Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:15:25 +0000 *************** ✏️Title: CVE-2025-45529 - SSCMS File Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-45529 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 21:08:15 GMT *************** ✏️Title: HTB Hacking Oopsie: A Beginner-Friendly Hack The Box Guide *************** 📎Link: https://medium.com/p/9a64b00b9276 *************** ⚙️Tags: #htb_writeup #htb_academy #htb_walkthrough #oopsie #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 20:32:54 GMT *************** ✏️Title: OSINT Tips: Learning Through Real Examples *************** 📎Link: https://medium.com/p/1fea75cd02da *************** ⚙️Tags: #osint #factcheking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 20:33:11 GMT *************** ✏️Title: OSINT Tips: Learning Through Real Examples *************** 📎Link: https://medium.com/p/7df98cbf3979 *************** ⚙️Tags: #fact_checking #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 20:40:50 GMT *************** ✏️Title: EGCTF25 Digital Forensics Writeup *************** 📎Link: https://medium.com/p/8310a76912ac *************** ⚙️Tags: #digital_forensics #incident_response #unix #cybersecurity #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 20:44:58 GMT *************** ✏️Title: The OSINT Community in Bangladesh: Growth and Impact *************** 📎Link: https://medium.com/p/9408b8c8ab33 *************** ⚙️Tags: #osint #bangladesh *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:53:46 +0200 *************** ✏️Title: CVE-2025-4412 | SparkLabs Viscosity up to 1.11.4 on macOS viscosity_openvpn default permission *************** 📎Link: https://vuldb.com/?id.310356 *************** ⚙️Information: #Vendor: SparkLabs #Product: Viscosity #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:54:08 +0200 *************** ✏️Title: CVE-2025-41649 | Weidmueller IE-SW-VL05M-5TX out-of-bounds write (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310357 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:54:40 +0200 *************** ✏️Title: CVE-2025-41653 | Weidmueller IE-SW-VL05M-5TX HTTP Request insufficient resource pool (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310358 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:54:53 +0200 *************** ✏️Title: CVE-2025-41651 | Weidmueller IE-SW-VL05M-5TX missing authentication (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310359 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:55:00 +0200 *************** ✏️Title: CVE-2025-41650 | Weidmueller IE-SW-VL05M-5TX improper validation of specified type of input (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310360 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:09:20 +0200 *************** ✏️Title: CVE-2025-5266 | Mozilla Firefox up to 138 cross-domain policy *************** 📎Link: https://vuldb.com/?id.310361 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:10 +0200 *************** ✏️Title: CVE-2025-5268 | Mozilla Firefox up to 138 memory corruption *************** 📎Link: https://vuldb.com/?id.310362 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:10 +0200 *************** ✏️Title: CVE-2025-5268 | Mozilla Thunderbird up to 138 memory corruption *************** 📎Link: https://vuldb.com/?id.310363 *************** ⚙️Information: #Vendor: Mozilla #Product: Thunderbird #Type: Mail Client Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:20 +0200 *************** ✏️Title: CVE-2025-5269 | Mozilla Firefox ESR up to 128.10 memory corruption *************** 📎Link: https://vuldb.com/?id.310364 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox ESR #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:20 +0200 *************** ✏️Title: CVE-2025-5269 | Mozilla Thunderbird up to 128.10 memory corruption *************** 📎Link: https://vuldb.com/?id.310365 *************** ⚙️Information: #Vendor: Mozilla #Product: Thunderbird #Type: Mail Client Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:27 +0200 *************** ✏️Title: CVE-2025-5272 | Mozilla Firefox up to 138 memory corruption (Nessus ID 237299) *************** 📎Link: https://vuldb.com/?id.310366 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:42 +0200 *************** ✏️Title: CVE-2025-5262 | Mozilla Firefox up to 138 WebRTC vpx_codec_enc_init_multi memory corruption (Nessus ID 237301) *************** 📎Link: https://vuldb.com/?id.310367 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:11:06 +0200 *************** ✏️Title: CVE-2025-5263 | Mozilla Firefox up to 138.0.4 cross-domain policy (Nessus ID 237301) *************** 📎Link: https://vuldb.com/?id.310368 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:11:14 +0200 *************** ✏️Title: CVE-2025-5267 | Mozilla Firefox up to 138 clickjacking *************** 📎Link: https://vuldb.com/?id.310369 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security