Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:24 +0000 *************** ✏️Title: CVE-2025-24916 - Tenable Network Monitor Local Privilege Escalation *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-24916 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:25 +0000 *************** ✏️Title: CVE-2025-24917 - Tenable Network Monitor Local Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-24917 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:25 +0000 *************** ✏️Title: CVE-2025-32794 - OpenEMR Cross-Site Scripting (XSS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-32794 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:25 +0000 *************** ✏️Title: CVE-2025-32967 - OpenEMR Password Change Event Logging Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-32967 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:25 +0000 *************** ✏️Title: CVE-2025-43860 - OpenEMR Stored Cross-Site Scripting (XSS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-43860 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:27 +0000 *************** ✏️Title: CVE-2025-48375 - Schule Open-Source School Management System OTP Email Flooding Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48375 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:27 +0000 *************** ✏️Title: CVE-2025-48376 - DNN External URL Site Export RCE *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48376 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:27 +0000 *************** ✏️Title: CVE-2025-48377 - DNN Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48377 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 16:15:27 +0000 *************** ✏️Title: CVE-2025-48378 - DNN XSS Through SVG Upload *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48378 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 23 May 2025 18:08:15 GMT *************** ✏️Title: Aprendiendo como un éstoico en el mundo digital: La mentalidad que forja el hacker ético *************** 📎Link: https://medium.com/p/93e6b36e8ee4 *************** ⚙️Tags: #hacker #cybersecurity #ciberseguridad #filosofia #estoico *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 23 May 2025 17:42:53 GMT *************** ✏️Title: Deep Dive: Analyzing a Weaponized SVG-Based Phishing Attack *************** 📎Link: https://medium.com/p/1a0a520548e7 *************** ⚙️Tags: #svg #cybersecurity #exploitation #phishing #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 23 May 2025 18:16:45 GMT *************** ✏️Title: Breaking Down a Real HTML-Based Phishing Attack Disguised as a System Loader *************** 📎Link: https://medium.com/p/2ab18e616255 *************** ⚙️Tags: #phishing #malware #malicious_code #html #cyberattack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 19:35:08 +0200 *************** ✏️Title: CVE-2025-48375 | schule111 Schule up to 1.0.0 forgot_password.php allocation of resources (GHSA-h3f2-mc85-67gc) *************** 📎Link: https://vuldb.com/?id.310199 *************** ⚙️Information: #Vendor: schule111 #Product: Schule #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 19:35:22 +0200 *************** ✏️Title: CVE-2025-24917 | Tenable Network Monitor up to 6.5.0 on Windows access control *************** 📎Link: https://vuldb.com/?id.310200 *************** ⚙️Information: #Vendor: Tenable #Product: Network Monitor #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 19:35:40 +0200 *************** ✏️Title: CVE-2025-24916 | Tenable Network Monitor up to 6.5.0 on Windows access control *************** 📎Link: https://vuldb.com/?id.310201 *************** ⚙️Information: #Vendor: Tenable #Product: Network Monitor #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 19:36:55 +0200 *************** ✏️Title: CVE-2025-4223 | Page Builder Plugin up to 2.0.0 on WordPress login_url cross site scripting *************** 📎Link: https://vuldb.com/?id.310202 *************** ⚙️Information: #Product: Page Builder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 20:03:24 +0200 *************** ✏️Title: CVE-2025-5124 | Sony SNC-M1 up to 1.30 Administrative Interface default credentials *************** 📎Link: https://vuldb.com/?id.310203 *************** ⚙️Information: #Vendor: Sony #Product: SNC_M1/SNC_M3/SNC_RZ25N/SNC_RZ30N/SNC_DS10/SNC_CS3N/SNC_RX570N #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Config *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 23 May 2025 17:18:17 GMT *************** ✏️Title: Microsoft Patched It, But Hackers Didn’t Care — Inside CVE-2025–24054 *************** 📎Link: https://medium.com/p/23db9cba5cac *************** ⚙️Tags: #exploitation #cve #ntlm #mi̇crosoft *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 23 May 2025 15:15:23 +0000 *************** ✏️Title: CVE-2024-51108 - PHPGURUKUL Medical Card Generation System Stored XSS Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-51108 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 11:06:48 +0100 *************** ✏️Title: CVE-2025-1228 | olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6 Logfile Update ?page=1&logfile=LOG_Monitor path path traversal (IBJSXS) *************** 📎Link: https://vuldb.com/?id.295218 *************** ⚙️Information: #Vendor: olajowon #Product: Loggrove #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security