Tag: host header attack

1 Attack Reports | 0 Vulnerabilities

Attack reports

Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480

A critical vulnerability in Gladinet's Triofox file-sharing platform, CVE-2025-12480, allowed unauthenticated access to configuration pages, enabling arbitrary payload execution. Threat actor UNC6485 exploited this flaw as early as August 24, 2025, bypassing authentication and chaining it with anti…

privilege escalation

unauthenticated access

anti-virus abuse

host header attack

Published: November 10, 2025

Linked vulnerabilities : CVE-2025-12480 (CVSS 9.1)

Downloadable IOCs: 7

Click here to see more Attack Reports