Skip to content

CVE-2025-61757

In 3 briefs, most recently 25 November 2025. RSS for this tag

Published 2025-10-21

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability.

Added 2025-11-21

Coverage in DanSec Daily

Tue 25 Nov The Oracle EBS extortion campaign hitting Cox, Canon and Mazda, the Shai-Hulud npm malware wave, and Harvard's voice phishing breach, plus new zero-days.
Sat 22 Nov The Salesforce Gainsight breaches by ShinyHunters, the CrowdStrike insider leak, and the actively exploited Oracle Identity Manager flaw (CVE-2025-61757).
Fri 21 Nov Salesforce OAuth data access via Gainsight, Italy's FS Italiane breach through Almaviva, and Operation WrtHug compromising 50,000+ Asus routers.