Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181) ยท updates https://pwn.watch/i/advantive-veracore-cve-2024-57968 CVE-2024-57968: Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to unintended folders via upload.apsx. CVE-2025-25181: Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter. Added to CISA KEV on 2025-03-10. en Mon, 10 Mar 2025 00:00:00 GMT Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181): CISA added CVE-2024-57968 to the KEV catalog (due 2025-03-31). https://pwn.watch/i/advantive-veracore-cve-2024-57968 https://pwn.watch/i/advantive-veracore-cve-2024-57968#2025-03-10-b8a13bab Mon, 10 Mar 2025 00:00:00 GMT critical <p>Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181): CISA added CVE-2024-57968 to the KEV catalog (due 2025-03-31).</p> Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181): CISA added CVE-2025-25181 to the KEV catalog (due 2025-03-31). https://pwn.watch/i/advantive-veracore-cve-2024-57968 https://pwn.watch/i/advantive-veracore-cve-2024-57968#2025-03-10-21758a8c Mon, 10 Mar 2025 00:00:00 GMT critical <p>Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181): CISA added CVE-2025-25181 to the KEV catalog (due 2025-03-31).</p>