Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:37:24 +0200 *************** ✏️Title: CVE-2025-30087 | Best Practical Request Tracker up to 4.4.7/5.0.7 Search URL cross site scripting *************** 📎Link: https://vuldb.com/?id.310473 *************** ⚙️Information: #Vendor: Best Practical #Product: Request Tracker #Type: Ticket Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:37:41 +0200 *************** ✏️Title: CVE-2025-3357 | IBM Tivoli Monitoring up to 6.3.0.7 SP15 index improper validation of specified index, position, or offset in input *************** 📎Link: https://vuldb.com/?id.310474 *************** ⚙️Information: #Vendor: IBM #Product: Tivoli Monitoring #Type: Directory Service Software #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:38:36 +0200 *************** ✏️Title: CVE-2025-48147 | CryptoCloud Plugin up to 2.1.2 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.310475 *************** ⚙️Information: #Product: CryptoCloud Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:38:37 +0200 *************** ✏️Title: CVE-2025-47585 | Booking and Rental Manager Plugin up to 2.3.8 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.310476 *************** ⚙️Information: #Product: Booking and Rental Manager Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:38:46 +0200 *************** ✏️Title: CVE-2025-4583 | Smash Balloon Instagram Feed Plugin up to 6.9.0 on WordPress Attribute data-plugin cross site scripting *************** 📎Link: https://vuldb.com/?id.310477 *************** ⚙️Information: #Vendor: Smash Balloon #Product: Instagram Feed Plugin #Type: Social Network Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:38:57 +0200 *************** ✏️Title: CVE-2025-48139 | StyleAI Plugin up to 1.0.4 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.310478 *************** ⚙️Information: #Product: StyleAI Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2022-32233 - Cisco Internetwork Operating System (IOS) Remote Command Execution *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-32233 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2022-33893 - Apache HTTP Server Remote File Inclusion *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-33893 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2022-34859 - Apache HTTP Server HTTP Response Splitting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-34859 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2022-34860 - Apache Struts Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-34860 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2022-36298 - Microsoft Windows DLL Hijacking *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-36298 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2022-36406 - Apache HTTP Server SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-36406 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:24 +0000 *************** ✏️Title: CVE-2022-38092 - Apache HTTP Server Remote File Inclusion *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-38092 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:24 +0000 *************** ✏️Title: CVE-2022-40970 - Apache HTTP Server Unvalidated Redirect *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-40970 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:24 +0000 *************** ✏️Title: CVE-2022-43493 - Apache HTTP Server Cross-Site Request Forgery *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-43493 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:24 +0000 *************** ✏️Title: CVE-2022-43496 - Apache Struts SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-43496 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:24 +0000 *************** ✏️Title: CVE-2022-43502 - Apache HTTP Server Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-43502 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:24 +0000 *************** ✏️Title: CVE-2024-47055 - Mautic Insecure Direct Object Reference (IDOR) / Missing Authorization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-47055 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:25 +0000 *************** ✏️Title: CVE-2024-47057 - Mautic User Enumeration Timing Attack *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-47057 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:25 +0000 *************** ✏️Title: CVE-2024-57336 - M2Soft CROWNIX Report & ERS Unauthenticated Administrator Account Access *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-57336 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security