Tag: 2025-12-29

2 Attack Reports | 119 Vulnerabilities

Attack reports

RondoDoX Botnet Weaponizes React2Shell

A persistent nine-month RondoDoX botnet campaign has been targeting IoT devices and web applications. The threat actors have recently shifted to weaponizing a critical Next.js vulnerability, deploying malicious payloads like 'React2Shell' and cryptominers. The campaign, spanning from March to Decem…
iot
botnet
mirai
cryptominer
vulnerability exploitation
command and control
next.js
rondodox
react2shell
2025-12-29
rondo
web application
Published: December 29, 2025
Downloadable IOCs: 7

The HoneyMyte APT now protects malware with a kernel-mode rootkit

In mid-2025, a malicious driver file was discovered on Asian computer systems, signed with a compromised digital certificate. This driver injects a backdoor Trojan and protects malicious files, processes, and registry keys. The final payload is a new variant of the ToneShell backdoor, associated wi…
apt
rootkit
plugx
toneshell
evasion techniques
2025-12-29
tonedisk
Published: December 29, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-52691

10.0
    *
  • Mail Server
Published: December 29, 2025

CVE-2025-68897

9.9
    Mohammad I Okfie
  • If As Shortcode
Published: December 29, 2025

CVE-2025-68562

9.9
    Romancode
  • Mapsvg
Published: December 29, 2025

CVE-2025-68860

9.8
    Mobile Builder
  • Mobile Builder
Published: December 29, 2025

CVE-2025-15226

9.3
    Sunnet
  • Wmpro
Published: December 29, 2025

CVE-2025-15228

9.3
    Welltend Technology
  • Bpmflowwebkit
Published: December 29, 2025

CVE-2024-25181

9.1
    Givanz
  • Vvvebjs
Published: December 29, 2025

CVE-2025-68929

9.0
    Frappe
  • Frappe
Published: December 29, 2025

CVE-2025-15194

8.9
    D-Link
  • Dir-600
Published: December 29, 2025

CVE-2025-55061

8.8
    *
  • *
Published: December 29, 2025

CVE-2025-15225

8.7
    Sunnet
  • Wmpro
Published: December 29, 2025

CVE-2025-15227

8.7
    Welltend Technology
  • Bpmflowwebkit
Published: December 29, 2025

CVE-2025-15284

8.7
    Qs
  • Qs
Published: December 29, 2025

CVE-2025-15065

8.6
    Kings Information And Network Co
  • Kess Enterprise
Published: December 29, 2025

CVE-2025-13417

8.6
    Wp-Plugin Organizer
  • Plugin Organizer
Published: December 29, 2025

CVE-2025-15067

8.5
    Innorix
  • Innorix Wp
Published: December 29, 2025

CVE-2025-15068

8.5
    Gmission
  • Web Fax
Published: December 29, 2025

CVE-2025-15069

8.4
    Gmission
  • Web Fax
Published: December 29, 2025

CVE-2025-69201

8.1
    Tugtainer
  • Tugtainer
Published: December 29, 2025

CVE-2025-68877

7.5
    Cedcommerce
  • Cedcommerce Integration For Good Market
Published: December 29, 2025

CVE-2025-69200

7.5
    Phpmyfaq
  • Phpmyfaq
Published: December 29, 2025

CVE-2025-66862

7.5
    Gnu
  • Binutils
Published: December 29, 2025

CVE-2025-66863

7.5
    Gnu
  • Binutils
Published: December 29, 2025

CVE-2025-66865

7.5
    Gnu
  • Binutils
Published: December 29, 2025

CVE-2025-66869

7.5
    Libming
  • Libming
Published: December 29, 2025

CVE-2025-68870

7.5
    Redim
  • Cookiehint Wp
Published: December 29, 2025

CVE-2025-66877

7.5
    Libming
  • Libming
Published: December 29, 2025

CVE-2024-25183

7.5
    Givanz
  • Vvvebjs
Published: December 29, 2025

CVE-2025-15189

7.4
    Dlink
  • Dwr-M920 Firmware
  • Dwr-M920
Published: December 29, 2025

CVE-2025-15190

7.4
    Dlink
  • Dwr-M920 Firmware
  • Dwr-M920
Published: December 29, 2025

CVE-2025-15193

7.4
    Dlink
  • Dwr-M920 Firmware
  • Dwr-M920
Published: December 29, 2025

CVE-2025-15162

7.3
    Tenda
  • Wh450 Firmware
  • Wh450
Published: December 29, 2025

CVE-2025-15163

7.3
    Tenda
  • Wh450 Firmware
  • Wh450
Published: December 29, 2025

CVE-2025-15164

7.3
    Tenda
  • Wh450 Firmware
  • Wh450
Published: December 29, 2025

CVE-2025-15177

7.3
    Tenda
  • Wh450 Firmware
  • Wh450
Published: December 29, 2025

CVE-2025-15178

7.3
    Tenda
  • Wh450 Firmware
  • Wh450
Published: December 29, 2025

CVE-2025-15179

7.3
    Tenda
  • Wh450 Firmware
  • Wh450
Published: December 29, 2025

CVE-2025-15180

7.3
    Tenda
  • Wh450 Firmware
  • Wh450
Published: December 29, 2025

CVE-2025-13592

7.2
    Advanced Ads
  • Advanced Ads
    Wordpress
Published: December 29, 2025

CVE-2025-68876

7.1
    Invelity
  • Invelity Sps Connect
Published: December 29, 2025

CVE-2025-68878

7.1
    Prasadkirpekar
  • Advanced Custom Css
Published: December 29, 2025

CVE-2025-68879

7.1
    Councilsoft
  • Content Grid Slider
Published: December 29, 2025

CVE-2025-68861

7.1
    Optimizer
  • Plugin Optimizer
Published: December 29, 2025

CVE-2025-15066

6.9
    Innorix
  • Wp
Published: December 29, 2025

CVE-2025-15165

6.9
    Admerc
  • Online Cake Ordering System
Published: December 29, 2025

CVE-2025-15166

6.9
    Admerc
  • Online Cake Ordering System
Published: December 29, 2025

CVE-2025-15167

6.9
    Admerc
  • Online Cake Ordering System
Published: December 29, 2025

CVE-2025-15168

6.9
    Itsourcecode
  • Student Management System
Published: December 29, 2025

CVE-2025-15181

6.9
    Fabian
  • Refugee Food Management System
Published: December 29, 2025

CVE-2025-15182

6.9
    Fabian
  • Refugee Food Management System
Published: December 29, 2025

CVE-2025-15183

6.9
    Fabian
  • Refugee Food Management System
Published: December 29, 2025

CVE-2025-15184

6.9
    Fabian
  • Refugee Food Management System
Published: December 29, 2025

CVE-2025-15185

6.9
    Fabian
  • Refugee Food Management System
Published: December 29, 2025

CVE-2025-15186

6.9
    Fabian
  • Refugee Food Management System
Published: December 29, 2025

CVE-2025-15195

6.9
    Code-Projects
  • Assessment Management
Published: December 29, 2025

CVE-2025-69211

6.9
    Nest
  • Nestjs
  • Platform-Fastify
Published: December 29, 2025

CVE-2025-15196

6.9
    Code-Projects
  • Assessment Management
Published: December 29, 2025

CVE-2025-15198

6.9
    Code-Projects
  • College Notes Uploading System
Published: December 29, 2025

CVE-2025-15206

6.9
    Campcodes
  • Supplier Management System
Published: December 29, 2025

CVE-2025-15207

6.9
    Campcodes
  • Supplier Management System
Published: December 29, 2025

CVE-2025-15208

6.9
    Code-Projects
  • Refugee Food Management System
Published: December 29, 2025

CVE-2025-15070

6.8
    Gmission
  • Web Fax
Published: December 29, 2025

CVE-2025-14728

6.8
    Rapid7
  • Velociraptor
Published: December 29, 2025

CVE-2025-60458

6.5
    Uxplay
  • Uxplay
Published: December 29, 2025

CVE-2025-68868

6.5
    Codeaffairs
  • Wp Text Slider Widget
Published: December 29, 2025

CVE-2025-68431

6.5
    Libheif
  • Libheif
Published: December 29, 2025

CVE-2025-68503

6.5
    Crocoblock
  • Jetblog
Published: December 29, 2025

CVE-2025-68504

6.5
    Crocoblock
  • Jetsearch
Published: December 29, 2025

CVE-2025-68607

6.5
    Hiroaki Miyashita
  • Custom Field Template
Published: December 29, 2025

CVE-2025-69205

6.3
    Mikrotik
  • Micro Registration Utility
    Asterisk
Published: December 29, 2025

CVE-2025-57462

6.1
    Machsol
  • Machpanel
Published: December 29, 2025

CVE-2025-65442

6.1
    201206030
  • Novel
Published: December 29, 2025

CVE-2025-55060

6.1
    *
  • *
Published: December 29, 2025

CVE-2025-14175

6.0
    Tp-Link
  • Tl-Wr820n
Published: December 29, 2025

CVE-2025-69202

6.0
    Axios
  • Axios Cache Interceptor
Published: December 29, 2025

CVE-2025-13958

5.9
    Wordpress
  • Yamaps
Published: December 29, 2025

CVE-2025-15176

5.5
    Open5gs
  • Open5gs
Published: December 29, 2025

CVE-2025-68928

5.4
    Frappe
  • Frappe Crm
Published: December 29, 2025

CVE-2025-68951

5.4
    Phpmyfaq
  • Phpmyfaq
Published: December 29, 2025

CVE-2025-15170

5.3
    Advaya Softech
  • Gems Erp Portal
Published: December 29, 2025

CVE-2025-15191

5.3
    Dlink
  • Dwr-M920 Firmware
  • Dwr-M920
Published: December 29, 2025

CVE-2025-15192

5.3
    Dlink
  • Dwr-M920 Firmware
  • Dwr-M920
Published: December 29, 2025

CVE-2025-53627

5.3
    Meshtastic
  • Meshtastic
Published: December 29, 2025

CVE-2025-14280

5.3
    Wordpres
  • Pixelyoursite
Published: December 29, 2025

CVE-2025-15199

5.3
    Code-Projects
  • College Notes Uploading System
Published: December 29, 2025

CVE-2025-15205

5.3
    Code-Projects
  • Student File Management System
Published: December 29, 2025

CVE-2025-15209

5.3
    Code-Projects
  • Refugee Food Management System
Published: December 29, 2025

CVE-2025-15169

5.1
    Biggidroid
  • Simple Php Cms
Published: December 29, 2025

CVE-2025-15171

5.1
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-15172

5.1
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-15173

5.1
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-15174

5.1
    Sohu
  • Cachecloud
Published: December 29, 2025

CVE-2025-15175

5.1
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-15187

5.1
    Greencms
  • Greencms
Published: December 29, 2025

CVE-2025-15197

5.1
    Code-Projects
  • Anirbandutta9 Cms
  • News-Buzz
Published: December 29, 2025

CVE-2025-15201

5.1
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-68893

4.9
    Hetworks
  • Image Shrinker
Published: December 29, 2025

CVE-2025-15188

4.8
    Campcodes
  • Complete Online Beauty Parlor Management System
Published: December 29, 2025

CVE-2025-55062

4.8
    *
  • *
Published: December 29, 2025

CVE-2025-55063

4.8
    *
  • *
Published: December 29, 2025

CVE-2025-55064

4.8
    *
  • *
Published: December 29, 2025

CVE-2025-15200

4.8
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-15202

4.8
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-15203

4.8
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-15204

4.8
    Sohutv
  • Cachecloud
Published: December 29, 2025

CVE-2025-69206

4.3
    Hemmelig
  • Hemmelig
Published: December 29, 2025

CVE-2025-68502

4.3
    Crocoblock
  • Jetpopup
Published: December 29, 2025

CVE-2025-57460

None
    Machsol
  • Machpanel
Published: December 29, 2025

CVE-2025-65570

None
    Jsish
  • Jsish
Published: December 29, 2025

CVE-2025-56333

None
    Fossorial
  • Pangolin
Published: December 29, 2025

CVE-2025-66861

None
    Gnu
  • Binutils
Published: December 29, 2025

CVE-2025-66864

None
    Gnu
  • Binutils
Published: December 29, 2025

CVE-2025-66866

None
    Gnu
  • Binutils
Published: December 29, 2025

CVE-2025-67254

None
    Nagios
  • Nagios Xi
Published: December 29, 2025

CVE-2025-67255

None
    Nagios
  • Nagios Xi
Published: December 29, 2025

CVE-2025-68706

None
    Goahead
  • Web Server
    Kuwfi
Published: December 29, 2025

CVE-2024-30855

None
    Dedecms
  • Dedecms
Published: December 29, 2025

CVE-2024-25182

None
    Givanz
  • Vvvebjs
Published: December 29, 2025

CVE-2024-27480

None
    Givanz
  • Vvvebjs
Published: December 29, 2025
Click here to see more Vulnerabilities