Pulse of Truth

2,611 readers

1,092 active

124 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Commenting rules:

Be respectful.
No bigotry (including racism, sexism, homophobia, transphobia).
No pornography.
Nothing illegal.
More rules will be added when necessary

founded 3 years ago

moderation log

moderators

krogoth@infosec.pub

Critical SAP S/4HANA flaw CVE-2025-42957 under active exploitation (securityaffairs.com)

submitted 1 year ago by lemmydev2@infosec.pub [B] to c/pulse_of_truth@infosec.pub

1 comment fedilink hide all child comments

Experts warn of an actively exploited vulnerability, tracked as CVE-2025-42957 (CVSS score: 9.9), in SAP S/4HANA software. A critical command injection vulnerability, tracked as CVE-2025-42957 (CVSS score of 9.9), in SAP S/4HANA is under active exploitation. An attacker can exploit this flaw to fully compromise SAP systems, altering databases, creating superuser accounts, and stealing password hashes. “SAP […]

you are viewing a single comment's thread
view the rest of the comments

[–] blackfire@lemmy.world 1 point 1 year ago (1 child)

This sounds pretty brutal with user level access. No mitigation just patch and patch now or boom.

permalink

fedilink

source

hideshow 1 child comment

[–] lemmydev2@infosec.pub [S, B] 1 point 1 year ago

And on a weekend 🥳

permalink

fedilink

source

parent