CVE-2024-56145: Code Injection in Craft CMS, 9.3 rating 🔥

The vulnerability we almost missed allows an attacker to pass code in place of CLI arguments and gain RCE.

Search at Netlas.io:
👉 Link: https://nt.ls/HFQTJ
👉 Dork: http.headers.x_powered_by:"Craft CMS"

Vendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9

Using TLDFinder with the Netlas Module 🔍

Check out our latest article, where we walk you through setting up ProjectDiscovery TLDFinder and using it alongside Netlas data for top-level domains and subdomains searching.

👉 Read now: https://netlas.io/blog/tldfinder_and_netlas/

CVE-2024-53961: Path Traversal in Adobe ColdFusion, 7.4 rating❗️

A fresh vulnerability allows attackers to traverse the path and read arbitrary files on the server, including confidential information.

Search at Netlas.io:
👉 Link: https://nt.ls/nV0Cl
👉 Dork: tag.name:"adobe_coldfusion"

Vendor's advisory: https://helpx.adobe.com/security/products/coldfusion/apsb24-107.html

Netlas supports USDT payments 💵

To improve payment flexibility, we have slightly expanded the list of cryptocyrrency payment methods. Now a one-time subscription to Netlas can be paid using USDT on the Tron network.

CVE-2024-54148, -39930, -39932 and other: Multiple vulnerabilities in Gogs, 7.7 - 10.0 rating 🔥🔥🔥

In the recent release, Gogs fixed many vulnerabilities, both old and new. These include Path Traversal, Argument Injection, Code Injection and others.

Search at Netlas.io:
👉 Link: https://nt.ls/Vd4fF
👉 Dork: http.meta:"content=\"Gogs"

Vendor's advisories: https://github.com/gogs/gogs/releases/tag/v0.13.2

Craft CMS RCE PoC by Chirag Artani 🔥

Our friend’s channel posted new video about one of the latest vulnerabilities. As usual he demonstrated Proof of Concept using Netlas 🔍

We also recommend checking out his website and Twitter for more tips:

👉 Site: 3rag.com
👉 Twitter: x.com/Chirag99Artani

🎄 Merry Christmas from the Netlas Team!

Wishing you and your loved ones a joyful holiday season filled with warmth, happiness, and success. Thank you for being a part of our journey this year—we're deeply grateful for your support and trust.

This year, we launched exciting features like the Netlas Private Scanner, Team Access, and celebrated the v.1.0 release! 🎉

Here’s to a secure and innovative new year together! 🌟

🚨 Major API Outage Caused by PostgreSQL Cluster Synchronization Issues

Yesterday at 19:40 UTC, a significant outage affected the availability of our API, causing service disruptions for a majority of our users. Despite extensive efforts over the past night, the issue remains unresolved. The root cause has been identified as an unstable connection between our backend and database, which is continuing to impact overall application performance.

While the API is currently accessible, the application remains unstable. Our team is actively investigating and working diligently toward a resolution. Further updates will be shared as progress is made.

✅ Major API Outage Resolved

Our team has successfully restored full functionality, and both the API and application are now operational. We have definitively identified the causes of the issue and will work on improving synchronization configurations in the near future to prevent similar incidents.

We sincerely apologize for the inconvenience caused and thank you for your patience and understanding during this time. If you experience any further issues, please contact our support team.

For real-time updates on Netlas Services' health status, please refer to https://status.netlas.io.

CVE-2024-3393: DoS in Palo Alto PAN OS, 8.7 rating❗️

The vulnerability allows an unauthenticated user to send a malicious packet that can cause Denial of Service.

Search at Netlas.io:
👉 Link: https://nt.ls/UwnvG
👉 Dork: http.body_sha256:"7bc15a9ba71464596444ad648fa144937b848b302459c4103deae105cf42ce42" OR http.favicon.hash_sha256:a03ff6778b0535b9c4388e88c674eeeac91c0cc4b25bd23bf30f8d0bd98ac854

Vendor's advisory: https://security.paloaltonetworks.com/CVE-2024-3393

Using theHarvester with the Netlas Module 🔍

In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.

👉 Read now: https://netlas.io/blog/theharvester_and_netlas/

Minor App Improvements 🔥

In the 1.0.9 update, we made some fixes aimed at increasing the stability of the application and improving the user experience.

Here’s what’s new:
🖊 Optimized the autocomplete feature.
📊 Added status page and link on it in the footer.
🐛 Fixed some bugs and issues.
🖥 A few other minor improvements.

👉 Read more: https://docs.netlas.io/changelog/

Tomorrow the new year will begin, and Netlas wants to share with you some statistics of the outgoing year! 🎄

This year we achieved the following:

👉 Total requests: 15,552,390
👉 New users: 16,633
👉 Total coins spent: 474,734,108
👉 Total graphs stored: 1,165
👉 Total private scans was started: 789

📖 Most popular article: https://netlas.io/blog/attack_surface_discovery_guide/
❗ Most popular CVE post: CVE-2024-6387 (https://x.com/Netlas_io/status/1807760965967937826)

Thank you for being with us. The Netlas team wishes you success in your projects, safe surfaces, fast pentests and all the best. See you next year!

CVE-2025-0282, -0283: Two vulnerabilities in Ivanti Connect Secure, 7.0 - 9.0 rating 🔥

Stack-based buffer overflow caused potential RCE and privilege escalation.

Search at Netlas.io:
👉 Link: https://nt.ls/WMQwN
👉 Dork: http.body:"welcome.cgi?p=logo"

Vendor's advisory: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283?language=en_US

CVE-2025-22777: Privilege Escalation in GiveWP WordPress Plugin, 9.8 rating 🔥

Unauthenticated PHP Object Injection allows attackers to take control of websites.

Search at Netlas.io:
👉 Link: https://nt.ls/amyWM
👉 Dork: http.body:"plugins/give/assets/dist"

Read more: https://patchstack.com/articles/critical-vulnerability-patched-in-givewp-plugin/

CVE-2025-21598: Out-of-bounds Read in Juniper Junos OS, 8.2 rating❗️

An out-of-bouds read vulnerability in the RDP daemon, fixed last week, could potentially lead to DoS.

Search at Netlas.io:
👉 Link: https://nt.ls/HqWq2
👉 Dork: http.title:"Juniper"

Vendor's advisory: https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-When-BGP-traceoptions-are-configured-receipt-of-malformed-BGP-packets-causes-RPD-to-crash-CVE-2025-21598

CVE-2025-0066, -0070 and other: Multiple vulnarabilities in SAP, 2.2 - 9.9 rating 🔥🔥🔥

Several vulnerabilities in SAP services for every taste and color: SQLi, Improper Authentication, DLL Hijacking, etc.

Search at Netlas.io:
👉 Link: https://nt.ls/zbP5e
👉 Dork: http.headers.server:"SAP"

Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2025.html

CVE-2024-12365: Missing Authorization in W3 Total Cache WordPress Plugin, 8.5 rating❗️

The vulnerability allows an authenticated attacker to access sensitive data and make unauthorized web requests to collect information from internal services.

Search at Netlas.io:
👉 Link: https://nt.ls/BpOAJ
👉 Dork: http.body:"plugins/w3-total-cache"

Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/w3-total-cache/w3-total-cache-281-authenticated-subscriber-missing-authorization-to-server-side-request-forgery

CVE-2025-23051, -23052: Vulnerabilities in ArubaOS, 7.2 rating❗️

The vulnerabilities allow an attacker to inject commands and overwrite system files.

Search at Netlas.io:
👉 Link: https://nt.ls/7pU9N
👉 Dork: http.favicon.hash_sha256:dfa04944308ed6c96563ff88cdb767ed5177c76c8a386f7a5803b534e9bff753

Vendor's advisory: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04723en_us&docLocale=en_US

CVE-2024-57726, -57727, -57728: Multiple vulnerabilities in SimpleHelp, 7.2 - 8.8 rating❗️

The vulnerabilities allow attackers to upload arbitrary files to the SimpleHelp server, as well as escalate privileges, which together allows RCE to be carried out.

Search at Netlas.io:
👉 Link: https://nt.ls/Frx6H
👉 Dork: http.headers.server:"SimpleHelp"

Vendor's advisory: https://simple-help.com/kb---security-vulnerabilities-01-2025#

CVE-2025-21535: Server Takeover in Oracle WebLogic, 9.8 rating 🔥

An easily exploitable vulnerability in the Core component allows an unauthenticated attacker to remotely compromise a WebLogic server.

Search at Netlas.io:
👉 Link: https://nt.ls/6EpWK
👉 Dork: protocol:t3 OR protocol:t3s

Vendor's advisory: https://www.oracle.com/security-alerts/cpujan2025.html#AppendixFMW