{"vulnerability": "CVE-2024-25832", "sightings": [{"uuid": "11b74af5-b87d-4cbf-83c4-3f4394b7e582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-25832", "type": "seen", "source": "https://t.me/arpsyndicate/4953", "content": "#ExploitObserverAlert\n\nCVE-2024-25832\n\nDESCRIPTION: Exploit Observer has 27 entries in 5 file formats related to CVE-2024-25832. F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.\n\nFIRST-EPSS: 0.000430000\nARPS-PRIORITY: 0.8632316", "creation_timestamp": "2024-05-20T21:29:56.000000Z"}, {"uuid": "129326fd-d0eb-4444-a09d-fe2b3a6a3dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-25832", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6731", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC Script for CVE-2024-25832: Exploit chain reverse shell, information disclosure (root password leak) + unrestricted file upload in DataCube3\nURL\uff1ahttps://github.com/0xNslabs/CVE-2024-25832-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-03-06T04:16:31.000000Z"}, {"uuid": "d6a9f461-02af-475c-9df1-ed1552ae90db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-25832", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/5331", "content": "https://system32.in/post/16_cve-2024-25830-and-cve-2024-25832-datacube3-improper-access-control-and-unrestri.html", "creation_timestamp": "2024-03-08T10:54:48.000000Z"}, {"uuid": "2cfae79b-bb3a-43a3-a30e-ef123c2702ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-25832", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1934", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c DataCube3\nPOC  \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 CVE-2024-25830 (\u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430) \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 root \u0438 CVE-2024-25832 (\u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f reverse shell\n*\nPOC", "creation_timestamp": "2024-03-06T19:16:14.000000Z"}]}