Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild

wiz.io | vulnerability | #rce | #vulnerability | #vpn | #0day | #ivanti | #cve-2025-0282

Summary

Ivanti Connect Secure 0days CVE-2025-0282 (unauthenticated RCE via stack buffer overflow) and CVE-2025-0283 have been exploited in the wild since December 2024; urgent patching guidance inside.
Published
Collected

original ↗

Related coverage

  1. Critical Vulnerabilities in Ivanti Exploited in-the-Wild: everything you need to know (wiz.io)
  2. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  3. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  4. Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days (blog.quarkslab.com)
  5. Security Flash: CISA Order to Disconnect Ivanti Products (bugcrowd.com)
  6. StyleSmuggler fix: patch the Magento and Adobe Commerce RCE (aikido.dev)

back