@basefortify.bsky.social
π BaseFortify.eu Stay ahead of cybersecurity threats with BaseFortify.eu β your trusted platform for vulnerability management and CVE reports. Tailored solutions for SMBs and enterprises. #CyberSecurity #VulnerabilityManagement #Exploit #CVE #InfoSec
π New video: Getting Started 01 β Add Assets & Review Threats
BaseFortify is an agentless vulnerability & risk platform that turns CVEs into a prioritized queue. Add assets, see KEV/EPSS matches and track. Includes A.I. Assistance + status workflow
Watch: youtu.be/VDai8Ts5Jz8
#CyberSecurity #CVE
Stay ahead of exploits like CVE-2025-61882 with BaseFortifyβs asset watch lists and AI Assistant.
Register your assets today and get automatic alerts for new CVEs affecting your environment.
π basefortify.eu/register
#BaseFortify #VulnerabilityManagement #CVE
The flaw allows remote, unauthenticated RCE in Oracle E-Business Suite (12.2.3β12.2.14).
Threat actors, including Cl0p, are exploiting it to steal sensitive business data.
π Read: basefortify.eu/posts/2025/1...
#InfoSec #Vulnerability #ThreatIntel
The Oracle logo over a dark red background with digital warning icons, network symbols, and cybersecurity imagery representing data breach and system alerts
π¨ Critical Oracle EBS flaw exploited for extortion (CVE-2025-61882)
Attackers are actively abusing this zero-day in Oracle E-Business Suite for data theft and ransom campaigns.
Read the full article on BaseFortify:
π basefortify.eu/posts/2025/1...
#Oracle #CyberSecurity #CVE202561882 #BaseFortify
π New video: Getting Started 01 β Add Assets & Review Threats
BaseFortify is an agentless vulnerability & risk platform that turns CVEs into a prioritized queue. Add assets, see KEV/EPSS matches and track. Includes A.I. Assistance + status workflow
Watch: youtu.be/VDai8Ts5Jz8
#CyberSecurity #CVE
I am well into reading Issue #7 and I thoroughly enjoy it. Well done @pagedout.bsky.social!
04.10.2025 14:41 β π 1 π 0 π¬ 0 π 0
MinIO storage wallpaper with cloud and data graphics
π MinIO Java SDK flaw leaks secrets via unsafe XML.
Credentials & configs exposed β fixed in v8.6.0.
basefortify.eu/cve_reports/...
#MinIO #CloudStorage #Java #DataSecurity #CyberSecurity #CVE
Abstract Linux security wallpaper with sudo text
π¨ Critical Sudo flaw: local users can gain ROOT.
Impacts Ubuntu, Debian, SUSE, Red Hat & more.
Patch now to prevent takeover.
basefortify.eu/cve_reports/...
#Linux #Sudo #PrivilegeEscalation #CyberSecurity #CVE
Red Hat themed wallpaper with abstract server design
β οΈ Red Hat OpenShift AI bug: low-privileged users can escalate to cluster admin.
Risk of data theft & full infra compromise.
basefortify.eu/cve_reports/...
#RedHat #OpenShift #CloudSecurity #AI #CyberSecurity #CVE
MinIO storage wallpaper with cloud and data graphics
π MinIO Java SDK flaw leaks secrets via unsafe XML.
Credentials & configs exposed β fixed in v8.6.0.
basefortify.eu/cve_reports/...
#MinIO #CloudStorage #Java #DataSecurity #CyberSecurity #CVE
Abstract Linux security wallpaper with sudo text
π¨ Critical Sudo flaw: local users can gain ROOT.
Impacts Ubuntu, Debian, SUSE, Red Hat & more.
Patch now to prevent takeover.
basefortify.eu/cve_reports/...
#Linux #Sudo #PrivilegeEscalation #CyberSecurity #CVE
EU flag with the word AI superimposed
LLM security, minus the hype: what actually breaks (Triton, vLLM, Transformers, LangChain) and how to fix it. π
Patch cadence, π§° safer tool-calling, π retrieval hygieneβpractical steps, not legalese.
basefortify.eu/posts/2025/0...
#AI #LLM #Security #AIAct #Cybersecurity
Canon red logo on a dark background
π΅ Canon (CVE-2025-9903)
π¨ Canon Generic Plus printer drivers vulnerable to out-of-bounds write in print processing. Could lead to crashes or code execution.
π Read more: basefortify.eu/cve_reports/...
Apeman logo with orange helmet icon and text
π Apeman (CVE-2025-11126)
π¨ Apeman ID71 devices have hard-coded credentials in /system.ini. Exploitable remotely, with public exploits already available. Vendor has not responded.
π Read more: basefortify.eu/cve_reports/...
Red ABB logo glowing near water at night
π΄ ABB (CVE-2025-10504)
π¨ ABB Terra AC wallbox (β€ v1.8.33) contains a heap-based buffer overflow flaw. Attackers could exploit this to crash or run malicious code.
π Read more: basefortify.eu/cve_reports/...
Cisco storefront sign with fiber-light streaks
β οΈ Cisco IOS XE: insufficient input validation in the HTTP API enables command injection that executes with root privileges (authenticated admin or via crafted link to a logged-in admin).
π basefortify.eu/cve_reports/...
#Cisco #IOSXE #NetSec
NVIDIA green eye logo on black backdrop
πΌοΈ GPU risk: nvJPEG in NVIDIA CUDA Toolkit can be crashed by malformed image dimensions, causing an out-of-bounds write β DoS and possible data leakage for local users handling images.
π basefortify.eu/cve_reports/...
#NVIDIA #CUDA #Security
Chrome logo on grey abstract background
π¨ Chrome users: high-severity V8 type confusion lets a crafted page trigger heap corruption and potential code execution. Patch to 140.0.7339.185 or later ASAP.
π basefortify.eu/cve_reports/...
#Chrome #V8 #PatchNow
Officer 0466 needs to up their game a bit!
24.09.2025 14:24 β π 0 π 0 π¬ 0 π 0I was thinking of picking up Practical Purple Teaming. In the past I have played around with Caldera and our dev team moves at such a speed we cannot wait for pentesters. We need to do that ourselves. Your review settles it, I will get this book!
23.09.2025 12:31 β π 1 π 0 π¬ 0 π 0I will be interested to know where his OPSEC failed, we shall see
23.09.2025 12:28 β π 0 π 0 π¬ 1 π 0Sounds very exciting, I have no idea what it means or how it works. Maybe I got on the wrong foot but I was thinking of the Observer-effect...
23.09.2025 12:25 β π 0 π 0 π¬ 0 π 0
π‘ Streaming gear exposure: Blackmagic Web Presenter HD 3.3 leaks model, IDs, network settings and stream credentials over unauthenticated Telnet on 9977. Could enable stream hijack and recon. Disable Telnet and update.
π basefortify.eu/cve_reports/...
#Blackmagic #InfoLeak #Broadcast
FlowiseAI logo with flowing gradient wave
π§ͺ GenAI tooling risk in Flowise. CustomMCP node evaluates user input with Function() inside convertToValidJSONString, enabling remote code execution with full Node.js privileges. Upgrade to 3.0.6 and audit templates.
π basefortify.eu/cve_reports/...
#Flowise #RCE #GenAI
SolarWinds logo over world map silhouette
π¨ Patch bypass alert for SolarWinds Web Help Desk. Unauth attackers can run commands via AjaxProxy deserialization β a new bypass of CVE-2024-28988 (itself a bypass of 28986). Patch fast and lock down access.
π basefortify.eu/cve_reports/...
#SolarWinds #RCE #Deserialization
Why BaseFortify? π―
β’ Match components β CVEs β threats with mitigation steps
β’ Annotated CVEs + Q&A + AI chat π€
β’ Attack graph to prioritize fixes πΈοΈ
Try it FREE: basefortify.eu/register
#CyberSecurity #SMB #VulnerabilityManagement πΌ
7 CVEs at a glance: path traversal, LDAP injection, TLS not verified to Elasticsearch, stale reset tokens, no email rate limit, divide-by-zero, and an .unwrap() panic. Upgrade β₯1.1.2, enforce TLS verification, add rate limits, and monitor LDAP changes. π‘οΈ
#BlueTeam #SecOps #InfoSec #RiskManagement π
CISA wallpaper
CISA Thoriumβs CVE burst: what it means & how to respond fast. Not a meltdown, but guardrails were missingβfixes landed quickly. π§―π§
basefortify.eu/posts/2025/0...
#CISA #Thorium #CVE #AppSec π
One Identity by Quest logo on white background
π One Identity OneLogin: CVE-2025-59363 exposed OIDC client secrets via Apps API v2. Rotate secrets, review logs, and upgrade to 2025.3.0+ to block abuse. β
π basefortify.eu/cve_reports/...
#IdentitySecurity #SSO #CyberSecurity
Hugging Face logo over neural network nodes background
β οΈ Hugging Face Transformers: CVE-2025-6051 ReDoS via EnglishNormalizer.normalize_numbers() β long digit strings spike CPU, DoS NLP/TTS. Update 4.53.0; add input limits/timeouts. π‘οΈ
π basefortify.eu/cve_reports/...
#MLSec #AppSec #NLP
