Herr K. (realLesar)
@reallesar.bsky.social
🛡️German Cyber defender by day, dragon tamer by night 🐉
In this vulnerability, a simple path traversal turns into remote admin-level execution, which is why CISA marked it as actively exploited.
🔗 CISA KEV entry: www.cisa.gov/news-events/...
🔗 Vendor advisory: fortiguard.fortinet.com/psirt/FG-IR-...
🔗 CISA KEV entry: www.cisa.gov/news-events/...
🔗 Vendor advisory: fortiguard.fortinet.com/psirt/FG-IR-...
CISA Adds One Known Exploited Vulnerability to Catalog | CISA
CISA has added one new vulnerability to its KEV Catalog, based on evidence of active exploitation.
www.cisa.gov
November 14, 2025 at 6:17 PM
In this vulnerability, a simple path traversal turns into remote admin-level execution, which is why CISA marked it as actively exploited.
🔗 CISA KEV entry: www.cisa.gov/news-events/...
🔗 Vendor advisory: fortiguard.fortinet.com/psirt/FG-IR-...
🔗 CISA KEV entry: www.cisa.gov/news-events/...
🔗 Vendor advisory: fortiguard.fortinet.com/psirt/FG-IR-...
ℹ️ Quick explainer: What is Privilege Escalation?
It’s when an attacker gains higher privileges than intended, for example, going from “no access” straight to full administrator rights.
It’s when an attacker gains higher privileges than intended, for example, going from “no access” straight to full administrator rights.
November 14, 2025 at 6:17 PM
ℹ️ Quick explainer: What is Privilege Escalation?
It’s when an attacker gains higher privileges than intended, for example, going from “no access” straight to full administrator rights.
It’s when an attacker gains higher privileges than intended, for example, going from “no access” straight to full administrator rights.
🛡 How to protect your systems?
Patch immediately!
Fixed in versions: 8.0.2+, 7.6.5+, 7.4.10+, 7.2.12+, 7.0.12+
Temporary mitigation:
- disable internet-facing admin interfaces
-allow management access only from trusted internal IPs/VPN
-review logs for suspicious admin actions or config changes
Patch immediately!
Fixed in versions: 8.0.2+, 7.6.5+, 7.4.10+, 7.2.12+, 7.0.12+
Temporary mitigation:
- disable internet-facing admin interfaces
-allow management access only from trusted internal IPs/VPN
-review logs for suspicious admin actions or config changes
November 14, 2025 at 6:17 PM
🛡 How to protect your systems?
Patch immediately!
Fixed in versions: 8.0.2+, 7.6.5+, 7.4.10+, 7.2.12+, 7.0.12+
Temporary mitigation:
- disable internet-facing admin interfaces
-allow management access only from trusted internal IPs/VPN
-review logs for suspicious admin actions or config changes
Patch immediately!
Fixed in versions: 8.0.2+, 7.6.5+, 7.4.10+, 7.2.12+, 7.0.12+
Temporary mitigation:
- disable internet-facing admin interfaces
-allow management access only from trusted internal IPs/VPN
-review logs for suspicious admin actions or config changes
🔍 What attackers can do?
The flaw lets remote attackers run arbitrary admin-level commands by abusing path traversal in the management interface.
Possible impact:
- full system compromise
- creation of rogue admin accounts
- manipulation of WAF rules
- lateral movement deeper into the network
The flaw lets remote attackers run arbitrary admin-level commands by abusing path traversal in the management interface.
Possible impact:
- full system compromise
- creation of rogue admin accounts
- manipulation of WAF rules
- lateral movement deeper into the network
November 14, 2025 at 6:17 PM
🔍 What attackers can do?
The flaw lets remote attackers run arbitrary admin-level commands by abusing path traversal in the management interface.
Possible impact:
- full system compromise
- creation of rogue admin accounts
- manipulation of WAF rules
- lateral movement deeper into the network
The flaw lets remote attackers run arbitrary admin-level commands by abusing path traversal in the management interface.
Possible impact:
- full system compromise
- creation of rogue admin accounts
- manipulation of WAF rules
- lateral movement deeper into the network
👉 Always verify booking links
👉 Don’t access travel portals via email or SMS
👉 Enable MFA on all accounts
Source: The Hacker News thehackernews.com/2025/11/russ...
#CyberSecurity #Phishing
👉 Don’t access travel portals via email or SMS
👉 Enable MFA on all accounts
Source: The Hacker News thehackernews.com/2025/11/russ...
#CyberSecurity #Phishing
Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data
Hackers built 4,300 fake travel sites in 2025 to steal hotel guests’ card data using real brand logos.
thehackernews.com
November 13, 2025 at 10:43 PM
👉 Always verify booking links
👉 Don’t access travel portals via email or SMS
👉 Enable MFA on all accounts
Source: The Hacker News thehackernews.com/2025/11/russ...
#CyberSecurity #Phishing
👉 Don’t access travel portals via email or SMS
👉 Enable MFA on all accounts
Source: The Hacker News thehackernews.com/2025/11/russ...
#CyberSecurity #Phishing
Eine gute Nachricht!
November 28, 2024 at 1:05 PM
Eine gute Nachricht!
Sehr gut. Und wenn die Politik ihre Förderungen weiter erhöhen würde, dann könnte die digitale Infrastruktur endlich schneller auf das Niveau einer Industrienation gehoben werden.
November 24, 2024 at 8:14 AM
Sehr gut. Und wenn die Politik ihre Förderungen weiter erhöhen würde, dann könnte die digitale Infrastruktur endlich schneller auf das Niveau einer Industrienation gehoben werden.
Mit diesem Bild direkt ein Lächeln in mein Gesicht gezaubert ☺️ Vielen Dank!
November 17, 2024 at 1:29 PM
Mit diesem Bild direkt ein Lächeln in mein Gesicht gezaubert ☺️ Vielen Dank!
Als Kind sollte ich es schriftlich probieren. Du brauchst dann halt unendlich Papier. Ich zeig es dir! Wir nähern uns der Null an und teilen durch eine immer kleinere Zahl.
1:1 = 1,0
1:0,1 = 10
1:0,01 = 100
1:0,000000001 = 1000000000
1:0 = 100000000000000000000000000... BIS IN DIE UNENDLICHKEIT!!!
1:1 = 1,0
1:0,1 = 10
1:0,01 = 100
1:0,000000001 = 1000000000
1:0 = 100000000000000000000000000... BIS IN DIE UNENDLICHKEIT!!!
July 30, 2024 at 8:00 PM
Als Kind sollte ich es schriftlich probieren. Du brauchst dann halt unendlich Papier. Ich zeig es dir! Wir nähern uns der Null an und teilen durch eine immer kleinere Zahl.
1:1 = 1,0
1:0,1 = 10
1:0,01 = 100
1:0,000000001 = 1000000000
1:0 = 100000000000000000000000000... BIS IN DIE UNENDLICHKEIT!!!
1:1 = 1,0
1:0,1 = 10
1:0,01 = 100
1:0,000000001 = 1000000000
1:0 = 100000000000000000000000000... BIS IN DIE UNENDLICHKEIT!!!
Danke für die Erinnerung. Muss diesen Monat noch mein Pensum vom letzten Monat nachholen. War da etwas faul ☹️
December 9, 2023 at 10:25 AM
Danke für die Erinnerung. Muss diesen Monat noch mein Pensum vom letzten Monat nachholen. War da etwas faul ☹️
Abbbbberrr ICH Musssss zuuuurrrrrr Arrrbbbeeiittt !!!1111elfelfelf
December 8, 2023 at 6:00 PM
Abbbbberrr ICH Musssss zuuuurrrrrr Arrrbbbeeiittt !!!1111elfelfelf