August 2025 CVE Landscape
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2007-0671 | Remote Code Execution in Microsoft Office Excel via Crafted Spreadsheet Files | — | 43% | KEV | — KEV |
| CVE-2013-3893 | Memory Corruption RCE in Microsoft Internet Explorer | — | 88% | KEV | — KEV |
| CVE-2024-8069 | Insecure Deserialization RCE in Citrix Session Recording | 5.1 | 21% | KEV | KEV |
| CVE-2025-57819 | Unauthenticated SQL Injection and Auth Bypass Leading to RCE in Sangoma FreePBX 15/16/17 | 10.0 | 95% | KEVPoC ×4 | KEV |
| CVE-2025-7775 | Actively Exploited Memory Overflow RCE/DoS in Citrix NetScaler ADC/Gateway | 9.2 | 21% | KEV | KEV |
| CVE-2025-7776 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is… | 8.8 | 7% | ||
| CVE-2025-8088 | WinRAR Path Traversal (CVE-2025-8088) Enables Arbitrary Code Execution | 8.4 | 94% | KEVRansomware | KEV |
| CVE-2025-8424 | Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP… | 8.7 | 3% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | campanole.com | . Once running, SnipBot connected to RomCom’s C2 at hxxps://campanole[.]com/TOfrPOseJKZ to download additional payloads. At the time |
| domain | gohazeldale.com | downloader, which then connected to a C2 server at hxxps://gohazeldale[.]com for further malicious operations. At the time of writing, |
| domain | melamorri.com | retrieved a file named install_module_x64.dll from hxxps://melamorri[.]com/iEZGPctehTZ . At the time of writing, the URL was inactiv |
| domain | srlaptop.com | tion to RomCom’s command-and-control (C2) server at hxxps://srlaptop[.]com/s/0.7.8/clarity[.]js . At the time of writing, the URL re |
| sha256 | 0517d413beb3e124e773d7ccc1983b226d6593d1f46a81ba7e79a8b48d6242fa | ded Future Malware Intelligence: Compliant.exe (RustyClaw): 0517d413beb3e124e773d7ccc1983b226d6593d1f46a81ba7e79a8b48d6242fa Msedge.dll (Mythic agent): e0cbe8f18315a2ee781de48565dc8a08 |
| sha256 | 8082956ace8b016ae8ce16e4a777fe347c7f80f8a576a6f935f9d636a30204e7 | 67f65c267120c894 ApbxHelper.exe (SnipBot backdoor variant): 8082956ace8b016ae8ce16e4a777fe347c7f80f8a576a6f935f9d636a30204e7 Sandbox analysis detected the RustyClaw sample as malicious |
| sha256 | e0cbe8f18315a2ee781de48565dc8a087a1564557c42c66067f65c267120c894 | 6d6593d1f46a81ba7e79a8b48d6242fa Msedge.dll (Mythic agent): e0cbe8f18315a2ee781de48565dc8a087a1564557c42c66067f65c267120c894 ApbxHelper.exe (SnipBot backdoor variant): 8082956ace8b016a |
| url | https://campanole.com/TOfrPOseJKZ | variant. Once running, SnipBot connected to RomCom’s C2 at hxxps://campanole[.]com/TOfrPOseJKZ to download additional payloads. At the time of writing, |
| url | https://gohazeldale.com | tingClaw downloader, which then connected to a C2 server at hxxps://gohazeldale[.]com for further malicious operations. At the time of writing, |
| url | https://melamorri.com/iEZGPctehTZ | wnloader retrieved a file named install_module_x64.dll from hxxps://melamorri[.]com/iEZGPctehTZ . At the time of writing, the URL was inactive. According |
| url | https://srlaptop.com/s/0.7.8/clarity.js | d connection to RomCom’s command-and-control (C2) server at hxxps://srlaptop[.]com/s/0.7.8/clarity[.]js . At the time of writing, the URL returns an error mess |
From the original article
12 min read at recordedfuture.com
In August 2025, Recorded Future’s Insikt Group ® identified eighteen high-impact vulnerabilities that should be prioritized for remediation. This represents a decrease from the 22 identified in July. However, the number of Very Critical vulnerabilities has remained the same (16) compared to July.
recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.