Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-20992 - Samsung Camera Out-of-Bounds Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20992 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-20993 - Samsung Camera libsecimaging Camera Buffer Overflow *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20993 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-20994 - Samsung Internet File Access Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20994 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-20995 - Samsung Internet File Access Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20995 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-20996 - Samsung Smart Switch Authorization Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20996 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-5539 - WordPress WP Easy Contact Stored Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5539 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-5561 - PHPGurukul Curfew e-Pass Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5561 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:25 +0000 *************** ✏️Title: CVE-2025-5562 - PHPGurukul Curfew SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5562 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:25 +0000 *************** ✏️Title: CVE-2025-5566 - PHPGurukul Notice Board System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5566 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 10:53:00 +0530 *************** ✏️Title: HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass *************** 📎Link: https://thehackernews.com/2025/06/hpe-issues-security-patch-for-storeonce.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 05:56:48 GMT *************** ✏️Title: Unlocking the Dark Web: A Curated .onion *************** 📎Link: https://medium.com/p/bdc8bb7fa755 *************** ⚙️Tags: #onion_link #tor #bug_bounty #hacking #darkweb *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 06:13:45 GMT *************** ✏️Title: Analyzing a WordPress Takeover Technique Used by Threat Actors *************** 📎Link: https://medium.com/p/542e7a75de06 *************** ⚙️Tags: #wordpress_security #threat_intelligence #threat_hunting #threat #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 05:18:55 GMT *************** ✏️Title: Exploiting CORS Vulnerability — How to Test Cross-Origin Resource Sharing Vulnerability *************** 📎Link: https://medium.com/p/fd816fb4f1d6 *************** ⚙️Tags: #hacking #bug_bounty #cybersecurity #pentesting #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:34:15 +0200 *************** ✏️Title: CVE-2025-49223 | NAVER billboard.js up to 3.15.0 generate prototype pollution *************** 📎Link: https://vuldb.com/?id.311050 *************** ⚙️Information: #Vendor: NAVER #Product: billboard.js #Type: JavaScript Library #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:34:43 +0200 *************** ✏️Title: CVE-2025-24015 | denoland deno up to 2.1.6 Authentication Tag set_aad signature verification (GHSA-2x3r-hwv5-p32x) *************** 📎Link: https://vuldb.com/?id.311051 *************** ⚙️Information: #Vendor: denoland #Product: deno #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:34:54 +0200 *************** ✏️Title: CVE-2025-20994 | Samsung Internet up to 26.0.3.1 default permission *************** 📎Link: https://vuldb.com/?id.311052 *************** ⚙️Information: #Vendor: Samsung #Product: Internet #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:35:05 +0200 *************** ✏️Title: CVE-2025-20995 | Samsung Internet up to 26.0.3.1 ClientProvider insufficient permissions or privileges *************** 📎Link: https://vuldb.com/?id.311053 *************** ⚙️Information: #Vendor: Samsung #Product: Internet #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:35:18 +0200 *************** ✏️Title: CVE-2025-20996 | Samsung Smart Switch prior 3.7.64.10 improper authorization *************** 📎Link: https://vuldb.com/?id.311054 *************** ⚙️Information: #Vendor: Samsung #Product: Smart Switch #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:35:36 +0200 *************** ✏️Title: CVE-2025-20991 | Samsung Devices Bluetooth improper export of android application components *************** 📎Link: https://vuldb.com/?id.311055 *************** ⚙️Information: #Vendor: Samsung #Product: Devices #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:35:52 +0200 *************** ✏️Title: CVE-2025-20981 | Samsung Devices AudioService access control *************** 📎Link: https://vuldb.com/?id.311056 *************** ⚙️Information: #Vendor: Samsung #Product: Devices #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security