{"vulnerability": "CVE-2024-25830", "sightings": [{"uuid": "31c8fe42-170b-4db2-96c9-8d33551b30be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-25830", "type": "seen", "source": "https://t.me/arpsyndicate/4955", "content": "#ExploitObserverAlert\n\nCVE-2024-25830\n\nDESCRIPTION: Exploit Observer has 27 entries in 5 file formats related to CVE-2024-25830. F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit could allow the attacker to extract the root and admin password.\n\nFIRST-EPSS: 0.000430000\nARPS-PRIORITY: 0.8632316", "creation_timestamp": "2024-05-20T21:41:50.000000Z"}, {"uuid": "2c22d03a-2c4a-41a0-bdbe-4497be8bbd06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-25830", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1934", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c DataCube3\nPOC  \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 CVE-2024-25830 (\u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430) \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 root \u0438 CVE-2024-25832 (\u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f reverse shell\n*\nPOC", "creation_timestamp": "2024-03-06T19:16:14.000000Z"}, {"uuid": "58464b71-2327-49e8-b514-f34f11d134da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-25830", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/5331", "content": "https://system32.in/post/16_cve-2024-25830-and-cve-2024-25832-datacube3-improper-access-control-and-unrestri.html", "creation_timestamp": "2024-03-08T10:54:48.000000Z"}]}