GregDurys

#!/usr/bin/env bash
# Description:
#  POC around brew cask. The poor-man's missing ' brew cask upgrade' switch o/
# Notes:
#  [..] One brew to rule them all:
# uberbrew () { brew -v update; brew upgrade; brew cleanup; brewcaskupgrade.sh upgrade
# brew cask cleanup ; }
# Author: ment4t
# Revision: 0.2

GregDurys

CVE-2025-67840: Web API Command Injection in Cohesity TranZman

Overview

Field	Value
CVE ID	CVE-2025-67840
CVSS v3.1	7.2 (High)
Vector	AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE	CWE-78: OS Command Injection

GregDurys

CVE-2025-63909: Local Privilege Escalation in Cohesity TranZman

Overview

Field	Value
CVE ID	CVE-2025-63909
CVSS v3.1	7.2 (High)
Vector	AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE	CWE-269: Improper Privilege Management

GregDurys

CVE-2025-63910: Unsigned Patch Upload in Cohesity TranZman

Overview

Field	Value
CVE ID	CVE-2025-63910
CVSS v3.1	7.2 (High)
Vector	AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE	CWE-345: Insufficient Verification of Data Authenticity

GregDurys

CVE-2025-63911: CLISH Command Injection in Cohesity TranZman

Overview

Field	Value
CVE ID	CVE-2025-63911
CVSS v3.1	7.2 (High)
Vector	AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE	CWE-78: OS Command Injection

GregDurys

CVE-2025-63912: Weak Cryptography in Cohesity TranZman

Overview

Field	Value
CVE ID	CVE-2025-63912
CVSS v3.1	5.5 (Medium)
Vector	AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE	CWE-327: Use of a Broken or Risky Cryptographic Algorithm

GregDurys

All queries use the TrustedSec CS-Situational-Awareness BOF ldapsearch, not OpenLDAP ldapsearch. Syntax: ldapsearch <filter> [--attributes] [--count] [--scope] [--hostname] [--dn] [--ldaps]. Default scope is subtree, --dn sets the search base, --hostname targets a specific DC.

Domains

Generic	Role
megacorp.com	Local domain
foreign.com	Foreign domain

Machines