Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20277 - Cisco Unified CCX Path Traversal Remote Code Execution *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20277 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20278 - "Cisco Unified Communications Command Injection Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20278 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2025-20279 - Cisco Unified CCX Stored XSS Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20279 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2025-20286 - "Cisco ISE Cloud Credential Exposure Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20286 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2025-2336 - AngularJS SVG Image Content Spoofing Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2336 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2025-5595 - FreeFloat FTP Server Buffer Overflow *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5595 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:29 +0000 *************** ✏️Title: CVE-2025-5596 - FreeFloat FTP Server Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5596 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:29 +0000 *************** ✏️Title: CVE-2025-5688 - Microsoft Windows DNS Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5688 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:16:26 +0200 *************** ✏️Title: CVE-2025-20278 | Cisco Finesse CLI command command injection (cisco-sa-vos-command-inject-65s2UCYy / EUVD-2025-16884) *************** 📎Link: https://vuldb.com/?id.311177 *************** ⚙️Information: #Vendor: Cisco #Product: Finesse/SocialMiner/Unified Communications Manager/Unified Communications Manager IM and Presence Service/Unified Contact Center Express/Unified Intelligence Center/Unity Connection/Virtualized Voice Browser #Type: Unified Communication Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:18:19 +0200 *************** ✏️Title: CVE-2025-20279 | Cisco Unified Contact Center Express up to 12.5(1)_SU03_ES06 Web-based Management Interface cross site scripting (cisco-sa-uccx-multi-UhOTvPGL / EUVD-2025-16885) *************** 📎Link: https://vuldb.com/?id.311178 *************** ⚙️Information: #Vendor: Cisco #Product: Unified Contact Center Express #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:18:39 +0200 *************** ✏️Title: CVE-2025-20275 | Cisco Unified Contact Center Express up to 12.5(1)_SU03_ES06 aef File deserialization (cisco-sa-uccx-editor-rce-ezyYZte8 / EUVD-2025-16888) *************** 📎Link: https://vuldb.com/?id.311179 *************** ⚙️Information: #Vendor: Cisco #Product: Unified Contact Center Express #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:20:08 +0200 *************** ✏️Title: CVE-2025-20163 | Cisco Data Center Network Manager/Nexus Dashboard SSH key exchange without entity authentication (cisco-sa-ndfc-shkv-snQJtjrp / EUVD-2025-16891) *************** 📎Link: https://vuldb.com/?id.311180 *************** ⚙️Information: #Vendor: Cisco #Product: Data Center Network Manager/Nexus Dashboard #Type: Network Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:20:29 +0200 *************** ✏️Title: CVE-2025-20129 | Cisco SocialMiner/Unified Contact Center Express Web-based Chat Interface information disclosure (cisco-sa-ccp-info-disc-ZyGerQpd / EUVD-2025-16892) *************** 📎Link: https://vuldb.com/?id.311181 *************** ⚙️Information: #Vendor: Cisco #Product: SocialMiner/Unified Contact Center Express #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:20:44 +0200 *************** ✏️Title: CVE-2025-20130 | Cisco Identity Services Engine Software 2.7.0 p8 up to 3.2.0 p6 API access control (cisco-sa-ise-file-upload-P4M8vwXY / EUVD-2025-16893) *************** 📎Link: https://vuldb.com/?id.311182 *************** ⚙️Information: #Vendor: Cisco #Product: Identity Services Engine Software #Type: Policy Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:20:52 +0200 *************** ✏️Title: CVE-2025-20261 | Cisco Unified Computing System up to 4.3(4b) SSH communication channel to intended endpoints (cisco-sa-ucs-ssh-priv-esc-2mZDtdjM / EUVD-2025-16890) *************** 📎Link: https://vuldb.com/?id.311183 *************** ⚙️Information: #Vendor: Cisco #Product: Unified Computing System #Type: Virtualization Software #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:23:09 +0200 *************** ✏️Title: CVE-2025-20273 | Cisco Unified Intelligent Contact Management Enterprise up to 15.0(1) Web-based Management Interface cross site scripting (cisco-sa-icm-xss-cfcqhXAg / EUVD-2025-16889) *************** 📎Link: https://vuldb.com/?id.311184 *************** ⚙️Information: #Vendor: Cisco #Product: Unified Intelligent Contact Management Enterprise #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:23:54 +0200 *************** ✏️Title: CVE-2025-20259 | Cisco ThousandEyes Endpoint Agent on Windows Update Process path traversal (cisco-sa-te-endagent-filewrt-zNcDqNRJ / EUVD-2025-16882) *************** 📎Link: https://vuldb.com/?id.311185 *************** ⚙️Information: #Vendor: Cisco #Product: ThousandEyes Endpoint Agent #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 19:19:39 GMT *************** ✏️Title: Crypto Hackers Just Flipped the Script: $2.1B Stolen in 2025 *************** 📎Link: https://medium.com/p/bfd470217a2e *************** ⚙️Tags: #crypto #bitcoin #cryptocurrency #hacking #cryptocurrency_news *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:24:11 +0200 *************** ✏️Title: CVE-2025-2336 | Google AngularJS 1.3.1 SVG Element incomplete filtering of special elements (EUVD-2025-16899) *************** 📎Link: https://vuldb.com/?id.311186 *************** ⚙️Information: #Vendor: Google #Product: AngularJS #Type: JavaScript Library #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 19:25:26 GMT *************** ✏️Title: How One of Crypto’s Biggest Hacks Triggered a Total Security Glow-Up *************** 📎Link: https://medium.com/p/a3fba32b302c *************** ⚙️Tags: #hacking #bybit #cryptocurrency #cryptocurrency_news #crypto *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security