Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:15:21 +0000 *************** ✏️Title: CVE-2025-46570 - Apache vLLM PageAttention Chunk Prefill Timing Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46570 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:15:21 +0000 *************** ✏️Title: CVE-2025-46722 - VLLM Image Hash Collision Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46722 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:15:21 +0000 *************** ✏️Title: CVE-2025-48475 - FreeScout Unrestricted Client Access Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48475 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2023-41591 - ONOS ARP Spoofing Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2023-41591 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2024-53423 - ONOS Denial of Service (DoS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-53423 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 18:15:23 +0000 *************** ✏️Title: CVE-2025-29632 - Free5gc Buffer Overflow Denial of Service *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-29632 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 18:15:24 +0000 *************** ✏️Title: CVE-2025-46823 - OpenMRS FHIR2 Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46823 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 18:15:24 +0000 *************** ✏️Title: CVE-2025-5323 - Fossasia Open-Event-Server Encryption Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5323 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 18:26:29 GMT *************** ✏️Title: Understanding the Referer in Network Header *************** 📎Link: https://medium.com/p/c1a675406014 *************** ⚙️Tags: #browsers #security #networking #bug_bounty #http_referer *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 19:11:31 GMT *************** ✏️Title: How I Earned My First $50 Bug Bounty with a Google Dork and a Test Key *************** 📎Link: https://medium.com/p/a3e6290db694 *************** ⚙️Tags: #first_bounty #bounty_program #bug_bounty_tips #hacker #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 18:57:45 GMT *************** ✏️Title: ️‍♂️ Visual Guide: How to Spot a Suspicious File (Even If It Looks Safe) *************** 📎Link: https://medium.com/p/245622c5c81e *************** ⚙️Tags: #linux #malware_analysis #cyber_security_awareness #forensics #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 18:47:06 GMT *************** ✏️Title: SNS Secrets [Capstone Challenge] *************** 📎Link: https://medium.com/p/a18ec98965cc *************** ⚙️Tags: #security #penetration_testing #computer_science #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 19:01:17 GMT *************** ✏️Title: 10 reasons why cyber security is important? *************** 📎Link: https://medium.com/p/e67ffb6d3c61 *************** ⚙️Tags: #cybersecurity #ethical_hacking #cyberattack #internet_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 18:47:06 GMT *************** ✏️Title: SNS Secrets [Capstone Challenge] *************** 📎Link: https://medium.com/p/a18ec98965cc *************** ⚙️Tags: #security #penetration_testing #computer_science #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 19:11:31 GMT *************** ✏️Title: How I Earned My First $50 Bug Bounty with a Google Dork and a Test Key *************** 📎Link: https://medium.com/p/a3e6290db694 *************** ⚙️Tags: #first_bounty #bounty_program #bug_bounty_tips #hacker #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:55:00 +0200 *************** ✏️Title: CVE-2025-48390 | freescout-help-desk freescout up to 1.8.177 tools.php file_exists php_path code injection *************** 📎Link: https://vuldb.com/?id.310529 *************** ⚙️Information: #Vendor: freescout_help_desk #Product: freescout #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:55:09 +0200 *************** ✏️Title: CVE-2025-48471 | freescout-help-desk freescout up to 1.8.178 unrestricted upload *************** 📎Link: https://vuldb.com/?id.310530 *************** ⚙️Information: #Vendor: freescout_help_desk #Product: freescout #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:55:19 +0200 *************** ✏️Title: CVE-2025-48389 | freescout-help-desk freescout up to 1.8.177 set deserialization *************** 📎Link: https://vuldb.com/?id.310531 *************** ⚙️Information: #Vendor: freescout_help_desk #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:55:41 +0200 *************** ✏️Title: CVE-2025-48473 | freescout-help-desk freescout up to 1.8.178 Conversation authorization *************** 📎Link: https://vuldb.com/?id.310532 *************** ⚙️Information: #Vendor: freescout_help_desk #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:56:14 +0200 *************** ✏️Title: CVE-2025-3913 | Mattermost up to 9.11.12/10.5.3/10.6.2/10.7.0 Team Privacy Setting /api/v4/teams/ authorization *************** 📎Link: https://vuldb.com/?id.310533 *************** ⚙️Information: #Product: Mattermost #Type: Groupware Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security