Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 07:19:11 GMT *************** ✏️Title: Leaking in Plain Sight: How Short Links Expose Sensitive Data *************** 📎Link: https://medium.com/p/fb5bf9e53833 *************** ⚙️Tags: #red_team #penetration_testing #bug_bounty #reconnaissance *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 07:20:37 GMT *************** ✏️Title: Memory Analysis Introduction | TryHackMe Write-Up | FarrosFR *************** 📎Link: https://medium.com/p/32e865e2a1c0 *************** ⚙️Tags: #farrosfr #tryhackme #memory_analysis #infosec #security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 06:55:54 GMT *************** ✏️Title: Mengenal Malware, Phishing, dan Ransomware *************** 📎Link: https://medium.com/p/545c099dc419 *************** ⚙️Tags: #cybersecurity #bootcamp #ransomware #phising #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:40:06 +0200 *************** ✏️Title: CVE-2025-48889 | gradio-app gradio up to 5.30.x Flagging denial of service (GHSA-8jw3-6x8j-v96g) *************** 📎Link: https://vuldb.com/?id.310618 *************** ⚙️Information: #Vendor: gradio_app #Product: gradio #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:40:16 +0200 *************** ✏️Title: CVE-2025-48476 | freescout up to 1.8.179 Password Field fill behavioral workflow (GHSA-7h5m-q39p-h849) *************** 📎Link: https://vuldb.com/?id.310619 *************** ⚙️Information: #Product: freescout #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:40:17 +0200 *************** ✏️Title: CVE-2025-48490 | Lomkit laravel-rest-api up to 2.12.x improper authorization (GHSA-69rh-hccr-cxrj) *************** 📎Link: https://vuldb.com/?id.310620 *************** ⚙️Information: #Vendor: Lomkit #Product: laravel_rest_api #Type: Automation Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:40:25 +0200 *************** ✏️Title: CVE-2025-48477 | freescout up to 1.8.179 fill behavioral workflow (GHSA-2c82-qx7x-35h8) *************** 📎Link: https://vuldb.com/?id.310621 *************** ⚙️Information: #Product: freescout #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:40:40 +0200 *************** ✏️Title: CVE-2025-48478 | freescout up to 1.8.179 User Creation fillable behavioral workflow (GHSA-fqjj-79j2-8qx6) *************** 📎Link: https://vuldb.com/?id.310622 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:40:50 +0200 *************** ✏️Title: CVE-2025-48479 | freescout up to 1.8.179 behavioral workflow (GHSA-627h-pc3c-w68h) *************** 📎Link: https://vuldb.com/?id.310623 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:41:10 +0200 *************** ✏️Title: CVE-2025-48480 | freescout up to 1.8.179 Avatar /.htaccess behavioral workflow (GHSA-pfjf-43mp-3gp2) *************** 📎Link: https://vuldb.com/?id.310624 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:41:26 +0200 *************** ✏️Title: CVE-2025-48481 | freescout up to 1.8.179 invite_hash behavioral workflow (GHSA-jgj2-x749-5wc7) *************** 📎Link: https://vuldb.com/?id.310625 *************** ⚙️Information: #Product: freescout #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:41:38 +0200 *************** ✏️Title: CVE-2025-48482 | freescout up to 1.8.179 fill behavioral workflow (GHSA-7fjp-538q-9vrf) *************** 📎Link: https://vuldb.com/?id.310626 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:41:46 +0200 *************** ✏️Title: CVE-2025-4429 | Gearside Developer Dashboard Plugin up to 1.0.72 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.310627 *************** ⚙️Information: #Product: Gearside Developer Dashboard Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:42:08 +0200 *************** ✏️Title: CVE-2025-48881 | valtimo-backend-libraries up to 11.3.3.RELEASE/12.12.0.RELEASE authorization (GHSA-965r-9cg9-g42p) *************** 📎Link: https://vuldb.com/?id.310628 *************** ⚙️Information: #Product: valtimo_backend_libraries #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:42:20 +0200 *************** ✏️Title: CVE-2025-48484 | freescout up to 1.8.177 Conversation cross site scripting (GHSA-w3j9-7fhq-m8x7) *************** 📎Link: https://vuldb.com/?id.310629 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:43:03 +0200 *************** ✏️Title: CVE-2025-41235 | VMware Spring Cloud Gateway Header X-Forwarded-For/Forwarded *************** 📎Link: https://vuldb.com/?id.310630 *************** ⚙️Information: #Vendor: VMware #Product: Spring Cloud Gateway/Spring Cloud Gateway Server MVC #Type: Cloud Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:43:17 +0200 *************** ✏️Title: CVE-2025-48483 | freescout up to 1.8.179 cross site scripting (GHSA-g2vq-qwx2-pc2m) *************** 📎Link: https://vuldb.com/?id.310631 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:45:00 +0200 *************** ✏️Title: CVE-2025-48492 | GetSimple CMS up to 3.3.21 Edit Component command injection *************** 📎Link: https://vuldb.com/?id.310632 *************** ⚙️Information: #Vendor: GetSimple #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:45:12 +0200 *************** ✏️Title: CVE-2025-48486 | freescout up to 1.8.179 Session::flash cross site scripting *************** 📎Link: https://vuldb.com/?id.310633 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:45:27 +0200 *************** ✏️Title: CVE-2025-48487 | freescout up to 1.8.179 Flash-Message cross site scripting *************** 📎Link: https://vuldb.com/?id.310634 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security