Tag: CVE-2025-0282

2 Attack Reports | 1 Vulnerabilities

Attack reports

DslogdRAT Malware Installed in Ivanti Connect Secure

The article discusses a malware called DslogdRAT, which was installed on Ivanti Connect Secure systems by exploiting CVE-2025-0282. The malware communicates with a C2 server during business hours to avoid detection. It uses a web shell for initial access and supports various commands for file opera…
zero-day
c2 communication
web shell
CVE-2025-0282
CVE-2025-22457
spawnsnare
ivanti connect secure
2025-04-28
spawnchimera
dslogdrat
Published: April 28, 2025
Downloadable IOCs: 0

Threat Brief: CVE-2025-0282 and CVE-2025-0283

Two critical vulnerabilities in Ivanti Connect Secure, Policy Secure and ZTA gateway products have been discovered. CVE-2025-0282 allows remote code execution, while CVE-2025-0283 enables privilege escalation. Attacks exploiting CVE-2025-0282 have been observed in the wild, involving initial access…
ivanti
CVE-2025-0282
CVE-2025-0283
2025-01-17
Published: January 17, 2025
Downloadable IOCs: 14
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-0282

9.0
    Ivanti
  • Connect Secure
  • Neurons For Zero-Trust Access
  • Policy Secure
Published: January 8, 2025
Click here to see more Vulnerabilities