PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-30066] Critical or Clickbait: GitHub Actions and Apache Tomcat RCE Vulnerabilities 2025

horizon3.ai | vulnerability | CVE-2025-30066 | #rce | #vulnerability-research | #apache
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Explore CVE-2025-30066 and CVE-2025-24813 with real-world data from Horizon3 to assess whether these vulnerabilities are truly critical or overhyped.
CVE
CVE-2025-30066
Published
Collected

Related coverage

incident · aikido.dev
Get the TL;DR: tj-actions/changed-files Supply Chain Attack
The tj-actions/changed-files GitHub Action, which is currently used in over 23,000 repositories, has been compromised, leaking secrets through workflow logs and impacting thousands of CI pipelines.
incident · wiz.io
GitHub Action tj-actions/changed-files supply chain attack: everything you need to know
Everything to know about the tj-actions/changed-files supply chain attack (CVE-2025-30066): how the compromise leaked CI secrets in public repo logs, attribution clues, and mitigation guidance.
vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
Back