Tag: unauthenticated access

2 Attack Reports | 0 Vulnerabilities

Attack reports

Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480

A critical vulnerability in Gladinet's Triofox file-sharing platform, CVE-2025-12480, allowed unauthenticated access to configuration pages, enabling arbitrary payload execution. Threat actor UNC6485 exploited this flaw as early as August 24, 2025, bypassing authentication and chaining it with anti…

privilege escalation

unauthenticated access

anti-virus abuse

host header attack

Published: November 10, 2025

Linked vulnerabilities : CVE-2025-12480 (CVSS 9.1)

Downloadable IOCs: 7

Active Exploitation of Microsoft SharePoint Vulnerabilities: Threat Brief

Several critical vulnerabilities in Microsoft SharePoint are being actively exploited, targeting on-premises servers in government, education, healthcare, and large enterprises. The vulnerabilities allow unauthenticated attackers to bypass security controls and gain privileged access, leading to da…

unauthenticated access

Published: July 23, 2025

Downloadable IOCs: 0

Click here to see more Attack Reports