Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:23:11 +0200 *************** ✏️Title: CVE-2025-27955 | Clinical Collaboration Platform 12.2.1.5 Logout session expiration *************** 📎Link: https://vuldb.com/?id.310856 *************** ⚙️Information: #Product: Clinical Collaboration Platform #Type: Groupware Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:24:10 +0200 *************** ✏️Title: CVE-2024-1440 | WSO2 Identity Server Authentication Endpoint redirect *************** 📎Link: https://vuldb.com/?id.310857 *************** ⚙️Information: #Vendor: WSO2 #Product: Identity Server/API Manager/Identity Server as Key Manager/Open Banking AM/Open Banking IAM/Carbon Identity Application Authentication Endpoint #Type: Banking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:24:53 +0200 *************** ✏️Title: CVE-2025-20297 | Splunk Enterprise/Cloud Platform REST Endpoint cross site scripting (SVD-2025-0601) *************** 📎Link: https://vuldb.com/?id.310858 *************** ⚙️Information: #Vendor: Splunk #Product: Enterprise/Cloud Platform #Type: Log Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:25:25 +0200 *************** ✏️Title: CVE-2025-20298 | Splunk Universal Forwarder up to 9.1.8/9.2.5/9.3.3/9.4.1 on Windows SplunkUniversalForwarder permission assignment (SVD-2025-0602) *************** 📎Link: https://vuldb.com/?id.310859 *************** ⚙️Information: #Vendor: Splunk #Product: Universal Forwarder #Type: Log Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:26:08 +0200 *************** ✏️Title: CVE-2024-7073 | WSO2 Identity Server as Key Manager SOAP Admin Services server-side request forgery *************** 📎Link: https://vuldb.com/?id.310860 *************** ⚙️Information: #Vendor: WSO2 #Product: Identity Server as Key Manager/Identity Server/Open Banking KM/Open Banking IAM/Carbon Policy Editor BE #Type: Banking Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:28:20 +0200 *************** ✏️Title: CVE-2025-5086 | Dassault Systèmes DELMIA Apriso up to 2025 deserialization *************** 📎Link: https://vuldb.com/?id.310861 *************** ⚙️Information: #Vendor: Dassault Systèmes #Product: DELMIA Apriso #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:29:57 +0200 *************** ✏️Title: CVE-2025-23104 | Samsung 1480/2200/2400 use after free *************** 📎Link: https://vuldb.com/?id.310862 *************** ⚙️Information: #Vendor: Samsung #Product: 1480/2200/2400 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:30:09 +0200 *************** ✏️Title: CVE-2025-27956 | WebLaudos 24.2 ID path traversal *************** 📎Link: https://vuldb.com/?id.310863 *************** ⚙️Information: #Product: WebLaudos #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:30:53 +0200 *************** ✏️Title: CVE-2025-27953 | Clinical Collaboration Platform 12.2.1.5 user session *************** 📎Link: https://vuldb.com/?id.310864 *************** ⚙️Information: #Product: Clinical Collaboration Platform #Type: Groupware Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:31:03 +0200 *************** ✏️Title: CVE-2025-27954 | Clinical Collaboration Platform 12.2.1.5 default.aspx usertoken information disclosure *************** 📎Link: https://vuldb.com/?id.310865 *************** ⚙️Information: #Product: Clinical Collaboration Platform #Type: Groupware Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:31:15 +0200 *************** ✏️Title: CVE-2025-23105 | Samsung 1480/2200/2400 use after free *************** 📎Link: https://vuldb.com/?id.310866 *************** ⚙️Information: #Vendor: Samsung #Product: 1480/2200/2400 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:31:25 +0200 *************** ✏️Title: CVE-2024-3509 | WSO2 Enterprise Integrator Management Console cross site scripting *************** 📎Link: https://vuldb.com/?id.310867 *************** ⚙️Information: #Vendor: WSO2 #Product: Enterprise Integrator/API Manager/Open Banking AM/Open Banking IAM/Identity Server as Key Manager/Identity Server/Carbon Registry Resources UI #Type: Banking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:31:32 +0200 *************** ✏️Title: CVE-2024-8008 | WSO2 Enterprise Integrator cross site scripting *************** 📎Link: https://vuldb.com/?id.310868 *************** ⚙️Information: #Vendor: WSO2 #Product: Enterprise Integrator/API Manager/Identity Server as Key Manager/Identity Server/Open Banking IAM/Open Banking AM/Carbon Identity User Store Configuration UI #Type: Banking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:36:03 +0200 *************** ✏️Title: CVE-2025-23099 | Samsung Exynos 1480/2400 out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310869 *************** ⚙️Information: #Vendor: Samsung #Product: Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.03 Guest2Root Privilege Escalation =============== 📎 https://cxsecurity.com/issue/WLB-2025060001 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:57:38 GMT *************** ✏️Title: How I Used TCP Headers to Exfiltrate Data — A Simple but Powerful Learning Exercise *************** 📎Link: https://medium.com/p/7d9812ce81c1 *************** ⚙️Tags: #data_exfiltration #cybersecurity #hacking #networking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 17:31:29 GMT *************** ✏️Title: Crypto under attack: May marks another black month for DeFi security *************** 📎Link: https://medium.com/p/4da37a694f0c *************** ⚙️Tags: #hacking #defi #crypto *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 17:32:41 GMT *************** ✏️Title: Exploiting EternalBlue (MS17–010): Hacking Legacy Windows 7 Systems using Metasploit *************** 📎Link: https://medium.com/p/18a86bd5b664 *************** ⚙️Tags: #kali_linux #cyebrsecurity #metasploit #hacking #windows_7 *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 18:07:29 GMT *************** ✏️Title: From Customer to Verified: A Critical Role Escalation in WooCommerce Flutter API *************** 📎Link: https://medium.com/p/2a4f4ba49007 *************** ⚙️Tags: #access_control_security #cybersecurity #bug_bounty #mobile_pentesting #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 18:03:26 GMT *************** ✏️Title: ️ Top 10 Ethical Hackers in India — Ultimate List of Cybersecurity Experts You Should Know *************** 📎Link: https://medium.com/p/54a72443ef18 *************** ⚙️Tags: #hacking #information_technology #coding #cybersecurity #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security