Diamond Member ThaHaka 0 Posted November 15, 2025 Diamond Member Share Posted November 15, 2025 This is the hidden content, please Sign In or Sign Up The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbitrary code execution. The vulnerability in question is CVE-2025-24893 (CVSS score: 9.8), an eval injection bug that could allow any guest user to perform arbitrary remote code execution through a request to the "/bin/get/Main/ This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/288556-h4ckn3wsrondodox-exploits-unpatched-xwiki-servers-to-pull-more-devices-into-its-botnet/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.