Tag: CVE-2024-25082 | Youssef Kessentini

Created2026-10-14|HTB Machines|HackTheBox•Linux•Command Injection•Path Traversal•CVE-2025-66034•CVE-2024-25082•fontTools•FontForge•Git Leak•Sudo Misconfiguration

HTB Medium Linux machine — credentials from an exposed .git, a fontTools arbitrary file write (CVE-2025-66034) for a webshell, FontForge archive command injection (CVE-2024-25082) to reach steve, and root by overwriting /etc/sudoers through a setuptools path traversal