Tag: 2025-12-11

5 Attack Reports | 226 Vulnerabilities

Attack reports

Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability

A critical vulnerability in Gladinet's CentreStack and Triofox products has been discovered, involving hardcoded cryptographic keys in their AES implementation. This flaw allows potential access to the web.config file, enabling deserialization and remote code execution. Attackers are actively targe…
vulnerability
cryptography
remote code execution
centrestack
triofox
deserialization
aes
CVE-2025-11371
2025-12-11
access ticket
Published: December 11, 2025
Linked vulnerabilities : CVE-2025-11371 (CVSS 6.2)
Downloadable IOCs: 1

It didn’t take long: CVE-2025-55182 is now under active exploitation

A critical vulnerability (CVE-2025-55182) affecting React Server Components has been actively exploited since its disclosure on December 4, 2025. The flaw, dubbed React4Shell, allows attackers to execute commands and manipulate files on vulnerable web applications. Kaspersky honeypots detected a su…
xmrig
vulnerability
botnet
mirai
exploitation
gafgyt
honeypot
rondodox
CVE-2025-55182
2025-12-11
react server components
crypto miner
react4shell
Published: December 11, 2025
Linked vulnerabilities : CVE-2025-55182 (CVSS 10.0)
Downloadable IOCs: 46

Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite

The report details a long-running espionage campaign by Ashen Lepus, a Hamas-affiliated threat group, targeting governmental and diplomatic entities in the Middle East. The group has developed a new malware suite called AshTag, which includes enhanced custom payload encryption, infrastructure obfus…
espionage
hamas
diplomatic
2025-12-11
ashenloader
ashenorchestrator
ashenstager
ashtag
governmental
Published: December 11, 2025
Downloadable IOCs: 19

GOLD SALEM tradecraft for deploying Warlock ransomware

This analysis examines the evolving tactics of the GOLD SALEM cybercrime group in deploying Warlock ransomware over a six-month period across 11 incidents. The group exploited SharePoint vulnerabilities for initial access and utilized tools like Velociraptor, VMTools AV killer, and Cloudflared for …
ransomware
lockbit
cybercrime
warlock
velociraptor
2025-12-11
Published: December 11, 2025
Downloadable IOCs: 13

VS Code extensions contain trojan-laden fake image

A malicious campaign involving 19 Visual Studio Code extensions has been uncovered, hiding malware in dependency folders. Active since February 2025, the campaign abuses a legitimate npm package to avoid detection and crafts an archive containing malicious binaries disguised as a PNG image. The att…
npm
vs code
rust trojan
2025-12-11
Published: December 11, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-64721

9.9
    Sandboxie-Plus
  • Sandboxie
Published: December 11, 2025

CVE-2025-13764

9.8
    wp_car_dealer
Published: December 11, 2025

CVE-2025-65474

9.8
    Easyimages2.0 Project
  • Easyimages2.0
Published: December 11, 2025

CVE-2025-66043

9.8
    Libbiosig Project
  • Libbiosig
Published: December 11, 2025

CVE-2025-66044

9.8
    Libbiosig Project
  • Libbiosig
Published: December 11, 2025

CVE-2025-66045

9.8
    Libbiosig Project
  • Libbiosig
Published: December 11, 2025

CVE-2025-66046

9.8
    Libbiosig Project
  • Libbiosig
Published: December 11, 2025

CVE-2025-66047

9.8
    Libbiosig Project
  • Libbiosig
Published: December 11, 2025

CVE-2025-66048

9.8
    Libbiosig Project
  • Libbiosig
Published: December 11, 2025

CVE-2025-36937

9.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-67511

9.6
    framework
Published: December 11, 2025

CVE-2024-58286

9.3
Published: December 11, 2025

CVE-2024-58290

9.3
Published: December 11, 2025

CVE-2024-58301

9.3
Published: December 11, 2025

CVE-2024-58307

9.3
    Cszcms
  • Csz Cms
Published: December 11, 2025

CVE-2024-58308

9.3
Published: December 11, 2025

CVE-2024-58298

9.2
Published: December 11, 2025

CVE-2025-14265

9.1
Published: December 11, 2025

CVE-2025-65473

9.1
    Easyimages2.0 Project
  • Easyimages2.0
Published: December 11, 2025

CVE-2025-13780

9.1
    Pgadmin
  • Pgadmin 4
Published: December 11, 2025

CVE-2025-14534

8.9
Published: December 11, 2025

CVE-2025-14535

8.9
Published: December 11, 2025

CVE-2025-44016

8.8
Published: December 11, 2025

CVE-2025-65471

8.8
    Easyimages2.0 Project
  • Easyimages2.0
Published: December 11, 2025

CVE-2025-65472

8.8
    Easyimages2.0 Project
  • Easyimages2.0
Published: December 11, 2025

CVE-2025-56077

8.8
Published: December 11, 2025

CVE-2025-56079

8.8
Published: December 11, 2025

CVE-2025-56082

8.8
Published: December 11, 2025

CVE-2025-56083

8.8
Published: December 11, 2025

CVE-2025-56084

8.8
Published: December 11, 2025

CVE-2025-56085

8.8
Published: December 11, 2025

CVE-2025-56086

8.8
Published: December 11, 2025

CVE-2025-56087

8.8
Published: December 11, 2025

CVE-2025-56088

8.8
Published: December 11, 2025

CVE-2025-56089

8.8
Published: December 11, 2025

CVE-2025-56090

8.8
Published: December 11, 2025

CVE-2025-56091

8.8
Published: December 11, 2025

CVE-2025-66918

8.8
    Hashenudara
  • Edoc-Doctor-Appointment-System
Published: December 11, 2025

CVE-2025-56092

8.8
Published: December 11, 2025

CVE-2025-56093

8.8
Published: December 11, 2025

CVE-2025-56094

8.8
Published: December 11, 2025

CVE-2025-56095

8.8
Published: December 11, 2025

CVE-2025-56096

8.8
Published: December 11, 2025

CVE-2025-56097

8.8
Published: December 11, 2025

CVE-2025-56098

8.8
Published: December 11, 2025

CVE-2025-56099

8.8
Published: December 11, 2025

CVE-2025-56101

8.8
Published: December 11, 2025

CVE-2025-56102

8.8
Published: December 11, 2025

CVE-2025-56106

8.8
Published: December 11, 2025

CVE-2025-56107

8.8
Published: December 11, 2025

CVE-2025-56108

8.8
Published: December 11, 2025

CVE-2025-56109

8.8
Published: December 11, 2025

CVE-2025-56110

8.8
Published: December 11, 2025

CVE-2025-56111

8.8
Published: December 11, 2025

CVE-2025-56113

8.8
Published: December 11, 2025

CVE-2025-56114

8.8
Published: December 11, 2025

CVE-2025-56117

8.8
Published: December 11, 2025

CVE-2025-56118

8.8
    Ruijie
  • Rg-Ew3200gx Firmware
  • Rg-Ew3200gx
  • Rg-X60 Pro Firmware
  • Rg-X60 Pro
Published: December 11, 2025

CVE-2025-56120

8.8
    Ruijie
  • Rg-X60 Pro Firmware
  • Rg-X60 Pro
  • Rg-Ew1200 Firmware
  • Rg-Ew1200
Published: December 11, 2025

CVE-2025-56122

8.8
    Ruijie
  • Rg-Ew1800gx Firmware
  • Rg-Ew1800gx
  • Rg-Ew300n Firmware
  • Rg-Ew300n
  • Rg-Ew1800gx Pro Firmware
  • Rg-Ew1800gx Pro
Published: December 11, 2025

CVE-2025-56123

8.8
Published: December 11, 2025

CVE-2025-56127

8.8
    Ruijie
  • Rg-Bcr600w Firmware
  • Rg-Bcr600w
Published: December 11, 2025

CVE-2025-56129

8.8
    Ruijie
  • Rg-Bcr860 Firmware
  • Rg-Bcr860
Published: December 11, 2025

CVE-2025-56130

8.8
    Ruijienetworks
  • Reyee Os
    Ruijie
Published: December 11, 2025

CVE-2025-13481

8.8
    Ibm
  • Aspera Orchestrator
    Linux
Published: December 11, 2025

CVE-2025-66429

8.8
    Cpanel
  • Cpanel
Published: December 11, 2025

CVE-2025-66419

8.8
    Maxkb
  • Maxkb
Published: December 11, 2025

CVE-2025-66446

8.8
    Maxkb
  • Maxkb
Published: December 11, 2025

CVE-2025-67718

8.7
    form.io
    form.io
    form.io
Published: December 11, 2025

CVE-2025-12716

8.7
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2024-58287

8.7
Published: December 11, 2025

CVE-2024-58288

8.7
Published: December 11, 2025

CVE-2024-58294

8.7
    Sangoma
  • Freepbx
Published: December 11, 2025

CVE-2024-58300

8.7
Published: December 11, 2025

CVE-2024-58306

8.7
Published: December 11, 2025

CVE-2024-58309

8.7
Published: December 11, 2025

CVE-2024-58310

8.7
Published: December 11, 2025

CVE-2024-58312

8.7
Published: December 11, 2025

CVE-2025-14046

8.6
    Github
  • Enterprise Server
Published: December 11, 2025

CVE-2024-58293

8.6
Published: December 11, 2025

CVE-2024-58295

8.6
Published: December 11, 2025

CVE-2024-58303

8.6
Published: December 11, 2025

CVE-2024-58313

8.6
Published: December 11, 2025

CVE-2025-34506

8.6
    Wbce
  • Wbce Cms
Published: December 11, 2025

CVE-2025-66450

8.6
    Librechat
  • Librechat
Published: December 11, 2025

CVE-2025-67719

8.5
    ibexa_dxp
Published: December 11, 2025

CVE-2025-67738

8.5
    webmin
Published: December 11, 2025

CVE-2025-64701

8.5
    premium
    advance
    standard
Published: December 11, 2025

CVE-2025-66588

8.4
Published: December 11, 2025

CVE-2025-66589

8.4
Published: December 11, 2025

CVE-2025-66590

8.4
Published: December 11, 2025

CVE-2025-14523

8.2
Published: December 11, 2025

CVE-2025-13148

8.1
    Ibm
  • Aspera Orchestrator
    Linux
Published: December 11, 2025

CVE-2025-12029

8.0
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-36923

8.0
    Google
  • Android
Published: December 11, 2025

CVE-2025-36924

8.0
    Google
  • Android
Published: December 11, 2025

CVE-2025-55312

7.8
    Foxit
  • Pdf Editor
  • Pdf Reader
    Apple
    Microsoft
Published: December 11, 2025

CVE-2025-55313

7.8
    Foxit
  • Pdf Editor
  • Pdf Reader
    Microsoft
    Apple
Published: December 11, 2025

CVE-2025-55314

7.8
    Foxit
  • Pdf Editor
  • Pdf Reader
    Microsoft
Published: December 11, 2025

CVE-2025-64669

7.8
    Microsoft
  • Windows Admin Center
Published: December 11, 2025

CVE-2025-56124

7.8
    Ruijie
  • Rg-X60 Pro Firmware
  • Rg-X60 Pro
  • Rg-Ew1200 Firmware
  • Rg-Ew1200
Published: December 11, 2025

CVE-2025-36918

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36919

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36925

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36927

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36928

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36930

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36931

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36932

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36935

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-36936

7.8
    Google
  • Android
Published: December 11, 2025

CVE-2025-8405

7.7
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-13003

7.6
Published: December 11, 2025

CVE-2025-13124

7.6
Published: December 11, 2025

CVE-2025-13214

7.6
    Ibm
  • Aspera Orchestrator
    Linux
Published: December 11, 2025

CVE-2025-12562

7.5
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-59802

7.5
    Foxit
  • Pdf Editor
  • Pdf Reader
    Apple
    Microsoft
Published: December 11, 2025

CVE-2025-55184

7.5
    Facebook
  • React
    Vercel
Published: December 11, 2025

CVE-2025-14526

7.4
    Tenda
  • Ch22 Firmware
  • Ch22
Published: December 11, 2025

CVE-2025-67644

7.3
    sqlite_checkpoint
    sqlite_checkpoint
Published: December 11, 2025

CVE-2025-55310

7.3
    Foxit
  • Pdf Editor
  • Pdf Reader
    Apple
    Microsoft
Published: December 11, 2025

CVE-2025-66584

7.3
Published: December 11, 2025

CVE-2025-66585

7.3
Published: December 11, 2025

CVE-2025-66586

7.3
Published: December 11, 2025

CVE-2025-66587

7.3
Published: December 11, 2025

CVE-2025-64986

7.2
Published: December 11, 2025

CVE-2025-64987

7.2
Published: December 11, 2025

CVE-2025-64988

7.2
Published: December 11, 2025

CVE-2025-64989

7.2
Published: December 11, 2025

CVE-2025-67648

7.1
    shopware
    shopware
Published: December 11, 2025

CVE-2024-8273

7.1
Published: December 11, 2025

CVE-2025-36916

7.0
    Google
  • Android
Published: December 11, 2025

CVE-2025-14514

6.9
    Campcodes
  • Supplier Management System
Published: December 11, 2025

CVE-2025-14515

6.9
    Campcodes
  • Supplier Management System
Published: December 11, 2025

CVE-2025-14527

6.9
    Projectworlds
  • Advanced Library Management System
Published: December 11, 2025

CVE-2025-14529

6.9
    Campcodes
  • Retro Basketball Shoes Online Store
Published: December 11, 2025

CVE-2025-14536

6.9
    Fabian
  • Class And Exam Timetable Management System
Published: December 11, 2025

CVE-2025-14537

6.9
    Fabian
  • Class And Exam Timetable Management System
Published: December 11, 2025

CVE-2024-58302

6.9
Published: December 11, 2025

CVE-2025-34499

6.9
Published: December 11, 2025

CVE-2025-11984

6.8
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-64990

6.8
Published: December 11, 2025

CVE-2025-64991

6.8
Published: December 11, 2025

CVE-2025-64992

6.8
Published: December 11, 2025

CVE-2025-64993

6.8
Published: December 11, 2025

CVE-2025-55308

6.7
Published: December 11, 2025

CVE-2025-55309

6.7
Published: December 11, 2025

CVE-2025-36922

6.7
    Google
  • Android
Published: December 11, 2025

CVE-2025-36934

6.7
    Google
  • Android
Published: December 11, 2025

CVE-2025-67720

6.5
    mtproto_api_framework
Published: December 11, 2025

CVE-2025-10163

6.5
    list_category_posts_plugin
Published: December 11, 2025

CVE-2025-14157

6.5
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-4097

6.5
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-14512

6.5
    glib
Published: December 11, 2025

CVE-2025-12687

6.5
Published: December 11, 2025

CVE-2025-64994

6.5
Published: December 11, 2025

CVE-2025-64995

6.5
Published: December 11, 2025

CVE-2025-55311

6.5
    Foxit
  • Pdf Editor
  • Pdf Reader
    Apple
    Microsoft
Published: December 11, 2025

CVE-2025-36912

6.5
    Google
  • Android
Published: December 11, 2025

CVE-2025-36917

6.5
    Google
  • Android
Published: December 11, 2025

CVE-2025-14293

6.5
Published: December 11, 2025

CVE-2025-9436

6.4
    widgets_for_google_reviews
Published: December 11, 2025

CVE-2025-55816

6.1
    Digitaldruid
  • Hoteldruid
Published: December 11, 2025

CVE-2024-40593

6.0
    Fortinet
  • Fortianalyzer
  • Fortimanager
  • Fortios
  • Fortiportal
Published: December 11, 2025

CVE-2025-11467

5.8
    feedzy
Published: December 11, 2025

CVE-2025-67716

5.7
    next.js_sdk
Published: December 11, 2025

CVE-2025-14528

5.5
    Dlink
  • Dir-803 Firmware
  • Dir-803
Published: December 11, 2025

CVE-2024-42197

5.5
Published: December 11, 2025

CVE-2025-36889

5.5
    Google
  • Android
Published: December 11, 2025

CVE-2025-36921

5.5
    Google
  • Android
Published: December 11, 2025

CVE-2025-36929

5.5
    Google
  • Android
Published: December 11, 2025

CVE-2025-13663

5.4
Published: December 11, 2025

CVE-2025-13664

5.4
Published: December 11, 2025

CVE-2025-13668

5.4
Published: December 11, 2025

CVE-2025-67713

5.3
    miniflux
Published: December 11, 2025

CVE-2025-67717

5.3
    zitaled
    zitaled
Published: December 11, 2025

CVE-2025-14516

5.3
Published: December 11, 2025

CVE-2025-14518

5.3
    Powerjob
  • Powerjob
Published: December 11, 2025

CVE-2025-14520

5.3
Published: December 11, 2025

CVE-2025-14521

5.3
Published: December 11, 2025

CVE-2025-14522

5.3
Published: December 11, 2025

CVE-2025-59803

5.3
    Foxit
  • Pdf Editor
  • Pdf Reader
    Apple
    Microsoft
Published: December 11, 2025

CVE-2025-14531

5.3
    Carmelo
  • Rental Management System
Published: December 11, 2025

CVE-2025-13211

5.3
    Ibm
  • Aspera Orchestrator
    Linux
Published: December 11, 2025

CVE-2025-55183

5.3
    Facebook
  • React
    Vercel
Published: December 11, 2025

CVE-2025-64702

5.3
Published: December 11, 2025

CVE-2024-58289

5.3
Published: December 11, 2025

CVE-2024-58291

5.3
Published: December 11, 2025

CVE-2024-58292

5.3
Published: December 11, 2025

CVE-2024-58296

5.3
Published: December 11, 2025

CVE-2024-58297

5.3
Published: December 11, 2025

CVE-2024-58304

5.3
Published: December 11, 2025

CVE-2025-34504

5.3
    Kodcloud
  • Kodexplorer
Published: December 11, 2025

CVE-2025-66451

5.3
    Librechat
  • Librechat
Published: December 11, 2025

CVE-2025-66452

5.3
    Librechat
  • Librechat
Published: December 11, 2025

CVE-2025-14519

5.1
Published: December 11, 2025

CVE-2025-14530

5.1
    Remyandrade
  • Real Estate Property Listing App
Published: December 11, 2025

CVE-2025-36938

5.1
    Google
  • Android
Published: December 11, 2025

CVE-2025-14538

5.1
Published: December 11, 2025

CVE-2025-14517

4.8
Published: December 11, 2025

CVE-2025-67741

4.6
    Jetbrains
  • Teamcity
Published: December 11, 2025

CVE-2025-13978

4.3
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-11247

4.3
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-46266

4.3
Published: December 11, 2025

CVE-2025-67780

4.2
Published: December 11, 2025

CVE-2025-67742

3.8
    Jetbrains
  • Teamcity
Published: December 11, 2025

CVE-2025-67646

3.5
    tableprogresstracking
Published: December 11, 2025

CVE-2025-12734

3.5
    Gitlab
  • Gitlab
Published: December 11, 2025

CVE-2025-55307

3.3
Published: December 11, 2025

CVE-2025-67739

3.1
    Jetbrains
  • Teamcity
Published: December 11, 2025

CVE-2025-67740

2.7
    Jetbrains
  • Teamcity
Published: December 11, 2025

CVE-2025-14485

2.3
    iptime_a3004t
Published: December 11, 2025

CVE-2025-13912

1.0
Published: December 11, 2025

CVE-2025-67512

None
    *
Published: December 11, 2025

CVE-2025-67514

None
    *
Published: December 11, 2025

CVE-2025-67686

None
    fortinet
Published: December 11, 2025

CVE-2025-67687

None
    fortigate
Published: December 11, 2025

CVE-2025-67688

None
    fortinet
Published: December 11, 2025

CVE-2025-67689

None
    fortinet
Published: December 11, 2025

CVE-2025-67690

None
    fortinet
Published: December 11, 2025

CVE-2025-67691

None
    fortinet
Published: December 11, 2025

CVE-2025-67692

None
    fortinet
Published: December 11, 2025

CVE-2025-67693

None
    fortinet
Published: December 11, 2025

CVE-2025-67694

None
    fortinet
Published: December 11, 2025

CVE-2025-14281

None
Published: December 11, 2025

CVE-2025-12532

None
Published: December 11, 2025
Click here to see more Vulnerabilities