Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:01:49 +0200 *************** ✏️Title: CVE-2025-3230 | Mattermost up to 9.11.12/10.5.3/10.6.2/10.7.0 Access Token incorrect implementation of authentication algorithm *************** 📎Link: https://vuldb.com/?id.310704 *************** ⚙️Information: #Product: Mattermost #Type: Groupware Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:02:21 +0200 *************** ✏️Title: CVE-2024-13915 | Ulefone/Krüger&Matz com.pri.factorytest up to 1.0 improper export of android application components *************** 📎Link: https://vuldb.com/?id.310705 *************** ⚙️Information: #Vendor: Ulefone/Krüger&Matz #Product: com.pri.factorytest #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:02:45 +0200 *************** ✏️Title: CVE-2024-13916 | Kruger&Matz com.pri.applock 13 query exposure of sensitive system information to an unauthorized control sphere *************** 📎Link: https://vuldb.com/?id.310706 *************** ⚙️Information: #Vendor: Kruger&Matz #Product: com.pri.applock #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:02:59 +0200 *************** ✏️Title: CVE-2024-13917 | Kruger&Matz com.pri.applock 13 com.pri.applock.LockUI improper export of android application components *************** 📎Link: https://vuldb.com/?id.310707 *************** ⚙️Information: #Vendor: Kruger&Matz #Product: com.pri.applock #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:03:33 +0200 *************** ✏️Title: CVE-2024-42190 | HCL Traveler for Microsoft Outlook up to 3.0.11 uncontrolled search path (KB0120744) *************** 📎Link: https://vuldb.com/?id.310708 *************** ⚙️Information: #Vendor: HCL #Product: Traveler for Microsoft Outlook #Type: Groupware Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:03:40 +0200 *************** ✏️Title: CVE-2025-5016 | Relevanssi Plugin on WordPress Excerpt Highlights cross site scripting *************** 📎Link: https://vuldb.com/?id.310709 *************** ⚙️Information: #Product: Relevanssi Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:40 +0000 *************** ✏️Title: CVE-2025-0602 - "SolidWorks Collaborative Industry Innovator Stored XSS Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0602 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:41 +0000 *************** ✏️Title: CVE-2025-4983 - City Referential Manager 3DEXPERIENCE XSS *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4983 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:41 +0000 *************** ✏️Title: CVE-2025-4984 - City Discover City Referential Manager Stored XSS *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4984 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:42 +0000 *************** ✏️Title: CVE-2025-4985 - "3DEXPERIENCE Project Portfolio Manager Stored XSS Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4985 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:42 +0000 *************** ✏️Title: CVE-2025-4986 - "3DEXPERIENCE Product Manager Stored XSS" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4986 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:42 +0000 *************** ✏️Title: CVE-2025-4988 - "3DEXPERIENCE Stored XSS" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4988 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:42 +0000 *************** ✏️Title: CVE-2025-4989 - "Product Manager 3DEXPERIENCE Stored XSS" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4989 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:42 +0000 *************** ✏️Title: CVE-2025-4990 - "3DEXPERIENCE Product Manager Stored XSS" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4990 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:42 +0000 *************** ✏️Title: CVE-2025-4991 - "3DEXPERIENCE Collaborative Industry Innovator Stored XSS" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4991 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 15:15:42 +0000 *************** ✏️Title: CVE-2025-4992 - "Service Process Engineer XSS Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4992 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 15:59:11 GMT *************** ✏️Title: 2025 Data Breach Prevention Strategy Guide *************** 📎Link: https://medium.com/p/34c7c769596b *************** ⚙️Tags: #cybersecurity #data_protection #hacking #data_breach *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 16:34:26 GMT *************** ✏️Title: Why You’re Still Getting Hacked in 2025 (According to Real Cybersecurity Stats) *************** 📎Link: https://medium.com/p/e3ac66ceb855 *************** ⚙️Tags: #security #technology #hacking #cybersecurity #cybercrime *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 15:52:16 GMT *************** ✏️Title: OSINT dalam Cybersecurity: Menggali Informasi dari Jejak Digital *************** 📎Link: https://medium.com/p/1377e433fd1b *************** ⚙️Tags: #idnbootcampcyber #cybersecurity #osint #osint_tool *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 15:37:35 GMT *************** ✏️Title: Secure Coding: The First Line of Defense in Application Security *************** 📎Link: https://medium.com/p/add187a52818 *************** ⚙️Tags: #sdlc #infosec #infosecurity #cybersecurity #secure_coding *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security