Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 12:51:33 GMT *************** ✏️Title: The Best Antivirus Software for Everyday Linux Users *************** 📎Link: https://medium.com/p/2bff20842e25 *************** ⚙️Tags: #phishing_awareness #linux #antivirus_software #malware #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 13:02:11 +0200 *************** ✏️Title: CVE-2025-5332 | 1000 Projects Online Notice Board 1.0 /index.php email sql injection *************** 📎Link: https://vuldb.com/?id.310505 *************** ⚙️Information: #Vendor: 1000 Projects #Product: Online Notice Board #Type: Forum Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 16:04:00 +0530 *************** ✏️Title: DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints *************** 📎Link: https://thehackernews.com/2025/05/dragonforce-exploits-simplehelp-flaws.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:15:25 +0000 *************** ✏️Title: CVE-2024-52588 - Strapi SSRF Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-52588 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:15:25 +0000 *************** ✏️Title: CVE-2025-27151 - Redis Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27151 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:15:27 +0000 *************** ✏️Title: CVE-2025-4670 - Easy Digital Downloads Stored Cross-Site Scripting (XSS) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4670 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:15:27 +0000 *************** ✏️Title: CVE-2025-4687 - Teltonika Networks Remote Management System (RMS) Account Pre-Hijacking Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4687 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:15:27 +0000 *************** ✏️Title: CVE-2025-5122 - Leaflet Map Block for WordPress Stored XSS Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5122 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:15:28 +0000 *************** ✏️Title: CVE-2025-5286 - WordPress Bold Page Builder Stored Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5286 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:15:20 +0000 *************** ✏️Title: CVE-2025-48388 - FreeScout Format String Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48388 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 12:03:37 +0200 *************** ✏️Title: CVE-2025-27151 | Redis up to 8.0.1 stack-based overflow (GHSA-5453-q98w-cmvm) *************** 📎Link: https://vuldb.com/?id.310499 *************** ⚙️Information: #Product: Redis #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 12:03:59 +0200 *************** ✏️Title: CVE-2025-4687 | Teltonika RMS up to 5.6 Pending Invite privilege escalation *************** 📎Link: https://vuldb.com/?id.310500 *************** ⚙️Information: #Vendor: Teltonika #Product: RMS #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 12:04:13 +0200 *************** ✏️Title: CVE-2025-48388 | freescout-help-desk freescout up to 1.8.177 as format string *************** 📎Link: https://vuldb.com/?id.310501 *************** ⚙️Information: #Vendor: freescout_help_desk #Product: freescout #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 12:04:31 +0200 *************** ✏️Title: CVE-2024-52588 | Strapi up to 4.25.1 Webhooks URL server-side request forgery (GHSA-v8wj-f5c7-pvxf) *************** 📎Link: https://vuldb.com/?id.310502 *************** ⚙️Information: #Product: Strapi #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 12:07:17 +0200 *************** ✏️Title: CVE-2025-5330 | FreeFloat FTP Server 1.0 RETR Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310503 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 12:08:29 +0200 *************** ✏️Title: CVE-2025-5331 | PCMan FTP Server 2.0.7 NLST Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310504 *************** ⚙️Information: #Vendor: PCMan #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 10:00:00 +0000 *************** ✏️Title: Behavioral Analysis for Detecting APT Intrusions in Real Time *************** 📎Link: https://cybersecuritynews.com/?p=106495 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 10:00:00 +0000 *************** ✏️Title: Mitigating API Vulnerabilities in Cloud-Based Service Architectures *************** 📎Link: https://cybersecuritynews.com/?p=107071 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 10:15:02 +0000 *************** ✏️Title: UTG-Q-015 Hackers Launched Large Scale Brute-Force Attacks Against Govt Web Servers *************** 📎Link: https://cybersecuritynews.com/?p=109002 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 10:29:29 +0000 *************** ✏️Title: Threat Actors Exploit Top Domain Zones for Cyber Attacks *************** 📎Link: https://cybersecuritynews.com/?p=108945 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security