Unpatched XWiki Servers Exploited by RCE Flaw for Global Cryptomining Botnet
The critical CVE-2025-24893 eval injection flaw enables unauthenticated remote code execution, weaponizing enterprise infrastructure for illicit cryptomining and DDoS botnets.
Electron Integrity Bypass Allows Local Backdoor via V8 Snapshot Tampering
A critical Electron flaw (CVE-2025-55305) permits arbitrary code execution by tampering with V8 heap snapshots, bypassing all integrity checks.
