⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More
- CVEs
- CVE-2025-32462CVE-2025-32463CVE-2025-20309CVE-2025-49596CVE-2025-6554CVE-2025-5622CVE-2025-5623CVE-2025-5624CVE-2025-5630CVE-2025-49151CVE-2025-49152CVE-2025-49153CVE-2025-6463CVE-2025-36630CVE-2025-52891CVE-2025-48927CVE-2025-48928CVE-2024-58248CVE-2025-32897CVE-2025-47812CVE-2025-4404CVE-2025-5959CVE-2025-6191CVE-2025-6192CVE-2025-34067CVE-2025-1735
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-58248 | nopCommerce through 4.90.1 does not offer locking for order placement | 3.5 | <1% | PoC | |
| CVE-2025-1735 | In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying… | 7.5 | 1% | ||
| CVE-2025-20309 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could… | 10.0 | 1% | ||
CVE-2025-32463+1 related CVE | Local Privilege Escalation to Root in Sudo via Untrusted nsswitch.conf with --chroot | 7.8 group max | 55% | KEVPoC ×3 | KEV |
| CVE-2025-32897 | Deserialization of Untrusted Data vulnerability in Apache Seata (incubating) | 9.8 | 2% | ||
| CVE-2025-34067 | An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the… | 10.0 | 19% | ||
| CVE-2025-36630 | In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log… | 7.1 | <1% | ||
| CVE-2025-4404 | A privilege escalation from host to domain vulnerability was found in the FreeIPA project | 9.1 | 2% | ||
| CVE-2025-47812 | Unauthenticated RCE in Wing FTP Server via null-byte Lua injection | 10.0 | 94% | KEVPoC ×2 | KEV |
CVE-2025-48927+1 related CVE | Unauthenticated Heap Dump Disclosure in Smarsh TeleMessage TM SGNL | 5.3 group max | 12% | KEV | KEV |
| CVE-2025-49151 | The affected products could allow an unauthenticated attacker to generate forged JSON Web Tokens (JWT) to bypass authentication | 9.3 | <1% | ||
| CVE-2025-49152 | The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system | 8.7 | <1% | ||
| CVE-2025-49153 | The affected products could allow an unauthenticated attacker to overwrite files and execute arbitrary code | 9.3 | <1% | ||
| CVE-2025-49596 | Unauthenticated RCE in Anthropic MCP Inspector (versions below 0.14.1) | 9.4 | 43% | ||
| CVE-2025-52891 | ModSecurity: An empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is… | 6.5 | <1% | ||
CVE-2025-5623+3 related CVEs | A vulnerability was found in D-Link DIR-816 1.10CNB05 | 9.3 | 19% | PoC | |
| CVE-2025-5959 | Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page | 8.8 | 12% | ||
CVE-2025-6191+1 related CVE | Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML… | 8.8 | 10% | ||
| CVE-2025-6463 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file… | 8.8 | 12% | ||
| CVE-2025-6554 | Type Confusion in Google Chrome V8 Allows Arbitrary Read/Write (Actively Exploited) | 8.1 | 14% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | polyfill.io | d for carrying out a supply chain attack on the widely-used Polyfill[.]io JavaScript library. However, a new analysis from Silent P |
From the original article
13 min read at thehackernews.com
Everything feels secure—until one small thing slips through. Even strong systems can break if a simple check is missed or a trusted tool is misused. Most threats don’t start with alarms—they sneak in through the little things we overlook.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.