Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:36:17 +0200 *************** ✏️Title: CVE-2024-53010 | Qualcomm Snapdragon Auto up to WSA8845H HLOS memory corruption *************** 📎Link: https://vuldb.com/?id.310937 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon CCW/Snapdragon Compute/Snapdragon Consumer IOT/Snapdragon Industrial IOT/Snapdragon MDM/Snapdragon Mobile/Snapdragon Technology #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:36:31 +0200 *************** ✏️Title: CVE-2024-53013 | Qualcomm Snapdragon Auto C-V2X 9150 up to WSA8810 Voice Call Registration buffer overflow *************** 📎Link: https://vuldb.com/?id.310938 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon Compute/Snapdragon Consumer IOT/Snapdragon Industrial IOT/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:36:37 +0200 *************** ✏️Title: CVE-2024-53015 | Qualcomm Snapdragon Auto up to WSA8845H ioctl Command use after free *************** 📎Link: https://vuldb.com/?id.310939 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon CCW/Snapdragon Compute/Snapdragon Industrial IOT/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:47:36 +0200 *************** ✏️Title: CVE-2024-53016 | Qualcomm Snapdragon Compute FastConnect 6800 up to WSA8832 Camera Driver toctou *************** 📎Link: https://vuldb.com/?id.310940 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Compute/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:47:44 +0200 *************** ✏️Title: CVE-2024-53017 | Qualcomm Snapdragon Wearables SDM429W/WCN3620/WCN3660B ioctl Command out-of-range pointer offset *************** 📎Link: https://vuldb.com/?id.310941 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Wearables #Type: Chip Software #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:47:54 +0200 *************** ✏️Title: CVE-2024-53018 | Qualcomm Snapdragon Compute FastConnect 6900 up to WSA8832 OIS Packet Parser toctou *************** 📎Link: https://vuldb.com/?id.310942 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Compute/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:47:59 +0200 *************** ✏️Title: CVE-2025-21480 | Qualcomm Snapdragon CCW up to WSA8845H authorization *************** 📎Link: https://vuldb.com/?id.310943 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon CCW/Snapdragon Compute/Snapdragon Industrial IOT/Snapdragon Mobile #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:48:07 +0200 *************** ✏️Title: CVE-2025-21485 | Qualcomm Snapdragon Compute FastConnect 6900 up to WSA8845 FastRPC toctou *************** 📎Link: https://vuldb.com/?id.310944 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Compute/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:48:19 +0200 *************** ✏️Title: CVE-2025-21486 | Qualcomm Snapdragon Compute FastConnect 6900 up to WSA8845 Shell Binary untrusted pointer dereference *************** 📎Link: https://vuldb.com/?id.310945 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Compute/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:48:27 +0200 *************** ✏️Title: CVE-2025-27029 | Qualcomm Snapdragon Auto FastConnect 7800 up to WSA8845 Response Buffer buffer over-read *************** 📎Link: https://vuldb.com/?id.310946 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon Industrial IOT/Snapdragon MC/Snapdragon Mobile/Snapdragon Wired Infrastructure and Networking #Type: Chip Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:48:35 +0200 *************** ✏️Title: CVE-2025-27031 | Qualcomm Snapdragon Compute/Snapdragon Industrial IOT FastConnect 6700 up to WSA8845 ioctl Command use after free *************** 📎Link: https://vuldb.com/?id.310947 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Compute/Snapdragon Industrial IOT #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:48:51 +0200 *************** ✏️Title: CVE-2025-27038 | Qualcomm Snapdragon Connectivity up to WSA8835 Chrome use after free *************** 📎Link: https://vuldb.com/?id.310948 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Connectivity/Snapdragon Consumer IOT/Snapdragon Industrial IOT/Snapdragon Mobile/Snapdragon Voice & Music/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:49:01 +0200 *************** ✏️Title: CVE-2025-31711 | Unisoc T9300 Cplog Service null pointer dereference *************** 📎Link: https://vuldb.com/?id.310949 *************** ⚙️Information: #Vendor: Unisoc #Product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000/T8300/T9300 #Type: Chip Software #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:49:12 +0200 *************** ✏️Title: CVE-2025-31712 | Unisoc T9300 Cplog Service out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310950 *************** ⚙️Information: #Vendor: Unisoc #Product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000/T8300/T9300 #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:00:20 GMT *************** ✏️Title: Remote File Inclusion (RFI) Lab — Docker Custom Setup and Exploitation *************** 📎Link: https://medium.com/p/44a4e12628fa *************** ⚙️Tags: #cybersecurity #bug_bounty #docker_compose #lfi #lfi_vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:35:51 GMT *************** ✏️Title: Memahami TCS/SCADA dan Ancaman Keamanannya: Tinjauan terhadap Serangan ICS/SCADA *************** 📎Link: https://medium.com/p/ab7d6431b5b7 *************** ⚙️Tags: #telecontrol_system #scada #hacking #industrial_control_system #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:00:48 GMT *************** ✏️Title: Mitigation Techniques Every Business Must Use to Prevent Cyber Threats *************** 📎Link: https://medium.com/p/1c41c5840b95 *************** ⚙️Tags: #technology #data #cyber_security_awareness #cybersecurity #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:24:13 GMT *************** ✏️Title: Hunting for Secrets in Source Maps (.map Files) *************** 📎Link: https://medium.com/p/de969e4b0cdb *************** ⚙️Tags: #hacking #penetration_testing #technology #bug_bounty #tips_and_tricks *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:30:32 GMT *************** ✏️Title: OAuth Misuse: Chaining Redirect URIs and Silent Logins into Full Account Takeover *************** 📎Link: https://medium.com/p/91b68f68227b *************** ⚙️Tags: #penetration_testing #bug_bounty_tips #technology #tips_and_tricks #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:26:34 GMT *************** ✏️Title: HTB — EscapeTwo Writeup: Active Directory Attacks in Windows Environment *************** 📎Link: https://medium.com/p/d4ee339cb11a *************** ⚙️Tags: #active_directory #hackthebox_writeup #hackthebox #writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security