Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:24:33 +0200 *************** ✏️Title: CVE-2025-2796 | Arista EOS up to 4.33.2F Hardware IPSec Support authentication replay *************** 📎Link: https://vuldb.com/?id.310414 *************** ⚙️Information: #Vendor: Arista #Product: EOS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:25:20 +0200 *************** ✏️Title: CVE-2025-40911 | RRWO Net::CIDR::Set 0.10/0.11/0.12/0.13 on Perl IP CIDR Address String improper validation of specified type of input *************** 📎Link: https://vuldb.com/?id.310415 *************** ⚙️Information: #Vendor: RRWO #Product: Net::CIDR::Set #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:44:01 +0200 *************** ✏️Title: CVE-2025-4963 | WP Extended Plugin up to 3.0.15 on WordPress SVG File Parser cross site scripting *************** 📎Link: https://vuldb.com/?id.310416 *************** ⚙️Information: #Product: WP Extended Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:44:37 +0200 *************** ✏️Title: CVE-2025-27522 | Apache InLong up to 2.1.0 JDBC deserialization *************** 📎Link: https://vuldb.com/?id.310417 *************** ⚙️Information: #Vendor: Apache #Product: InLong #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:45:16 +0200 *************** ✏️Title: CVE-2025-27526 | Apache InLong up to 2.1.0 JDBC deserialization *************** 📎Link: https://vuldb.com/?id.310418 *************** ⚙️Information: #Vendor: Apache #Product: InLong #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:45:52 +0200 *************** ✏️Title: CVE-2025-27528 | Apache InLong up to 2.1.0 Invisible Character information disclosure *************** 📎Link: https://vuldb.com/?id.310419 *************** ⚙️Information: #Vendor: Apache #Product: InLong #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:09:29 +0200 *************** ✏️Title: CVE-2025-5295 | FreeFloat FTP Server 1.0.0 PORT Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310420 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:21:23 +0200 *************** ✏️Title: CVE-2025-5297 | SourceCodester Computer Store System 1.0 main.c Add laptopcompany/RAM/Processor stack-based overflow *************** 📎Link: https://vuldb.com/?id.310421 *************** ⚙️Information: #Vendor: SourceCodester #Product: Computer Store System #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:22:28 +0200 *************** ✏️Title: CVE-2025-5298 | Campcodes Online Hospital Management System 1.0 betweendates-detailsreports.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.310422 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Hospital Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 06:22:56 GMT *************** ✏️Title: India-Pakistan War 2025 : Offensive Security perspective *************** 📎Link: https://medium.com/p/5d60d1fd6e50 *************** ⚙️Tags: #blue_team #india_pakistan_conflict #offensive_security #war #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-5066 - Google Chrome Android Messages UI Spoofing *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5066 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-5067 - Inappropriate implementation in Tab Strip in Googl *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5067 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-5198 - Stackrox XSS Vulnerability in Role Object Name *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5198 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5222 - ICU Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5222 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5278 - "GNU Coreutils Sort Utility Heap Buffer Under-Read Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5278 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5279 - Amazon Redshift Python Connector AzureOAuth2CredentialsProvider SSL Certificate Validation Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5279 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5280 - Google Chrome V8 Out-of-Bounds Heap Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5280 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5281 - Google Chrome BFCache User Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5281 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5283 - Google Chrome libvpx Use-After-Free Heap Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5283 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 22:15:21 +0000 *************** ✏️Title: CVE-2025-32440 - NetAlertX Authentication Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-32440 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security