Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 18:15:21 GMT *************** ✏️Title: Malicious npm Package Impersonating Popular Express Cookie Parser *************** 📎Link: https://medium.com/p/19b4d8c2b154 *************** ⚙️Tags: #npm #application_security #devops #security #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 18:21:06 GMT *************** ✏️Title: Malicious npm Package Impersonating Popular Express Cookie Parser *************** 📎Link: https://medium.com/p/2eb4043bc6a4 *************** ⚙️Tags: #npm #security #javascript #malware #devops *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 18:26:47 GMT *************** ✏️Title: MATLAB Ransomware Attack Behind Major Service Outage *************** 📎Link: https://medium.com/p/a77d7d774a93 *************** ⚙️Tags: #ransomware #malware #ai #matlab #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:15:32 +0000 *************** ✏️Title: CVE-2025-2236 - OpenText Advanced Authentication Information Elicitation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2236 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:15:33 +0000 *************** ✏️Title: CVE-2025-3704 - DBAR Productions Volunteer Sign Up Sheets Stored Cross-site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-3704 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:15:35 +0000 *************** ✏️Title: CVE-2025-48383 - Django-Select2 Secret Token Exfiltration *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48383 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:15:36 +0000 *************** ✏️Title: CVE-2025-5245 - GNU Binutils Debug Type Samep Memory Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5245 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:15:36 +0000 *************** ✏️Title: CVE-2025-5246 - Campcodes Online Hospital Management System SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5246 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:15:36 +0000 *************** ✏️Title: CVE-2025-5247 - Gowabby HFish Remote Authentication Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5247 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 16:15:22 +0000 *************** ✏️Title: CVE-2022-0003 - Apache HTTP Server Cross-Site Request Forgery *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-0003 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 16:15:22 +0000 *************** ✏️Title: CVE-2022-21138 - Apache Struts Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-21138 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 16:15:30 +0000 *************** ✏️Title: CVE-2024-56193 - "Bluetooth Adapter Permissions Bypass Vulnerability in [Vendor Name]" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-56193 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 16:15:31 +0000 *************** ✏️Title: CVE-2025-27700 - "Qualcomm Carrier Restrictions Bypass Local Privilege Escalation" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27700 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 16:15:31 +0000 *************** ✏️Title: CVE-2025-27701 - Apache HTTP Server Null Pointer Dereference *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27701 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 16:15:32 +0000 *************** ✏️Title: CVE-2025-48370 - Supabase Auth URL Path Traversal Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48370 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 16:15:34 +0000 *************** ✏️Title: CVE-2025-5248 - PHPGurukul Company Visitor Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5248 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:25 +0000 *************** ✏️Title: CVE-2024-49196 - Samsung Mobile Processor Exynos GPU Type Confusion Denial of Service *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-49196 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:25 +0000 *************** ✏️Title: CVE-2025-22377 - Samsung Exynos Heap-based Out-of-Bounds Write Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-22377 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:25 +0000 *************** ✏️Title: CVE-2025-23247 - NVIDIA CUDA Toolkit ELF Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-23247 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-48057 - Icinga 2 OpenSSL Certificate Validation Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48057 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security