Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 16:24:24 +0100 *************** ✏️Title: CVE-2025-1193 | Devolutions Remote Desktop Manager up to 2024.3.19 on Windows certificate validation (DEVO-2025-0001) *************** 📎Link: https://vuldb.com/?id.295101 *************** ⚙️Information: #Vendor: Devolutions #Product: Remote Desktop Manager #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 16:24:31 +0100 *************** ✏️Title: CVE-2024-11621 | Devolutions Remote Desktop Manager certificate validation (DEVO-2025-0001) *************** 📎Link: https://vuldb.com/?id.295102 *************** ⚙️Information: #Vendor: Devolutions #Product: Remote Desktop Manager #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 16:25:05 +0100 *************** ✏️Title: CVE-2025-1195 | code-projects Real Estate Property Management System 1.0 /Admin/EditCategory CategoryId cross site scripting *************** 📎Link: https://vuldb.com/?id.295103 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 16:25:07 +0100 *************** ✏️Title: CVE-2025-1196 | code-projects Real Estate Property Management System 1.0 /search.php PropertyName cross site scripting *************** 📎Link: https://vuldb.com/?id.295104 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 16:25:09 +0100 *************** ✏️Title: CVE-2025-1197 | code-projects Real Estate Property Management System 1.0 load_user-profile.php userhash sql injection *************** 📎Link: https://vuldb.com/?id.295105 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 16:27:25 +0100 *************** ✏️Title: CVE-2024-10334 | ABB System 800xA 5.1.x/6.0.3.x/6.1.1.x/6.2.x credentials storage *************** 📎Link: https://vuldb.com/?id.295106 *************** ⚙️Information: #Vendor: ABB #Product: System 800xA #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:09:06 +0100 *************** ✏️Title: CVE-2025-1199 | SourceCodester Best Church Management Software 1.1 /admin/app/role_crud.php id sql injection *************** 📎Link: https://vuldb.com/?id.295107 *************** ⚙️Information: #Vendor: SourceCodester #Product: Best Church Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:09:08 +0100 *************** ✏️Title: CVE-2025-1200 | SourceCodester Best Church Management Software 1.1 slider_crud.php del_id sql injection *************** 📎Link: https://vuldb.com/?id.295108 *************** ⚙️Information: #Vendor: SourceCodester #Product: Best Church Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:09:09 +0100 *************** ✏️Title: CVE-2025-1201 | SourceCodester Best Church Management Software 1.1 profile_crud.php sql injection *************** 📎Link: https://vuldb.com/?id.295109 *************** ⚙️Information: #Vendor: SourceCodester #Product: Best Church Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:09:11 +0100 *************** ✏️Title: CVE-2025-1202 | SourceCodester Best Church Management Software 1.1 /admin/edit_slider.php id sql injection *************** 📎Link: https://vuldb.com/?id.295110 *************** ⚙️Information: #Vendor: SourceCodester #Product: Best Church Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:11:41 +0100 *************** ✏️Title: CVE-2025-24032 | OpenSC pam_pkcs11 up to 0.6.12 X.509 Certificate pam_pkcs11.conf default improper authentication *************** 📎Link: https://vuldb.com/?id.295111 *************** ⚙️Information: #Vendor: OpenSC #Product: pam_pkcs11 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:11:51 +0100 *************** ✏️Title: CVE-2025-24892 | opf openproject up to 15.2.0 Group Management Section cross site scripting *************** 📎Link: https://vuldb.com/?id.295112 *************** ⚙️Information: #Vendor: opf #Product: openproject #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:12:26 +0100 *************** ✏️Title: CVE-2025-24031 | OpenSC pam_pkcs11 up to 0.6.12 X.509 Certificate null pointer dereference *************** 📎Link: https://vuldb.com/?id.295113 *************** ⚙️Information: #Vendor: OpenSC #Product: pam_pkcs11 #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:19:41 +0100 *************** ✏️Title: CVE-2025-21693 | Linux Kernel up to 6.12.11 mm zswap_compress/zswap_decompress initialization *************** 📎Link: https://vuldb.com/?id.295114 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:20:22 +0100 *************** ✏️Title: CVE-2024-57950 | Linux Kernel up to 6.12.11 AMD Display divide by zero *************** 📎Link: https://vuldb.com/?id.295115 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:20:33 +0100 *************** ✏️Title: CVE-2025-21690 | Linux Kernel up to 5.15.177/6.1.127/6.6.74/6.12.11/6.13.0 storvsc denial of service *************** 📎Link: https://vuldb.com/?id.295116 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:20:49 +0100 *************** ✏️Title: CVE-2025-21691 | Linux Kernel up to 6.6.74/6.12.11/6.13.0 cachestat mm/mincore.c permission *************** 📎Link: https://vuldb.com/?id.295117 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:21:16 +0100 *************** ✏️Title: CVE-2025-21686 | Linux Kernel up to 6.12.11/6.13.0 io_uring buffer overflow *************** 📎Link: https://vuldb.com/?id.295118 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:21:30 +0100 *************** ✏️Title: CVE-2025-21687 | Linux Kernel up to 6.13.0 vfio memory corruption *************** 📎Link: https://vuldb.com/?id.295119 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 17:21:41 +0100 *************** ✏️Title: CVE-2025-21689 | Linux Kernel up to 6.13.0 quatech2 qt2_process_read_urb null pointer dereference *************** 📎Link: https://vuldb.com/?id.295120 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security