Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:41:52 +0200 *************** ✏️Title: CVE-2025-48740 | StrangeBee TheHive up to 5.2.15/5.3.10/5.4.9/5.5.0 cross-site request forgery (SB-SEC-ADV-2025-001) *************** 📎Link: https://vuldb.com/?id.310226 *************** ⚙️Information: #Vendor: StrangeBee #Product: TheHive #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:42:10 +0200 *************** ✏️Title: CVE-2025-48751 | tickbh ProcessLock Crate 0.1.0 on Rust race condition *************** 📎Link: https://vuldb.com/?id.310227 *************** ⚙️Information: #Vendor: tickbh #Product: ProcessLock Crate #Type: Rust Package #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:42:30 +0200 *************** ✏️Title: CVE-2025-48752 | Forestryks process-sync-rs Crate 0.2.2 on Rust drop use after free *************** 📎Link: https://vuldb.com/?id.310228 *************** ⚙️Information: #Vendor: Forestryks #Product: process_sync_rs Crate #Type: Rust Package #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:42:47 +0200 *************** ✏️Title: CVE-2025-48753 | obsidiandynamics anode Crate 0.1.0 on Rust SpinLock race condition *************** 📎Link: https://vuldb.com/?id.310229 *************** ⚙️Information: #Vendor: obsidiandynamics #Product: anode Crate #Type: Rust Package #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:43:00 +0200 *************** ✏️Title: CVE-2025-48754 | FractalFir memory_pages Crate 0.1.0 on Rust divide by zero *************** 📎Link: https://vuldb.com/?id.310230 *************** ⚙️Information: #Vendor: FractalFir #Product: memory_pages Crate #Type: Rust Package #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:43:14 +0200 *************** ✏️Title: CVE-2025-48755 | blyssprivacy spiral-rs Crate 0.2.0 on Rust mismatched memory management routines (Issue 36) *************** 📎Link: https://vuldb.com/?id.310231 *************** ⚙️Information: #Vendor: blyssprivacy #Product: spiral_rs Crate #Type: Rust Package #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:43:28 +0200 *************** ✏️Title: CVE-2025-48756 | maboroshinokiseki scsir Crate 0.2.0 on Rust group_number type confusion *************** 📎Link: https://vuldb.com/?id.310232 *************** ⚙️Information: #Vendor: maboroshinokiseki #Product: scsir Crate #Type: Rust Package #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 05:45:17 GMT *************** ✏️Title: Escalating impact: Full Account Takeover via Stored XSS *************** 📎Link: https://medium.com/p/24e5aee209f6 *************** ⚙️Tags: #bug_bounty #bug_bounty_tips #bug_bounty_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 05:22:43 GMT *************** ✏️Title: Bug Bounty in 2025: Hunting Business Logic Flaws the Right Way *************** 📎Link: https://medium.com/p/614aba550f7b *************** ⚙️Tags: #bug_bounty_hunter #bugbounty_tips #bug_bounty_writeup #bug_bounty #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 05:06:07 GMT *************** ✏️Title: The $260M Cetus Protocol Hack: Anatomy of a DeFi Disaster *************** 📎Link: https://medium.com/p/d29ee0596ddb *************** ⚙️Tags: #sui #blockchain #hacking #cetus_protocol *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 05:40:34 GMT *************** ✏️Title: FOFA Dorking | Part4 *************** 📎Link: https://medium.com/p/7d0a09995407 *************** ⚙️Tags: #web_security #bug_bounty_tips #osint #pentesting #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:23 +0000 *************** ✏️Title: CVE-2024-13427 - WordPress Pagelayer Stored Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13427 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:23 +0000 *************** ✏️Title: CVE-2025-3869 - WordPress 4stats Plugin CSRF Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-3869 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:23 +0000 *************** ✏️Title: CVE-2025-48751 - Apache Process_Lock Data Race *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48751 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:23 +0000 *************** ✏️Title: CVE-2025-48752 - Apache Process-Sync Pthread Mutex Unlock Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48752 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:23 +0000 *************** ✏️Title: CVE-2025-48753 - "Anode SpinLock Data Race Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48753 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:24 +0000 *************** ✏️Title: CVE-2025-48754 - Rust memory_pages Division by Zero Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48754 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:24 +0000 *************** ✏️Title: CVE-2025-48755 - Spiral-rs Crate Zero-Sized Type Allocation Arbitrary Write *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48755 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:24 +0000 *************** ✏️Title: CVE-2025-48756 - "Apache SCSIR Group Number Bit Overflow Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48756 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 03:15:24 +0000 *************** ✏️Title: CVE-2025-5055 - WordPress Smart Forms Stored Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5055 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security