Forwarded by Taiwan Computer Network Crisis Response and Coordination Center (TWCERTCC-200-202509-00000001)

[Description]
1. [CVE-2025-48384] Git Link Following Vulnerability (CVSS v31: 8.0)
[Exploited by ransomware: Unknown] Git has a link following vulnerability due to inconsistent handling of carriage return characters in configuration files.
[Affected Platforms] Please refer to the official list of affected versions.
https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9

2. [CVE-2024-8068] Citrix Session Recording Improper Privilege Management Vulnerability (CVSS v3.1: 8.0)
[Exploited by Ransomware: Unknown] Citrix Session Recording contains an improper privilege management vulnerability that could result in privilege escalation to the NetworkService account's access level.
[Affected Platforms] Please refer to the official list of affected versions.

https://support.citrix.com/support-home/home

3. [CVE-2024-8069] Citrix Session Recording Deserialization of Untrusted Data Vulnerability (CVSS v3.1: 8.0)

[Exploited by Ransomware: Unknown] An untrusted data deserialization vulnerability in Citrix Session Recording could allow limited remote code execution with the NetworkService account's privileges.
[Affected Platforms] Please refer to the official list of affected versions.

https://support.citrix.com/support-home/home

4. [CVE-2025-7775] Citrix NetScaler Memory Overflow Vulnerability (CVSS v3.1: 9.8)

[Exploited by Ransomware: Unknown] A memory overflow vulnerability exists in Citrix NetScaler ADC and NetScaler Gateway, potentially leading to remote code execution and/or denial of service.
[Affected Platforms] Please refer to the official list of affected versions.

https://support.citrix.com/support-home/home

5. [CVE-2025-57819] Sangoma FreePBX Authentication Bypass Vulnerability (CVSS v4.0: 10.0)

[Exploited by Ransomware: Unknown] Sangoma FreePBX has an authentication bypass vulnerability. Due to insufficient validation and sanitization of user-supplied input, an attacker can access the FreePBX management interface without authentication, potentially causing arbitrary database operations and remote code execution.
[Affected Platforms] Please refer to the official affected versions listed.

https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h

[Affected Platforms]
For details, please refer to the affected platforms in the description section.

[Recommended Actions]
1. [CVE-2025-48384] A fix has been released for this vulnerability. Please update to the relevant version.

https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9

2. [CVE-2024-8068] A fix has been released for this vulnerability. Please update to the relevant version.

https://support.citrix.com/support-home/home

3. [CVE-2024-8069] A fix has been released for this vulnerability. Please update to the relevant version.
https://support.citrix.com/support-home/home

4. [CVE-2025-7775] A fix has been released for this vulnerability. Please update to the relevant version.

https://support.citrix.com/support-home/home

5. [CVE-2025-57819] A fix has been released for this vulnerability. Please update to the relevant version.

https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h