Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 11:27:03 GMT *************** ✏️Title: Web Application Firewall *************** 📎Link: https://medium.com/p/d8b75f5f0a9d *************** ⚙️Tags: #cyber_security_awareness #cybersecurity #social_media #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:09:47 +0200 *************** ✏️Title: CVE-2025-4613 | Google Web Designer App prior 16.3.0.0407 on Windows Template input validation *************** 📎Link: https://vuldb.com/?id.312380 *************** ⚙️Information: #Vendor: Google #Product: Web Designer App #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:10:43 +0200 *************** ✏️Title: CVE-2025-1478 | GitLab Community Edition/Enterprise Edition up to 17.10.7/17.11.3/18.0.1 allocation of resources (Issue 520354) *************** 📎Link: https://vuldb.com/?id.312381 *************** ⚙️Information: #Vendor: GitLab #Product: Community Edition/Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:11:20 +0200 *************** ✏️Title: CVE-2025-1516 | GitLab Community Edition/Enterprise Edition up to 17.10.7/17.11.3/18.0.1 allocation of resources (Issue 520553) *************** 📎Link: https://vuldb.com/?id.312382 *************** ⚙️Information: #Vendor: GitLab #Product: Community Edition/Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:11:31 +0200 *************** ✏️Title: CVE-2025-4278 | GitLab Community Edition/Enterprise Edition up to 18.0.1 cross site scripting (Issue 539198) *************** 📎Link: https://vuldb.com/?id.312383 *************** ⚙️Information: #Vendor: GitLab #Product: Community Edition/Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:11:56 +0200 *************** ✏️Title: CVE-2025-5996 | GitLab Community Edition/Enterprise Edition up to 17.10.6/17.11.2/18.0.0 allocation of resources (Issue 476671) *************** 📎Link: https://vuldb.com/?id.312384 *************** ⚙️Information: #Vendor: GitLab #Product: Community Edition/Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:12:05 +0200 *************** ✏️Title: CVE-2025-5195 | GitLab Community Edition/Enterprise Edition up to 17.10.7/17.11.3/18.0.1 authorization (Issue 534960) *************** 📎Link: https://vuldb.com/?id.312385 *************** ⚙️Information: #Vendor: GitLab #Product: Community Edition/Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:12:16 +0200 *************** ✏️Title: CVE-2025-0673 | GitLab Community Edition/Enterprise Edition up to 17.10.7/17.11.3/18.0.1 infinite loop (Issue 514732) *************** 📎Link: https://vuldb.com/?id.312386 *************** ⚙️Information: #Vendor: GitLab #Product: Community Edition/Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:12:23 +0200 *************** ✏️Title: CVE-2025-2254 | GitLab Community Edition/Enterprise Edition up to 17.10.7/17.11.3/18.0.1 cross site scripting (Issue 524636) *************** 📎Link: https://vuldb.com/?id.312387 *************** ⚙️Information: #Vendor: GitLab #Product: Community Edition/Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 10:16:28 +0000 *************** ✏️Title: CVE-2025-1478 - GitLab CE/EE Denial of Service Vulnerability in Board Names *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1478 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 10:16:38 +0000 *************** ✏️Title: CVE-2025-1516 - GitLab DoS Vulnerability in Token Names Validation *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1516 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 10:16:38 +0000 *************** ✏️Title: CVE-2025-2254 - GitLab Cross-Site Scripting (XSS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2254 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 10:16:39 +0000 *************** ✏️Title: CVE-2025-4278 - GitLab CE/EE HTML Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4278 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 10:16:39 +0000 *************** ✏️Title: CVE-2025-5996 - GitLab HTTP Response Denial of Service Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5996 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 11:15:18 +0000 *************** ✏️Title: CVE-2025-0673 - GitLab CE/EE Infinite Redirect Loop Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0673 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 11:15:19 +0000 *************** ✏️Title: CVE-2025-5195 - GitLab Compliance Framework Unauthorized Data Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5195 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:51:26 +0000 *************** ✏️Title: Palo Alto Networks PAN-OS Vulnerability Let Attacker Run Arbitrary Commands as Root User *************** 📎Link: https://cybersecuritynews.com/?p=110873 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 11:21:53 +0000 *************** ✏️Title: Threat Actors Allegedly Selling MaaS Botnet on Hackers Forums *************** 📎Link: https://cybersecuritynews.com/?p=110856 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 11:42:23 +0000 *************** ✏️Title: Trend Micro Apex One Vulnerability Allow Attackers to Inject Malicious Code *************** 📎Link: https://cybersecuritynews.com/?p=110865 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:38:27 GMT *************** ✏️Title: SkyTower Walkthrough — Gaining Root Access *************** 📎Link: https://medium.com/p/44658ae9c021 *************** ⚙️Tags: #sky_tower #cybersecurity #root_access #ctf_walkthrough #pentesting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security