialogflow_cx
Published: December 10, 2025

CVE-2025-8110

8.7
    gogs
Published: December 10, 2025

CVE-2025-34395

8.7
    Barracuda
  • Rmm
Published: December 10, 2025

CVE-2020-36887

8.7
    Spinetix
  • Fusion Digital Signage
Published: December 10, 2025

CVE-2020-36893

8.7
    Eibiz
  • I-Media Server Digital Signage
Published: December 10, 2025

CVE-2020-36895

8.7
    Eibiz
  • I-Media Server Digital Signage
Published: December 10, 2025

CVE-2020-36896

8.7
    Howfor
  • Qihang Media Web Digital Signage
Published: December 10, 2025

CVE-2020-36899

8.7
    Howfor
  • Qihang Media Web Digital Signage
Published: December 10, 2025

CVE-2023-53776

8.7
    sft_dab
Published: December 10, 2025

CVE-2024-58281

8.7
    Dotclear
  • Dotclear
Published: December 10, 2025

CVE-2024-58283

8.7
    Wbce
  • Wbce Cms
Published: December 10, 2025

CVE-2025-66473

8.7
    Xwiki
  • Xwiki
Published: December 10, 2025

CVE-2025-66474

8.7
    Xwiki
  • Xwiki-Rendering
Published: December 10, 2025

CVE-2020-36900

8.6
    digital_signage_system
Published: December 10, 2025

CVE-2020-36901

8.6
    medivision_digital_signage
Published: December 10, 2025

CVE-2023-53740

8.6
    Dbbroadcast
  • Sft Dab 015\/C Firmware
  • Sft Dab 015\/C
  • Sft Dab 050\/C Firmware
  • Sft Dab 050\/C
  • Sft Dab 150\/C Firmware
  • Sft Dab 150\/C
  • Sft Dab 300\/C Firmware
  • Sft Dab 300\/C
  • Sft Dab 600\/C Firmware
  • Sft Dab 600\/C
Published: December 10, 2025

CVE-2024-58279

8.6
    Apprain
  • Apprain
Published: December 10, 2025

CVE-2024-58280

8.6
    cmsimple
Published: December 10, 2025

CVE-2024-58282

8.6
    S9y
  • Serendipity
Published: December 10, 2025

CVE-2024-58284

8.6
    Popojicms
  • Popojicms
Published: December 10, 2025

CVE-2025-12046

8.5
    app_store
    browser
Published: December 10, 2025

CVE-2025-13152

8.5
    one_client
Published: December 10, 2025

CVE-2025-13155

8.5
    baiying_client
Published: December 10, 2025

CVE-2025-34416

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34417

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34418

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34419

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34420

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34421

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34422

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34423

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34424

8.5
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-61810

8.4
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-61812

8.4
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-65807

8.4
    Chmln
  • Sd
Published: December 10, 2025

CVE-2025-34427

8.4
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-34428

8.4
    Mailenable
  • Mailenable
Published: December 10, 2025

CVE-2025-67505

8.4
    java_management_sdk
    java_management_sdk
Published: December 10, 2025

CVE-2025-41358

8.3
    cronosweb
Published: December 10, 2025

CVE-2025-61813

8.2
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-66675

8.2
    Apache
  • Struts
Published: December 10, 2025

CVE-2025-67509

8.2
    neuron
    neuron
Published: December 10, 2025

CVE-2025-67507

8.1
    filament
Published: December 10, 2025

CVE-2025-65295

8.1
    Aqara
  • Hub M2 Firmware
  • Hub M2
  • Hub M3 Firmware
  • Hub M3
  • Camera Hub G3 Firmware
  • Camera Hub G3
Published: December 10, 2025

CVE-2025-67460

7.8
    zoom_rooms
Published: December 10, 2025

CVE-2025-24857

7.6
    ipq6018
    ipq9574
    u-boot
    ipq4019
    ipq5018
    ipq5322
    ipq8064
    ipq8074
Published: December 10, 2025

CVE-2025-13339

7.5
    mobile_app_for_woocommerce
Published: December 10, 2025

CVE-2025-67635

7.5
    Jenkins
  • Jenkins
Published: December 10, 2025

CVE-2025-63094

7.5
    nanhu
    kunmighu
Published: December 10, 2025

CVE-2025-56430

7.5
    Fearlessgeekmedia
  • Fearlesscms
Published: December 10, 2025

CVE-2025-56431

7.5
    Fearlessgeekmedia
  • Fearlesscms
Published: December 10, 2025

CVE-2025-63895

7.5
    jxl_9_inch_car_android_double_din_player
Published: December 10, 2025

CVE-2025-65512

7.5
    Zach
  • Markdownify Mcp
Published: December 10, 2025

CVE-2025-65821

7.5
    esp32
Published: December 10, 2025

CVE-2025-65831

7.5
    *
Published: December 10, 2025

CVE-2025-65297

7.5
    Aqara
  • Hub M2 Firmware
  • Hub M2
  • Hub M3 Firmware
  • Hub M3
  • Camera Hub G3 Firmware
  • Camera Hub G3
Published: December 10, 2025

CVE-2025-66628

7.5
    imagemagick
    imagemagick
Published: December 10, 2025

CVE-2025-65290

7.4
    Aqara
  • Hub M2 Firmware
  • Hub M2
  • Hub M3 Firmware
  • Hub M3
  • Camera Hub G3 Firmware
  • Camera Hub G3
Published: December 10, 2025

CVE-2025-65199

7.3
    Windscribe
  • Windscribe
Published: December 10, 2025

CVE-2025-65292

7.3
    Aqara
  • Hub M2 Firmware
  • Hub M2
  • Hub M3 Firmware
  • Hub M3
  • Camera Hub G3 Firmware
  • Camera Hub G3
Published: December 10, 2025

CVE-2025-13072

7.1
    utm_grabber_tracker
Published: December 10, 2025

CVE-2025-13073

7.1
    utm_grabber
Published: December 10, 2025

CVE-2025-1161

7.1
    nomysem
Published: December 10, 2025

CVE-2023-53775

7.1
    sft_dab
Published: December 10, 2025

CVE-2025-34410

7.0
    Fit2cloud
  • 1panel
Published: December 10, 2025

CVE-2025-34429

7.0
    Fit2cloud
  • 1panel
Published: December 10, 2025

CVE-2020-36884

6.9
    digital_signage_diagnostic_web_server
Published: December 10, 2025

CVE-2020-36886

6.9
    Spinetix
  • Fusion Digital Signage
Published: December 10, 2025

CVE-2020-36888

6.9
    Spinetix
  • Fusion Digital Signage
Published: December 10, 2025

CVE-2025-67513

6.9
    endpoint_manager
    endpoint_manager
Published: December 10, 2025

CVE-2025-61821

6.8
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-65822

6.8
    meatmeet_pro
Published: December 10, 2025

CVE-2025-65829

6.8
    esp32
Published: December 10, 2025

CVE-2025-67499

6.6
    portmap_plugin
    portmap_plugin
Published: December 10, 2025

CVE-2025-65293

6.6
    Aqara
  • Camera Hub G3 Firmware
  • Camera Hub G3
Published: December 10, 2025

CVE-2024-2105

6.5
    bluetooth
    sig
Published: December 10, 2025

CVE-2025-65803

6.5
    Freeimage Project
  • Freeimage
Published: December 10, 2025

CVE-2025-52493

6.5
    pagerduty
Published: December 10, 2025

CVE-2025-65814

6.5
    A1apps
  • Office App-Edit Word\, Pdf File
Published: December 10, 2025

CVE-2025-65815

6.5
    document_reader
Published: December 10, 2025

CVE-2025-65828

6.5
    meatmeet_device
Published: December 10, 2025

CVE-2025-65296

6.5
    Aqara
  • Hub M2 Firmware
  • Hub M2
  • Hub M3 Firmware
  • Hub M3
  • Camera Hub G3 Firmware
  • Camera Hub G3
Published: December 10, 2025

CVE-2025-66472

6.5
    xwiki_platform
    xwiki_platform
    xwiki_platform
    xwiki_platform
    flamingo_skin_resources
    web_templates
Published: December 10, 2025

CVE-2025-9315

6.3
    mxsecurity
Published: December 10, 2025

CVE-2025-61822

6.2
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-61823

6.2
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-65754

6.1
    algernon
Published: December 10, 2025

CVE-2025-56429

6.1
    Fearlessgeekmedia
  • Fearlesscms
Published: December 10, 2025

CVE-2025-64897

5.6
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-14087

5.6
    glib
Published: December 10, 2025

CVE-2025-67502

5.4
    Taguette
  • Taguette
Published: December 10, 2025

CVE-2025-67641

5.4
    Jenkins
  • Coverage
Published: December 10, 2025

CVE-2025-64541

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64543

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64544

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64545

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64546

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64547

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64548

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64549

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64550

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64551

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64553

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64554

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64555

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64556

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64557

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64558

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64559

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64560

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64562

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64563

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64564

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64565

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64566

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64569

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64572

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64574

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64575

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64576

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64577

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64578

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64579

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64580

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64581

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64582

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64583

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64585

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64586

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64590

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64591

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64592

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64593

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64594

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64596

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64597

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64598

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64599

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64600

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64601

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64602

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64603

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64604

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64605

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64606

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64607

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64609

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64611

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64612

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64613

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64614

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64615

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64616

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64619

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64620

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64622

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64623

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64626

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64627

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64789

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64790

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64791

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64792

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64793

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64794

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64796

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64797

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64799

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64800

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64801

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64802

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64803

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64804

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64808

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64814

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64817

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64820

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64821

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64822

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64823

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64825

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64826

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64827

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64829

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64833

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64839

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64840

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64841

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64845

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64847

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64850

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64852

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64853

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64857

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64858

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64861

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64863

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64869

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64873

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64875

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64881

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64887

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-64888

5.4
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-67490

5.4
    next.js_sdk
    next.js_sdk
    next.js_sdk
    next.js_sdk
Published: December 10, 2025

CVE-2025-67485

5.3
    mad-proxy
Published: December 10, 2025

CVE-2025-9056

5.3
    audiolink
Published: December 10, 2025

CVE-2025-62181

5.3
    pega_platform
    pega_platform
    pega_platform
    pega_platform
Published: December 10, 2025

CVE-2024-58285

5.3
    Chyrp
  • Chyrp
Published: December 10, 2025

CVE-2025-66033

5.3
    java_management_sdk
Published: December 10, 2025

CVE-2025-66004

5.1
    usbmuxd
Published: December 10, 2025

CVE-2025-34430

5.1
    Fit2cloud
  • 1panel
Published: December 10, 2025

CVE-2023-53741

5.1
    Dbbroadcast
  • Sft Dab 015\/C Firmware
  • Sft Dab 015\/C
  • Sft Dab 050\/C Firmware
  • Sft Dab 050\/C
  • Sft Dab 150\/C Firmware
  • Sft Dab 150\/C
  • Sft Dab 300\/C Firmware
  • Sft Dab 300\/C
  • Sft Dab 600\/C Firmware
  • Sft Dab 600\/C
Published: December 10, 2025

CVE-2025-67640

5.0
    Jenkins
  • Git Client
Published: December 10, 2025

CVE-2025-67461

5.0
    zoom_rooms
Published: December 10, 2025

CVE-2025-13677

4.9
    simple_download_counter
Published: December 10, 2025

CVE-2025-64872

4.8
    Adobe
  • Experience Manager
Published: December 10, 2025

CVE-2025-65825

4.6
    meatmeet_firmware
Published: December 10, 2025

CVE-2025-65832

4.6
    mobile_application
    meatmeet
Published: December 10, 2025

CVE-2025-64898

4.3
    Adobe
  • Coldfusion
Published: December 10, 2025

CVE-2025-13125

4.3
    dijidemi
Published: December 10, 2025

CVE-2025-67636

4.3
    Jenkins
  • Jenkins
Published: December 10, 2025

CVE-2025-67637

4.3
    Jenkins
  • Jenkins
Published: December 10, 2025

CVE-2025-67638

4.3
    Jenkins
  • Jenkins
Published: December 10, 2025

CVE-2025-67642

4.3
    Jenkins
  • Hashicorp Vault
Published: December 10, 2025

CVE-2025-67643

4.3
    Jenkins
  • Redpen - Pipeline Reporter For Jira
Published: December 10, 2025

CVE-2025-67500

3.7
    Joinmastodon
  • Mastodon
Published: December 10, 2025

CVE-2025-13127

3.5
    goldenhorn
Published: December 10, 2025

CVE-2025-67639

3.5
    Jenkins
  • Jenkins
Published: December 10, 2025

CVE-2025-14082

2.7
    keycloak
Published: December 10, 2025

CVE-2025-5467

1.9
    Canonical
  • Apport
Published: December 10, 2025

CVE-2025-67503

None
    *
Published: December 10, 2025

CVE-2025-67605

None
    fortinet
Published: December 10, 2025

CVE-2025-67606

None
    *
Published: December 10, 2025

CVE-2025-67607

None
    fortinet
Published: December 10, 2025

CVE-2025-67608

None
    fortinet
Published: December 10, 2025

CVE-2025-67609

None
    fortinet
Published: December 10, 2025

CVE-2025-67610

None
    fortigate
Published: December 10, 2025

CVE-2025-67611

None
    fortinet
Published: December 10, 2025

CVE-2025-67612

None
    fortinet
Published: December 10, 2025

CVE-2025-67613

None
    fortinet
Published: December 10, 2025

CVE-2025-65291

None
    camera_hub_g3
    hub_m2
    hub_m3
Published: December 10, 2025

CVE-2025-12731

None
    *
Published: December 10, 2025

CVE-2025-13923

None
    gitlab
Published: December 10, 2025
Click here to see more Vulnerabilities