Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:16:00 +0000 *************** ✏️Title: CVE-2025-5503 - TOTOLINK X15 Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5503 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:16:00 +0000 *************** ✏️Title: CVE-2025-5504 - TOTOLINK X2000R Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5504 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:16:00 +0000 *************** ✏️Title: CVE-2025-5505 - TOTOLINK A3002RU Cross-Site Scripting Vulnerability in Virtual Server Page *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5505 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:16:00 +0000 *************** ✏️Title: CVE-2025-5506 - TOTOLINK A3002RU Cross-Site Scripting in NAT Mapping Page *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5506 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:19:01 +0000 *************** ✏️Title: What Is Cyber Threat Intelligence: Quick Guide For CISOs  *************** 📎Link: https://cybersecuritynews.com/?p=109499 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:42:29 +0000 *************** ✏️Title: Android Security Update – Patch for Vulnerabilities that Allows Privilege Escalation *************** 📎Link: https://cybersecuritynews.com/?p=109632 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:59:58 +0000 *************** ✏️Title: Securing Legacy Systems Strategies for Modernizing Old Tech *************** 📎Link: https://cybersecuritynews.com/?p=108349 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:16:59 +0200 *************** ✏️Title: CVE-2025-43923 | Unicom Focal Point 7.6.1 ReportController image sql injection *************** 📎Link: https://vuldb.com/?id.310973 *************** ⚙️Information: #Vendor: Unicom #Product: Focal Point #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:17:21 +0200 *************** ✏️Title: CVE-2025-46154 | FoxCMS 1.25 installdb.php dbname sql injection *************** 📎Link: https://vuldb.com/?id.310974 *************** ⚙️Information: #Product: FoxCMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:17:32 +0200 *************** ✏️Title: CVE-2024-45655 | IBM Application Gateway up to 24.09 permission assignment *************** 📎Link: https://vuldb.com/?id.310975 *************** ⚙️Information: #Vendor: IBM #Product: Application Gateway #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:18:07 +0200 *************** ✏️Title: CVE-2025-36564 | Dell Encryption Admin Utilities up to 11.10.1 symlink (dsa-2025-224) *************** 📎Link: https://vuldb.com/?id.310976 *************** ⚙️Information: #Vendor: Dell #Product: Encryption Admin Utilities #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:18:26 +0200 *************** ✏️Title: CVE-2025-43924 | Unicom Focal Point 7.6.1 loginpage SettingController val cross site scripting *************** 📎Link: https://vuldb.com/?id.310977 *************** ⚙️Information: #Vendor: Unicom #Product: Focal Point #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:18:41 +0200 *************** ✏️Title: CVE-2025-43925 | Unicom Focal Point 7.6.1 hard-coded key *************** 📎Link: https://vuldb.com/?id.310978 *************** ⚙️Information: #Vendor: Unicom #Product: Focal Point #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:19:22 +0200 *************** ✏️Title: CVE-2025-45855 | erupt 1.12.19 image unrestricted upload *************** 📎Link: https://vuldb.com/?id.310979 *************** ⚙️Information: #Product: erupt #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:22:26 +0200 *************** ✏️Title: CVE-2024-47081 | psf requests URL src/requests/utils.py information disclosure *************** 📎Link: https://vuldb.com/?id.310980 *************** ⚙️Information: #Vendor: psf #Product: requests #Risk: problematic #Local: No #Remote: Partially #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:58:45 +0200 *************** ✏️Title: CVE-2025-25019 | IBM QRadar Suite Software/Cloud Pak for Security session expiration *************** 📎Link: https://vuldb.com/?id.310981 *************** ⚙️Information: #Vendor: IBM #Product: QRadar Suite Software/Cloud Pak for Security #Type: Cloud Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:58:51 +0200 *************** ✏️Title: CVE-2025-25020 | IBM QRadar Suite Software/Cloud Pak for Security API Data improper validation of specified type of input *************** 📎Link: https://vuldb.com/?id.310982 *************** ⚙️Information: #Vendor: IBM #Product: QRadar Suite Software/Cloud Pak for Security #Type: Cloud Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:59:04 +0200 *************** ✏️Title: CVE-2025-25022 | IBM QRadar Suite Software/Cloud Pak for Security password in configuration file *************** 📎Link: https://vuldb.com/?id.310983 *************** ⚙️Information: #Vendor: IBM #Product: QRadar Suite Software/Cloud Pak for Security #Type: Cloud Software #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:59:24 +0200 *************** ✏️Title: CVE-2025-25021 | IBM QRadar Suite Software/Cloud Pak for Security Case Management Script Creation code injection *************** 📎Link: https://vuldb.com/?id.310984 *************** ⚙️Information: #Vendor: IBM #Product: QRadar Suite Software/Cloud Pak for Security #Type: Cloud Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:59:35 +0200 *************** ✏️Title: CVE-2025-1334 | IBM QRadar Suite Software/Cloud Pak for Security web browser cache containing sensitive information *************** 📎Link: https://vuldb.com/?id.310985 *************** ⚙️Information: #Vendor: IBM #Product: QRadar Suite Software/Cloud Pak for Security #Type: Cloud Software #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security