Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:53:41 +0200 *************** ✏️Title: CVE-2025-20985 | Samsung Devices ThemeManager privileges management *************** 📎Link: https://vuldb.com/?id.311057 *************** ⚙️Information: #Vendor: Samsung #Product: Devices #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:54:01 +0200 *************** ✏️Title: CVE-2025-20986 | Samsung ScreenCapture on Galaxy Watch access control *************** 📎Link: https://vuldb.com/?id.311058 *************** ⚙️Information: #Vendor: Samsung #Product: ScreenCapture #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:54:17 +0200 *************** ✏️Title: CVE-2025-20987 | Samsung Devices Fingerprint Trustlet auth_token information disclosure *************** 📎Link: https://vuldb.com/?id.311059 *************** ⚙️Information: #Vendor: Samsung #Product: Devices #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:54:26 +0200 *************** ✏️Title: CVE-2025-20988 | Samsung Devices Fingerprint Trustlet out-of-bounds *************** 📎Link: https://vuldb.com/?id.311060 *************** ⚙️Information: #Vendor: Samsung #Product: Devices #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:54:56 +0200 *************** ✏️Title: CVE-2025-20989 | Samsung Devices Fingerprint Trustlet hmac_key information disclosure *************** 📎Link: https://vuldb.com/?id.311061 *************** ⚙️Information: #Vendor: Samsung #Product: Devices #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:55:13 +0200 *************** ✏️Title: CVE-2025-20992 | Samsung Devices libsecimaging.camera.samsung.so heap-based overflow *************** 📎Link: https://vuldb.com/?id.311062 *************** ⚙️Information: #Vendor: Samsung #Product: Devices #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:55:23 +0200 *************** ✏️Title: CVE-2025-20993 | Samsung Devices libsecimaging.camera.samsung.so heap-based overflow *************** 📎Link: https://vuldb.com/?id.311063 *************** ⚙️Information: #Vendor: Samsung #Product: Devices #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:55:37 +0200 *************** ✏️Title: CVE-2024-31127 | Zscaler Client Connector up to 4.2.0.209 on macOS origin validation *************** 📎Link: https://vuldb.com/?id.311064 *************** ⚙️Information: #Vendor: Zscaler #Product: Client Connector #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 08:00:42 +0200 *************** ✏️Title: CVE-2025-5481 | Santesoft Sante DICOM Viewer Pro prior 14.2.0 DCM File Parser out-of-bounds write *************** 📎Link: https://vuldb.com/?id.311065 *************** ⚙️Information: #Vendor: Santesoft #Product: Sante DICOM Viewer Pro #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 08:00:56 +0200 *************** ✏️Title: CVE-2025-5473 | GIMP ICO File Parser integer overflow *************** 📎Link: https://vuldb.com/?id.311066 *************** ⚙️Information: #Product: GIMP #Type: Image Processing Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 08:01:09 +0200 *************** ✏️Title: CVE-2025-5480 | Action1 uncontrolled search path *************** 📎Link: https://vuldb.com/?id.311067 *************** ⚙️Information: #Product: Action1 #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 08:01:32 +0200 *************** ✏️Title: CVE-2025-5474 | 2BrightSparks SyncBackFree prior 11.3.106.0 link following *************** 📎Link: https://vuldb.com/?id.311068 *************** ⚙️Information: #Vendor: 2BrightSparks #Product: SyncBackFree #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 08:07:42 +0200 *************** ✏️Title: CVE-2025-48710 | kro up to 0.2.0 Image confused deputy *************** 📎Link: https://vuldb.com/?id.311069 *************** ⚙️Information: #Product: kro #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 05:35:52 GMT *************** ✏️Title: ICS/SCADA: Pemahaman Mendalam dan Strategi Keamanan Siber *************** 📎Link: https://medium.com/p/96b88c7e1d16 *************** ⚙️Tags: #cybersecurity #cybercrime #scada #cyberattack #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 06:13:34 GMT *************** ✏️Title: Password Spraying: The Silent Threat Lurking in Plain Sight *************** 📎Link: https://medium.com/p/11f898ec470f *************** ⚙️Tags: #cyberattack #cybersecurity #red_team #password_spraying *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 06:07:40 GMT *************** ✏️Title: UltraTech CTF Notes | TryHackMe *************** 📎Link: https://medium.com/p/80ec5144c8d0 *************** ⚙️Tags: #ctf_writeup #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 04:13:49 GMT *************** ✏️Title: Cybersecurity Interview Questions For Freshers *************** 📎Link: https://medium.com/p/a6307092b1a5 *************** ⚙️Tags: No_Tags *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 04:16:53 GMT *************** ✏️Title: SOC L1 Alert Triage: TryHackMe *************** 📎Link: https://medium.com/p/44b0648f4afc *************** ⚙️Tags: No_Tags *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 04:19:19 GMT *************** ✏️Title: SC-200 - MS Security Operations Analyst illustrative notes *************** 📎Link: https://medium.com/p/4473d5750e99 *************** ⚙️Tags: #sc_200 #cybersecurity #microsoft #exam #revision_notes *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 04:32:08 GMT *************** ✏️Title: I responsibly reported two critical security vulnerabilities to AiSensy on 24 May 2025. *************** 📎Link: https://medium.com/p/82a527be61df *************** ⚙️Tags: #cybersecurity #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security