Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5281 - Google Chrome BFCache User Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5281 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5283 - Google Chrome libvpx Use-After-Free Heap Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5283 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 21:35:00 GMT *************** ✏️Title: Real Estate Scams to Watch Out For: Stay Safe in Your Property Search *************** 📎Link: https://medium.com/p/dbc70dbef3f8 *************** ⚙️Tags: #hacking #scam #safety #real_estate #property *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:30:41 +0200 *************** ✏️Title: CVE-2025-22377 | Samsung Mobile Processor/Wearable Processor/Modem Exynos up to 9110 GPRS Protocol out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310387 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor/Wearable Processor/Modem Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:30:59 +0200 *************** ✏️Title: CVE-2024-49196 | Samsung Mobile Processor 1480/2400 GPU denial of service *************** 📎Link: https://vuldb.com/?id.310388 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:32:23 +0200 *************** ✏️Title: CVE-2025-5278 | GNU Coreutils 7.2 Key Specification heap-based overflow *************** 📎Link: https://vuldb.com/?id.310389 *************** ⚙️Information: #Vendor: GNU #Product: Coreutils #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 20:41:11 +0200 *************** ✏️Title: CVE-2025-45475 | Maccms10 2025.1000.4047 Friend Link Management server-side request forgery *************** 📎Link: https://vuldb.com/?id.310390 *************** ⚙️Information: #Product: Maccms10 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 20:41:47 +0200 *************** ✏️Title: CVE-2025-4800 | MasterStudy LMS Pro Plugin up to 4.7.0 on WordPress stm_lms_add_assignment_attachment unrestricted upload *************** 📎Link: https://vuldb.com/?id.310391 *************** ⚙️Information: #Product: MasterStudy LMS Pro Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:16:32 +0200 *************** ✏️Title: CVE-2025-5066 | Google Chrome up to 136.0.7103.113 on Android Messages ui layer (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310392 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:16:43 +0200 *************** ✏️Title: CVE-2025-5063 | Google Chrome up to 136.0.7103.113 Compositing use after free (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310393 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:16:57 +0200 *************** ✏️Title: CVE-2025-5064 | Google Chrome up to 136.0.7103.113 Background Fetch API cross-domain policy (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310394 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:17:10 +0200 *************** ✏️Title: CVE-2025-5065 | Google Chrome up to 136.0.7103.113 FileSystemAccess API ui layer (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310395 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:17:22 +0200 *************** ✏️Title: CVE-2025-5067 | Google Chrome up to 136.0.7103.113 Tab Strip ui layer (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310396 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:17:33 +0200 *************** ✏️Title: CVE-2025-5280 | Google Chrome up to 136.0.7103.113 V8 out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310397 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:18:42 +0200 *************** ✏️Title: CVE-2025-5281 | Google Chrome up to 136.0.7103.113 BFCache information disclosure *************** 📎Link: https://vuldb.com/?id.310398 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:19:07 +0200 *************** ✏️Title: CVE-2025-5279 | Amazon Redshift Python Connector up to 2.1.6 BrowserAzureOAuth2CredentialsProvider Plugin certificate validation *************** 📎Link: https://vuldb.com/?id.310399 *************** ⚙️Information: #Vendor: Amazon #Product: Redshift Python Connector #Type: Programming Language Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:19:22 +0200 *************** ✏️Title: CVE-2024-13966 | ZKTeco BioTime Setting default password *************** 📎Link: https://vuldb.com/?id.310400 *************** ⚙️Information: #Vendor: ZKTeco #Product: BioTime #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:20:02 +0200 *************** ✏️Title: CVE-2025-45529 | SSCMS 7.3.1 GET Request templatesAssetsEditor ReadTextAsynchronous path traversal *************** 📎Link: https://vuldb.com/?id.310401 *************** ⚙️Information: #Product: SSCMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:20:35 +0200 *************** ✏️Title: CVE-2025-5198 | Red Hat Advanced Cluster Security 4 Stackrox cross site scripting *************** 📎Link: https://vuldb.com/?id.310402 *************** ⚙️Information: #Vendor: Red Hat #Product: Advanced Cluster Security #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:20:49 +0200 *************** ✏️Title: CVE-2025-46173 | code-projects Online Exam Mastering System 1.0 Feedback Form Name cross site scripting *************** 📎Link: https://vuldb.com/?id.310403 *************** ⚙️Information: #Vendor: code_projects #Product: Online Exam Mastering System #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security