⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More
- CVEs
- CVE-2025-14174CVE-2025-43529CVE-2025-6218CVE-2025-55182CVE-2025-55183CVE-2025-55184CVE-2025-67779CVE-2025-8110CVE-2025-62221CVE-2025-59718CVE-2025-59719CVE-2025-10573CVE-2025-42880CVE-2025-55754CVE-2025-42928CVE-2025-9612CVE-2025-9613CVE-2025-9614CVE-2025-27019CVE-2025-27020CVE-2025-65883CVE-2025-64126CVE-2025-64127CVE-2025-64128CVE-2025-66570CVE-2025-63216CVE-2025-63224CVE-2025-13390CVE-2025-65108CVE-2025-58083CVE-2025-66489CVE-2025-12195CVE-2025-12196CVE-2025-11838CVE-2025-12026CVE-2025-64113CVE-2025-66567CVE-2025-24857CVE-2025-13607CVE-2025-13184CVE-2025-65106CVE-2025-67635CVE-2025-12716CVE-2025-8405CVE-2025-12029CVE-2025-12562
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-10573 | Stored Cross-Site Scripting in Ivanti Endpoint Manager Exposes Admin Sessions | 6.1 | 33% | ||
CVE-2025-11838+3 related CVEs | A memory corruption vulnerability in WatchGuard Fireware OS may allow an unauthenticated attacker to trigger a Denial of Service (DoS) condition in the Mobile… | 8.7 group max | <1% | ||
CVE-2025-12716+3 related CVEs | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that, under certain… | 8.7 group max | <1% | ||
| CVE-2025-13184 | Unauthenticated Telnet enablement to root on TOTOLINK X5000R | 9.8 | 20% | PoC | |
| CVE-2025-13390 | The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of… | 9.8 | 5% | PoC ×2 | |
| CVE-2025-13607 | A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL | 9.3 | <1% | ||
| CVE-2025-14174 | Out of Bounds Memory Access in Google Chromium ANGLE Affects Chrome, Edge, Opera | 8.8 | 55% | KEV | KEV |
| CVE-2025-24857 | Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322… | 7.6 | <1% | ||
CVE-2025-27020+1 related CVE | Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system | 9.8 | <1% | ||
| CVE-2025-42880 | Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module | 9.9 | 5% | ||
| CVE-2025-42928 | Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution | 9.1 | 10% | ||
| CVE-2025-43529 | Use-After-Free in Apple WebKit (Safari, iOS, macOS) Allows Arbitrary Code Execution | 8.8 | 26% | KEV | KEV |
| CVE-2025-55182 | Unauthenticated RCE in React Server Components (React2Shell) | 10.0 | 100% | KEVRansomwarePoC ×13 | KEV |
| CVE-2025-55183 | Unauthenticated source code exposure in React Server Components 19.x (incl. Next.js) | 5.3 | 64% | PoC | |
| CVE-2025-55184 | Unauthenticated Denial-of-Service in React Server Components 19.x and Next.js | 7.5 | 67% | ||
| CVE-2025-55754 | Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat | 9.6 | 10% | ||
| CVE-2025-58083 | General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the… | 9.2 | <1% | ||
| CVE-2025-59718 | Critical FortiCloud SSO Authentication Bypass in Fortinet FortiOS and FortiProxy | 9.8 | 68% | KEV | KEV |
| CVE-2025-59719 | Unauthenticated SAML Signature Bypass in Fortinet FortiWeb (FortiCloud SSO) | 9.8 | 29% | ||
| CVE-2025-6218 | Directory Traversal RCE in RARLAB WinRAR | 7.8 | 90% | KEVPoC ×2 | KEV |
| CVE-2025-62221 | Use-After-Free Local Privilege Escalation in Windows Cloud Files Mini Filter Driver | 7.8 | 3% | KEV | KEV |
| CVE-2025-63216 | The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices | 10.0 | <1% | PoC | |
| CVE-2025-63224 | The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices | 10.0 | <1% | PoC | |
| CVE-2025-64113 | Emby Server: Versions below 4.9.1.81 allow an attacker to gain full administrative access to an Emby Server (for Emby Server administration… | 9.3 | <1% | ||
| CVE-2025-64126 | An OS command injection vulnerability exists due to improper input validation | 10.0 | 2% | ||
| CVE-2025-64127 | An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input | 10.0 | 2% | ||
| CVE-2025-64128 | An OS command injection vulnerability exists due to incomplete validation of user-supplied input | 10.0 | 2% | ||
| CVE-2025-65106 | LangChain: A template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object… | 8.3 | <1% | ||
| CVE-2025-65108 | md-to-pdf is a CLI tool for converting Markdown files to PDF using Node.js and headless Chrome | 10.0 | <1% | ||
| CVE-2025-65883 | A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1.41) that allows a local network attacker to achieve Remote Code… | 8.4 | <1% | PoC | |
| CVE-2025-66489 | Cal.com is open-source scheduling software | 9.9 | <1% | PoC | |
| CVE-2025-66567 | The ruby-saml library is for implementing the client side of a SAML authorization | 9.3 | <1% | ||
| CVE-2025-66570 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library | 9.8 | <1% | PoC | |
| CVE-2025-67635 | Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing… | 7.5 | <1% | ||
| CVE-2025-67779 | It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case | 7.5 | 20% | ||
| CVE-2025-8110 | Actively Exploited Path Traversal RCE in Gogs (PutContents API) | 8.7 | 85% | KEVPoC ×5 | KEV |
CVE-2025-9613+2 related CVEs | A vulnerability was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on tag reuse after… | 6.5 group max | <1% |
From the original article
13 min read at thehackernews.com
Ravie Lakshmanan Dec 15, 2025 Hacking News / Cybersecurity If you use a smartphone, browse the web, or unzip files on your computer, you are in the crosshairs this week. Hackers are currently exploiting critical flaws in the daily software we all rely on—and in some cases, they started attacking before a fix was even ready.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.