SOC-Investigation-CVE-2024-49138

🛡️ Report di Indagine SOC: Sfruttamento di CVE-2024-49138 📌 Sintesi Esecutiva Titolo dell'Avviso: SOC335 - Rilevato sfruttamento di CVE-2024-49138 Severità: Alta Host di Destinazione: Victor 172.16.17.207 Sistema Operativo: Windows 10 Utente Principale: letsdefend Verdetto: True Positive Attività...

CVE-2026-78887

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high...

CVE-2026-78886

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated...

CVE-2026-78887

An incorrect authorization flaw was identified in liketrek TREK versions up to 3.0.22 , affecting the validateShareTokenForAsset function within the Journey Photo Proxy component. A remote attacker, without authentication, can manipulate the share token validation logic to gain partial access to ...

EUVD-2026-65474

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated...

CVE-2026-78886 liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated...

CVE-2026-78886 liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated...

CVE-2026-78885

CVE-2026-78885 affects liketrek TREK up to version 3.0.22 , specifically the findOrCreateUser function in server/src/services/oidcService.ts (OIDC Service component). The vulnerability is an improper authentication flaw that can be exploited remotely, though it requires a high level of attack com...

CVE-2026-78885 liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

patch-CVE-2026-05890

Patch: CVE-2026-05890 Dettagli della vulnerabilità CVE : CVE-2026-05890 Prodotto : Juniper Junos Descrizione : Autenticazione non corretta Severità : Alta Stato della patch: DISTRIBUITA...

patch-CVE-2026-06555

Patch: CVE-2026-06555 Dettagli della vulnerabilità CVE : CVE-2026-06555 Prodotto : SonicWall SMA Descrizione : Path traversal Gravità : Alta Stato della patch: DISTRIBUITA...

patch-CVE-2026-09881

Patch: CVE-2026-09881 Dettagli della vulnerabilità CVE : CVE-2026-09881 Prodotto : Atlassian Confluence Descrizione : Template injection RCE Gravità : Alta Stato della patch: DEPLOYED...

patch-CVE-2026-19843

Patch: CVE-2026-19843 Dettagli della vulnerabilità CVE : CVE-2026-19843 Prodotto : Cisco IOS XE Descrizione : Escalation dei privilegi tramite web UI Gravità : Alta Stato della patch: APPLICATA...

How-to-Patch-CVE-2025-32709

CVE-2025-32709 भेद्यता को कैसे पैच करें CVE-2025-32709 के लिए वास्तविक दुनिया का पैचिंग वर्कफ़्लो। हॉटफ़िक्स इंस्टॉल से लेकर SIEM अलर्ट मान्यकरण तक—यह रिपॉज़िटरी स्क्रीनशॉट, कमांड और डिटेक्शन लॉजिक के साथ हर चरण का दस्तावेजीकरण करती है। Wazuh भेद्यता पहचान डैशबोर्ड का स्क्रीनशॉट जो Windows 10 Pro...

SOC_287

SOC287 - Lettura Arbitraria di File su Checkpoint Security Gateway CVE-2024-24919 Panoramica Questo repository contiene un'analisi dettagliata della vulnerabilità CVE-2024-24919 che colpisce i Check Point Security Gateway. La vulnerabilità consente la lettura arbitraria di file, esponendo...

Cleo Harmony < 5.8.0.21 - Arbitary File Read

In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution. id: CVE-2024-50623 info: name: Cleo Harmony 5.8.0.21 - Arbitary File Read author: DhiyaneshDK severity: high...

Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. id: CVE-2024-7399 info: name: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution author:...

MeteoBridge <= 6.1 - Remote Code Execution

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.This web interface exposes an endpoint that is vulnerable to command injection.Remote...

Microsoft Exchange - Authentication Bypass

Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...

Rails File Content Disclosure

Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...