https://pwn.watch/t/simplehelp Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 13 Feb 2025 00:00:00 GMT https://pwn.watch/i/simplehelp-cve-2024-57727 https://pwn.watch/i/simplehelp-cve-2024-57727 Thu, 13 Feb 2025 00:00:00 GMT critical <p>SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords. Added to CISA KEV on 2025-02-13.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2025-02-13: CISA added CVE-2024-57727 to the KEV catalog (due 2025-03-06).</li></ul> <p><strong>CVEs:</strong> CVE-2024-57727</p>