Tag: triofox

2 Attack Reports | 0 Vulnerabilities

Attack reports

Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480

A critical vulnerability in Gladinet's Triofox file-sharing platform, CVE-2025-12480, allowed unauthenticated access to configuration pages, enabling arbitrary payload execution. Threat actor UNC6485 exploited this flaw as early as August 24, 2025, bypassing authentication and chaining it with anti…
remote access
privilege escalation
file-sharing
triofox
unauthenticated access
2025-11-10
CVE-2025-12480
anti-virus abuse
host header attack
Published: November 10, 2025
Linked vulnerabilities : CVE-2025-12480 (CVSS 9.1)
Downloadable IOCs: 7

CVE-2025-30406 - Critical Gladinet CentreStack & Triofox Vulnerability Exploited In The Wild

A critical vulnerability (CVE-2025-30406) in Gladinet CentreStack and Triofox software has been discovered and is being actively exploited. The flaw involves hardcoded cryptographic keys in configuration files, allowing attackers to abuse ASPX ViewState for remote code execution. Affected versions …
cobalt strike
privilege escalation
remote code execution
meshcentral
CVE-2025-30406
2025-04-15
gladinet
hardcoded keys
aspx viewstate
centrestack
triofox
Published: April 15, 2025
Linked vulnerabilities : CVE-2025-30406
Downloadable IOCs: 6
Click here to see more Attack Reports