Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 14:00:26 GMT *************** ✏️Title: Cyber Briefing: 2025.06.06 *************** 📎Link: https://medium.com/p/8e002a4ca8aa *************** ⚙️Tags: #infosec #cyber_briefing #cybersecurity #technology #jobs *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 13:29:32 GMT *************** ✏️Title: Lofi — Tryhackme |By la *************** 📎Link: https://medium.com/p/a5b9aa05e020 *************** ⚙️Tags: #vulnerability #owasp #tryhackme #burpsuite #file_upload *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 13:53:19 GMT *************** ✏️Title: Ironcorp *************** 📎Link: https://medium.com/p/c1406556792c *************** ⚙️Tags: #writeup #tryhackme #thm_writeup #cybersecurity #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 13:55:26 GMT *************** ✏️Title: Brooklyn Nine-Nine | TryHackMe Walkthrough *************** 📎Link: https://medium.com/p/3d7a08c2151d *************** ⚙️Tags: #ctf #walkthrough #hacking #tryhackme #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 14:20:28 GMT *************** ✏️Title: Bad Git Security Practices: Bandit30 Overthewire Write Up *************** 📎Link: https://medium.com/p/e80da049e2fb *************** ⚙️Tags: #ctf_writeup #cybersecurity #overthewire *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 14:23:27 GMT *************** ✏️Title: VulnOSv2 Vulnhub Walkthrough *************** 📎Link: https://medium.com/p/90be034e10a3 *************** ⚙️Tags: #ctf #ctf_writeup #penetration_testing #ctf_walkthrough #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:22:32 +0200 *************** ✏️Title: CVE-2025-49273 | Bill Minozzi WP Tools Plugin up to 5.24 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311430 *************** ⚙️Information: #Vendor: Bill Minozzi #Product: WP Tools Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:22:33 +0200 *************** ✏️Title: CVE-2025-49317 | NTC WP Page Loading Plugin up to 1.0.6 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311431 *************** ⚙️Information: #Vendor: NTC #Product: WP Page Loading Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:22:34 +0200 *************** ✏️Title: CVE-2025-49306 | catchsquare WP Social Widget Plugin up to 2.3 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311432 *************** ⚙️Information: #Vendor: catchsquare #Product: WP Social Widget Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:22:34 +0200 *************** ✏️Title: CVE-2025-49269 | Anton Vanyukov Market Exporter Plugin up to 2.0.22 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311433 *************** ⚙️Information: #Vendor: Anton Vanyukov #Product: Market Exporter Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:22:35 +0200 *************** ✏️Title: CVE-2025-49310 | M A Vinoth Kumar Frontend Dashboard Plugin up to 2.2.8 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311434 *************** ⚙️Information: #Vendor: M A Vinoth Kumar #Product: Frontend Dashboard Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:22:36 +0200 *************** ✏️Title: CVE-2025-49314 | ovatheme BRW Plugin up to 1.8.6 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311435 *************** ⚙️Information: #Vendor: ovatheme #Product: BRW Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:22:39 +0200 *************** ✏️Title: CVE-2025-49333 | wp.insider Simple Membership Plugin up to 4.6.3 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311436 *************** ⚙️Information: #Vendor: wp.insider #Product: Simple Membership Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:24:42 +0200 *************** ✏️Title: CVE-2025-38000 | Linux Kernel up to 6.14.8 sch_hfsc hfsc_enqueue use after free *************** 📎Link: https://vuldb.com/?id.311437 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:24:43 +0200 *************** ✏️Title: CVE-2023-25995 | choicehomemortgage AI Mortgage Calculator Plugin up to 1.0.1 on WordPress filename control *************** 📎Link: https://vuldb.com/?id.311438 *************** ⚙️Information: #Vendor: choicehomemortgage #Product: AI Mortgage Calculator Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:25:10 +0200 *************** ✏️Title: CVE-2025-26590 | Nir Complete Google Seo Scan Plugin up to 3.5.1 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.311439 *************** ⚙️Information: #Vendor: Nir #Product: Complete Google Seo Scan Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:25:10 +0200 *************** ✏️Title: CVE-2025-30999 | Fahad Mahmood WP Shopify Plugin up to 1.5.3 on WordPress filename control *************** 📎Link: https://vuldb.com/?id.311440 *************** ⚙️Information: #Vendor: Fahad Mahmood #Product: WP Shopify Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:25:11 +0200 *************** ✏️Title: CVE-2023-25997 | SolaPlugins Sola Support Ticket Plugin up to 3.17 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311441 *************** ⚙️Information: #Vendor: SolaPlugins #Product: Sola Support Ticket Plugin #Type: Ticket Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:25:28 +0200 *************** ✏️Title: CVE-2025-29006 | centangle Direct Checkout for WooCommerce Lite Plugin up to 1.0.3 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311442 *************** ⚙️Information: #Vendor: centangle #Product: Direct Checkout for WooCommerce Lite Plugin #Type: E_Commerce Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:25:29 +0200 *************** ✏️Title: CVE-2025-24762 | facturaone TicketBAI Facturas para WooCommerce Plugin up to 3.19 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311443 *************** ⚙️Information: #Vendor: facturaone #Product: TicketBAI Facturas para WooCommerce Plugin #Type: E_Commerce Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security