Sec WriteUp ~ CVE Alert

Ir al canal en Telegram

NOTIFICATIONS CHANNEL. 🔴 Security_WriteUp: #Medium #CyberSecurity #Hacker_News 🔴 CVE Reports #CVEfeed #Tenable #VulDb 🔴 Exploit Database #Exploit_DB #CXSECURITY #Sploitus Academy : @HackTheBox_Academy

El país no está especificadoTecnologías y Aplicaciones43 281

472

Suscriptores

Sin datos24 horas

Sin datos7 días

-1030 días

Visitas de la publicación

Sin datos24 horas

Sin datos48 horas

0.42%

Tasa de compromiso

~ 244

Mensajes por día

Ads index

beta

Archivo de publicaciones

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:23 +0200 *************** ✏️Title: CVE-2025-30986 | CreativeMedia Elite Video Player Plugin up to 10.0.5 on WordPress cross-site request forgery (EUVD-2025-17231) *************** 📎Link: https://vuldb.com/?id.311541 *************** ⚙️Information: #Vendor: CreativeMedia #Product: Elite Video Player Plugin #Type: Multimedia Player Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:24 +0200 *************** ✏️Title: CVE-2025-49453 | Jatinder Pal Singh BP Profile as Homepage Plugin up to 1.1 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311542 *************** ⚙️Information: #Vendor: Jatinder Pal Singh #Product: BP Profile as Homepage Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:36 +0200 *************** ✏️Title: CVE-2025-28964 | mangup Personal Favicon Plugin up to 2.0 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311543 *************** ⚙️Information: #Vendor: mangup #Product: Personal Favicon Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:53 +0200 *************** ✏️Title: CVE-2025-49435 | Hasina77 Wp Easy Allopass Plugin up to 4.1.1 on WordPress cross-site request forgery (EUVD-2025-17144) *************** 📎Link: https://vuldb.com/?id.311544 *************** ⚙️Information: #Vendor: Hasina77 #Product: Wp Easy Allopass Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:50:31 +0200 *************** ✏️Title: CVE-2025-5806 | Jenkins Gatling Plugin 136.vb_9009b_3d33a_e Content-Security-Policy protection mechanism *************** 📎Link: https://vuldb.com/?id.311545 *************** ⚙️Information: #Vendor: Jenkins #Product: Gatling Plugin #Type: Continuous Integration Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:48 +0200 *************** ✏️Title: CVE-2025-38001 | Linux Kernel up to 6.15.0 net_sched cl_nactive infinite loop *************** 📎Link: https://vuldb.com/?id.311546 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:58 +0200 *************** ✏️Title: CVE-2025-38002 | Linux Kernel up to 6.14.7 io_uring_show_fdinfo information disclosure *************** 📎Link: https://vuldb.com/?id.311547 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:17:18 +0200 *************** ✏️Title: CVE-2025-41646 | Kunbus Revolution Pi Webstatus up to 2.4.5 type conversion (Kunbus-2025-000000 / EUVD-2025-17316) *************** 📎Link: https://vuldb.com/?id.311548 *************** ⚙️Information: #Vendor: Kunbus #Product: Revolution Pi Webstatus #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:42:16 +0200 *************** ✏️Title: CVE-2024-56805 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 buffer overflow (qsa-25-12) *************** 📎Link: https://vuldb.com/?id.311549 *************** ⚙️Information: #Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:42:54 +0200 *************** ✏️Title: CVE-2025-22481 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 command injection (qsa-25-12) *************** 📎Link: https://vuldb.com/?id.311550 *************** ⚙️Information: #Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:43:16 +0200 *************** ✏️Title: CVE-2025-22484 | QNAP File Station 5.5.6.4847 allocation of resources (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311551 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:43:41 +0200 *************** ✏️Title: CVE-2025-29872 | QNAP File Station 5.5.6.4847 allocation of resources (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311552 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:44:02 +0200 *************** ✏️Title: CVE-2025-5747 | WOLFBOX Level 2 EV Charger MCU Command Parser interpretation input (ZDI-25-326) *************** 📎Link: https://vuldb.com/?id.311553 *************** ⚙️Information: #Vendor: WOLFBOX #Product: Level 2 EV Charger #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:55:29 +0200 *************** ✏️Title: CVE-2025-5748 | WOLFBOX Level 2 EV Charger Tuya Communications Module routine (ZDI-25-327) *************** 📎Link: https://vuldb.com/?id.311554 *************** ⚙️Information: #Vendor: WOLFBOX #Product: Level 2 EV Charger #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:55:50 +0200 *************** ✏️Title: CVE-2025-22482 | QNAP Qsync Central 4.3.0.11/4.4.0.15/4.4.0.16_20240819 format string (qsa-25-10) *************** 📎Link: https://vuldb.com/?id.311555 *************** ⚙️Information: #Vendor: QNAP #Product: Qsync Central #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:56:14 +0200 *************** ✏️Title: CVE-2025-22486 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09) *************** 📎Link: https://vuldb.com/?id.311556 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:57:53 +0200 *************** ✏️Title: CVE-2025-29883 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09) *************** 📎Link: https://vuldb.com/?id.311557 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:58:09 +0200 *************** ✏️Title: CVE-2025-29884 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09) *************** 📎Link: https://vuldb.com/?id.311558 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 16:58:31 +0000 *************** ✏️Title: New PathWiper Malware Attacking Critical Infrastructure To Deploy Administrative Tools *************** 📎Link: https://cybersecuritynews.com/?p=110131 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 17:23:40 +0000 *************** ✏️Title: Beware of Fake AI Business Tools That Hides Ransomware *************** 📎Link: https://cybersecuritynews.com/?p=110134 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security