Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
The RondoDox botnet is exploiting the unpatched XWiki remote code execution vulnerability CVE-2025-24893, which has a CVSS score of 9.8. Despite patches released in February 2025, many servers remain vulnerable, allowing RondoDox to infect additional devices and expand its network. The attack target...
Hackers are increasingly targeting newly disclosed vulnerabilities in third-party software to access cloud environments, with the time frame for such attacks decreasing significantly. Google reports a notable decline in the use of weak credentials and misconfigurations in the latter half of 2025, in...
A critical PHP vulnerability has been disclosed, prompting warnings from cybersecurity experts about potential exploits. The PHP Foundation acknowledged a delay in addressing this flaw, which could leave numerous smaller websites vulnerable for weeks. Mitchell Amador, CEO of Immunefi, described the...
The RondoDox botnet has been exploiting the React2Shell flaw (CVE-2025-55182) to infect vulnerable .js servers with malware and cryptominers. First documented by Fortinet in July 2025, the botnet targets multiple n-day vulnerabilities, including a critical RCE vulnerability in the XWiki Platform ide...
