⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-53298 | Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export | 9.8 | <1% | ||
| CVE-2025-20286 | A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE)… | 9.8 | 1% | ||
CVE-2025-21479+2 related CVEs | Incorrect Authorization in Qualcomm GPU Firmware Across Multiple Chipsets | 8.6 group max | <1% | KEVPoC ×2 | KEV |
| CVE-2025-22243 | VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation | 7.5 | <1% | ||
| CVE-2025-25022 | IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the… | 8.8 | <1% | ||
| CVE-2025-37093 | An authentication bypass vulnerability exists in HPE StoreOnce Software | 9.8 | 1% | ||
| CVE-2025-48866 | ModSecurity: Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The… | 7.5 | <1% | PoC | |
| CVE-2025-49113 | Authenticated PHP Object Deserialization RCE in Roundcube Webmail | 8.8 | 99% | KEVPoC ×2 | KEV |
| CVE-2025-5419 | Actively Exploited Out-of-Bounds Read/Write in Chromium V8 (Chrome, Edge) | 8.8 | 7% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | woocommerce-check.com | min credentials and exfiltrate them to an external server ("woocommerce-check[.]com") that masquerades as WooCommerce, an open-source e-comme |
From the original article
13 min read at thehackernews.com
Ravie Lakshmanan Jun 09, 2025 Cybersecurity / Hacking News Behind every security alert is a bigger story. Sometimes it’s a system being tested. Sometimes it’s trust being lost in quiet ways—through delays, odd behavior, or subtle gaps in control.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.