Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:42:16 +0200 *************** ✏️Title: CVE-2024-56805 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 buffer overflow (qsa-25-12 / EUVD-2024-54653) *************** 📎Link: https://vuldb.com/?id.311549 *************** ⚙️Information: #Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:42:54 +0200 *************** ✏️Title: CVE-2025-22481 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 command injection (qsa-25-12 / EUVD-2025-17340) *************** 📎Link: https://vuldb.com/?id.311550 *************** ⚙️Information: #Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:43:16 +0200 *************** ✏️Title: CVE-2025-22484 | QNAP File Station 5.5.6.4847 allocation of resources (qsa-25-16 / EUVD-2025-17339) *************** 📎Link: https://vuldb.com/?id.311551 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:43:41 +0200 *************** ✏️Title: CVE-2025-29872 | QNAP File Station 5.5.6.4847 allocation of resources (qsa-25-16 / EUVD-2025-17336) *************** 📎Link: https://vuldb.com/?id.311552 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:44:02 +0200 *************** ✏️Title: CVE-2025-5747 | WOLFBOX Level 2 EV Charger MCU Command Parser interpretation input (ZDI-25-326) *************** 📎Link: https://vuldb.com/?id.311553 *************** ⚙️Information: #Vendor: WOLFBOX #Product: Level 2 EV Charger #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:55:29 +0200 *************** ✏️Title: CVE-2025-5748 | WOLFBOX Level 2 EV Charger Tuya Communications Module routine (ZDI-25-327) *************** 📎Link: https://vuldb.com/?id.311554 *************** ⚙️Information: #Vendor: WOLFBOX #Product: Level 2 EV Charger #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:55:50 +0200 *************** ✏️Title: CVE-2025-22482 | QNAP Qsync Central 4.3.0.11/4.4.0.15/4.4.0.16_20240819 format string (qsa-25-10) *************** 📎Link: https://vuldb.com/?id.311555 *************** ⚙️Information: #Vendor: QNAP #Product: Qsync Central #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:56:14 +0200 *************** ✏️Title: CVE-2025-22486 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09) *************** 📎Link: https://vuldb.com/?id.311556 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:57:53 +0200 *************** ✏️Title: CVE-2025-29883 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09) *************** 📎Link: https://vuldb.com/?id.311557 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:58:09 +0200 *************** ✏️Title: CVE-2025-29884 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09) *************** 📎Link: https://vuldb.com/?id.311558 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:01:26 +0200 *************** ✏️Title: CVE-2025-29885 | QNAP File Station 5.5.6.4791 certificate validation (qsa-25-09) *************** 📎Link: https://vuldb.com/?id.311559 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:01:42 +0200 *************** ✏️Title: CVE-2025-29892 | QNAP Qsync Central 4.3.0.11/4.4.0.15/4.4.0.16_20240819 sql injection (qsa-25-10) *************** 📎Link: https://vuldb.com/?id.311560 *************** ⚙️Information: #Vendor: QNAP #Product: Qsync Central #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:02:51 +0200 *************** ✏️Title: CVE-2025-22490 | QNAP File Station 5.5.6.4741/5.5.6.4791 null pointer dereference (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311561 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:03:10 +0200 *************** ✏️Title: CVE-2025-29873 | QNAP File Station 5.5.6.4741/5.5.6.4791 null pointer dereference (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311562 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:03:26 +0200 *************** ✏️Title: CVE-2025-29876 | QNAP File Station 5.5.6.4741/5.5.6.4791 null pointer dereference (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311563 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:03:55 +0200 *************** ✏️Title: CVE-2025-29877 | QNAP File Station 5.5.6.4741/5.5.6.4791 null pointer dereference (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311564 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:04:11 +0200 *************** ✏️Title: CVE-2025-30279 | QNAP File Station 5.5.6.4847 certificate validation (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311565 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:04:25 +0200 *************** ✏️Title: CVE-2025-33031 | QNAP File Station 5.5.6.4741/5.5.6.4791 certificate validation (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311566 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:04:40 +0200 *************** ✏️Title: CVE-2025-33035 | QNAP File Station 5.5.6.4847 path traversal (qsa-25-16) *************** 📎Link: https://vuldb.com/?id.311567 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:04:48 +0200 *************** ✏️Title: CVE-2025-49011 | authzed spicedb up to 1.44.1 security check (GHSA-cwwm-hr97-qfxm) *************** 📎Link: https://vuldb.com/?id.311568 *************** ⚙️Information: #Vendor: authzed #Product: spicedb #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security