Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 17:16:27 GMT *************** ✏️Title: The 3 Best EXIF Tools for 2025 (And Why I Built One Myself) *************** 📎Link: https://medium.com/p/cdf3cfba6413 *************** ⚙️Tags: #photography #privacy #exif #image #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 17:08:28 GMT *************** ✏️Title: Domain Enumeration with ldapdomaindump || Active Directory Pentesting || Part 8. *************** 📎Link: https://medium.com/p/c4e36368c0e5 *************** ⚙️Tags: #active_directory #ldapdomaindump #tutorial_for_red_team #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 17:22:33 GMT *************** ✏️Title: OverTheWire: Wargames — Bandit Walkthrough *************** 📎Link: https://medium.com/p/41483f6abd01 *************** ⚙️Tags: #overthewire #cybersecurity #ethical_hacking #linux #bandit *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 17:00:00 +0000 *************** ✏️Title: How to Conduct a Secure Code Review – Tools and Techniques *************** 📎Link: https://cybersecuritynews.com/?p=109298 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 16:36:21 GMT *************** ✏️Title: CTF Writeup — TJCTF 2025 — loopy *************** 📎Link: https://medium.com/p/5fdade94f7fa *************** ⚙️Tags: #ctf #ctf_walkthrough #cybersecurity_awareness #cybersecurity #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 16:40:15 GMT *************** ✏️Title: MobileHackingLab — Secure Notes *************** 📎Link: https://medium.com/p/3905d5cdbc96 *************** ⚙️Tags: #penetration_test #ctf_writeup #mobile_apps #cybersecurity #android *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 16:54:49 GMT *************** ✏️Title: eJPT Zero to Hero: CTF Network-Based Attacks *************** 📎Link: https://medium.com/p/bd72135dce31 *************** ⚙️Tags: #ejpt #ctf_writeup #ctf #hacking #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:51:47 +0200 *************** ✏️Title: CVE-2025-48448 | Admin Audit Trail up to 1.0.4 on Drupal allocation of resources (sa-contrib-2025-068) *************** 📎Link: https://vuldb.com/?id.312304 *************** ⚙️Information: #Product: Admin Audit Trail #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:51:48 +0200 *************** ✏️Title: CVE-2025-48445 | Commerce Eurobank up to 2.1.0 on Drupal authorization (sa-contrib-2025-066) *************** 📎Link: https://vuldb.com/?id.312305 *************** ⚙️Information: #Product: Commerce Eurobank #Type: Banking Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:08 +0200 *************** ✏️Title: CVE-2025-6002 | VirtueMart up to 4.4.9 Product Image Section unrestricted upload *************** 📎Link: https://vuldb.com/?id.312306 *************** ⚙️Information: #Product: VirtueMart #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:09 +0200 *************** ✏️Title: CVE-2025-48444 | Quick Node Block up to 1.x on Drupal authorization (sa-contrib-2025-064) *************** 📎Link: https://vuldb.com/?id.312307 *************** ⚙️Information: #Product: Quick Node Block #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:10 +0200 *************** ✏️Title: CVE-2025-4605 | Autodesk USD for Maya/USD for 3ds Max/Maya usdc File memory allocation *************** 📎Link: https://vuldb.com/?id.312308 *************** ⚙️Information: #Vendor: Autodesk #Product: USD for Maya/USD for 3ds Max/Maya #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:10 +0200 *************** ✏️Title: CVE-2025-0163 | IBM Security Verify Access up to 10.0.8 observable response discrepancy *************** 📎Link: https://vuldb.com/?id.312309 *************** ⚙️Information: #Vendor: IBM #Product: Security Verify Access/Security Verify Access Docker #Type: Virtualization Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:11 +0200 *************** ✏️Title: CVE-2025-48446 | Commerce Alphabank Redirect up to 1.0.2 on Drupal authorization (sa-contrib-2025-067) *************** 📎Link: https://vuldb.com/?id.312310 *************** ⚙️Information: #Product: Commerce Alphabank Redirect #Type: Banking Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:12 +0200 *************** ✏️Title: CVE-2025-48013 | Quick Node Block up to 1.x on Drupal authorization (sa-contrib-2025-065) *************** 📎Link: https://vuldb.com/?id.312311 *************** ⚙️Information: #Product: Quick Node Block #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:16 +0200 *************** ✏️Title: CVE-2025-48447 | Lightgallery up to 1.5.x on Drupal cross site scripting (sa-contrib-2025-069) *************** 📎Link: https://vuldb.com/?id.312312 *************** ⚙️Information: #Product: Lightgallery #Type: Photo Gallery Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:24 +0200 *************** ✏️Title: CVE-2025-3473 | IBM Security Guardium 12.1 insecure inherited permissions *************** 📎Link: https://vuldb.com/?id.312313 *************** ⚙️Information: #Vendor: IBM #Product: Security Guardium #Type: Policy Management Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:52:36 +0200 *************** ✏️Title: CVE-2025-49148 | thevindu-w clip_share_server up to 3.8.4 on Windows clip_share.exe uncontrolled search path (GHSA-rc47-h83g-2r8j) *************** 📎Link: https://vuldb.com/?id.312314 *************** ⚙️Information: #Vendor: thevindu_w #Product: clip_share_server #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:53:05 +0200 *************** ✏️Title: CVE-2025-1699 | Motorola g34/g34t/g45 5G prior 2025-06-01 default permission *************** 📎Link: https://vuldb.com/?id.312315 *************** ⚙️Information: #Vendor: Motorola #Product: g34/g34t/g45 5G #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:53:22 +0200 *************** ✏️Title: CVE-2025-6001 | VirtueMart up to 4.4.9 Media Manager cross-site request forgery *************** 📎Link: https://vuldb.com/?id.312316 *************** ⚙️Information: #Product: VirtueMart #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security