⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more
- CVEs
- CVE-2025-6543CVE-2025-5777CVE-2025-49825CVE-2025-6218CVE-2025-49144CVE-2025-27387CVE-2025-2171CVE-2025-2172CVE-2025-52562CVE-2025-27915CVE-2025-48703CVE-2025-23264CVE-2025-23265CVE-2025-36537CVE-2025-4563CVE-2025-2135CVE-2025-3509CVE-2025-36004CVE-2025-49853CVE-2025-37101CVE-2025-3699CVE-2025-6709CVE-2025-1533CVE-2025-3464CVE-2024-51978CVE-2024-51977
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-51977 | Unauthenticated Info Disclosure in Brother Printer Web/IPP Services | 5.3 | 73% | ||
| CVE-2024-51978 | An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device | 9.8 | 19% | ||
| CVE-2025-1533 | A stack buffer overflow has been identified in the AsIO3.sys driver | 8.2 | <1% | ||
| CVE-2025-2135 | Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page | 8.8 | 7% | ||
CVE-2025-2171+1 related CVE | Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute… | 7.8 group max | <1% | ||
CVE-2025-23264+1 related CVE | NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious… | 7.8 | <1% | ||
| CVE-2025-27387 | OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure | 7.4 | <1% | ||
| CVE-2025-27915 | Stored XSS in Zimbra Collaboration Suite Classic Web Client via Malicious ICS Files | 5.4 | 4% | KEVPoC | KEV |
| CVE-2025-3464 | A race condition vulnerability exists in Armoury Crate | 8.4 | <1% | ||
| CVE-2025-3509 | A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the… | 7.1 | 1% | ||
| CVE-2025-36004 | IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i | 8.8 | <1% | ||
| CVE-2025-36537 | Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows… | 7.0 | <1% | ||
| CVE-2025-3699 | Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A all versions, GB-50… | 9.8 | 1% | ||
| CVE-2025-37101 | HPE OneView for VMware vCenter (OV4VC): This vulnerability could be exploited allowing an attacker with read only privilege to cause Vertical Privilege Escalation… | 8.7 | <1% | ||
| CVE-2025-4563 | A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks | 2.7 | <1% | ||
| CVE-2025-48703 | Unauthenticated OS Command Injection RCE in CWP Control Web Panel | 9.0 | 100% | KEVPoC | KEV |
| CVE-2025-49144 | Notepad++: In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows… | 7.3 | <1% | ||
| CVE-2025-49825 | Teleport provides connectivity, authentication, access controls and audit for infrastructure | 9.8 | 8% | ||
| CVE-2025-49853 | ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and… | 9.3 | <1% | ||
| CVE-2025-52562 | Convoy: There is a directory traversal vulnerability in the LocaleController component of Performave Convoy. An unauthenticated remote… | 10.0 | 2% | ||
| CVE-2025-5777 | Out-of-Bounds Read (Memory Overread) in Citrix NetScaler ADC and Gateway | 9.3 | 100% | KEVRansomware | KEV |
| CVE-2025-6218 | Directory Traversal RCE in RARLAB WinRAR | 7.8 | 90% | KEVPoC ×2 | KEV |
| CVE-2025-6543 | Memory Buffer Overflow in Citrix NetScaler ADC and Gateway Exploited in the Wild | 9.2 | 10% | KEV | KEV |
| CVE-2025-6709 | The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC… | 7.5 | <1% |
From the original article
13 min read at thehackernews.com
Ever wonder what happens when attackers don’t break the rules—they just follow them better than we do? When systems work exactly as they’re built to, but that “by design” behavior quietly opens the door to risk? This week brings stories that make you stop and rethink what’s truly under control.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.