Malwarecritical
⚡ Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain Backdoors
- CVEs
- CVE-2025-3928CVE-2025-1976CVE-2025-46271CVE-2025-46272CVE-2025-46273CVE-2025-46274CVE-2025-46275CVE-2025-23016CVE-2025-43864CVE-2025-21756CVE-2025-31650CVE-2025-46762CVE-2025-2783CVE-2025-23242CVE-2025-23243CVE-2025-23254CVE-2025-3500CVE-2025-32354CVE-2025-4095CVE-2025-30194CVE-2025-32817CVE-2025-29953CVE-2025-4148CVE-2025-4149CVE-2025-4150CVE-2025-2082CVE-2025-3927CVE-2025-24522CVE-2025-32011CVE-2025-35996CVE-2025-36558CVE-2025-35975CVE-2025-36521CVE-2025-2774CVE-2025-29471CVE-2025-32434
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-1976 | Admin-to-Root Privilege Escalation in Broadcom Brocade Fabric OS 9.1 | 8.6 | <1% | KEV | KEV |
| CVE-2025-2082 | Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability | 7.5 | <1% | ||
| CVE-2025-21756 | Linux kernel: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes both resulting from… | 7.8 | <1% | ||
| CVE-2025-23016 | FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to… | 9.3 | <1% | ||
CVE-2025-23242+1 related CVE | NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue | 9.8 group max | 2% | ||
| CVE-2025-23254 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the… | 8.8 | <1% | ||
| CVE-2025-24522 | KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server | 9.3 | <1% | ||
| CVE-2025-2783 | Sandbox Escape via Mojo Handle Flaw in Google Chrome on Windows (CVE-2025-2783) | 8.3 | 9% | KEV | KEV |
| CVE-2025-29471 | Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field | 8.3 | 7% | PoC ×2 | |
| CVE-2025-29953 | Deserialization of Untrusted Data vulnerability in Apache ActiveMQ NMS OpenWire Client | 9.8 | 2% | ||
| CVE-2025-30194 | When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an… | 7.5 | 2% | ||
| CVE-2025-31650 | Memory Leak DoS in Apache Tomcat via Invalid HTTP Priority Headers | 7.5 | 60% | ||
CVE-2025-32011+2 related CVEs | Authentication Bypass via Path Traversal in KUNBUS PiCtory | 9.3 group max | 27% | ||
| CVE-2025-32354 | In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/extension/graphql)… | 8.8 | <1% | ||
| CVE-2025-32434 | PyTorch: In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using… | 9.3 | 2% | ||
| CVE-2025-32817 | A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite… | 6.1 | <1% | ||
| CVE-2025-3500 | Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus | 9.8 | <1% | ||
CVE-2025-35975+1 related CVE | MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code | 8.6 | <1% | ||
| CVE-2025-3927 | Digigram's PYKO-OUT audio-over-IP (AoIP) web-server does not require a password by default, allowing any attacker with the target IP address to connect and… | 9.8 | <1% | ||
| CVE-2025-3928 | Actively Exploited Authenticated Webshell Flaw in Commvault Web Server | 8.7 | 3% | KEV | KEV |
| CVE-2025-4095 | Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries | 4.3 | <1% | ||
CVE-2025-4148+2 related CVEs | A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical | 8.7 | 2% | PoC | |
| CVE-2025-43864 | Cache-Poisoning DoS in React Router 7.2.0-7.5.1 via Request-Forced SPA Mode | 7.5 | 20% | ||
| CVE-2025-46271 | UNI-NMS-Lite is vulnerable to a command injection attack that could allow an unauthenticated attacker to read or manipulate device data | 9.3 | 2% | ||
| CVE-2025-46272 | WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host… | 9.3 | 1% | ||
| CVE-2025-46273 | UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to gain administrative privileges to all UNI-NMS managed devices | 9.3 | <1% | ||
| CVE-2025-46274 | UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to read, manipulate and create entries in the managed database | 9.3 | <1% | ||
| CVE-2025-46275 | WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing… | 9.3 | <1% | ||
| CVE-2025-46762 | Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code | 7.1 | 1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | breachforums.st | x) has been resurrected after a previous version hosted on "breachforums[.]st" was taken offline through a MyBB zero-day exploit as par |
| domain | breachforums.sx | mised in a zero-day attack on MyBB Software — BreachForums (breachforums[.]sx) has been resurrected after a previous version hosted on |
From the original article
13 min read at thehackernews.com
Ravie Lakshmanan May 05, 2025 Cybersecurity / Hacking News What if attackers aren't breaking in—they're already inside, watching, and adapting? This week showed a sharp rise in stealth tactics built for long-term access and silent control. AI is being used to shape opinions.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.