Tag: CVE-2025-64328

1 Attack Reports | 1 Vulnerabilities

Attack reports

Unveiling the Weaponized Web Shell EncystPHP

A sophisticated web shell named EncystPHP has been discovered, targeting FreePBX systems through the CVE-2025-64328 vulnerability. Associated with the hacker group INJ3CTOR3, this malware exhibits advanced capabilities including remote command execution, persistence mechanisms, and web shell deploy…
evasion
command injection
persistence
web shell
CVE-2025-64328
2026-01-28
encystphp
freepbx
telephony
Published: January 28, 2026
Linked vulnerabilities : CVE-2025-64328 (CVSS 8.6), CVE-2019-19006, CVE-2021-45461
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-64328

8.6
    endpoint_manager
    endpoint_manager
Published: November 7, 2025
Click here to see more Vulnerabilities