Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:49:40 +0200 *************** ✏️Title: CVE-2025-30466 | Apple macOS cross-domain policy *************** 📎Link: https://vuldb.com/?id.310582 *************** ⚙️Information: #Vendor: Apple #Product: macOS #Type: Operating System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:49:40 +0200 *************** ✏️Title: CVE-2025-30466 | Apple visionOS cross-domain policy *************** 📎Link: https://vuldb.com/?id.310583 *************** ⚙️Information: #Vendor: Apple #Product: visionOS #Type: Operating System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:49:41 +0200 *************** ✏️Title: CVE-2025-30466 | Apple Safari cross-domain policy *************** 📎Link: https://vuldb.com/?id.310584 *************** ⚙️Information: #Vendor: Apple #Product: Safari #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:50:42 +0200 *************** ✏️Title: CVE-2025-31198 | Apple macOS up to 13.6/14.6/15.3 Symlink path traversal *************** 📎Link: https://vuldb.com/?id.310585 *************** ⚙️Information: #Vendor: Apple #Product: macOS #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:50:51 +0200 *************** ✏️Title: CVE-2025-47288 | Policy Plugin up to 0.1.0 on Discourse Private Group information disclosure (GHSA-jc5r-rm2j-mh4x) *************** 📎Link: https://vuldb.com/?id.310586 *************** ⚙️Information: #Product: Policy Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:51:16 +0200 *************** ✏️Title: CVE-2025-5307 | Santesoft Sante DICOM Viewer Pro up to 14.2.1 out-of-bounds (icsma-25-148-01) *************** 📎Link: https://vuldb.com/?id.310587 *************** ⚙️Information: #Vendor: Santesoft #Product: Sante DICOM Viewer Pro #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:51:30 +0200 *************** ✏️Title: CVE-2025-31189 | Apple macOS up to 13.6/14.6/15.3 File Quarantine access control *************** 📎Link: https://vuldb.com/?id.310588 *************** ⚙️Information: #Vendor: Apple #Product: macOS #Type: Operating System #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:51:41 +0200 *************** ✏️Title: CVE-2025-31199 | Apple iOS/iPadOS App information disclosure *************** 📎Link: https://vuldb.com/?id.310589 *************** ⚙️Information: #Vendor: Apple #Product: iOS/iPadOS #Type: Smartphone Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:51:41 +0200 *************** ✏️Title: CVE-2025-31199 | Apple macOS App information disclosure *************** 📎Link: https://vuldb.com/?id.310590 *************** ⚙️Information: #Vendor: Apple #Product: macOS #Type: Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:51:41 +0200 *************** ✏️Title: CVE-2025-31199 | Apple visionOS App information disclosure *************** 📎Link: https://vuldb.com/?id.310591 *************** ⚙️Information: #Vendor: Apple #Product: visionOS #Type: Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:51:49 +0200 *************** ✏️Title: CVE-2025-31261 | Apple macOS up to 13.6/14.6/15.3 App permission *************** 📎Link: https://vuldb.com/?id.310592 *************** ⚙️Information: #Vendor: Apple #Product: macOS #Type: Operating System #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:52:03 +0200 *************** ✏️Title: CVE-2025-31264 | Apple macOS up to 13.6/14.6/15.3 User Information improper authentication *************** 📎Link: https://vuldb.com/?id.310593 *************** ⚙️Information: #Vendor: Apple #Product: macOS #Type: Operating System #Risk: problematic #Local: Partially #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:52:21 +0200 *************** ✏️Title: CVE-2024-12224 | servo rust-url 0.x improper validation of unsafe equivalence in input (TSEC-2024-0421) *************** 📎Link: https://vuldb.com/?id.310594 *************** ⚙️Information: #Vendor: servo #Product: rust_url #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 05:52:39 +0200 *************** ✏️Title: CVE-2025-44619 | Tinxy WiFi Lock Controller 1 improper authentication *************** 📎Link: https://vuldb.com/?id.310595 *************** ⚙️Information: #Vendor: Tinxy #Product: WiFi Lock Controller #Type: Wireless LAN Software #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 03:00:00 +0000 *************** ✏️Title: Predictive Cyber Risk Analysis Using Aggregated Threat Intelligence *************** 📎Link: https://cybersecuritynews.com/?p=106814 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 03:12:13 +0000 *************** ✏️Title: SentinelOne Outage: Services Restored After Hours-Long Platform Disruption *************** 📎Link: https://cybersecuritynews.com/?p=109099 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 14:38:54 GMT *************** ✏️Title: CVE-2025-48881 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-48881 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 16:06:03 GMT *************** ✏️Title: CVE-2025-48883 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-48883 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 17:36:55 GMT *************** ✏️Title: CVE-2025-48936 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-48936 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 17:49:33 GMT *************** ✏️Title: CVE-2025-48887 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-48887 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security