Malwarecritical
⚡ Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and More
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-1087 | Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code | 9.3 | 1% | ||
| CVE-2025-1907 | Instantel Micromate lacks authentication on a configuration port which could allow an attacker to execute commands if connected | 9.3 | <1% | ||
| CVE-2025-20260 | A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of… | 9.8 | 2% | PoC | |
| CVE-2025-23121 | Authenticated Domain-User RCE in Veeam Backup & Replication | 8.8 | 22% | ||
| CVE-2025-2783 | Sandbox Escape via Mojo Handle Flaw in Google Chrome on Windows (CVE-2025-2783) | 8.3 | 9% | KEV | KEV |
| CVE-2025-32896 | # Summary Unauthorized users can perform Arbitrary File Read and Deserialization attack by submit job using restful api-v1 | 6.5 | 1% | ||
CVE-2025-34511+2 related CVEs | Unrestricted File Upload RCE in Sitecore PowerShell Extensions (SPE) | 8.8 group max | 30% | PoC | |
| CVE-2025-3464 | A race condition vulnerability exists in Armoury Crate | 8.4 | <1% | ||
| CVE-2025-3600 | Unsafe Reflection DoS in Progress Telerik UI for ASP.NET AJAX (CVE-2025-3600) | 7.5 | 24% | ||
| CVE-2025-4322 | The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67 | 9.8 | 16% | ||
| CVE-2025-50054 | Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message… | 5.5 | <1% | ||
| CVE-2025-5071 | The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the… | 8.8 | <1% | ||
| CVE-2025-5309 | The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead… | 8.6 | <1% | ||
| CVE-2025-5349 | Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway | 8.7 | 5% | ||
| CVE-2025-5777 | Out-of-Bounds Read (Memory Overread) in Citrix NetScaler ADC and Gateway | 9.3 | 100% | KEVRansomware | KEV |
| CVE-2025-6018 | A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM) | 7.8 | 1% | PoC ×2 | |
| CVE-2025-6019 | A Local Privilege Escalation (LPE) vulnerability was found in libblockdev | 7.0 | <1% | ||
| CVE-2025-6020 | linux-pam: The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their… | 7.8 | <1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | cdnkit.io | ect arbitrary JavaScript from an external site named static.cdnkit[.]io. "On June 20, 2025, our security team identified a vulner |
| domain | tabukchamber.sa | attack was the compromise of a legitimate WordPress site ("tabukchamber[.]sa"), likely either via a vulnerable plugin or compromised c |
From the original article
13 min read at thehackernews.com
Not every risk looks like an attack. Some problems start as small glitches, strange logs, or quiet delays that don’t seem urgent—until they are. What if your environment is already being tested, just not in ways you expected?
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.