Author | Lightnews

BaseFortify.eu

@basefortify.bsky.social

46 followers 130 following 380 posts

🔐 BaseFortify.eu Stay ahead of cybersecurity threats with BaseFortify.eu – your trusted platform for vulnerability management and CVE reports. Tailored solutions for SMBs and enterprises. #CyberSecurity #VulnerabilityManagement #Exploit #CVE #InfoSec

Posts Media Videos Starter Packs

Pinned

BaseFortify.eu @basefortify.bsky.social · Oct 6

🚀 New video: Getting Started 01 — Add Assets & Review Threats

BaseFortify is an agentless vulnerability & risk platform that turns CVEs into a prioritized queue. Add assets, see KEV/EPSS matches and track. Includes A.I. Assistance + status workflow

Watch: youtu.be/VDai8Ts5Jz8

#CyberSecurity #CVE

Getting Started 01 — Add Assets & Review Threats (BaseFortify.eu)

YouTube video by BaseFortify

youtu.be

1 1 3

BaseFortify.eu @basefortify.bsky.social · 1d

🚨 CVE-2025-12779 — Amazon WorkSpaces (CVSS 8.8)
Auth tokens may leak to other local users on shared Linux systems. Upgrade to 2025.0+ to prevent session hijacking ⚠️

basefortify.eu/cve_reports/...

#CVE #Amazon #Workspace #TokenLeak #PatchNow

BaseFortify.eu @basefortify.bsky.social · 1d

🚨 CVE-2025-45378 — Dell CloudLink (CVSS 9.1)
Privileged users can break out of restricted shell and escalate to full system access via SSH. Patch ASAP to prevent takeover ⚠️

basefortify.eu/cve_reports/...

#CVE #Dell #PrivilegeEscalation #CloudSecurity #PatchNow

BaseFortify.eu @basefortify.bsky.social · 1d

🚨 CVE-2025-63601 — Snipe-IT (CVSS 9.9)
Authenticated users can upload malicious backups and run system commands. Update to 8.3.3+ to fix remote code execution ⚠️

basefortify.eu/cve_reports/...

#CVE #SnipeIT #RCE #OpenSource #CyberSecurity

BaseFortify.eu @basefortify.bsky.social · 2d

🔐 BaseFortify helps flag critical CVEs, track at-risk devices, and prioritize patches 🧠 Stay ahead of active exploits like BadCandy with smart tooling.

✨ basefortify.eu/register

#SMBsecurity #vulnmanagement #BaseFortify

Sign up at BaseFortify to start monitoring vulnerabilities instantly. Get free access to AI-powered CVE analysis, real-time alerts, and powerful dashboards.

basefortify.eu

BaseFortify.eu @basefortify.bsky.social · 2d

🕵️‍♂️ BadCandy drops a Lua web shell via Cisco’s Web UI vuln, CVE-2023-20198, letting attackers create admin users ⚙️ It's non-persistent but reinfections remain high through stolen creds.

📎 [Read more in post 1]

#vulnerabilities #Cisco #networksecurity

BaseFortify.eu @basefortify.bsky.social · 2d

🚨 New blog post: Over 14,000 Cisco routers are still infected with the BadCandy backdoor. Attackers are exploiting CVE-2023-20198 to gain full control 🛠️

🔗 basefortify.eu/posts/2025/1...

#cybersecurity #CVE202320198 #infosec

BaseFortify.eu @basefortify.bsky.social · 2d

🚨 CVE-2025-62225 — Sony Optical Disc Archive (CVSS 8.4)
Unquoted service path lets local users run code as SYSTEM. Update your Sony archive software now to prevent escalation.

🔗 basefortify.eu/cve_reports/...

#CVE #Sony #PrivilegeEscalation #CyberSecurity

BaseFortify.eu @basefortify.bsky.social · 2d

🔥 CVE-2025-64109 — Cursor AI Code Editor (CVSS 8.8)
Malicious MCP config triggers remote code execution when cloning a repo. Fixed in 2025.09.17-25b418f — update now.

🔗 basefortify.eu/cve_reports/...

#CVE #Cursor #RCE #SupplyChainSecurity

BaseFortify.eu @basefortify.bsky.social · 2d

🛑 CVE-2025-64151 — Roboticsware Products (CVSS 8.4)
Unquoted Windows service path lets attackers gain SYSTEM privileges. Patch Roboticsware BA-Panel6 and related tools.

🔗 basefortify.eu/cve_reports/...

#CVE #Roboticsware #PrivilegeEscalation #Infosec

Roboticsware UI screenshot with factory robots

BaseFortify.eu @basefortify.bsky.social · 8d

🎨 CVE-2025-10920 — GIMP ⚡
Malformed ICNS files can trigger out-of-bounds writes and remote code execution (CVSS 7.8). Avoid opening untrusted files until patched. 🚨

🔗 basefortify.eu/cve_reports/...

#CVE #GIMP #Linux #RCE #CyberSecurity #PatchNow

1 3

BaseFortify.eu @basefortify.bsky.social · 8d

🧰 CVE-2025-64131 — Jenkins SAML Plugin ⚡
Replay attack flaw (CVSS 7.5) allows attackers to impersonate users via captured authentication tokens. Update or disable SAML Plugin ≤4.583. 🔒

🔗 basefortify.eu/cve_reports/...

#CVE #Jenkins #DevSecOps #CyberSecurity #PatchNow

BaseFortify.eu @basefortify.bsky.social · 8d

🌐 CVE-2025-62229 — X.Org Xwayland ⚡
Use-after-free in Present extension can crash or lead to code execution (CVSS 7.3). Update to the latest X.Org Server or distro patch. 🧩

🔗 basefortify.eu/cve_reports/...

#CVE #Xorg #Linux #CyberSecurity #PatchNow

Yellow circle with a rough white “W”, representing Wayland/X.Org graphics stack

BaseFortify.eu @basefortify.bsky.social · 11d

Notice: CVE-2025-11447 in GitLab CE/EE allows unauthenticated GraphQL DoS via crafted JSON; fixed in 18.3.5, 18.4.3, 18.5.1. Update today 🛠️

basefortify.eu/cve_reports/...

#CVE #GitLab #DevSecOps #DoS #PatchNow #BaseFortify

BaseFortify.eu @basefortify.bsky.social · 11d

Heads up: CVE-2025-12220 — BusyBox 1.31.1 carries multiple known vulns used across routers and IoT stacks; update builds and vendors still bundling it. 🔧

basefortify.eu/cve_reports/...

#CVE #BusyBox #IoTSecurity #Linux #PatchNow #BaseFortify

BusyBox banner in dark blue with the word busybox

BaseFortify.eu @basefortify.bsky.social · 11d

🚨 Critical: CVE-2025-12275 in Azure Access Terminal (BLU-IC2/BLU-IC4) enables mail config tampering and command execution; versions through 1.19.5 affected. Patch now ⚠️

basefortify.eu/cve_reports/...

#CVE #Security #Azure #OT #PatchNow #BaseFortify

BaseFortify.eu @basefortify.bsky.social · 14d

⚠️ Active exploitation confirmed — NCSC and Digital Trust Center report attacks targeting WSUS servers (CVE-2025-59287).
Protect your systems and get tailored threat insights with BaseFortify.

Join now 👉 basefortify.eu/register
#Infosec #PatchNow #BaseFortify

Sign up at BaseFortify to start monitoring vulnerabilities instantly. Get free access to AI-powered CVE analysis, real-time alerts, and powerful dashboards.

basefortify.eu

BaseFortify.eu @basefortify.bsky.social · 14d

🚨 NCSC warns: A critical flaw in Microsoft WSUS (CVE-2025-59287) is being actively exploited. Microsoft has issued an emergency patch — apply it immediately. ⚠️

🔗 Read more:
basefortify.eu/posts/2025/1...

#CyberAlert #WindowsServer #Infosec #PatchNow #Cybersecurity #NCSC #VulnerabilityManagement

3 1 5

BaseFortify.eu @basefortify.bsky.social · 15d

The CVE has been around for over a month already: basefortify.eu/cve_reports/... but alas it is being actively exploited. Maybe 2/3 of webshops still need to apply the update

CVE-2025-54236 | BaseFortify

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this …

basefortify.eu

1 2

BaseFortify.eu @basefortify.bsky.social · 15d

💬 CVE-2025-62820 — Slack Nebula 🌐
A CIDR handling flaw (CVSS 4.9) allows arbitrary IPs inside Nebula networks — reducing trust boundaries. Update to 1.9.7+ today! 🚨

🔗 basefortify.eu/cve_reports/...

#CVE #Slack #Nebula #CyberSecurity #NetworkSecurity

BaseFortify.eu @basefortify.bsky.social · 15d

🍃 CVE-2025-11575 — MongoDB Atlas SQL ODBC Driver ⚡
Incorrect default permissions (CVSS 8.8) let attackers escalate privileges on Windows systems. Update your drivers now! 🔒

🔗 basefortify.eu/cve_reports/...

#CVE #MongoDB #CyberSecurity #PrivilegeEscalation #PatchNow

BaseFortify.eu @basefortify.bsky.social · 15d

🌍 CVE-2025-57870 — Esri ArcGIS Server 🚨
A critical SQL Injection flaw (CVSS 10.0) lets unauthenticated attackers run arbitrary SQL commands! Data theft or deletion possible — patch fast! 🚀

🔗 basefortify.eu/cve_reports/...

#CVE #Esri #ArcGIS #CyberSecurity #SQLInjection

BaseFortify.eu @basefortify.bsky.social · 17d

💾 CVE-2025-11949 — Digiwin EasyFlow
A missing authentication flaw (CVSS 8.7) allows attackers to grab DB admin credentials remotely. Business-critical exposure — update and rotate passwords now! 🧱

🔗 basefortify.eu/cve_reports/...

#CVE #Digiwin #CyberSecurity #DataProtection

BaseFortify.eu @basefortify.bsky.social · 17d

🔐 CVE-2025-12004 — MediaWiki Lockdown Extension
A critical permission flaw (CVSS 10.0) lets attackers bypass access controls in MediaWiki. This could lead to full privilege abuse and data exposure. Patch immediately!⚠️

🔗 basefortify.eu/cve_reports/...

#CVE #MediaWiki #OpenSource #CyberSecurity

BaseFortify.eu @basefortify.bsky.social · 18d

💾 CVE-2025-62577 — Fujitsu ETERNUS SF ⚙️
Incorrect permissions may leak DB credentials and lead to admin-level command execution 🧩
Secure your storage infrastructure today! 🛡️

🔗 basefortify.eu/cve_reports/...

#CVE #Fujitsu #ETERNUS #DataSecurity #CyberSecurity #PatchNow