Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:56:25 +0200 *************** ✏️Title: CVE-2025-48472 | freescout-help-desk freescout up to 1.8.178 authorization *************** 📎Link: https://vuldb.com/?id.310534 *************** ⚙️Information: #Vendor: freescout_help_desk #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:56:35 +0200 *************** ✏️Title: CVE-2025-45474 | Maccms10 2025.1000.4047 Email Setting server-side request forgery *************** 📎Link: https://vuldb.com/?id.310535 *************** ⚙️Information: #Product: Maccms10 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:45 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes Ashley Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310536 *************** ⚙️Information: #Vendor: bslthemes #Product: Ashley Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:45 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes Builty Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310537 *************** ⚙️Information: #Vendor: bslthemes #Product: Builty Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:46 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes isulu Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310538 *************** ⚙️Information: #Vendor: bslthemes #Product: isulu Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:46 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes kaffen Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310539 *************** ⚙️Information: #Vendor: bslthemes #Product: kaffen Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:46 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes Kinsley Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310540 *************** ⚙️Information: #Vendor: bslthemes #Product: Kinsley Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:47 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes larson Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310541 *************** ⚙️Information: #Vendor: bslthemes #Product: larson Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:47 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes luique Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310542 *************** ⚙️Information: #Vendor: bslthemes #Product: luique Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:47 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes Ober Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310543 *************** ⚙️Information: #Vendor: bslthemes #Product: Ober Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:48 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes ruizarch Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310544 *************** ⚙️Information: #Vendor: bslthemes #Product: ruizarch Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:59:48 +0200 *************** ✏️Title: CVE-2025-48290 | bslthemes samantha Theme on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310545 *************** ⚙️Information: #Vendor: bslthemes #Product: samantha Theme #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 18:00:04 +0200 *************** ✏️Title: CVE-2025-48126 | Essential Real Estate Plugin up to 5.2.1 on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310546 *************** ⚙️Information: #Product: Essential Real Estate Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 18:00:13 +0200 *************** ✏️Title: CVE-2025-47696 | Blog Designer Pro Plugin up to 3.4.7 on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310547 *************** ⚙️Information: #Product: Blog Designer Pro Plugin #Type: Blog Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 18:00:23 +0200 *************** ✏️Title: CVE-2025-48125 | WP Event Manager Plugin up to 3.1.49 on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310548 *************** ⚙️Information: #Product: WP Event Manager Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:15:21 +0000 *************** ✏️Title: CVE-2024-51392 - OpenKnowledgeMaps Headstart Remote Privilege Escalation *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-51392 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 17:37:28 GMT *************** ✏️Title: Active Directory Lab Setup Guide *************** 📎Link: https://medium.com/p/848a31541643 *************** ⚙️Tags: #homelab #oscp_preparation #hacking #penetration_testing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 17:43:59 GMT *************** ✏️Title: Cracking the Basics of Active Directory *************** 📎Link: https://medium.com/p/efb986f8f53f *************** ⚙️Tags: #active_directory #reconnaissance #tryhackme_walkthrough #exploitation #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 17:37:28 GMT *************** ✏️Title: Active Directory Lab Setup Guide *************** 📎Link: https://medium.com/p/848a31541643 *************** ⚙️Tags: #homelab #oscp_preparation #hacking #penetration_testing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 17:49:16 GMT *************** ✏️Title: Roadmap Karir Cybersecurity 5 Tahun dari pemula hingga Expert *************** 📎Link: https://medium.com/p/e5d4b4c728a4 *************** ⚙️Tags: #blue_team #cybersecurity #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security