Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 13:15:23 +0000 *************** ✏️Title: CVE-2025-5446 - "Linksys Router Remote OS Command Injection Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5446 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 19:52:00 +0530 *************** ✏️Title: Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU *************** 📎Link: https://thehackernews.com/2025/06/qualcomm-fixes-3-zero-days-used-in.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:08:24 +0200 *************** ✏️Title: CVE-2025-37089 | HPE StoreOnce Software up to 4.3.10 command injection *************** 📎Link: https://vuldb.com/?id.310824 *************** ⚙️Information: #Vendor: HPE #Product: StoreOnce Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:08:35 +0200 *************** ✏️Title: CVE-2025-26396 | SolarWinds Dameware Mini Remote Control Service privileges management *************** 📎Link: https://vuldb.com/?id.310825 *************** ⚙️Information: #Vendor: SolarWinds #Product: Dameware Mini Remote Control Service #Type: Remote Access Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:08:48 +0200 *************** ✏️Title: CVE-2024-12168 | Yandex Telemost for Desktop up to 2.6.x untrusted search path *************** 📎Link: https://vuldb.com/?id.310826 *************** ⚙️Information: #Vendor: Yandex #Product: Telemost for Desktop #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:08:59 +0200 *************** ✏️Title: CVE-2025-37091 | HPE StoreOnce Software up to 4.3.10 command injection *************** 📎Link: https://vuldb.com/?id.310827 *************** ⚙️Information: #Vendor: HPE #Product: StoreOnce Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:09:16 +0200 *************** ✏️Title: CVE-2024-57783 | alexpinel Dot up to 0.9.3 render.js innerHTML cross site scripting *************** 📎Link: https://vuldb.com/?id.310828 *************** ⚙️Information: #Vendor: alexpinel #Product: Dot #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:09:28 +0200 *************** ✏️Title: CVE-2025-37090 | HPE StoreOnce Software up to 4.3.10 server-side request forgery *************** 📎Link: https://vuldb.com/?id.310829 *************** ⚙️Information: #Vendor: HPE #Product: StoreOnce Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:27:00 +0200 *************** ✏️Title: CVE-2025-37092 | HPE StoreOnce Software up to 4.3.10 command injection *************** 📎Link: https://vuldb.com/?id.310830 *************** ⚙️Information: #Vendor: HPE #Product: StoreOnce Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:27:23 +0200 *************** ✏️Title: CVE-2025-37094 | HPE StoreOnce Software up to 4.3.10 path traversal *************** 📎Link: https://vuldb.com/?id.310831 *************** ⚙️Information: #Vendor: HPE #Product: StoreOnce Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:27:32 +0200 *************** ✏️Title: CVE-2025-37093 | HPE StoreOnce Software up to 4.3.10 improper authentication *************** 📎Link: https://vuldb.com/?id.310832 *************** ⚙️Information: #Vendor: HPE #Product: StoreOnce Software #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:27:51 +0200 *************** ✏️Title: CVE-2025-4224 | wpForo Plugin up to 3.1.3 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.310833 *************** ⚙️Information: #Product: wpForo Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 16:28:25 +0200 *************** ✏️Title: CVE-2025-37095 | HPE StoreOnce Software up to 4.3.10 path traversal *************** 📎Link: https://vuldb.com/?id.310834 *************** ⚙️Information: #Vendor: HPE #Product: StoreOnce Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 13:35:05 GMT *************** ✏️Title: CSRF: How I gained unauthorized access to Cart *************** 📎Link: https://medium.com/p/45e671a180f9 *************** ⚙️Tags: #bug_bounty_writeup #bug_bounty #csrf #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 13:44:03 GMT *************** ✏️Title: How to Find Info on Anyone Online (Even Without Hacking!) *************** 📎Link: https://medium.com/p/e46623de7154 *************** ⚙️Tags: #osint_investigation #osint_tool #osint #cybersecurity #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 13:55:33 GMT *************** ✏️Title: How to Earn the Most from INT OS $INTOS, step-by-step Guide *************** 📎Link: https://medium.com/p/deb6b50288b0 *************** ⚙️Tags: #into #osint #web3 #ethereum #crypto *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 14:00:53 GMT *************** ✏️Title: Cyber Briefing: 2025.06.02 *************** 📎Link: https://medium.com/p/18d370459ba5 *************** ⚙️Tags: #cybersecurity #cyber_briefing #infosec #russia #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 13:46:53 GMT *************** ✏️Title: Creating CVE-Based Attack Scenarios Using Exploit-DB *************** 📎Link: https://medium.com/p/52baacc40037 *************** ⚙️Tags: #exploit #attack #cybersecurity #database #data *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 13:32:29 GMT *************** ✏️Title: Threat Intelligence Digest — Week Ending June 2st, 2025 [Free] *************** 📎Link: https://medium.com/p/8f5128e2ad6e *************** ⚙️Tags: #threat_intelligence #malware #threat_hunting #nation_state_threats *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 10:15:20 +0000 *************** ✏️Title: CVE-2025-1750 - DuckDBVectorStore SQL Injection Remote Code Execution *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1750 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security