Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:01:07 +0200 *************** ✏️Title: CVE-2025-46203 | Unifiedtransform 2.0 /students/edit/ privilege escalation *************** 📎Link: https://vuldb.com/?id.311202 *************** ⚙️Information: #Product: Unifiedtransform #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:01:18 +0200 *************** ✏️Title: CVE-2025-46204 | Unifiedtransform 2.0 /course/edit/ privilege escalation *************** 📎Link: https://vuldb.com/?id.311203 *************** ⚙️Information: #Product: Unifiedtransform #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:01:33 +0200 *************** ✏️Title: CVE-2025-22243 | VMware NSX Manager UI cross site scripting *************** 📎Link: https://vuldb.com/?id.311204 *************** ⚙️Information: #Vendor: VMware #Product: NSX #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:01:52 +0200 *************** ✏️Title: CVE-2025-22244 | VMware NSX Gateway Firewall cross site scripting *************** 📎Link: https://vuldb.com/?id.311205 *************** ⚙️Information: #Vendor: VMware #Product: NSX #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:02:02 +0200 *************** ✏️Title: CVE-2025-22245 | VMware NSX Router Port cross site scripting *************** 📎Link: https://vuldb.com/?id.311206 *************** ⚙️Information: #Vendor: VMware #Product: NSX #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:04:38 +0200 *************** ✏️Title: CVE-2025-31482 | FreshRSS up to 1.26.1 cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311207 *************** ⚙️Information: #Product: FreshRSS #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:04:49 +0200 *************** ✏️Title: CVE-2025-46011 | Listmonk up to 4.1.0 QuerySubscribers sql injection *************** 📎Link: https://vuldb.com/?id.311208 *************** ⚙️Information: #Product: Listmonk #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 20:08:27 GMT *************** ✏️Title: REPORT ON METASPLOITABLE 2 *************** 📎Link: https://medium.com/p/ff0aac78ed4e *************** ⚙️Tags: #ctf #metasploitable2 *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 16:15:36 +0000 *************** ✏️Title: CVE-2025-29093 - Motivian Content Mangment System Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-29093 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 16:15:36 +0000 *************** ✏️Title: CVE-2025-29094 - Motivian Content Management System Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-29094 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 16:15:36 +0000 *************** ✏️Title: CVE-2025-5593 - FreeFloat FTP Server Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5593 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 16:15:36 +0000 *************** ✏️Title: CVE-2025-5594 - FreeFloat FTP Server SET Command Handler Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5594 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:25 +0000 *************** ✏️Title: CVE-2025-20129 - Cisco Customer Collaboration Platform (CCP) HTTP Request Manipulation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20129 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:25 +0000 *************** ✏️Title: CVE-2025-20130 - "Cisco ISE File Upload Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20130 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-20163 - Cisco Nexus Dashboard Fabric Controller SSH Host Key Validation Impersonation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20163 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-20259 - Cisco ThousandEyes Endpoint Agent for Windows Symbolic Link File Deletion Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20259 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-20261 - Cisco IMC SSH Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20261 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20273 - Cisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20273 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20275 - Cisco Unified Contact Center Express Java Deserialization Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20275 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 17:15:27 +0000 *************** ✏️Title: CVE-2025-20276 - "Cisco Unified CCX Java Deserialization Remote Code Execution Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-20276 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security