⤷ Title: Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:01:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Server #CFML #ColdFusion Markup Language #CVE_2025_34074 #cybersecurity #Lucee #metasploit #rce #Remote Code Execution #scheduled tasks #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 00:01:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Server #CFML #ColdFusion Markup Language #CVE_2025_34074 #cybersecurity #Lucee #metasploit #rce #Remote Code Execution #scheduled tasks #Vulnerability
Daily CyberSecurity
Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out
A critical flaw (CVE-2025-34074, CVSS 9.4) in Lucee allows authenticated admins to achieve RCE by abusing scheduled tasks. A Metasploit module is out; urgent patching needed!