OSINT 탐지 내용 (32페이지) | OSINT 협회

OSINT 탐지 내용

총 330 건

Alleged Sale of Mass Exploit for FortiGate targeting CVE-2024-55591

Cc @DarkWebInformer

Alleged Sale of Mass Exploit for FortiGate targeting CVE-2024-55591 Cc @DarkWebInformer

CVE-2025-49493 : Akamai CloudTest Allows File Inclusion via XML External Entity (XXE) injection.

Cc @B1ackash

CVE-2025-49493 : Akamai CloudTest Allows File Inclusion via XML External Entity (XXE) injection. Cc @B1ackash

Becoming the trainer - Attacking Machine Learning (ML) training infrastructure

https://www.ibm.com/think/x-force/becoming-the-trainer-attacking-ml-training-infrastructure

Becoming the trainer - Attacking Machine Learning (ML) training infrastructure https://www.ibm.com/think/x-force/becoming-the-trainer-attacking-ml-training-infrastructure

CVE-2025-20309 : Critical Cisco Vulnerability in Unified CM Grants Root Access via Static Credentials

CVE-2025-20309 : Critical Cisco Vulnerability in Unified CM Grants Root Access via Static Credentials

CVE-2024-54085 (CVSS 10.0) : A critical vulnerability affecting the American Megatrends Inc. (AMI) MegaRAC SPx firmware package for baseboard management controllers (BMCs).

Attackers can bypass authentication in the Redfish Host Interface by modifying the X-Server-Addr or Host header in HTTP requests, tricking the BMC into believing requests originate from the host system itself.

**Exploitation does not require authentication.**

CVE-2024-54085 (CVSS 10.0) : A critical vulnerability affecting the American Megatrends Inc. (AMI) MegaRAC SPx firmware package for baseboard management controllers (BMCs). Attackers can bypass authentication in the Redfish Host Interface by modifying the X-Server-Addr or Host header in HTTP requests, tricking the BMC into believing requests originate from the host system itself. **Exploitation does not require authentication.**

......

Page 32 of 55