Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:00:17 +0200 *************** ✏️Title: CVE-2025-47272 | CE-PhoenixCart prior 1.1.0.3 missing authentication (GHSA-62qj-pvwm-h8cv) *************** 📎Link: https://vuldb.com/?id.310812 *************** ⚙️Information: #Vendor: CE_PhoenixCart #Product: PhoenixCart #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:00:45 +0200 *************** ✏️Title: CVE-2025-29785 | quic-go 0.50.0 uncaught exception (ID 4981) *************** 📎Link: https://vuldb.com/?id.310813 *************** ⚙️Information: #Product: quic_go #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:01:02 +0200 *************** ✏️Title: CVE-2025-48957 | AstrBotDevs AstrBot up to 3.5.12 cmd_config.json path traversal *************** 📎Link: https://vuldb.com/?id.310814 *************** ⚙️Information: #Vendor: AstrBotDevs #Product: AstrBot #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:01:18 +0200 *************** ✏️Title: CVE-2025-48495 | Forceu Gokapi up to 1.x API Page cross site scripting *************** 📎Link: https://vuldb.com/?id.310815 *************** ⚙️Information: #Vendor: Forceu #Product: Gokapi #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:01:30 +0200 *************** ✏️Title: CVE-2025-48955 | Erudika para up to 1.50.7 log file *************** 📎Link: https://vuldb.com/?id.310816 *************** ⚙️Information: #Vendor: Erudika #Product: para #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:01:47 +0200 *************** ✏️Title: CVE-2025-0073 | ARM Valhall GPU Kernel Driver use after free (r54p0) *************** 📎Link: https://vuldb.com/?id.310817 *************** ⚙️Information: #Vendor: ARM #Product: Valhall GPU Kernel Driver/5th Gen GPU Architecture Kernel Driver #Type: Hardware Driver Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:01:57 +0200 *************** ✏️Title: CVE-2025-0819 | ARM Bifrost GPU Kernel Driver up to r49p3/r51p0 use after free *************** 📎Link: https://vuldb.com/?id.310818 *************** ⚙️Information: #Vendor: ARM #Product: Bifrost GPU Kernel Driver/Valhall GPU Kernel Driver/5th Gen GPU Architecture Kernel Driver #Type: Hardware Driver Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:02:08 +0200 *************** ✏️Title: CVE-2025-48494 | Forceu Gokapi up to 1.x cross site scripting (GHSA-95rc-wc32-gm53) *************** 📎Link: https://vuldb.com/?id.310819 *************** ⚙️Information: #Vendor: Forceu #Product: Gokapi #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:02:28 +0200 *************** ✏️Title: CVE-2025-47289 | CE-PhoenixCart up to 1.0.9.9/1.1.0.2/1.1.0.3 testimonial description cross site scripting (GHSA-98qq-m8qj-vvgj) *************** 📎Link: https://vuldb.com/?id.310820 *************** ⚙️Information: #Vendor: CE_PhoenixCart #Product: PhoenixCart #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:03:28 +0200 *************** ✏️Title: CVE-2025-46807 | yrutschle sslh up to 2.2.3 File Descriptor allocation of resources *************** 📎Link: https://vuldb.com/?id.310821 *************** ⚙️Information: #Vendor: yrutschle #Product: sslh #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:03:50 +0200 *************** ✏️Title: CVE-2025-3919 | Comments Import & Export Plugin up to 2.4.3/2.4.4 on WordPress Setting save_settings cross site scripting *************** 📎Link: https://vuldb.com/?id.310822 *************** ⚙️Information: #Product: Comments Import & Export Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:44:05 +0200 *************** ✏️Title: CVE-2025-46806 | yrutschle sslh up to 2.2.3 out-of-range pointer offset *************** 📎Link: https://vuldb.com/?id.310823 *************** ⚙️Information: #Vendor: yrutschle #Product: sslh #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 12:06:13 GMT *************** ✏️Title: Advanced XSS Payload Write-Up: DOM Injection via Chatbot / HTML Content Fields *************** 📎Link: https://medium.com/p/198114df92b4 *************** ⚙️Tags: #meduim #hackerone #bug_bounty #bounty_program #xss_vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 12:41:39 GMT *************** ✏️Title: Best In Crpto Re *************** 📎Link: https://medium.com/p/beb4d921022b *************** ⚙️Tags: #hacking #crypto #open_source *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 12:04:30 GMT *************** ✏️Title: Maximize Your Passive Income with Curvance $CVE *************** 📎Link: https://medium.com/p/5c36da46d061 *************** ⚙️Tags: #crypto #ethereum #web3 #curvance #cve *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 12:53:48 GMT *************** ✏️Title: A list of meta search engines for OSINT investigators *************** 📎Link: https://medium.com/p/a303542f5363 *************** ⚙️Tags: #osint #cyber #meta #investigation #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 13:09:31 GMT *************** ✏️Title: Where is the green-walled room? *************** 📎Link: https://medium.com/p/2f3d7b8456d5 *************** ⚙️Tags: #open_source #osint_investigation #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 10:55:40 GMT *************** ✏️Title: NIS2 Директивата — Какво означава за малкия и среден бизнес в България? *************** 📎Link: https://medium.com/p/64c7dcf08e3a *************** ⚙️Tags: #infosec #nis2_compliance #nis2 #киберсигурност #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 11:28:14 GMT *************** ✏️Title: xss test paylods *************** 📎Link: https://medium.com/p/2762b32ae9e1 *************** ⚙️Tags: #bug_bounty #bugs #bounties #test *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 13:11:05 GMT *************** ✏️Title: The Bug Trap That Broke My Heart *************** 📎Link: https://medium.com/p/b6d1af82184d *************** ⚙️Tags: #mindfulness #grace #new_thought #wasp #bugs *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security