Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:27 +0000 *************** ✏️Title: CVE-2025-48747 - Netwrix Directory Manager Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48747 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:27 +0000 *************** ✏️Title: CVE-2025-48749 - Netwrix Directory Manager Data Exfiltration Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48749 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 18:15:34 +0000 *************** ✏️Title: CVE-2025-5256 - Mautic Open Redirection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5256 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 19:08:22 GMT *************** ✏️Title: War Rooms: When Production Breaks and So Do We *************** 📎Link: https://medium.com/p/f546266d67c6 *************** ⚙️Tags: #deployment #agile #bugs #software_engineering #customer_experience *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 19:02:06 GMT *************** ✏️Title: My AndroGoat Journey: Deep Dive into Unprotected Android Components *************** 📎Link: https://medium.com/p/f3ba7c4bbb22 *************** ⚙️Tags: #training #penetration_testing #android #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 19:24:32 GMT *************** ✏️Title: How I was able to Delete Any User Post On Tumbler via Chaining vulnerability(0-Click) *************** 📎Link: https://medium.com/p/2edf63d0c900 *************** ⚙️Tags: #csrf #cybersecurity #hacking #bugbounty_writeup #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 19:05:57 GMT *************** ✏️Title: HackingHub Lab: Scam Artists — API Hacking & Reverse Proxy Basics.NahamSec *************** 📎Link: https://medium.com/p/b9b6ffd9cf90 *************** ⚙️Tags: #ctf_writeup #bug_bounty #cybersecurity #ethical_hacking #bug_bounty_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 19:12:41 GMT *************** ✏️Title: 184 Million Logins Leaked? — What You Need to Know (and Do) *************** 📎Link: https://medium.com/p/28b4384e942c *************** ⚙️Tags: #malware #hacking #passwords #website_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 19:19:00 GMT *************** ✏️Title: Interlock Ransomware Gang Deploys NodeSnake RAT on Universities *************** 📎Link: https://medium.com/p/ae82c40ce37a *************** ⚙️Tags: #malware #nodesnake #hacking #ransomware #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:33:48 +0200 *************** ✏️Title: CVE-2025-48747 | Netwrix Directory Manager up to 11.1.25134.03 permission (adv-2025-014) *************** 📎Link: https://vuldb.com/?id.310462 *************** ⚙️Information: #Vendor: Netwrix #Product: Directory Manager #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:34:09 +0200 *************** ✏️Title: CVE-2025-45343 | Tenda W18E 16.01.0.11 Editing /goform/setmodules access control *************** 📎Link: https://vuldb.com/?id.310463 *************** ⚙️Information: #Vendor: Tenda #Product: W18E #Type: Router Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:34:24 +0200 *************** ✏️Title: CVE-2025-48746 | Netwrix Directory Manager up to 11.1.25134.03 improper authentication (adv-2025-014) *************** 📎Link: https://vuldb.com/?id.310464 *************** ⚙️Information: #Vendor: Netwrix #Product: Directory Manager #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:35:16 +0200 *************** ✏️Title: CVE-2025-48931 | TeleMessage Service up to 2025-05-05 Password weak hash *************** 📎Link: https://vuldb.com/?id.310465 *************** ⚙️Information: #Vendor: TeleMessage #Product: Service #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:35:30 +0200 *************** ✏️Title: CVE-2025-48749 | Netwrix Directory Manager up to 11.1.25134.03 information disclosure *************** 📎Link: https://vuldb.com/?id.310466 *************** ⚙️Information: #Vendor: Netwrix #Product: Directory Manager #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:35:48 +0200 *************** ✏️Title: CVE-2024-57336 | M2Soft CROWNIX Report & ERS up to 7.4.3.599/8.0.3.79 access control *************** 📎Link: https://vuldb.com/?id.310467 *************** ⚙️Information: #Vendor: M2Soft #Product: CROWNIX Report & ERS #Type: Reporting Software #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:35:48 +0200 *************** ✏️Title: CVE-2025-1461 | Vuetify 2.x cross site scripting *************** 📎Link: https://vuldb.com/?id.310468 *************** ⚙️Information: #Product: Vuetify #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:36:10 +0200 *************** ✏️Title: CVE-2025-32803 | ISC Kea up to 2.4.1/2.6.2/2.7.8 Log File default permission *************** 📎Link: https://vuldb.com/?id.310469 *************** ⚙️Information: #Vendor: ISC #Product: Kea #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:36:23 +0200 *************** ✏️Title: CVE-2025-47748 | Netwrix Directory Manager up to 11.1.25134.03 hard-coded password *************** 📎Link: https://vuldb.com/?id.310470 *************** ⚙️Information: #Vendor: Netwrix #Product: Directory Manager #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:36:50 +0200 *************** ✏️Title: CVE-2025-31500 | Best Practical Request Tracker up to 5.0.7 Asset Name cross site scripting *************** 📎Link: https://vuldb.com/?id.310471 *************** ⚙️Information: #Vendor: Best Practical #Product: Request Tracker #Type: Ticket Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 20:37:08 +0200 *************** ✏️Title: CVE-2025-31501 | Best Practical Request Tracker up to 5.0.7 RT Permalink cross site scripting *************** 📎Link: https://vuldb.com/?id.310472 *************** ⚙️Information: #Vendor: Best Practical #Product: Request Tracker #Type: Ticket Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security