/
attack_type:credential_theft × cves:CVE-2025-55182 × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 2 fontes · 2 atualizações exploit público high

CL-UNK-1211 targets government Linux servers with apparently AI-generated scripts and the SysGoRAT Go RAT

Unit 42 (unit42.paloaltonetworks.com) tracks a campaign, CL-UNK-1211, that compromised government entities and state-affiliated Linux infrastructure between October 2025 and April 2026. Unit 42 published the research on October 15, and gbhackers.com covered it on October 22. The operators carried out reconnaissance, persistence and intell…

CVE-2025-55182 CVE-2021-4034 CL-UNK-1211 government
f5.com · exploit público critical

React2Shell (CVE-2025-55182) mass exploitation: RondoDox, credential stealers and reverse shells observed in December 2025

F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …

CVE-2025-55182 CVE-2017-9841 CVE-2023-1389 RondoDox