Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 21:15:21 +0000 *************** ✏️Title: CVE-2025-48951 - Auth0-PHP Insecure Cookie Deserialization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48951 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-48999 - DataEase SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48999 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-49000 - InvenTree Label-Sheet Plugin Denial of Service Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49000 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-49001 - DataEase JWT Token Forgery Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49001 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-49002 - DataEase Case Insensitive Patch Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49002 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5527 - Tenda RX3 Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5527 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 22:00:00 +0000 *************** ✏️Title: Deep Dive into Endpoint Security – Tools and Best Practices for 2025 *************** 📎Link: https://cybersecuritynews.com/?p=108601 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 21:48:02 GMT *************** ✏️Title: IDOR: você não deveria estar vendo isso *************** 📎Link: https://medium.com/p/691a35cbe362 *************** ⚙️Tags: #blue_team #red_team #security_systems #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 21:10:55 GMT *************** ✏️Title: Unlock Your Cybersecurity Career: Pass the TryHackMe PT1 Certificate (The Ultimate Guide) *************** 📎Link: https://medium.com/p/7df4195fef33 *************** ⚙️Tags: #cybersecurity #tryhackme #careers #certification #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 21:26:03 GMT *************** ✏️Title: PT1- Recommeded lab to learn and Pass it …. *************** 📎Link: https://medium.com/p/b7f82bb065b9 *************** ⚙️Tags: #ethical_hacking #tryhackme #cybercrime #cybersecurity #security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 21:00:00 +0000 *************** ✏️Title: How to Implement Zero Trust Architecture in Enterprise Networks *************** 📎Link: https://cybersecuritynews.com/?p=108597 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:19:05 +0200 *************** ✏️Title: CVE-2025-30359 | webpack-dev-server up to 5.2.0 routine (GHSA-4v9v-hfq4-rm2v) *************** 📎Link: https://vuldb.com/?id.311016 *************** ⚙️Information: #Product: webpack_dev_server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:19:17 +0200 *************** ✏️Title: CVE-2025-48950 | 1Panel-dev MaxKB 1.9.0/1.10.4-lts/1.10.8 /bin default permission (GHSA-p2qq-x9j2-px8v) *************** 📎Link: https://vuldb.com/?id.311017 *************** ⚙️Information: #Vendor: 1Panel_dev #Product: MaxKB #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:19:25 +0200 *************** ✏️Title: CVE-2025-30360 | webpack-dev-server up to 5.2.0 origin validation (GHSA-9jgg-88mc-972h) *************** 📎Link: https://vuldb.com/?id.311018 *************** ⚙️Information: #Product: webpack_dev_server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:19:39 +0200 *************** ✏️Title: CVE-2025-48998 | DataEase up to 2.10.9 JDBC Connection sql injection (GHSA-2wfc-qwx7-w692) *************** 📎Link: https://vuldb.com/?id.311019 *************** ⚙️Information: #Product: DataEase #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:20:07 +0200 *************** ✏️Title: CVE-2025-48997 | expressjs multer up to 2.0.0 Upload File uncaught exception (ID 1233) *************** 📎Link: https://vuldb.com/?id.311020 *************** ⚙️Information: #Vendor: expressjs #Product: multer #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:20:25 +0200 *************** ✏️Title: CVE-2025-35036 | Hibernate Validator up to 6.1.x Expression Language code injection *************** 📎Link: https://vuldb.com/?id.311021 *************** ⚙️Information: #Vendor: Hibernate #Product: Validator #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:20:44 +0200 *************** ✏️Title: CVE-2025-48953 | Umbraco CMS up to 15.4.1 unrestricted upload (GHSA-fr6r-p8hv-x3c4) *************** 📎Link: https://vuldb.com/?id.311022 *************** ⚙️Information: #Vendor: Umbraco #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:20:59 +0200 *************** ✏️Title: CVE-2025-23102 | Samsung Mobile Processor Exynos up to 9825 double free *************** 📎Link: https://vuldb.com/?id.311023 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:21:10 +0200 *************** ✏️Title: CVE-2025-23100 | Samsung Mobile Processor Exynos 1280/1380/1480/2200/2400 denial of service *************** 📎Link: https://vuldb.com/?id.311024 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security