Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 06:05:41 +0200 *************** ✏️Title: CVE-2025-48381 | cvat-ai cvat up to 2.37.x insertion of sensitive information into sent data *************** 📎Link: https://vuldb.com/?id.310616 *************** ⚙️Information: #Vendor: cvat_ai #Product: cvat #Type: Artificial Intelligence Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 06:06:20 +0200 *************** ✏️Title: CVE-2025-48491 | aryan6673 project-ai prior pre-beta API Key hard-coded credentials *************** 📎Link: https://vuldb.com/?id.310617 *************** ⚙️Information: #Vendor: aryan6673 #Product: project_ai #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 04:00:00 +0000 *************** ✏️Title: Integrating Threat Intelligence into Security Operations Centers *************** 📎Link: https://cybersecuritynews.com/?p=106942 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 09:39:00 +0530 *************** ✏️Title: Meta Disrupts Influence Ops Targeting Romania, Azerbaijan, and Taiwan with Fake Personas *************** 📎Link: https://thehackernews.com/2025/05/meta-disrupts-influence-ops-targeting.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 03:15:20 +0000 *************** ✏️Title: CVE-2025-48757 - Lovable Database Row-Level Security Bypass (Remote Unauthenticated) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48757 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 04:19:35 GMT *************** ✏️Title: How I Made My First €4,000 From Two Simple Race Conditions *************** 📎Link: https://medium.com/p/270033021482 *************** ⚙️Tags: #hacking #bug_bounty_tips #bug_bounty #bug_bounty_writeup #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 04:02:26 GMT *************** ✏️Title: OSINT-Related Articles, 20250530 *************** 📎Link: https://medium.com/p/5ec24523a8d2 *************** ⚙️Tags: #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 19:22:32 GMT *************** ✏️Title: My Journey from Zero Confidence to Cybersecurity Obsession *************** 📎Link: https://medium.com/p/d709f28eb275 *************** ⚙️Tags: #journey #cybersecurity #hacking #vapt #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 03:25:12 GMT *************** ✏️Title: 30 Days of Cyber Security — Day 4 — Perjalanan Menjadi Pentester 5 Tahun *************** 📎Link: https://medium.com/p/4f82ca747b20 *************** ⚙️Tags: #cybersecurity #roadmaps #security #penetration_testing #idnbootcampcyber *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 04:14:45 GMT *************** ✏️Title: Attacking Common Applications — Skills Assessment II *************** 📎Link: https://medium.com/p/d7ec68caed90 *************** ⚙️Tags: #penetration_testing #hackthebox #htb #hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 03:52:13 GMT *************** ✏️Title: Fires Floods & Lightning — An intro into hacking Industrial Control Systems *************** 📎Link: https://medium.com/p/6172bae1654a *************** ⚙️Tags: #industrial_control_system #cybersecurity #ctf_writeup #hacking #operational_technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:12:42 +0200 *************** ✏️Title: CVE-2025-3050 | IBM DB2/DB2 Connect Server up to 11.5.9/12.1.1 Q Replication allocation of resources *************** 📎Link: https://vuldb.com/?id.310573 *************** ⚙️Information: #Vendor: IBM #Product: DB2/DB2 Connect Server #Type: Database Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:15:14 +0200 *************** ✏️Title: CVE-2024-49350 | IBM DB2/DB2 Connect Server up to 11.1.4.7/11.5.9/12.1.1 Query stack-based overflow *************** 📎Link: https://vuldb.com/?id.310574 *************** ⚙️Information: #Vendor: IBM #Product: DB2/DB2 Connect Server #Type: Database Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:46:47 +0200 *************** ✏️Title: CVE-2025-2518 | IBM DB2/DB2 Connect Server up to 11.5.9/12.1.1 Query memory allocation *************** 📎Link: https://vuldb.com/?id.310575 *************** ⚙️Information: #Vendor: IBM #Product: DB2/DB2 Connect Server #Type: Database Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:47:15 +0200 *************** ✏️Title: CVE-2025-44612 | Tinxy WiFi Lock Controller 1 channel accessible *************** 📎Link: https://vuldb.com/?id.310576 *************** ⚙️Information: #Vendor: Tinxy #Product: WiFi Lock Controller #Type: Wireless LAN Software #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:48:00 +0200 *************** ✏️Title: CVE-2025-46701 | Apache Tomcat up to 9.0.104/10.1.40/11.0.6 pathInfo case sensitivity *************** 📎Link: https://vuldb.com/?id.310577 *************** ⚙️Information: #Vendor: Apache #Product: Tomcat #Type: Application Server Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:48:25 +0200 *************** ✏️Title: CVE-2024-54952 | MikroTik RouterOS 6.40.5 SMB Service null pointer dereference *************** 📎Link: https://vuldb.com/?id.310578 *************** ⚙️Information: #Vendor: MikroTik #Product: RouterOS #Type: Router Operating System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:48:59 +0200 *************** ✏️Title: CVE-2020-36846 | TIMLEGGE IO::Compress::Brotli up to 0.006 Brotli Library vulnerable third-party component (GHSA-5v8v-66v8-mwm7) *************** 📎Link: https://vuldb.com/?id.310579 *************** ⚙️Information: #Vendor: TIMLEGGE #Product: IO::Compress::Brotli #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:49:27 +0200 *************** ✏️Title: CVE-2025-48757 | Lovable up to 2025-04-15 Database Row-Level Security Policy authorization *************** 📎Link: https://vuldb.com/?id.310580 *************** ⚙️Information: #Product: Lovable #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:49:39 +0200 *************** ✏️Title: CVE-2025-30466 | Apple iOS/iPadOS cross-domain policy *************** 📎Link: https://vuldb.com/?id.310581 *************** ⚙️Information: #Vendor: Apple #Product: iOS/iPadOS #Type: Smartphone Operating System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security