CVE-2025-0520 2

Vulnerability (CVE)

Show Doc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers

CVE-2025-0520, a 9.4-severity unrestricted file upload flaw in ShowDoc, has been actively exploited for the first time, with an attacker dropping a web shell on a U.S.-based honeypot running a vulnerable version. The bug, caused by improper file extension...

Zero-Days & Exploits

⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More

Cyber Risks The Hacker News

Vercel disclosed a breach in which attackers compromised the third-party AI tool Context.ai, used that access to take over an employee's Vercel Google Workspace account, and reached some Vercel environments and environment variables not marked as...

Data Breaches