Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-20163 - Cisco Nexus Dashboard Fabric Controller SSH Host Key Validation Impersonation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20163 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-20259 - Cisco ThousandEyes Endpoint Agent for Windows Symbolic Link File Deletion Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20259 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-20261 - Cisco IMC SSH Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20261 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20273 - Cisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20273 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20275 - Cisco Unified Contact Center Express Java Deserialization Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20275 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20276 - "Cisco Unified CCX Java Deserialization Remote Code Execution Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20276 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20277 - Cisco Unified CCX Path Traversal Remote Code Execution *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20277 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20278 - "Cisco Unified Communications Command Injection Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20278 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2025-20279 - Cisco Unified CCX Stored XSS Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20279 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2025-20286 - "Cisco ISE Cloud Credential Exposure Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20286 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2025-2336 - AngularJS SVG Image Content Spoofing Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2336 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2025-5595 - FreeFloat FTP Server Buffer Overflow *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5595 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:29 +0000 *************** ✏️Title: CVE-2025-5596 - FreeFloat FTP Server Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5596 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:29 +0000 *************** ✏️Title: CVE-2025-5688 - Microsoft Windows DNS Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5688 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:22:04 +0200 *************** ✏️Title: CVE-2025-5628 | SourceCodester Food Menu Manager 1.0 Add Menu /index.php name/description cross site scripting *************** 📎Link: https://vuldb.com/?id.311114 *************** ⚙️Information: #Vendor: SourceCodester #Product: Food Menu Manager #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:25:00 +0200 *************** ✏️Title: CVE-2025-5629 | Tenda AC10 up to 15.03.06.47 HTTP /goform/SetPptpServerCfg formSetPPTPServer startIp/endIp buffer overflow *************** 📎Link: https://vuldb.com/?id.311115 *************** ⚙️Information: #Vendor: Tenda #Product: AC10 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:30:18 +0200 *************** ✏️Title: CVE-2025-5630 | D-Link DIR-816 1.10CNB05 form2lansetup.cgi ip stack-based overflow *************** 📎Link: https://vuldb.com/?id.311116 *************** ⚙️Information: #Vendor: D_Link #Product: DIR_816 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:35:27 +0200 *************** ✏️Title: CVE-2025-5598 | WF Steuerungstechnik airleader MASTER 3.0046 path traversal (msec-2025-004 / EUVD-2025-16866) *************** 📎Link: https://vuldb.com/?id.311117 *************** ⚙️Information: #Vendor: WF Steuerungstechnik #Product: airleader MASTER #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:35:44 +0200 *************** ✏️Title: CVE-2025-5631 | code-projects/anirbandutta9 Content Management System/News-Buzz 1.0 /publicposts.php post sql injection *************** 📎Link: https://vuldb.com/?id.311118 *************** ⚙️Information: #Vendor: code_projects/anirbandutta9 #Product: Content Management System/News_Buzz #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:35:45 +0200 *************** ✏️Title: CVE-2025-5632 | code-projects/anirbandutta9 Content Management System/News-Buzz 1.0 /admin/users.php change_to_admin sql injection *************** 📎Link: https://vuldb.com/?id.311119 *************** ⚙️Information: #Vendor: code_projects/anirbandutta9 #Product: Content Management System/News_Buzz #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security