Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are known to be vulnerable.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
🚨 CVE-2025-2611 - critical 🚨 ICTBroadcast - Command Injection > The ICTBroadcast application unsafely passes session cookie data to shell processing,... 👾 https://cloud.projectdiscovery.io/library/CVE-2025-2611 @pdnuclei #NucleiTemplates #cve
Post summary
The post announces CVE‑2025‑2611—a critical command injection flaw in ICTBroadcast—providing a link to ProjectDiscovery’s library for further details.
NØX Echo Lineage Signal: CVE-2025-2611 Entity: ICTBroadcast Lineage: Public vulnerability → Observed exploitation Relationship: - ICTBroadcast → CVE-2025-2611 → Evidence → Operational Risk Current State: DISCLOSED, ACTIVE_EXPLOITATION Watch: - New infrastructure
NØØT Security Alerts Classification: Critical CVE: CVE-2025-2611 Product: ICTBroadcast Summary: VulnCheck reports real-world exploitation activity affecting ICTBroadcast / ICTBroadcast. Evidence: Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries Impact: The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 12 Oct 2025 Source: https://vulncheck.com/ #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #ICTBroadcast #CVE_2025_2611 #ActiveExploitation #Exploit