Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 15:15:40 +0000 *************** ✏️Title: CVE-2025-49198 - Vulnerability Title: "DREAMSERVER Token Guessing Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49198 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 15:15:40 +0000 *************** ✏️Title: CVE-2025-49199 - VMware vRealize Log Insight Unauthenticated ZIP File Tampering Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49199 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 15:15:40 +0000 *************** ✏️Title: CVE-2025-49200 - VMware vSphere Unencrypted Backup Files Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49200 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 18:18:43 +0200 *************** ✏️Title: CVE-2025-49467 | GWE Systems JEvents Component up to 3.6.87 on Joomla sql injection *************** 📎Link: https://vuldb.com/?id.312429 *************** ⚙️Information: #Vendor: GWE Systems #Product: JEvents Component #Type: Joomla Component #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 18:19:03 +0200 *************** ✏️Title: CVE-2025-46035 | Tenda AC6 15.03.05.16 /goform/openSchedWifi schedStartTime/schedEndTime buffer overflow *************** 📎Link: https://vuldb.com/?id.312430 *************** ⚙️Information: #Vendor: Tenda #Product: AC6 #Type: Router Operating System #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 18:19:15 +0200 *************** ✏️Title: CVE-2025-36573 | Dell Smart Dock prior 01.00.08.01 log file (dsa-2025-218) *************** 📎Link: https://vuldb.com/?id.312431 *************** ⚙️Information: #Vendor: Dell #Product: Smart Dock #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 18:19:26 +0200 *************** ✏️Title: CVE-2024-44905 | go-pg 10.13.0 /types/append_value.go sql injection *************** 📎Link: https://vuldb.com/?id.312432 *************** ⚙️Information: #Vendor: go_pg #Product: pg #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 18:19:38 +0200 *************** ✏️Title: CVE-2024-44906 | uptrace pgdriver 1.2.1 /pgdriver/format.go appendArg sql injection *************** 📎Link: https://vuldb.com/?id.312433 *************** ⚙️Information: #Vendor: uptrace #Product: pgdriver #Type: Hardware Driver Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 18:19:55 +0200 *************** ✏️Title: CVE-2025-29744 | pg-promise up to 11.5.4 Negative Number sql injection *************** 📎Link: https://vuldb.com/?id.312434 *************** ⚙️Information: #Product: pg_promise #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 18:20:38 +0200 *************** ✏️Title: CVE-2024-7562 | Revenera InstallShield 2021 R2/2022 R2/2023 R2 Standalone MSI Setup temp file *************** 📎Link: https://vuldb.com/?id.312435 *************** ⚙️Information: #Vendor: Revenera #Product: InstallShield #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 16:20:02 GMT *************** ✏️Title: WHO KNEW… *************** 📎Link: https://medium.com/p/8e6d94974da4 *************** ⚙️Tags: #faith #women #communication #stalker #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 16:46:41 GMT *************** ✏️Title: The Chat Trap: A Red Team’s Path to Domain Compromise *************** 📎Link: https://medium.com/p/f01a9df2624d *************** ⚙️Tags: #phishing #red_team #evilginx #cybersecurity #pentesting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 16:21:01 GMT *************** ✏️Title: TryHackMe Mr Robot CTF — Walkthrough *************** 📎Link: https://medium.com/p/4e4e6293bc41 *************** ⚙️Tags: #ctf #hacking #walkthrough #tryhackme #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 16:01:37 GMT *************** ✏️Title: TryHackMe-Lookup CTF *************** 📎Link: https://medium.com/p/39d89beef943 *************** ⚙️Tags: #ctf_writeup #ctf #cybersecurity #türkçe #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 16:06:19 +0000 *************** ✏️Title: Cloudflare Warns of DDoS Attacks Targeting Journalists and News Organizations *************** 📎Link: https://cybersecuritynews.com/?p=110927 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 16:20:20 +0000 *************** ✏️Title: Threat Actors Exploiting Expired Discord Invite Links to Deliver Multi-Stage Malware *************** 📎Link: https://cybersecuritynews.com/?p=110930 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 15:52:58 GMT *************** ✏️Title: Telegram@ablertgonzalez Earn 2500 dollars daily via PayPal cashapp Bank TransfesCc cvv FULLZ dumps… *************** 📎Link: https://medium.com/p/ff87b918e489 *************** ⚙️Tags: #paypal #cryptocurrency #hacking #bitcoin #credit_cards *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 16:09:49 GMT *************** ✏️Title: Hack Happens. Are You Ready to Respond? *************** 📎Link: https://medium.com/p/49c7abeb6879 *************** ⚙️Tags: #cybersecurity #cyberattack #cyber_security_awareness #infosec #cybercrime *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:15:30 +0000 *************** ✏️Title: CVE-2025-49182 - Citrix Application Credentials Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49182 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 14:15:30 +0000 *************** ✏️Title: CVE-2025-49183 - Apache HTTP Unencrypted Communication Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49183 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security