Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 22:08:34 GMT *************** ✏️Title: Inherent Vulnerabilities in AI Systems: *************** 📎Link: https://medium.com/p/d0b39dde21b8 *************** ⚙️Tags: #llm #social_engineering #chatgpt #ai #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 22:38:13 GMT *************** ✏️Title: HTB Password Attacks Network Services — Medium *************** 📎Link: https://medium.com/p/6c3448ea7ecb *************** ⚙️Tags: #penetration_testing #hacking #hackthebox #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:43:31 +0100 *************** ✏️Title: CVE-2025-1002 | MicroDicom DICOM Viewer 2024.03 certificate validation (icsma-25-037-01) *************** 📎Link: https://vuldb.com/?id.295166 *************** ⚙️Information: #Vendor: MicroDicom #Product: DICOM Viewer #Type: Medical Device Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:43:48 +0100 *************** ✏️Title: CVE-2025-25193 | netty up to 4.1.118 resource consumption (GHSA-389x-839f-4rhx) *************** 📎Link: https://vuldb.com/?id.295167 *************** ⚙️Information: #Product: netty #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:44:09 +0100 *************** ✏️Title: CVE-2025-24970 | netty up to 4.1.117.Final Packet denial of service (GHSA-4g8c-wm8x-jfhw) *************** 📎Link: https://vuldb.com/?id.295168 *************** ⚙️Information: #Product: netty #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:44:29 +0100 *************** ✏️Title: CVE-2025-25189 | ZOO-Project Web Processing Service publish.py jobid cross site scripting (GHSA-pw7m-p9q7-357p) *************** 📎Link: https://vuldb.com/?id.295169 *************** ⚙️Information: #Product: ZOO_Project #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:45:07 +0100 *************** ✏️Title: CVE-2025-25190 | ZOO-Project Web Processing Service cross site scripting (GHSA-2569-6r9f-j7jv) *************** 📎Link: https://vuldb.com/?id.295170 *************** ⚙️Information: #Product: ZOO_Project #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:45:36 +0100 *************** ✏️Title: CVE-2025-25194 | Lemmy up to 0.19.8 activitypub_federation server-side request forgery *************** 📎Link: https://vuldb.com/?id.295171 *************** ⚙️Information: #Product: Lemmy #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:50:30 +0100 *************** ✏️Title: CVE-2025-1213 | pihome-shc PiHome 1.77 /index.php $_SERVER['PHP_SELF'] cross site scripting *************** 📎Link: https://vuldb.com/?id.295172 *************** ⚙️Information: #Vendor: pihome_shc #Product: PiHome #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:50:32 +0100 *************** ✏️Title: CVE-2025-1214 | pihome-shc PiHome 2.0 Role-Based Access Control /user_accounts.php?uid authorization *************** 📎Link: https://vuldb.com/?id.295173 *************** ⚙️Information: #Vendor: pihome_shc #Product: PiHome #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 20:15:41 +0000 *************** ✏️Title: CVE-2024-57177 - "Couch-Auth Host Header Injection SSTI Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-57177 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 20:15:42 +0000 *************** ✏️Title: CVE-2024-57178 - Apache Stock-Forecaster SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-57178 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 20:15:42 +0000 *************** ✏️Title: CVE-2025-1154 - Xxyopen Novel SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1154 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 20:15:42 +0000 *************** ✏️Title: CVE-2025-1155 - Webkul QloApps Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1155 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 20:15:42 +0000 *************** ✏️Title: CVE-2025-24016 - Wazuh DistributedAPI Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-24016 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 21:15:21 +0000 *************** ✏️Title: CVE-2025-1002 - MicroDicom DICOM Viewer TLS Certificate Verification Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1002 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-1156 - Pix Software Vivaz SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1156 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-1157 - Allims lab.online Model File Processing SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1157 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 21:26:54 GMT *************** ✏️Title: Understanding and Exploiting an Open Redirect Vulnerability in NVIDIA *************** 📎Link: https://medium.com/p/3b1b429cb3c5 *************** ⚙️Tags: #open_redirect #bug_bounty #bug_bounty_writeup #pentesting #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 22:09:48 GMT *************** ✏️Title: Encrypting Strings to Evade Static Detection *************** 📎Link: https://medium.com/p/fe46c4244bd5 *************** ⚙️Tags: #malware #pentesting #development #hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security