CFADVISORY-CL-application-security-waf-waf-release-2025-07-21

Exploit Intelligence

• sentinel-aidefense/CVE-2025-5777 (github-poc-repo)
• sentinel-aidefense/CVE-2025-5777 (github-poc)
• This is a Python-based exploit for CVE-2025-49493, which affects Akamai CloudTest versions before 60 2025.06.02 (12988). The vulnerability allows for XML External Entity (XXE) injection through the SOAP service endpoint. (github-poc-repo)
• CVE-2025-47812 Poc for wingdata HTB (github-poc-repo)
• CVE-2025-47812 Poc for wingdata HTB (github-poc)
• LucasOneZ/CVE-2023-4966 (github-poc-repo)
• CVE-2023-4966-exploit (github-poc-repo)
• Threat intelligence and incident response case study on LockBit ransomware exploiting CVE-2023-4966 (Citrix Bleed). (github-poc-repo)
• CitrixBleed2 powershell version (github-poc-repo)
• CVE-2025-47812: Wing FTP Server 7.4.3 UnauthN RCE in sh (github-poc-repo)

…and 99 more exploits

Timeline

• Dec 1, 2023 PoC Published
• Jul 21, 2025 CVE Published

References

• WAF - WAF Release - 2025-07-21 advisory