Ransomwarecritical
⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-10644+1 related CVE | Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability | 9.4 group max | 3% | ||
| CVE-2025-10858 | An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to… | 7.5 | <1% | ||
CVE-2025-20333+1 related CVE | Authenticated Buffer Overflow RCE in Cisco ASA/FTD VPN Web Server | 9.9 group max | 71% | KEV | KEV |
| CVE-2025-20352 | SNMP Stack Buffer Overflow in Cisco IOS and IOS XE Enables DoS and Root RCE | 7.7 | 42% | KEV | KEV |
| CVE-2025-20363 | A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software… | 9.0 | 7% | ||
| CVE-2025-23298 | NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency, where an attacker could cause a code injection issue | 7.8 | <1% | ||
| CVE-2025-27888 | Severity: medium (5.8) / important Server-Side Request Forgery (SSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')… | 5.8 | 2% | ||
| CVE-2025-34508 | Authenticated Path Traversal in ZendTo File Dropoff Functionality | 5.3 | 69% | ||
| CVE-2025-54831 | Apache Airflow 3 introduced a change to the handling of sensitive information in Connections | 6.5 | <1% | ||
| CVE-2025-59545 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem | 9.0 | <1% | ||
| CVE-2025-59689 | Command Injection in Libraesva Email Security Gateway Exploited in the Wild | 6.1 | 2% | KEV | KEV |
CVE-2025-6198+1 related CVE | There: An attacker can update the system firmware with a specially crafted image | 7.2 | <1% | ||
| CVE-2025-8014 | Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1… | 7.5 | <1% | ||
| CVE-2025-9844 | Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI | 8.8 | <1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | onlinewebshop.net | @BluCoder and on the clearnet through the domain darkcloud.onlinewebshop[.]net. It's advertised as the "best surveillance software for p |
From the original article
13 min read at thehackernews.com
Ravie Lakshmanan Sep 29, 2025 Cybersecurity / Hacking News Cybersecurity never stops—and neither do hackers. While you wrapped up last week, new attacks were already underway. From hidden software bugs to massive DDoS attacks and new ransomware tricks, this week’s roundup gives you the biggest security moves to know.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.