Sec WriteUp ~ CVE Alert
前往频道在 Telegram
NOTIFICATIONS CHANNEL. 🔴 Security_WriteUp: #Medium #CyberSecurity #Hacker_News 🔴 CVE Reports #CVEfeed #Tenable #VulDb 🔴 Exploit Database #Exploit_DB #CXSECURITY #Sploitus Academy : @HackTheBox_Academy
显示更多未指定国家技术与应用43 281
472
订阅者
无数据24 小时
无数据7 天
-1030 天
帖子存档
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:53:35 +0200
***************
✏️Title: CVE-2025-44904 | HDF5 1.14.6 H5VM_memcpyvv heap-based overflow
***************
📎Link: https://vuldb.com/?id.310596
***************
⚙️Information:
#Product: HDF5 #Type: Database Software #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:53:46 +0200
***************
✏️Title: CVE-2025-44614 | Tinxy WiFi Lock Controller 1 Phone Number cleartext storage
***************
📎Link: https://vuldb.com/?id.310597
***************
⚙️Information:
#Vendor: Tinxy #Product: WiFi Lock Controller #Type: Wireless LAN Software #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:54:05 +0200
***************
✏️Title: CVE-2025-31231 | Apple macOS up to 15.3 App permission
***************
📎Link: https://vuldb.com/?id.310598
***************
⚙️Information:
#Vendor: Apple #Product: macOS #Type: Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:54:08 +0200
***************
✏️Title: CVE-2025-31263 | Apple macOS up to 15.3 App memory corruption
***************
📎Link: https://vuldb.com/?id.310599
***************
⚙️Information:
#Vendor: Apple #Product: macOS #Type: Operating System #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:54:15 +0200
***************
✏️Title: CVE-2025-44905 | HDF5 1.14.6 H5Z__filter_scaleoffset heap-based overflow
***************
📎Link: https://vuldb.com/?id.310600
***************
⚙️Information:
#Product: HDF5 #Type: Database Software #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:54:26 +0200
***************
✏️Title: CVE-2025-4967 | Esri Portal for ArcGIS up to 11.4 server-side request forgery
***************
📎Link: https://vuldb.com/?id.310601
***************
⚙️Information:
#Vendor: Esri #Product: Portal for ArcGIS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:54:35 +0200
***************
✏️Title: CVE-2025-44906 | Jhead 3.08 jhead.c ProcessFile use after free
***************
📎Link: https://vuldb.com/?id.310602
***************
⚙️Information:
#Product: Jhead #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:55:29 +0200
***************
✏️Title: CVE-2025-5142 | Simple Page Access Restriction Plugin up to 1.0.31 on WordPress settings.php cross-site request forgery
***************
📎Link: https://vuldb.com/?id.310603
***************
⚙️Information:
#Product: Simple Page Access Restriction Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:56:02 +0200
***************
✏️Title: CVE-2025-4597 | Woo Slider Pro Plugin up to 1.12 on WordPress woo_slide_pro_delete_draft_preview authorization
***************
📎Link: https://vuldb.com/?id.310604
***************
⚙️Information:
#Product: Woo Slider Pro Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:56:02 +0200
***************
✏️Title: CVE-2025-4944 | LA-Studio Element Kit for Elementor Plugin up to 1.5.2 on WordPress Image Compare Widget/Google Maps Widget cross site scripting
***************
📎Link: https://vuldb.com/?id.310605
***************
⚙️Information:
#Vendor: LA_Studio #Product: Element Kit for Elementor Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:56:16 +0200
***************
✏️Title: CVE-2025-5190 | Browse As Plugin up to 0.2 on WordPress IS_BA_Browse_As::notice is_ba_original_user_cookieHASH privilege escalation
***************
📎Link: https://vuldb.com/?id.310606
***************
⚙️Information:
#Product: Browse As Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:56:30 +0200
***************
✏️Title: CVE-2025-4431 | Featured Image Plus Plugin up to 1.6.3 on WordPress fip_save_attach_featured authorization
***************
📎Link: https://vuldb.com/?id.310607
***************
⚙️Information:
#Product: Featured Image Plus Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:56:38 +0200
***************
✏️Title: CVE-2025-5236 | NinjaTeam Chat for Telegram Plugin up to 1.1 on WordPress Username cross site scripting
***************
📎Link: https://vuldb.com/?id.310608
***************
⚙️Information:
#Vendor: NinjaTeam #Product: Chat for Telegram Plugin #Type: Chat Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:56:43 +0200
***************
✏️Title: CVE-2025-5235 | OpenSheetMusicDisplay Plugin up to 1.4.0 on WordPress className cross site scripting
***************
📎Link: https://vuldb.com/?id.310609
***************
⚙️Information:
#Product: OpenSheetMusicDisplay Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:57:06 +0200
***************
✏️Title: CVE-2025-1051 | Sonos Era 300 heap-based overflow
***************
📎Link: https://vuldb.com/?id.310610
***************
⚙️Information:
#Vendor: Sonos #Product: Era 300 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 05:59:04 +0200
***************
✏️Title: CVE-2025-4598 | systemd-coredump SUID race condition
***************
📎Link: https://vuldb.com/?id.310611
***************
⚙️Information:
#Product: systemd_coredump #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Config
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 06:01:43 +0200
***************
✏️Title: CVE-2025-5054 | apport information disclosure
***************
📎Link: https://vuldb.com/?id.310612
***************
⚙️Information:
#Product: apport #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 06:04:26 +0200
***************
✏️Title: CVE-2025-27462 | Xen XenCons permission
***************
📎Link: https://vuldb.com/?id.310613
***************
⚙️Information:
#Product: Xen #Type: Virtualization Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 06:04:32 +0200
***************
✏️Title: CVE-2025-27463 | Xen XenIface permission
***************
📎Link: https://vuldb.com/?id.310614
***************
⚙️Information:
#Product: Xen #Type: Virtualization Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 30 May 2025 06:04:36 +0200
***************
✏️Title: CVE-2025-27464 | Xen XenBus permission
***************
📎Link: https://vuldb.com/?id.310615
***************
⚙️Information:
#Product: Xen #Type: Virtualization Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
