Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:46:20 +0200 *************** ✏️Title: CVE-2025-49127 | kafbat kafka-ui 1.0.0 deserialization *************** 📎Link: https://vuldb.com/?id.311584 *************** ⚙️Information: #Vendor: kafbat #Product: kafka_ui #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:27 +0000 *************** ✏️Title: CVE-2025-3485 - Allegra ExtractFileFromZip Directory Traversal Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-3485 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:27 +0000 *************** ✏️Title: CVE-2025-5473 - GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5473 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:27 +0000 *************** ✏️Title: CVE-2025-5474 - 2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5474 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:27 +0000 *************** ✏️Title: CVE-2025-5480 - Action1 OpenSSL Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5480 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:27 +0000 *************** ✏️Title: CVE-2025-5481 - Sante DICOM Viewer Pro DCM File Parsing Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5481 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:28 +0000 *************** ✏️Title: CVE-2025-5796 - Code-projects Laundry System Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5796 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:29 +0000 *************** ✏️Title: CVE-2025-5797 - Laundry Laundry System Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5797 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 20:15:23 +0000 *************** ✏️Title: CVE-2025-5798 - Tenda AC8 Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5798 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 20:15:23 +0000 *************** ✏️Title: CVE-2025-5799 - Tenda AC8 Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5799 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 20:22:14 GMT *************** ✏️Title: From RXSS to ATO: Bypassing WAF with a Simple POST Trick *************** 📎Link: https://medium.com/p/1abbe945c952 *************** ⚙️Tags: #account_takeover #bug_hunting #bug_bounty #bug_bounty_writeup #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 20:30:20 GMT *************** ✏️Title: How I Found My First Real Bug — and It Got Accepted! *************** 📎Link: https://medium.com/p/a13e15b86a3d *************** ⚙️Tags: #bug_bounty #infosec #beginner_guide #ethical_hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 20:13:25 GMT *************** ✏️Title: Cyber Siege Unveiled: A Pen Tester’s Deep Dive into June 6, 2025’s Digital Chaos *************** 📎Link: https://medium.com/p/58943b62dd49 *************** ⚙️Tags: #hacker #cybersecurity #cyber_security_awareness #cyber_news *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 19:58:28 GMT *************** ✏️Title: CTF Day(10) *************** 📎Link: https://medium.com/p/9203d4e6a9c6 *************** ⚙️Tags: #cybersecurity #web_pen_testing #web_penetration_testing #ctf #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 19:22:27 GMT *************** ✏️Title: Crocc Crew Tryhackme — Detailed Writeup *************** 📎Link: https://medium.com/p/e47b197e4b3a *************** ⚙️Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #crocc_crew *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 20:03:47 GMT *************** ✏️Title: “This Blog is 30% CTF, 70% Existential Crisis — You’re Welcome” *************** 📎Link: https://medium.com/p/accc9ec1741e *************** ⚙️Tags: #aws_lambda #ctf_writeup #existential_crises #kali_linux #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 20:19:42 GMT *************** ✏️Title: The Crime Lab — Cyberdefenders *************** 📎Link: https://medium.com/p/110fd625145c *************** ⚙️Tags: #digital_forensics #cyberdefender #ctf_writeup #soc_analyst #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 20:22:36 GMT *************** ✏️Title: Damn Vulnerable DeFi — #02: Naive Receiver *************** 📎Link: https://medium.com/p/ad53deb282df *************** ⚙️Tags: #solidity #ctf_writeup #flash_loan #damn_vulnerable_defi #defi *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:42:16 +0200 *************** ✏️Title: CVE-2024-56805 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 buffer overflow (qsa-25-12 / EUVD-2024-54653) *************** 📎Link: https://vuldb.com/?id.311549 *************** ⚙️Information: #Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:42:54 +0200 *************** ✏️Title: CVE-2025-22481 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 command injection (qsa-25-12 / EUVD-2025-17340) *************** 📎Link: https://vuldb.com/?id.311550 *************** ⚙️Information: #Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security