PULSEUnderground Intel

EN VIVO28señales / 24h

FEED

ransomtitan reclama a PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED · IN · Healthcareransomworldleaks reclama a St. Francis Xavier Catholic School System · US · Educationransomworldleaks reclama a PinnPACK · US · Manufacturingransomspacebears reclama a DoAllTech · KR · Technologyransomspacebears reclama a Anpra SAS · CO · Business Servicesransomspacebears reclama a BiesSse Group · IT · Business Servicesransomqilin reclama a Postres Reina · ES · Agriculture and Food Productionransomsafepay reclama a wdk.de · DE · Not Foundransomsafepay reclama a jaecklin-industrial.de · DE · Manufacturingransomsafepay reclama a lbb-treuhand.de · DE · Business Servicesransomsafepay reclama a timetex.de · DE · Business Servicesransomsafepay reclama a stroebel-gruppe.de · DE · Manufacturingransomsafepay reclama a industriesjaro.com · CA · Manufacturingransomsafepay reclama a cenesco.de · DE · Not Foundransomtitan reclama a PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED · IN · Healthcareransomworldleaks reclama a St. Francis Xavier Catholic School System · US · Educationransomworldleaks reclama a PinnPACK · US · Manufacturingransomspacebears reclama a DoAllTech · KR · Technologyransomspacebears reclama a Anpra SAS · CO · Business Servicesransomspacebears reclama a BiesSse Group · IT · Business Servicesransomqilin reclama a Postres Reina · ES · Agriculture and Food Productionransomsafepay reclama a wdk.de · DE · Not Foundransomsafepay reclama a jaecklin-industrial.de · DE · Manufacturingransomsafepay reclama a lbb-treuhand.de · DE · Business Servicesransomsafepay reclama a timetex.de · DE · Business Servicesransomsafepay reclama a stroebel-gruppe.de · DE · Manufacturingransomsafepay reclama a industriesjaro.com · CA · Manufacturingransomsafepay reclama a cenesco.de · DE · Not Found

← Todos los CVEs

CVE Watch5 jul 2026

CVE-2024-55398

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.

CVSS

6.5

Medio

EPSS

0.3%

p17

KEV

—

Exploit Today

5

0-100

Publicado: 6 ago 2025 · Última mod.: 5 jul 2026 · CWE-276

EPSS · 30d

0.2%EPSS · 30 días0.3%

2026-06-302026-07-20

Descripción técnica

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.

Referencias oficiales

gist.github.comhttps://gist.github.com/Jowu73/27fc259bf1355e1c557f0f54d630f9ca

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-409048.8 ALT

——26The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which allows embedded php code. As a result, remote code execution is achieved. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session by a user with the role of administrator.12d CVE-2022-289329.8 CRÍ

——24D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.12d CVE-2021-290058.8 ALT

——24Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server.12d CVE-2022-366409.8 CRÍ

——24influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deployed on a publicly accessible endpoint, we strongly recommend authentication be enabled. Otherwise the data will be publicly available to any unauthenticated user. The default settings do NOT enable authentication and authorization."12d CVE-2023-230599.8 CRÍ

——19An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default installation and allows attackers to execute arbitrary code and gain escalated privileges.12d CVE-2021-382686.5 MED

——16The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.6, and Liferay DXP 7.0 before fix pack 101, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 2 incorrectly sets default permissions for site members, which allows remote authenticated users with the site member role to add and duplicate forms, via the UI or the API.12d