Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:15:20 +0000 *************** ✏️Title: CVE-2025-49575 - Citizen is a MediaWiki skin that makes extensions *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49575 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:15:20 +0000 *************** ✏️Title: CVE-2025-49576 - Citizen is a MediaWiki skin that makes extensions *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49576 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:15:20 +0000 *************** ✏️Title: CVE-2025-49577 - Citizen is a MediaWiki skin that makes extensions *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49577 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:15:20 +0000 *************** ✏️Title: CVE-2025-49578 - Citizen is a MediaWiki skin that makes extensions *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49578 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:15:20 +0000 *************** ✏️Title: CVE-2025-49579 - Citizen is a MediaWiki skin that makes extensions *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49579 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:43:38 +0200 *************** ✏️Title: CVE-2025-6031 | Amazon Cloud Cam up to 202212020 operation after expiration (AWS-2025-013) *************** 📎Link: https://vuldb.com/?id.312441 *************** ⚙️Information: #Vendor: Amazon #Product: Cloud Cam #Type: Cloud Software #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:44:06 +0200 *************** ✏️Title: CVE-2025-43863 | vantage6 up to 4.10.x Change Password excessive authentication (GHSA-j6g5-p62x-58hw) *************** 📎Link: https://vuldb.com/?id.312442 *************** ⚙️Information: #Product: vantage6 #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:44:28 +0200 *************** ✏️Title: CVE-2025-43866 | vantage6 up to 4.10 random values (GHSA-m3mq-f375-5vgh) *************** 📎Link: https://vuldb.com/?id.312443 *************** ⚙️Information: #Product: vantage6 #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:44:58 +0200 *************** ✏️Title: CVE-2025-36539 | AVEVA PI Data Archive/PI Server uncaught exception (icsa-25-162-07) *************** 📎Link: https://vuldb.com/?id.312444 *************** ⚙️Information: #Vendor: AVEVA #Product: PI Data Archive/PI Server #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:45:17 +0200 *************** ✏️Title: CVE-2025-44019 | AVEVA PI Data Archive/PI Server up to 2023 uncaught exception (icsa-25-162-07) *************** 📎Link: https://vuldb.com/?id.312445 *************** ⚙️Information: #Vendor: AVEVA #Product: PI Data Archive/PI Server #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:45:34 +0200 *************** ✏️Title: CVE-2025-49081 | Absolute Security Secure Access up to 13.54 Warehouse permission *************** 📎Link: https://vuldb.com/?id.312446 *************** ⚙️Information: #Vendor: Absolute Security #Product: Secure Access #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:45:46 +0200 *************** ✏️Title: CVE-2025-49575 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 cross site scripting (GHSA-4c2h-67qq-vm87) *************** 📎Link: https://vuldb.com/?id.312447 *************** ⚙️Information: #Vendor: StarCitizenTools #Product: mediawiki_skins_Citizen #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:45:55 +0200 *************** ✏️Title: CVE-2025-49577 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 cross site scripting (GHSA-jwr7-992g-68mh) *************** 📎Link: https://vuldb.com/?id.312448 *************** ⚙️Information: #Vendor: StarCitizenTools #Product: mediawiki_skins_Citizen #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:46:06 +0200 *************** ✏️Title: CVE-2025-49576 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 cross site scripting (GHSA-86xf-2mgp-gv3g) *************** 📎Link: https://vuldb.com/?id.312449 *************** ⚙️Information: #Vendor: StarCitizenTools #Product: mediawiki_skins_Citizen #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:47:29 +0200 *************** ✏️Title: CVE-2025-49578 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 Language::userDate cross site scripting (GHSA-2v3v-3whp-953h) *************** 📎Link: https://vuldb.com/?id.312450 *************** ⚙️Information: #Vendor: StarCitizenTools #Product: mediawiki_skins_Citizen #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:47:29 +0200 *************** ✏️Title: CVE-2025-4418 | AVEVA PI Connector for CygNet up to 1.6.14 integrity check (icsa-25-162-09) *************** 📎Link: https://vuldb.com/?id.312451 *************** ⚙️Information: #Vendor: AVEVA #Product: PI Connector for CygNet #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:47:30 +0200 *************** ✏️Title: CVE-2025-2745 | AVEVA PI Web API up to 2023 SP1 cross site scripting (icsa-25-162-08) *************** 📎Link: https://vuldb.com/?id.312452 *************** ⚙️Information: #Vendor: AVEVA #Product: PI Web API #Type: Automation Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:47:39 +0200 *************** ✏️Title: CVE-2025-4417 | AVEVA PI Connector for CygNet up to 1.6.14 cross site scripting (icsa-25-162-09) *************** 📎Link: https://vuldb.com/?id.312453 *************** ⚙️Information: #Vendor: AVEVA #Product: PI Connector for CygNet #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:47:49 +0200 *************** ✏️Title: CVE-2025-49579 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 cross site scripting (GHSA-g3cp-pq72-hjpv) *************** 📎Link: https://vuldb.com/?id.312454 *************** ⚙️Information: #Vendor: StarCitizenTools #Product: mediawiki_skins_Citizen #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:47:59 +0200 *************** ✏️Title: CVE-2025-5923 | Game Review Block Plugin up to 4.8.1 on WordPress className cross site scripting *************** 📎Link: https://vuldb.com/?id.312455 *************** ⚙️Information: #Product: Game Review Block Plugin #Type: Feedback Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security