Tag: CVE-2025-49113

1 Attack Reports | 1 Vulnerabilities

Attack reports

UNC1151 exploiting Roundcube to steal user credentials in a spearphishing campaign

A spear phishing campaign targeting Polish entities has been observed, exploiting the CVE-2024-42009 vulnerability in Roundcube to steal user credentials. The campaign, attributed to UNC1151, involves sending emails with malicious JavaScript that installs a Service Worker in the victim's browser. T…
spearphishing
poland
credential theft
vulnerability exploitation
CVE-2024-42009
unc1151
CVE-2025-49113
2025-06-05
roundcube
Published: June 5, 2025
Linked vulnerabilities : CVE-2024-42009, CVE-2025-49113 (CVSS 9.9)
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-49113

9.9
    Roundcube
  • Roundcube Webmail
Published: June 2, 2025
Click here to see more Vulnerabilities