Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:41:57 +0200 *************** ✏️Title: CVE-2025-27701 | Google Android process_crypto_cmd ptrs memory corruption *************** 📎Link: https://vuldb.com/?id.310383 *************** ⚙️Information: #Vendor: Google #Product: Android #Type: Smartphone Operating System #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:42:52 +0200 *************** ✏️Title: CVE-2025-48057 | Icinga icinga2 up to 2.12.11/2.13.11/2.14.5 VerifyCertificate improper following of a certificate's chain of trust *************** 📎Link: https://vuldb.com/?id.310384 *************** ⚙️Information: #Vendor: Icinga #Product: icinga2 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:28:54 +0200 *************** ✏️Title: CVE-2025-23247 | NVIDIA CUDA Toolkit ELF File Parser length parameter *************** 📎Link: https://vuldb.com/?id.310385 *************** ⚙️Information: #Vendor: NVIDIA #Product: CUDA Toolkit #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:30:26 +0200 *************** ✏️Title: CVE-2024-49197 | Samsung Mobile Processor/Wearable Processor/Modem Exynos up to 1480 Wi-Fi out-of-bounds *************** 📎Link: https://vuldb.com/?id.310386 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor/Wearable Processor/Modem Exynos #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:30:41 +0200 *************** ✏️Title: CVE-2025-22377 | Samsung Mobile Processor/Wearable Processor/Modem Exynos up to 9110 GPRS Protocol out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310387 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor/Wearable Processor/Modem Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:30:59 +0200 *************** ✏️Title: CVE-2024-49196 | Samsung Mobile Processor 1480/2400 GPU denial of service *************** 📎Link: https://vuldb.com/?id.310388 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:32:23 +0200 *************** ✏️Title: CVE-2025-5278 | GNU Coreutils 7.2 Key Specification heap-based overflow *************** 📎Link: https://vuldb.com/?id.310389 *************** ⚙️Information: #Vendor: GNU #Product: Coreutils #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 20:41:11 +0200 *************** ✏️Title: CVE-2025-45475 | Maccms10 2025.1000.4047 Friend Link Management server-side request forgery *************** 📎Link: https://vuldb.com/?id.310390 *************** ⚙️Information: #Product: Maccms10 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 20:41:47 +0200 *************** ✏️Title: CVE-2025-4800 | MasterStudy LMS Pro Plugin up to 4.7.0 on WordPress stm_lms_add_assignment_attachment unrestricted upload *************** 📎Link: https://vuldb.com/?id.310391 *************** ⚙️Information: #Product: MasterStudy LMS Pro Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 07:37:14 GMT *************** ✏️Title: Header Injection to Hero: How I Hijacked Emails and Made the Server Sing *************** 📎Link: https://medium.com/p/7b8817e3736c *************** ⚙️Tags: #bug_bounty #hacking #infosec #money #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 08:19:50 GMT *************** ✏️Title: Into Linux Kernel Fuzzing: A Researcher’s Diary (Part 2) *************** 📎Link: https://medium.com/p/171b55c63697 *************** ⚙️Tags: #fuzzing #pentesting #infosec_write_ups #infosec #information_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 09:28:07 GMT *************** ✏️Title: Secure SDLC (SSDLC): How to Build Security into the Development Lifecycle *************** 📎Link: https://medium.com/p/0528762007bc *************** ⚙️Tags: #cybersecurity #cyber_security_awareness #software_development #infosec #sdlc_methodologies *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 09:42:39 GMT *************** ✏️Title: DevSecOps in Action: Automating Security Without Slowing Down *************** 📎Link: https://medium.com/p/a65f5f6aa316 *************** ⚙️Tags: #infosec #cybersecurity #devops #cyber #devsecops *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 10:25:12 GMT *************** ✏️Title: From Classroom to HackTheBox: My Journey Through Cybersecurity Degree, Certifications, and the… *************** 📎Link: https://medium.com/p/9891a3eeeb80 *************** ⚙️Tags: #cybersecurity #cybersecurity_tips #tryhackme #infosec #hackthebox *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 14:01:24 GMT *************** ✏️Title: Cyber Briefing: 2025.05.27 *************** 📎Link: https://medium.com/p/22ccd6c40dd6 *************** ⚙️Tags: #cybersecurity #cyber_briefing #infosec #technology #sports *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 14:49:21 GMT *************** ✏️Title: Why Penetration Testing is Critical for Your Business Today *************** 📎Link: https://medium.com/p/d0e8d569ad86 *************** ⚙️Tags: #penetration_testing #small_business_security #cybersecurity #infosec #vapt *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 14:49:40 GMT *************** ✏️Title: ARC Stealer Hiding in the Ether *************** 📎Link: https://medium.com/p/9231b3ac7318 *************** ⚙️Tags: #reverse_engineering #infosec #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 16:48:42 GMT *************** ✏️Title: The Pentesting Paradox: Why Security Tools Alone Aren’t Saving Businesses. *************** 📎Link: https://medium.com/p/d4cbaa7a4fc4 *************** ⚙️Tags: #data_breach #penetration_testing #business_security #infosec #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 05:12:39 GMT *************** ✏️Title: Mastering Debugging in Coding: Essential Tips to Identify and Fix Bugs Effectively *************** 📎Link: https://medium.com/p/253c6126794d *************** ⚙️Tags: #bugs #fix #coding #debugging #tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 18:09:29 GMT *************** ✏️Title: The Best Ways to Earn $BUG with StakingRewards *************** 📎Link: https://medium.com/p/0e2bc3024eff *************** ⚙️Tags: #crypto #staking_rewards #web3 #staking #bugs *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security