Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 14:39:49 GMT *************** ✏️Title: Deface XSS *************** 📎Link: https://medium.com/p/913702f0e47b *************** ⚙️Tags: #penetration_testing #bug_bounty_writeup #xss_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 15:57:59 GMT *************** ✏️Title: Roadmap Cybersecurity 2025–2030: Bangun Kariermu Langkah Demi Langkah *************** 📎Link: https://medium.com/p/3516cf4b183c *************** ⚙️Tags: #cybersecurity #career_development #ethical_hacking #learning_path *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 15:32:17 GMT *************** ✏️Title: OWASP Juice Shop walkthrough *************** 📎Link: https://medium.com/p/744a56a5dc13 *************** ⚙️Tags: #penetration_testing #cyber_security_assessment #owasp_juice_shop #vapt #security_assessments *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 15:41:10 GMT *************** ✏️Title: From 0 to Exploitable in 600 Seconds My California Bug Story *************** 📎Link: https://medium.com/p/d10f4b29f306 *************** ⚙️Tags: #bug_bounty #penetration_testing #cybersecurity #bug_bounty_tips #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 14:20:13 GMT *************** ✏️Title: Flipper Zero: Your Pocket-Sized Cybersecurity Swiss Army Knife ️‍♂️ *************** 📎Link: https://medium.com/p/4bd81b1ae51f *************** ⚙️Tags: #flipper_zero #red_team #cybersecurity #social_engineering #hacking_tools *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 14:59:49 GMT *************** ✏️Title: Awas Ada Hacker! Eh, Tenang Dulu… Kenalin Penetration Tester, Sang Ethical Hacker dari Red Team! *************** 📎Link: https://medium.com/p/7604a70e340c *************** ⚙️Tags: #cyber_secuity #red_team #memes #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 14:12:27 GMT *************** ✏️Title: F23A-CTF-V2 Forensics “Passphrase” writeup *************** 📎Link: https://medium.com/p/153819b9840d *************** ⚙️Tags: #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:13:14 +0200 *************** ✏️Title: CVE-2025-4081 | Blackmagic Design DaVinci Resolve up to 19.1.3 on macOS com.apple.security.cs.disable-library-validation default permission *************** 📎Link: https://vuldb.com/?id.310506 *************** ⚙️Information: #Vendor: Blackmagic Design #Product: DaVinci Resolve #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:13:33 +0200 *************** ✏️Title: CVE-2025-37993 | Linux Kernel up to 6.12.28/6.14.6 m_can m_can_class_allocate_dev initialization *************** 📎Link: https://vuldb.com/?id.310507 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:13:46 +0200 *************** ✏️Title: CVE-2025-37999 | Linux Kernel up to 6.12.28/6.14.6 fileio erofs_onlinefolio_split allocation of resources *************** 📎Link: https://vuldb.com/?id.310508 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:13:57 +0200 *************** ✏️Title: CVE-2025-37994 | Linux Kernel up to 5.15.182/6.1.138/6.6.90/6.12.28/6.14.6 UCSI Driver ucsi_displayport_work null pointer dereference *************** 📎Link: https://vuldb.com/?id.310509 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:14:13 +0200 *************** ✏️Title: CVE-2025-37995 | Linux Kernel up to 5.15.182/6.1.138/6.6.90/6.12.28/6.14.6 kobject_put uninitialized pointer *************** 📎Link: https://vuldb.com/?id.310510 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:14:42 +0200 *************** ✏️Title: CVE-2025-37997 | Linux Kernel up to 5.15.182 Netfilter ahash_bucket_start race condition *************** 📎Link: https://vuldb.com/?id.310511 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:15:17 +0200 *************** ✏️Title: CVE-2025-37998 | Linux Kernel up to 5.15.182/6.1.138/6.6.90/6.12.28/6.14.6 openvswitch output_userspace iteration *************** 📎Link: https://vuldb.com/?id.310512 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:15:30 +0200 *************** ✏️Title: CVE-2025-37996 | Linux Kernel up to 6.14.6 KVM user_mem_abort initialization *************** 📎Link: https://vuldb.com/?id.310513 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:15:53 +0200 *************** ✏️Title: CVE-2025-48045 | MICI Network NetFax Server prior 3.0.1.0 HTTP GET Request /client.php insertion of sensitive information into sent data *************** 📎Link: https://vuldb.com/?id.310514 *************** ⚙️Information: #Vendor: MICI Network #Product: NetFax Server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:16:08 +0200 *************** ✏️Title: CVE-2025-48046 | MICI Network NetFax Server prior 3.0.1.0 HTTP GET Request /config.php password in configuration file *************** 📎Link: https://vuldb.com/?id.310515 *************** ⚙️Information: #Vendor: MICI Network #Product: NetFax Server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:16:24 +0200 *************** ✏️Title: CVE-2025-48047 | MICI Network NetFax Server prior 3.0.1.0 Ping /test.php os command injection *************** 📎Link: https://vuldb.com/?id.310516 *************** ⚙️Information: #Vendor: MICI Network #Product: NetFax Server #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:17:58 +0200 *************** ✏️Title: CVE-2025-5334 | Devolutions Remote Desktop Manager up to 2025.1.34.0 exposure of private personal information to an unauthorized actor (DEVO-2025-0009) *************** 📎Link: https://vuldb.com/?id.310517 *************** ⚙️Information: #Vendor: Devolutions #Product: Remote Desktop Manager #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:18:26 +0200 *************** ✏️Title: CVE-2025-33043 | AMI AptioV up to 5.011 input validation *************** 📎Link: https://vuldb.com/?id.310518 *************** ⚙️Information: #Vendor: AMI #Product: AptioV #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security