⤷ Title: Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 00:29:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Credential Management #Critical Vulnerability #CVE_2025_12485 #Devolutions Server #PAM #privilege escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 00:29:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Credential Management #Critical Vulnerability #CVE_2025_12485 #Devolutions Server #PAM #privilege escalation
Daily CyberSecurity
Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking
Devolutions patched two flaws in Devolutions Server: A Critical (CVSS 9.4) Auth Bypass allows user impersonation via pre-MFA cookie replay, and another flaw leaks plaintext passwords to view-only users.
⤷ Title: Critical Devolutions Server Flaw (CVE-2025-13757) Allows Authenticated SQL Injection to Steal All Passwords
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 00:37:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Credential Theft #Critical Vulnerability #CVE_2025_13757 #Devolutions Server #password manager #sql injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 00:37:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Credential Theft #Critical Vulnerability #CVE_2025_13757 #Devolutions Server #password manager #sql injection
Daily CyberSecurity
Critical Devolutions Server Flaw (CVE-2025-13757) Allows Authenticated SQL Injection to Steal All Passwords
Devolutions Server patched a Critical SQLi flaw (CVE-2025-13757) allowing authenticated users to exfiltrate or modify data via log parameters. Update to v2025.2.21 or v2025.3.9 immediately.