Tag: deserialization vulnerability

1 Attack Reports | 0 Vulnerabilities

Attack reports

Trimble Cityworks: CVE-2025-0994: Active Exploitation

A high-severity deserialization vulnerability in Trimble Cityworks, CVE-2025-0994, affects versions before 15.8.9 and Office Companion versions before 23.10. This flaw allows authenticated attackers to execute remote code on Microsoft IIS web servers. Exploitation indicators suggest the use of Rust…
cobalt strike
remote code execution
critical infrastructure
CVE-2025-0994
2025-02-20
vshell
trimble cityworks
iis web server
deserialization vulnerability
Published: February 20, 2025
Linked vulnerabilities : CVE-2025-0994 (CVSS 8.8)
Downloadable IOCs: 16
Click here to see more Attack Reports