CVE-2025-2611

⚠️ Hackers are exploiting a bug in the Sneeit Framework plugin (CVE-2025-6389) to run code on servers and create admin accounts on WordPress sites. ⚠️ Separately, a flaw in ICTBroadcast (CVE-2025-2611) lets attackers use the BROADCAST cookie for unauthenticated remote sh

🚨 New plugin: ICTBroadcastRcePlugin (CVE-2025-2611). ICTBroadcast unauthenticated RCE vulnerability detection. Results: https://t.co/SeOrPCTM33 https://t.co/Jpy4qgAZBW

🚨 ICTBroadcast Security Advisory [—] Oct 22, 2025 Comprehensive security advisory regarding CVE-2025-2611 affecting ICTBroadcast versions 7.4 and earlier. Checkout our Threat Intelligence Platform: https://t.co/QuwNtEgYh1 https://t.co/QuwNtEgYh1 https://t.co/8cQTevbgqL

🚨 ICTBroadcast CVE-2025-2611 Exploitation [Critical] Oct 21, 2025 This report details the active exploitation of CVE-2025-2611, a critical command injection vulnerability affecting ICTBroadcast versions 7.4 and below. The vulnerability allows unauthenticated remote code... htt

🚨 ICTBroadcast Product Security Advisory [—] Oct 20, 2025 Comprehensive security advisory for ICTBroadcast, addressing CVE-2025-2611 and related vulnerabilities. Checkout our Threat Intelligence Platform: https://t.co/QuwNtEgYh1... https://t.co/9J69UmVtj5

🍪 A cookie that spawns a shell 💀 A critical flaw (CVE-2025-2611, CVSS 9.3) in ICTBroadcast autodialer software is under active exploitation. Attackers inject commands via the BROADCAST session cookie for unauthenticated remote code execution. No patch yet — check your

A cookie that spawns a shell 💀 A critical flaw (CVE-2025-2611, CVSS 9.3) in ICTBroadcast autodialer software is under active exploitation. Attackers inject commands via the BROADCAST session cookie for unauthenticated remote code execution. Cc @hacker

📌 استهدف المخترقون خوادم ICTBroadcast من خلال استغلال ثغرة في الكوكيز للحصول على وصول عن بُعد. الثغرة، المعروفة بـCVE-2025-2611، تتعلق بسوء تحقق المدخلات، مما يسمح

ICTBroadcast servers are actively exploited! 🚨 A critical RCE flaw (CVE-2025-2611) lets hackers get remote shell access via a cookie exploit. Patch now! https://t.co/zGUGsfyvBn #ICTBroadcast #RCE #CyberAttack

🍪 A cookie that spawns a shell 💀 A critical flaw (CVE-2025-2611, CVSS 9.3) in ICTBroadcast autodialer software is under active exploitation. Attackers inject commands via the BROADCAST session cookie for unauthenticated remote code execution. No patch yet — check your

Over the long weekend, @VulnCheckAI observed in-the-wild exploitation of CVE-2025-2611, an unauthenticated command injection vuln in ICTBroadcast. Payload + attacker behavior analysis here c/o @Junior_Baines https://t.co/RLEBJ8rMIX

CVE-2025-2611 Unauthenticated Remote Code Execution in ICTBroadcast Through Session Cookie Injection https://t.co/3CjGNPQ9P0

CVE-2025-2611 The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get execu… https://t.co/FRXosJaq3V

[CVE-2025-2611: CRITICAL] ICTBroadcast application exposes a critical vulnerability allowing unauthenticated remote code execution due to unsafe passing of session cookie data. Versions 7.4 and below are at risk.#cve,CVE-2025-2611,#cybersecurity https://t.co/XcLs5IK1gq https://t.