Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 12:21:52 GMT *************** ✏️Title: How to Learn Ethical Hacking Step-by-Step *************** 📎Link: https://medium.com/p/65d73eac46af *************** ⚙️Tags: #ethical_hacking #google #services #blog #education *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:40:48 +0200 *************** ✏️Title: CVE-2025-48383 | codingjoe django-select2 up to 8.4.0 on Select2 ModelSelect2MultipleWidget/ModelSelect2Widget transmission of private resources into a new sphere ('resource leak') (GHSA-wjrh-hj83-3wh7) *************** 📎Link: https://vuldb.com/?id.310379 *************** ⚙️Information: #Vendor: codingjoe #Product: django_select2 #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 12:31:44 GMT *************** ✏️Title: ️ Perjalanan 5 Tahun Menjadi Ahli Cyber Security — Sebuah Cerita Pemula *************** 📎Link: https://medium.com/p/a40535b0cf58 *************** ⚙️Tags: #ethical_hacking #learning_path #career_development #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:41:09 +0200 *************** ✏️Title: CVE-2025-48370 | auth-js up to 2.69.0 API improper authentication (GHSA-8r88-6cj9-9fh5) *************** 📎Link: https://vuldb.com/?id.310380 *************** ⚙️Information: #Product: auth_js #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 13:56:20 GMT *************** ✏️Title: From OTP to ATO: A $10K Mobile Bug in State Validation *************** 📎Link: https://medium.com/p/616aebbb7208 *************** ⚙️Tags: #mobile_security #pentesting #bug_bounty #application_security #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:41:29 +0200 *************** ✏️Title: CVE-2024-56193 | Google Android Bluetooth Adapter information disclosure *************** 📎Link: https://vuldb.com/?id.310381 *************** ⚙️Information: #Vendor: Google #Product: Android #Type: Smartphone Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 14:03:21 GMT *************** ✏️Title: Day 48: VPN & Tunneling: A Deep Dive into the Backbone of Secure Communication *************** 📎Link: https://medium.com/p/dbd03ec0ee6e *************** ⚙️Tags: #vpn #networking #ethical_hacking #cybersecurity #progress *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:41:37 +0200 *************** ✏️Title: CVE-2025-27700 | Google Android Local Privilege Escalation *************** 📎Link: https://vuldb.com/?id.310382 *************** ⚙️Information: #Vendor: Google #Product: Android #Type: Smartphone Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 16:10:42 GMT *************** ✏️Title: Understanding Android Architecture Through Pentesting with DIVA APK *************** 📎Link: https://medium.com/p/28376d69ce0a *************** ⚙️Tags: #pentesting #vulnerability #android #ethical_hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:41:57 +0200 *************** ✏️Title: CVE-2025-27701 | Google Android process_crypto_cmd ptrs memory corruption *************** 📎Link: https://vuldb.com/?id.310383 *************** ⚙️Information: #Vendor: Google #Product: Android #Type: Smartphone Operating System #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 17:24:11 GMT *************** ✏️Title: Apa Saja Roadmap Karier dan Keahlian Cyber Security Selama 5 Tahun Kedepan? *************** 📎Link: https://medium.com/p/721373f07f36 *************** ⚙️Tags: #cyber #cyber_security_awareness #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:42:52 +0200 *************** ✏️Title: CVE-2025-48057 | Icinga icinga2 up to 2.12.11/2.13.11/2.14.5 VerifyCertificate improper following of a certificate's chain of trust *************** 📎Link: https://vuldb.com/?id.310384 *************** ⚙️Information: #Vendor: Icinga #Product: icinga2 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:28:54 +0200 *************** ✏️Title: CVE-2025-23247 | NVIDIA CUDA Toolkit ELF File Parser length parameter *************** 📎Link: https://vuldb.com/?id.310385 *************** ⚙️Information: #Vendor: NVIDIA #Product: CUDA Toolkit #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:30:26 +0200 *************** ✏️Title: CVE-2024-49197 | Samsung Mobile Processor/Wearable Processor/Modem Exynos up to 1480 Wi-Fi out-of-bounds *************** 📎Link: https://vuldb.com/?id.310386 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor/Wearable Processor/Modem Exynos #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:30:41 +0200 *************** ✏️Title: CVE-2025-22377 | Samsung Mobile Processor/Wearable Processor/Modem Exynos up to 9110 GPRS Protocol out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310387 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor/Wearable Processor/Modem Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:30:59 +0200 *************** ✏️Title: CVE-2024-49196 | Samsung Mobile Processor 1480/2400 GPU denial of service *************** 📎Link: https://vuldb.com/?id.310388 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:32:23 +0200 *************** ✏️Title: CVE-2025-5278 | GNU Coreutils 7.2 Key Specification heap-based overflow *************** 📎Link: https://vuldb.com/?id.310389 *************** ⚙️Information: #Vendor: GNU #Product: Coreutils #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 20:41:11 +0200 *************** ✏️Title: CVE-2025-45475 | Maccms10 2025.1000.4047 Friend Link Management server-side request forgery *************** 📎Link: https://vuldb.com/?id.310390 *************** ⚙️Information: #Product: Maccms10 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 20:41:47 +0200 *************** ✏️Title: CVE-2025-4800 | MasterStudy LMS Pro Plugin up to 4.7.0 on WordPress stm_lms_add_assignment_attachment unrestricted upload *************** 📎Link: https://vuldb.com/?id.310391 *************** ⚙️Information: #Product: MasterStudy LMS Pro Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 12:18:37 GMT *************** ✏️Title: Web Cache Deception (WCD) *************** 📎Link: https://medium.com/p/7d15646b855c *************** ⚙️Tags: #offensive_security #web_penetration_testing #portswigger #penetration_testing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security