Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:18:38 +0200 *************** ✏️Title: CVE-2025-46080 | HuoCMS 3.5.1 unrestricted upload *************** 📎Link: https://vuldb.com/?id.310519 *************** ⚙️Information: #Product: HuoCMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:18:52 +0200 *************** ✏️Title: CVE-2024-22653 | yasm 9defefae section.c yasm_section_bcs_append null pointer dereference *************** 📎Link: https://vuldb.com/?id.310520 *************** ⚙️Information: #Product: yasm #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:19:11 +0200 *************** ✏️Title: CVE-2024-22654 | tcpreplay 4.4.4 get.c tcprewrite infinite loop *************** 📎Link: https://vuldb.com/?id.310521 *************** ⚙️Information: #Product: tcpreplay #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:19:21 +0200 *************** ✏️Title: CVE-2025-46078 | HuoCMS up to 3.5.1 unrestricted upload *************** 📎Link: https://vuldb.com/?id.310522 *************** ⚙️Information: #Product: HuoCMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:20:24 +0200 *************** ✏️Title: CVE-2025-48748 | Netwrix Directory Manager up to 10.0.7784.0 hard-coded password (adv-2025-013) *************** 📎Link: https://vuldb.com/?id.310523 *************** ⚙️Information: #Vendor: Netwrix #Product: Directory Manager #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:20:34 +0200 *************** ✏️Title: CVE-2025-47553 | DZS Video Gallery Plugin up to 12.25 on WordPress deserialization *************** 📎Link: https://vuldb.com/?id.310524 *************** ⚙️Information: #Product: DZS Video Gallery Plugin #Type: Photo Gallery Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:20:34 +0200 *************** ✏️Title: CVE-2025-47552 | DZS Video Gallery Plugin up to 12.25 on WordPress deserialization *************** 📎Link: https://vuldb.com/?id.310525 *************** ⚙️Information: #Product: DZS Video Gallery Plugin #Type: Photo Gallery Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:20:36 +0200 *************** ✏️Title: CVE-2025-48143 | Formulario de Contacto SalesUp Plugin up to 1.0.14 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.310526 *************** ⚙️Information: #Product: Formulario de Contacto SalesUp Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:20:41 +0200 *************** ✏️Title: CVE-2025-32300 | DZS Video Gallery Plugin up to 12.25 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.310527 *************** ⚙️Information: #Product: DZS Video Gallery Plugin #Type: Photo Gallery Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 17:20:45 +0200 *************** ✏️Title: CVE-2025-31642 | WPCHURCH Plugin up to 2.7.0 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.310528 *************** ⚙️Information: #Product: WPCHURCH Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 13:15:24 +0000 *************** ✏️Title: CVE-2025-48045 - Apache Client Default Admin Credentials Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48045 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 13:15:25 +0000 *************** ✏️Title: CVE-2025-48046 - Apache HTTP Server SMTP Server Password Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48046 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 13:15:25 +0000 *************** ✏️Title: CVE-2025-48047 - NetFax Server Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48047 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 14:15:35 +0000 *************** ✏️Title: CVE-2025-33043 - APTIOV BIOS Improper Input Validation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-33043 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 14:15:35 +0000 *************** ✏️Title: CVE-2025-37993 - Linux Kernel: CAN: Uninitialized Spin Lock in m_can_class_allocate_dev *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-37993 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 14:15:35 +0000 *************** ✏️Title: CVE-2025-37994 - "Linux Kernel USB TypeC UCSI NULL Pointer Access Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-37994 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 14:15:36 +0000 *************** ✏️Title: CVE-2025-37995 - Linux Kernel Kobject Put Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-37995 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 14:15:36 +0000 *************** ✏️Title: CVE-2025-37996 - KVM arm64 Uninitialized Pointer Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-37996 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 14:15:36 +0000 *************** ✏️Title: CVE-2025-37997 - Netfilter Ipset Region Locking Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-37997 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 14:15:36 +0000 *************** ✏️Title: CVE-2025-37998 - Openvswitch Netlink Attribute Parsing Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-37998 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security