Tag: 2025-12-15

4 Attack Reports | 128 Vulnerabilities

Attack reports

Malicious SSO Logins Observed Following Disclosure of CVE-2025-59718 and CVE-2025-59719

On December 12, 2025, intrusions involving malicious SSO logins on FortiGate appliances were observed. These attacks followed Fortinet's disclosure of two critical authentication bypass vulnerabilities (CVE-2025-59718 and CVE-2025-59719) on December 9. The vulnerabilities allow unauthenticated bypa…
fortigate
authentication bypass
firewall
CVE-2025-59718
CVE-2025-59719
2025-12-15
forticloud
Published: December 15, 2025
Linked vulnerabilities : CVE-2025-55182 (CVSS 10.0), CVE-2025-59718 (CVSS 9.8), CVE-2025-59719 (CVSS 9.8)
Downloadable IOCs: 4

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182, also known as React2Shell, is a critical pre-authentication remote code execution vulnerability affecting React Server Components and related frameworks. With a CVSS score of 10.0, it allows attackers to execute arbitrary code on vulnerable servers through a single malicious HTTP re…
vulnerability
remote code execution
vshell
snowlight
CVE-2025-55182
react2shell
2025-12-15
etherrat
Published: December 15, 2025
Linked vulnerabilities : CVE-2021-26855, CVE-2021-26858, CVE-2021-26857, CVE-2021-27065, CVE-2025-55182 (CVSS 10.0), CVE-2025-66478
Downloadable IOCs: 50

Frogblight banking Trojan targets Android users in Turkey

A new Android banking Trojan called Frogblight has been discovered targeting users in Turkey. Initially disguised as an app for accessing court case files, it later adopted more universal disguises like the Chrome browser. Frogblight can steal banking credentials through official government website…
android
persistence
spyware
remote access
banking trojan
smishing
coper
turkey
2025-12-15
frogblight
Published: December 15, 2025
Downloadable IOCs: 6

Snakes in the Castle: Inside the Walls of Python-Driven CastleLoader Delivery

The Blackpoint SOC recently responded to an incident initiated through the tried-and-true ClickFix technique; a social engineering method consistently leveraged across numerous campaigns this past year. These lures convince users to press Win + R to open the Windows Run dialog box, then enter a com…
python
clickfix
castleloader
2025-12-15
Published: December 15, 2025
Downloadable IOCs: 6
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-14156

9.8
Published: December 15, 2025

CVE-2025-66438

9.8
Published: December 15, 2025

CVE-2025-66439

9.8
Published: December 15, 2025

CVE-2025-66440

9.8
Published: December 15, 2025

CVE-2025-65213

9.8
Published: December 15, 2025

CVE-2023-53872

9.3
Published: December 15, 2025

CVE-2023-53877

9.3
    Phpjabbers
  • Bus Reservation System
Published: December 15, 2025

CVE-2023-53881

9.2
    Ruijienetworks
  • Reyee Os
Published: December 15, 2025

CVE-2025-13888

9.1
Published: December 15, 2025

CVE-2025-66844

9.1
    Getgrav
  • Grav
Published: December 15, 2025

CVE-2025-55895

9.1
    Totolink
  • A3300r Firmware
  • A3300r
  • N200re Firmware
  • N200re
Published: December 15, 2025

CVE-2025-14705

8.9
    Sgwbox
  • N3 Nas
Published: December 15, 2025

CVE-2025-14706

8.9
    Sgwbox
  • N3 Nas
Published: December 15, 2025

CVE-2025-14707

8.9
    Sgwbox
  • N3 Nas
Published: December 15, 2025

CVE-2025-14708

8.9
    Sgwbox
  • N3 Nas
Published: December 15, 2025

CVE-2025-14709

8.9
Published: December 15, 2025

CVE-2025-65780

8.8
    Wekan Project
  • Wekan
Published: December 15, 2025

CVE-2024-44598

8.8
    Fntsoftware
  • Fnt Command
Published: December 15, 2025

CVE-2025-60786

8.8
    Kagilum
  • Icescrum
Published: December 15, 2025

CVE-2025-66434

8.8
    Frappe
  • Erpnext
Published: December 15, 2025

CVE-2025-66437

8.8
Published: December 15, 2025

CVE-2025-9121

8.8
Published: December 15, 2025

CVE-2025-14712

8.7
Published: December 15, 2025

CVE-2025-34179

8.7
Published: December 15, 2025

CVE-2025-34181

8.7
Published: December 15, 2025

CVE-2025-13824

8.7
Published: December 15, 2025

CVE-2025-11393

8.7
Published: December 15, 2025

CVE-2023-53868

8.7
    Coppermine-Gallery
  • Coppermine Photo Gallery
Published: December 15, 2025

CVE-2023-53869

8.7
Published: December 15, 2025

CVE-2023-53873

8.7
Published: December 15, 2025

CVE-2025-14503

8.6
Published: December 15, 2025

CVE-2023-53883

8.6
    Webedition
  • Webedition Cms
Published: December 15, 2025

CVE-2023-53885

8.6
    Webutler
  • Webutler
Published: December 15, 2025

CVE-2023-53888

8.6
Published: December 15, 2025

CVE-2023-53889

8.6
    Edgeofmyseat
  • Perch
Published: December 15, 2025

CVE-2023-53892

8.6
    Blackcat-Cms
  • Blackcat Cms
Published: December 15, 2025

CVE-2025-59947

8.5
Published: December 15, 2025

CVE-2025-34180

8.4
Published: December 15, 2025

CVE-2024-44599

8.3
    Fntsoftware
  • Fnt Command
Published: December 15, 2025

CVE-2025-65781

8.2
    Wekan Project
  • Wekan
Published: December 15, 2025

CVE-2025-65742

8.2
    Newgensoft
  • Omnidocs
Published: December 15, 2025

CVE-2025-65778

8.1
    Wekan Project
  • Wekan
Published: December 15, 2025

CVE-2025-14022

7.7
    Linecorp
  • Line
Published: December 15, 2025

CVE-2025-65779

7.5
    Wekan Project
  • Wekan
Published: December 15, 2025

CVE-2025-14383

7.5
Published: December 15, 2025

CVE-2025-65176

7.5
Published: December 15, 2025

CVE-2023-53875

7.5
    Gomlab
  • Gom Player
Published: December 15, 2025

CVE-2025-12684

7.1
Published: December 15, 2025

CVE-2025-13355

7.1
Published: December 15, 2025

CVE-2025-13823

7.1
Published: December 15, 2025

CVE-2025-14693

7.0
Published: December 15, 2025

CVE-2025-14038

7.0
Published: December 15, 2025

CVE-2025-14704

6.9
    Sgwbox
  • N3 Nas
Published: December 15, 2025

CVE-2025-14549

6.9
Published: December 15, 2025

CVE-2025-14710

6.9
Published: December 15, 2025

CVE-2025-14711

6.9
Published: December 15, 2025

CVE-2025-34411

6.9
Published: December 15, 2025

CVE-2025-34412

6.9
Published: December 15, 2025

CVE-2023-53871

6.9
Published: December 15, 2025

CVE-2023-53878

6.9
Published: December 15, 2025

CVE-2025-37731

6.8
    Elastic
  • Elasticsearch
Published: December 15, 2025

CVE-2023-53874

6.7
    Gomlab
  • Gom Player
Published: December 15, 2025

CVE-2023-53879

6.7
    Eyemaxsystems
  • Nvclient
Published: December 15, 2025

CVE-2025-66388

6.5
    Apache
  • Airflow
Published: December 15, 2025

CVE-2025-65782

6.5
    Wekan Project
  • Wekan
Published: December 15, 2025

CVE-2025-55893

6.5
    Totolink
  • N200re Firmware
  • N200re
Published: December 15, 2025

CVE-2025-55901

6.5
    Totolink
  • A3300r Firmware
  • A3300r
Published: December 15, 2025

CVE-2025-12035

6.5
Published: December 15, 2025

CVE-2025-14148

6.5
    Ibm
  • Devops Deploy
Published: December 15, 2025

CVE-2025-13740

6.4
Published: December 15, 2025

CVE-2025-11670

6.4
    Zohocorp
  • Manageengine Admanager Plus
Published: December 15, 2025

CVE-2025-13367

6.4
Published: December 15, 2025

CVE-2025-13608

6.4
Published: December 15, 2025

CVE-2025-13610

6.4
Published: December 15, 2025

CVE-2025-13728

6.4
Published: December 15, 2025

CVE-2025-14387

6.4
Published: December 15, 2025

CVE-2025-14697

6.3
Published: December 15, 2025

CVE-2025-65835

6.2
Published: December 15, 2025

CVE-2023-36337

6.1
Published: December 15, 2025

CVE-2025-51962

6.1
Published: December 15, 2025

CVE-2025-13489

5.9
    Ibm
  • Devops Deploy
Published: December 15, 2025

CVE-2025-14696

5.5
Published: December 15, 2025

CVE-2025-14703

5.5
    Sgwbox
  • N3 Nas
Published: December 15, 2025

CVE-2025-66963

5.5
    Hitrontech
  • Hi3120 Firmware
  • Hi3120
Published: December 15, 2025

CVE-2025-67906

5.4
    Misp
  • Misp
Published: December 15, 2025

CVE-2025-14020

5.4
    Linecorp
  • Line
Published: December 15, 2025

CVE-2025-37732

5.4
    Elastic
  • Kibana
Published: December 15, 2025

CVE-2025-65430

5.4
Published: December 15, 2025

CVE-2025-65431

5.4
    Allauth
  • Allauth
Published: December 15, 2025

CVE-2025-66843

5.4
    Getgrav
  • Grav
Published: December 15, 2025

CVE-2025-14692

5.3
    mayan-edms
    mayan-edms
Published: December 15, 2025

CVE-2025-67901

5.3
Published: December 15, 2025

CVE-2025-14695

5.3
Published: December 15, 2025

CVE-2025-11363

5.3
Published: December 15, 2025

CVE-2025-13950

5.3
Published: December 15, 2025

CVE-2023-36338

5.3
    Inventory Management System Project
  • Inventory Management System
Published: December 15, 2025

CVE-2023-38913

5.3
    Anirbandutta9
  • News-Buzz
Published: December 15, 2025

CVE-2023-53893

5.3
    Ateme
  • Titan File
Published: December 15, 2025

CVE-2025-9122

5.3
Published: December 15, 2025

CVE-2025-14694

5.1
Published: December 15, 2025

CVE-2023-53870

5.1
Published: December 15, 2025

CVE-2023-53876

5.1
    Creativeitem
  • Academy Lms
Published: December 15, 2025

CVE-2023-53882

5.1
Published: December 15, 2025

CVE-2023-53884

5.1
    Webedition
  • Webedition Cms
Published: December 15, 2025

CVE-2023-53886

5.1
    Xlightftpd
  • Xlight Ftp Server
Published: December 15, 2025

CVE-2023-53887

5.1
Published: December 15, 2025

CVE-2023-53890

5.1
    Edgeofmyseat
  • Perch
Published: December 15, 2025

CVE-2023-53891

5.1
    Blackcat-Cms
  • Blackcat Cms
Published: December 15, 2025

CVE-2025-14729

5.1
    Ctcms Project
  • Ctcms
Published: December 15, 2025

CVE-2025-14730

5.1
    Ctcms Project
  • Ctcms
Published: December 15, 2025

CVE-2025-36360

5.0
    Ibm
  • Devops Deploy
  • Urbancode Deploy
Published: December 15, 2025

CVE-2025-14698

4.8
Published: December 15, 2025

CVE-2025-14699

4.8
Published: December 15, 2025

CVE-2025-14702

4.8
Published: December 15, 2025

CVE-2023-53880

4.8
Published: December 15, 2025

CVE-2025-14722

4.8
Published: December 15, 2025

CVE-2025-67809

4.7
Published: December 15, 2025

CVE-2025-14021

4.3
    Linecorp
  • Line
Published: December 15, 2025

CVE-2025-12900

4.3
Published: December 15, 2025

CVE-2025-14003

4.3
Published: December 15, 2025

CVE-2025-66435

4.3
    Frappe
  • Erpnext
Published: December 15, 2025

CVE-2025-66436

4.3
    Frappe
  • Erpnext
Published: December 15, 2025

CVE-2025-14019

3.4
    Linecorp
  • Line
Published: December 15, 2025

CVE-2025-14023

3.1
    Linecorp
  • Line
Published: December 15, 2025

CVE-2025-55703

2.5
Published: December 15, 2025

CVE-2025-64725

1.0
    Weblate
  • Weblate
Published: December 15, 2025

CVE-2025-14714

0.9
Published: December 15, 2025

CVE-2025-67907

None
Published: December 15, 2025
Click here to see more Vulnerabilities