Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:57:30 GMT *************** ✏️Title: SSRF to RCE via Redis using Gopher Protocol *************** 📎Link: https://medium.com/p/7409b1d97dcd *************** ⚙️Tags: #bug_bounty #penetration_testing #cybersecurity #web_development #web3 *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:23:08 GMT *************** ✏️Title: Getting the Most Value Out of the OSCP: After the Exam *************** 📎Link: https://medium.com/p/6ff3f3049160 *************** ⚙️Tags: #cybersecurity #offensive_security #job_hunting #oscp #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:06:14 GMT *************** ✏️Title: Leveraging Weak Git Configuration: Bandit31 Overthewire Write Up *************** 📎Link: https://medium.com/p/32f826cfd139 *************** ⚙️Tags: #cybersecurity #ctf_writeup #overthewire *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:18:25 GMT *************** ✏️Title: Keamanan Sistem ICS/SCADA: Kenapa Penting & Apa Saja Tantangannya? *************** 📎Link: https://medium.com/p/9511a162048e *************** ⚙️Tags: #soc #cybersecurity #malware #cyber #blue_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:15:21 +0000 *************** ✏️Title: CVE-2024-57783 - "Dot Desktop XSS Command Execution" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-57783 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 14:15:23 +0000 *************** ✏️Title: CVE-2025-37093 - HPE StoreOnce Authentication Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-37093 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 15:15:32 +0000 *************** ✏️Title: CVE-2024-48877 - Microsoft Xls2csv Heap Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-48877 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 15:15:32 +0000 *************** ✏️Title: CVE-2024-52035 - Catdoc OLE Document File Allocation Table Parser Integer Overflow Heap Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-52035 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 15:15:32 +0000 *************** ✏️Title: CVE-2024-54028 - Catdoc OLE Document DIFAT Parser Integer Underflow Heap-Based Memory Corruption *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-54028 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:31:13 +0200 *************** ✏️Title: CVE-2025-20001 | High-Logic FontCreator 15.0.0.3015 Font File out-of-bounds (TALOS-2025-2157) *************** 📎Link: https://vuldb.com/?id.310835 *************** ⚙️Information: #Vendor: High_Logic #Product: FontCreator #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:31:42 +0200 *************** ✏️Title: CVE-2024-48877 | xls2csv 0.95 Shared String Table Record Parser integer overflow to buffer overflow (TALOS-2024-2128) *************** 📎Link: https://vuldb.com/?id.310836 *************** ⚙️Information: #Product: xls2csv #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:31:54 +0200 *************** ✏️Title: CVE-2024-52035 | catdoc 0.95 OLE Document File Allocation Table Parser integer overflow (TALOS-2024-2131) *************** 📎Link: https://vuldb.com/?id.310837 *************** ⚙️Information: #Product: catdoc #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:32:18 +0200 *************** ✏️Title: CVE-2024-54028 | catdoc 0.95 OLE Document DIFAT Parser integer underflow (TALOS-2024-2132) *************** 📎Link: https://vuldb.com/?id.310838 *************** ⚙️Information: #Product: catdoc #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:32:30 +0200 *************** ✏️Title: CVE-2025-37096 | HPE StoreOnce Software up to 4.3.10 command injection *************** 📎Link: https://vuldb.com/?id.310839 *************** ⚙️Information: #Vendor: HPE #Product: StoreOnce Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:32:39 +0200 *************** ✏️Title: CVE-2025-44172 | Tenda AC6 15.03.05.16 setSmartPowerManagement Time stack-based overflow *************** 📎Link: https://vuldb.com/?id.310840 *************** ⚙️Information: #Vendor: Tenda #Product: AC6 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:33:10 +0200 *************** ✏️Title: CVE-2025-2939 | Ninja Tables Plugin up to 5.0.18 on WordPress deserialization *************** 📎Link: https://vuldb.com/?id.310841 *************** ⚙️Information: #Product: Ninja Tables Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:33:26 +0200 *************** ✏️Title: CVE-2025-4047 | Broken Link Checker Plugin up to 2.4.4 on WordPress ajax_full_status/ajax_dashboard_status improper authentication *************** 📎Link: https://vuldb.com/?id.310842 *************** ⚙️Information: #Product: Broken Link Checker Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:37:08 +0200 *************** ✏️Title: CVE-2024-40112 | Sitecom WLX-2006 Wall Mount Range Extender N300 up to 1.5 Cookie Language file inclusion *************** 📎Link: https://vuldb.com/?id.310843 *************** ⚙️Information: #Vendor: Sitecom #Product: WLX_2006 Wall Mount Range Extender N300 #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:37:25 +0200 *************** ✏️Title: CVE-2024-40113 | Sitecom WLX-2006 Wall Mount Range Extender N300 up to 1.5 default credentials *************** 📎Link: https://vuldb.com/?id.310844 *************** ⚙️Information: #Vendor: Sitecom #Product: WLX_2006 Wall Mount Range Extender N300 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:37:45 +0200 *************** ✏️Title: CVE-2024-40114 | Sitecom WLX-2006 Wall Mount Range Extender N300 up to 1.5 Cookie Language cross site scripting *************** 📎Link: https://vuldb.com/?id.310845 *************** ⚙️Information: #Vendor: Sitecom #Product: WLX_2006 Wall Mount Range Extender N300 #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security