Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2025-4660: Forescout SecureConnector RCE

netspi.com | vulnerability | CVE-2025-4660 | #rce | #red-team | #c2 | #vulnerability | #named-pipe | #cve-2025-4660 | #forescout | #secureconnector

Summary

CVE-2025-4660 lets a low-privileged attacker redirect Forescout SecureConnector to a rogue server via a misconfigured named pipe, turning the security agent into a C2 channel. Fixed in 11.3.7.
CVE
CVE-2025-4660
Published
Collected

original ↗

Related coverage

vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
Critical · vulnerability · github.com
CVE-2026-60004: Gitea diffpatch Git Hook Installation Remote Code Execution Exploit PoC
When self-registration is enabled, any unauthenticated attacker can create an account and immediately achieve host-level remote code execution on self-hosted Gitea instances.
blog · netspi.com
Throwback Thursday – A Guide to Configuring Throwback
Provides an automated installer and configuration guide for Throwback, a beaconing backdoor with a PHP/MySQL C2 server, covering ThrowbackLP setup and agent deployment for red team use.
tool · github.com
Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)
Affects all WordPress installations from version 4.7.0 through 7.1.0 without requiring credentials or interaction beyond opening a post. Administrators should verify upgrading to 7.1.1 or backported releases, and monitor server logs for suspicious comment payloads and unexpected plugin uploads.
tool · github.com
PoC for CVE-2026-67401: cPanel/WHM EmailTrack SQL Injection Leading to Root RCE
cPanel is widely used in shared web hosting environments. This vulnerability allows low-privileged tenants with mail permissions to achieve full host takeover as root. Administrators should urgently patch cPanel to the latest builds across all supported series.
research · github.com
[CVE-2024-6100] CyberKimi Benchmarks: Autonomous Exploitation Traces & Evidence
Provides verifiable, transparent evidence of advanced LLMs performing complex, multi-step binary and browser exploitation autonomously under strict ASLR and memory randomization defenses.
back