Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 21:55:00 +0530 *************** ✏️Title: New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users *************** 📎Link: https://thehackernews.com/2025/06/new-atomic-macos-stealer-campaign.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:39 +0000 *************** ✏️Title: CVE-2025-5786 - TOTOLINK X15 HTTP POST Request Handler Buffer Overflow *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5786 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:40 +0000 *************** ✏️Title: CVE-2025-5787 - TOTOLINK X15 HTTP POST Request Handler Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5787 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:41 +0000 *************** ✏️Title: CVE-2025-5788 - TOTOLINK X15 HTTP POST Request Handler Buffer Overflow *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5788 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 17:37:04 GMT *************** ✏️Title: TheHackersLabs — Merchan *************** 📎Link: https://medium.com/p/98bdea98563f *************** ⚙️Tags: #writeup #hacking #pentesting #thehackerslabs #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 17:04:05 GMT *************** ✏️Title: How to Find Malicious Traffic with Wireshark (Beginner’s Guide) *************** 📎Link: https://medium.com/p/b558f6c8032d *************** ⚙️Tags: #infosec #network_analysis #wireshark #threat_hunting #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 16:36:01 GMT *************** ✏️Title: Cracking Passwords with Hashcat: Wordlist, Mask, and Hybrid Attacks Explained *************** 📎Link: https://medium.com/p/01f246615dcc *************** ⚙️Tags: #hashcat #password_security #ethical_hacking #cybersecurity #pentesting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 16:50:15 GMT *************** ✏️Title: CTF Day(8) *************** 📎Link: https://medium.com/p/2498149057a6 *************** ⚙️Tags: #web_penetration_testing #web_pentesting #bug_bounty #cybersecurity #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 17:15:29 GMT *************** ✏️Title: Puppy HTB — Full Walkthrough *************** 📎Link: https://medium.com/p/cb5d1d9e8ba2 *************** ⚙️Tags: #htb #htb_writeup #cybersecurity #hack_the_box_writeup #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 16:47:58 GMT *************** ✏️Title: THM : Connecting to OpenVPN *************** 📎Link: https://medium.com/p/ac1e78f2a377 *************** ⚙️Tags: #openvpn #vpn #thm #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:22 +0200 *************** ✏️Title: CVE-2025-30995 | OTWthemes Widgetize Pages Light Plugin up to 3.0 on WordPress OTWthemes Widgetize Page cross-site request forgery (EUVD-2025-17236) *************** 📎Link: https://vuldb.com/?id.311539 *************** ⚙️Information: #Vendor: OTWthemes #Product: Widgetize Pages Light Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:22 +0200 *************** ✏️Title: CVE-2025-28981 | Soli WP Mail Options Plugin up to 0.2.3 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311540 *************** ⚙️Information: #Vendor: Soli #Product: WP Mail Options Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:23 +0200 *************** ✏️Title: CVE-2025-30986 | CreativeMedia Elite Video Player Plugin up to 10.0.5 on WordPress cross-site request forgery (EUVD-2025-17231) *************** 📎Link: https://vuldb.com/?id.311541 *************** ⚙️Information: #Vendor: CreativeMedia #Product: Elite Video Player Plugin #Type: Multimedia Player Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:24 +0200 *************** ✏️Title: CVE-2025-49453 | Jatinder Pal Singh BP Profile as Homepage Plugin up to 1.1 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311542 *************** ⚙️Information: #Vendor: Jatinder Pal Singh #Product: BP Profile as Homepage Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:36 +0200 *************** ✏️Title: CVE-2025-28964 | mangup Personal Favicon Plugin up to 2.0 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311543 *************** ⚙️Information: #Vendor: mangup #Product: Personal Favicon Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:53 +0200 *************** ✏️Title: CVE-2025-49435 | Hasina77 Wp Easy Allopass Plugin up to 4.1.1 on WordPress cross-site request forgery (EUVD-2025-17144) *************** 📎Link: https://vuldb.com/?id.311544 *************** ⚙️Information: #Vendor: Hasina77 #Product: Wp Easy Allopass Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:50:31 +0200 *************** ✏️Title: CVE-2025-5806 | Jenkins Gatling Plugin 136.vb_9009b_3d33a_e Content-Security-Policy protection mechanism *************** 📎Link: https://vuldb.com/?id.311545 *************** ⚙️Information: #Vendor: Jenkins #Product: Gatling Plugin #Type: Continuous Integration Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:48 +0200 *************** ✏️Title: CVE-2025-38001 | Linux Kernel up to 6.15.0 net_sched cl_nactive infinite loop *************** 📎Link: https://vuldb.com/?id.311546 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:58 +0200 *************** ✏️Title: CVE-2025-38002 | Linux Kernel up to 6.14.7 io_uring_show_fdinfo information disclosure *************** 📎Link: https://vuldb.com/?id.311547 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:17:18 +0200 *************** ✏️Title: CVE-2025-41646 | Kunbus Revolution Pi Webstatus up to 2.4.5 type conversion (Kunbus-2025-000000 / EUVD-2025-17316) *************** 📎Link: https://vuldb.com/?id.311548 *************** ⚙️Information: #Vendor: Kunbus #Product: Revolution Pi Webstatus #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security