attack_type:credential_theft × cves:CVE-2025-55182 × has_exploit:true × limpar

Resultados

2 casos · pág. 1/1

unit42.paloaltonetworks.com · há 3d exploit público high

CL-UNK-1211 uses AI-generated payloads and SysGoRAT RAT to spy on government Linux servers

Unit 42 reports a campaign, tracked as CL-UNK-1211, that targeted government entities and state-affiliated infrastructure between October 2025 and April 2026. The cluster has not been attributed to a nation-state or to cybercrime. The attackers focused on Linux servers for reconnaissance, persistence and intelligence collection, including…

CVE-2025-55182 CVE-2021-4034 CL-UNK-1211 government

f5.com · há 3d exploit público critical

React2Shell (CVE-2025-55182) mass exploitation: RondoDox, credential stealers and reverse shells observed in December 2025

F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …

CVE-2025-55182 CVE-2017-9841 CVE-2023-1389 RondoDox