Tag: CVE-2025-8110

2 Attack Reports | 1 Vulnerabilities

Attack reports

Inside China's Hosting Ecosystem: 18,000+ Malware C2 Servers Mapped Across Major ISPs

An analysis of Chinese hosting environments reveals over 18,000 active command-and-control (C2) servers distributed across 48 infrastructure providers. C2 infrastructure dominates malicious activity at 84%, followed by phishing at 13%. China Unicom hosts nearly half of all observed C2 servers, with…
malware
apt
xmrig
cobalt strike
china
asyncrat
cybercrime
mirai
nanocore
mgbot
infrastructure
supershell
command-and-control
mozi
vshell
rondodox
CVE-2025-8110
valley rat
2026-01-15
arl
cloud providers
isps
l3mon
Published: January 15, 2026
Linked vulnerabilities : CVE-2025-8110 (CVSS 8.7)
Downloadable IOCs: 12

Gogs Zero-Day RCE (CVE-2025-8110) Actively Exploited

A zero-day vulnerability in Gogs, a popular self-hosted Git service, has been discovered and is being actively exploited. The flaw, identified as CVE-2025-8110, is a symlink bypass of a previously patched RCE vulnerability. It allows authenticated users to overwrite files outside the repository, le…
vulnerability
zero-day
cloud security
supershell
rce
CVE-2024-55947
2025-12-10
CVE-2025-8110
git service
gogs
symlink bypass
Published: December 10, 2025
Linked vulnerabilities : CVE-2024-54148 (CVSS 9.8), CVE-2024-55947, CVE-2023-46747, CVE-2024-56731 (CVSS 10.0), CVE-2025-55182 (CVSS 10.0), CVE-2025-8110 (CVSS 8.7)
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-8110

8.7
    gogs
Published: December 10, 2025
Click here to see more Vulnerabilities