Tag: CVE-2025-2611

2 Attack Reports | 1 Vulnerabilities

Attack reports

Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks

A critical remote code execution vulnerability (CVE-2025-6389) in the Sneeit Framework WordPress plugin is being actively exploited. The flaw allows unauthenticated attackers to execute code on the server, potentially creating malicious admin accounts or injecting backdoors. Wordfence has blocked o…
ddos
botnet
wordpress
vulnerability exploitation
remote code execution
CVE-2025-1610
CVE-2025-2611
CVE-2025-6389
2025-12-09
frost
ictbroadcast
sneeit framework
trojan.karagany
xfrost
Published: December 9, 2025
Linked vulnerabilities : CVE-2025-1610 (CVSS 6.3), CVE-2025-2611 (CVSS 9.3), CVE-2025-6389 (CVSS 9.8), CVE-2025-66516 (CVSS 10.0)
Downloadable IOCs: 6

The Mystery OAST Host Behind a Regionally Focused Exploit Operation

A long-running, attacker-operated OAST service on Google Cloud has been observed driving a focused exploit operation. The actor combines stock Nuclei templates with custom payloads to expand their reach. All observed activity targeted canaries deployed in Brazil, indicating a deliberate regional fo…
exploit
brazil
google cloud
CVE-2025-4428
CVE-2025-2611
2025-11-28
oast
fastjson
regional targeting
nuclei
scanning infrastructure
Published: November 28, 2025
Linked vulnerabilities : CVE-2025-4428, CVE-2025-2611 (CVSS 9.3)
Downloadable IOCs: 6
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-2611

9.3
    Ictbroadcast
  • Ictbroadcast
Published: August 5, 2025
Click here to see more Vulnerabilities