{"uuid": "b9e99758-d11a-4d54-b16d-8cee3b088c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0994", "type": "seen", "source": "https://t.me/crackvaultde/1074", "content": "Trimble Cityworks Zero-Day Exploitation by Chinese Threat Actors\n\nChinese threat group UAT-6382 exploited a deserialization vulnerability (CVE-2025-0994) in Cityworks to deploy web shells and backdoors. Municipal systems in the U.S. were targeted, enabling long-term access to critical utility and asset management data.\n\nFor Details:\nTG Channel: @crackvaultde\nTG Group: @crack_vault_group\nWebsite: crackvault.de", "creation_timestamp": "2026-07-21T00:00:18.313049Z"}