Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 10:15:21 +0000 *************** ✏️Title: CVE-2025-3260 - Grafana Dashboard Permission Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-3260 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 10:15:21 +0000 *************** ✏️Title: CVE-2025-5439 - "Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 Facebook Like Command Injection Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5439 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 10:15:22 +0000 *************** ✏️Title: CVE-2025-5440 - Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP Os Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5440 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:21 +0000 *************** ✏️Title: CVE-2025-0073 - Arm Ltd Valhall GPU Kernel Driver: After Free Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0073 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:21 +0000 *************** ✏️Title: CVE-2025-0819 - Arm Ltd Bifrost GPU Kernel Driver/Arm Ltd Valhall GPU Kernel Driver/Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver: After Free Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0819 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:21 +0000 *************** ✏️Title: CVE-2025-1246 - Arm Ltd Bifrost GPU Userspace Driver/Valhall GPU Userspace Driver/Arm 5th Gen GPU Architecture Userspace Driver Buffer Overflow *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1246 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:21 +0000 *************** ✏️Title: CVE-2025-29785 - QUIC-go Nil-Pointer Dereference Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-29785 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:22 +0000 *************** ✏️Title: CVE-2025-3454 - Grafana Datasource Proxy API Slash Path Bypass Authorization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-3454 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:22 +0000 *************** ✏️Title: CVE-2025-47272 - Phoenix eCommerce Account Deletion Authentication Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-47272 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:22 +0000 *************** ✏️Title: CVE-2025-47289 - CE Phoenix Stored Cross-Site Scripting (XSS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-47289 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:22 +0000 *************** ✏️Title: CVE-2025-48494 - Gokapi Stored Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48494 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:23 +0000 *************** ✏️Title: CVE-2025-5441 - Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 Os Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5441 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 11:15:23 +0000 *************** ✏️Title: CVE-2025-5442 - Linksys Router Os Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5442 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:25:00 +0530 *************** ✏️Title: The Secret Defense Strategy of Four Critical Industries Combating Advanced Cyber Threats *************** 📎Link: https://thehackernews.com/2025/06/the-secret-defense-strategy-of-four.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:53:00 +0530 *************** ✏️Title: ⚡ Weekly Recap: APT Intrusions, AI Malware, Zero-Click Exploits, Browser Hijacks and More *************** 📎Link: https://thehackernews.com/2025/06/weekly-recap-apt-intrusions-ai-malware.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 13:57:19 +0200 *************** ✏️Title: CVE-2025-1246 | ARM Bifrost GPU Userspace Driver up to r49p3/r51p0 memory corruption *************** 📎Link: https://vuldb.com/?id.310807 *************** ⚙️Information: #Vendor: ARM #Product: Bifrost GPU Userspace Driver/Valhall GPU Userspace Driver/5th Gen GPU Architecture Userspace Driver #Type: Hardware Driver Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 13:57:59 +0200 *************** ✏️Title: CVE-2025-48990 | nekernel 0.0.2 Utils.cc heap-based overflow *************** 📎Link: https://vuldb.com/?id.310808 *************** ⚙️Information: #Product: nekernel #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 13:58:22 +0200 *************** ✏️Title: CVE-2025-1750 | run-llama llama_index up to 0.3.0 DuckDBVectorStore delete ref_doc_id sql injection *************** 📎Link: https://vuldb.com/?id.310809 *************** ⚙️Information: #Vendor: run_llama #Product: llama_index #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 13:59:31 +0200 *************** ✏️Title: CVE-2025-3260 | Grafana up to 11.6.1 API dashboard.grafana.app authorization *************** 📎Link: https://vuldb.com/?id.310810 *************** ⚙️Information: #Product: Grafana #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 13:59:48 +0200 *************** ✏️Title: CVE-2025-48958 | Froxlor up to 2.2.5 cross site scripting *************** 📎Link: https://vuldb.com/?id.310811 *************** ⚙️Information: #Product: Froxlor #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security