Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset

July 3, 2025

ESET Research analyzes Gamaredon’s updated cyberespionage toolset, new stealth-focused techniques, and aggressive spearphishing operations observed throughout 2024

Source: Read More

Previous ArticleCisco Issues Urgent Patch for Critical Unified CM Vulnerability (CVE-2025-20309)

Next Article Full-Stack Techies vs Toptal: Which Is Better for React.js Outsourcing?

Highlights

CVE-2025-34045 – WeiPHP WeChat Public Account Path Traversal Vulnerability

June 26, 2025

CVE ID : CVE-2025-34045

Published : June 26, 2025, 4:15 p.m. | 51 minutes ago

Description : A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint, where insufficient input validation allows unauthenticated remote attackers to perform directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sensitive information such as configuration files and source code.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset

GPT-5 is Coming: Revolutionizing Software Testing

Win the Accessibility Game: Combining AI with Human Judgment

libpeer is a portable WebRTC library for IoT/embedded devices

CVE-2024-6198 – “TP-Link Modem Lighttpd SNORE Stack Buffer Overflow Vulnerability”

CVE-2025-37784 – Linux Kernel Ti Net IEP NULL Pointer Dereference Vulnerability

CVE-2025-46836 – Net-tools Unvalidated Stack Buffer Overflow

CVE-2025-34045 – WeiPHP WeChat Public Account Path Traversal Vulnerability

CVE-2025-3850 – YXJ2018 SpringBoot-Vue-OnlineExam Remote Authentication Bypass Vulnerability

Apple Intelligence delay: A clash of two architectures and trivial AI features fell short of standards and expectations

CVE-2025-50693 – PHPGurukul Online DJ Booking Management System IDOR Vulnerability

Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset

Related Posts