Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 20:21:38 GMT *************** ✏️Title: John the Ripper: The Basics | THM *************** 📎Link: https://medium.com/p/abbd8722c952 *************** ⚙️Tags: #hashing #tryhackme_walkthrough #tryhackme_writeup #tryhackme #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 20:44:39 GMT *************** ✏️Title: ColddBox: Easy — TryHackMe *************** 📎Link: https://medium.com/p/278a6a054043 *************** ⚙️Tags: #tryhackme_writeup #colddbox_easy #tryhackme_walkthrough #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 20:01:11 GMT *************** ✏️Title: Stuxnet Nasıl Çalıştı? SCADA Sistemlerini Vuran Karmaşık Zararlı Yazılımın Analizi *************** 📎Link: https://medium.com/p/cf69f2831f26 *************** ⚙️Tags: #cybersecurity #siber_guvenlik #stuxnet #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:27:53 +0200 *************** ✏️Title: CVE-2024-38341 | IBM Sterling Secure Proxy up to 6.0.3.1/6.1.0.1/6.2.0.1 weak hash *************** 📎Link: https://vuldb.com/?id.310444 *************** ⚙️Information: #Vendor: IBM #Product: Sterling Secure Proxy #Type: Business Process Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:28:00 +0200 *************** ✏️Title: CVE-2024-47055 | Mautic up to 5.2.5/6.0.1 Segment Cloning authorization (GHSA-vph5-ghq3-q782) *************** 📎Link: https://vuldb.com/?id.310445 *************** ⚙️Information: #Product: Mautic #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:28:00 +0200 *************** ✏️Title: CVE-2024-47056 | Mautic up to 6.0.1/5.2.5/4.4.15 env Configuration File cleartext storage (GHSA-h2wg-v8wg-jhxh) *************** 📎Link: https://vuldb.com/?id.310446 *************** ⚙️Information: #Product: Mautic #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:28:12 +0200 *************** ✏️Title: CVE-2024-51453 | IBM Sterling Secure Proxy up to 6.2.0.1 URL path traversal *************** 📎Link: https://vuldb.com/?id.310447 *************** ⚙️Information: #Vendor: IBM #Product: Sterling Secure Proxy #Type: Business Process Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:28:40 +0200 *************** ✏️Title: CVE-2025-48926 | TeleMessage Service up to 2025-05-05 Admin Panel authentication bypass *************** 📎Link: https://vuldb.com/?id.310448 *************** ⚙️Information: #Vendor: TeleMessage #Product: Service #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:29:01 +0200 *************** ✏️Title: CVE-2025-48929 | TeleMessage Service up to 2025-05-05 sensitive information *************** 📎Link: https://vuldb.com/?id.310449 *************** ⚙️Information: #Vendor: TeleMessage #Product: Service #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:29:28 +0200 *************** ✏️Title: CVE-2025-5257 | Mautic up to 6.0.1/5.4.5/4.4.15 /page/preview/1 improper validation of specified quantity in input (GHSA-cqx4-9vqf-q3m8) *************** 📎Link: https://vuldb.com/?id.310450 *************** ⚙️Information: #Product: Mautic #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:29:45 +0200 *************** ✏️Title: CVE-2025-48925 | TeleMessage Service up to 2025-05-05 password hash instead of password for authentication *************** 📎Link: https://vuldb.com/?id.310451 *************** ⚙️Information: #Vendor: TeleMessage #Product: Service #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:30:01 +0200 *************** ✏️Title: CVE-2025-48930 | TeleMessage Service up to 2025-05-05 sensitive information in memory *************** 📎Link: https://vuldb.com/?id.310452 *************** ⚙️Information: #Vendor: TeleMessage #Product: Service #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:30:15 +0200 *************** ✏️Title: CVE-2025-48928 | TeleMessage Service up to 2025-05-05 JSP Application exposure of core dump file to an unauthorized control sphere *************** 📎Link: https://vuldb.com/?id.310453 *************** ⚙️Information: #Vendor: TeleMessage #Product: Service #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:31:43 +0200 *************** ✏️Title: CVE-2025-5256 | Mautic up to 6.0.1/5.2.5/4.4.15 0 endpoint returnUrl redirect (GHSA-6vx9-9r2g-8373) *************** 📎Link: https://vuldb.com/?id.310454 *************** ⚙️Information: #Product: Mautic #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:32:18 +0200 *************** ✏️Title: CVE-2024-57337 | M2Soft CROWNIX Report & ERS unrestricted upload *************** 📎Link: https://vuldb.com/?id.310455 *************** ⚙️Information: #Vendor: M2Soft #Product: CROWNIX Report & ERS #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:32:19 +0200 *************** ✏️Title: CVE-2024-47057 | Mautic up to 6.0.1/5.2.5/4.4.15 Password Reset information exposure (GHSA-424x-cxvh-wq9p) *************** 📎Link: https://vuldb.com/?id.310456 *************** ⚙️Information: #Product: Mautic #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:32:19 +0200 *************** ✏️Title: CVE-2025-32801 | ISC Kea up to 2.4.1/2.6.2/2.7.8 Hook Library code injection *************** 📎Link: https://vuldb.com/?id.310457 *************** ⚙️Information: #Vendor: ISC #Product: Kea #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:32:31 +0200 *************** ✏️Title: CVE-2025-36572 | Dell PowerStore 4.0.0.0 Image File hard-coded credentials (dsa-2025-223) *************** 📎Link: https://vuldb.com/?id.310458 *************** ⚙️Information: #Vendor: Dell #Product: PowerStore #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:32:48 +0200 *************** ✏️Title: CVE-2025-32802 | ISC Kea up to 2.4.1/2.6.2/2.7.8 Configuration file inclusion *************** 📎Link: https://vuldb.com/?id.310459 *************** ⚙️Information: #Vendor: ISC #Product: Kea #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:33:00 +0200 *************** ✏️Title: CVE-2024-57338 | M2Soft CROWNIX Report & ERS up to 5.5.14.1070/7.4.3.960/8.2.0.345 unrestricted upload *************** 📎Link: https://vuldb.com/?id.310460 *************** ⚙️Information: #Vendor: M2Soft #Product: CROWNIX Report & ERS #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security