Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:45:34 +0200 *************** ✏️Title: CVE-2025-48485 | freescout up to 1.8.179 cross site scripting *************** 📎Link: https://vuldb.com/?id.310635 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:45:43 +0200 *************** ✏️Title: CVE-2025-48489 | freescout up to 1.8.179 cross site scripting *************** 📎Link: https://vuldb.com/?id.310636 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:47:51 +0200 *************** ✏️Title: CVE-2025-48880 | freescout up to 1.8.180 race condition *************** 📎Link: https://vuldb.com/?id.310637 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:47:51 +0200 *************** ✏️Title: CVE-2025-41385 | Uchida Yoko wivia 5 os command injection *************** 📎Link: https://vuldb.com/?id.310638 *************** ⚙️Information: #Vendor: Uchida Yoko #Product: wivia 5 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:47:52 +0200 *************** ✏️Title: CVE-2025-41406 | Uchida Yoko wivia 5 cross site scripting *************** 📎Link: https://vuldb.com/?id.310639 *************** ⚙️Information: #Vendor: Uchida Yoko #Product: wivia 5 #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:47:53 +0200 *************** ✏️Title: CVE-2025-47697 | Uchida Yoko wivia 5 client-side enforcement of server-side security *************** 📎Link: https://vuldb.com/?id.310640 *************** ⚙️Information: #Vendor: Uchida Yoko #Product: wivia 5 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:48:16 +0200 *************** ✏️Title: CVE-2025-48936 | Zitadel up to 2.70.11/2.71.10/3.2.1 Forwarded/X-Forwarded-Host redirect *************** 📎Link: https://vuldb.com/?id.310641 *************** ⚙️Information: #Product: Zitadel #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:48:30 +0200 *************** ✏️Title: CVE-2025-48488 | freescout up to 1.8.179 HTML File HTML injection *************** 📎Link: https://vuldb.com/?id.310642 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 08:48:49 +0200 *************** ✏️Title: CVE-2025-48875 | freescout up to 1.8.180 Profile Data Update last_name/first_name cross site scripting *************** 📎Link: https://vuldb.com/?id.310643 *************** ⚙️Information: #Product: freescout #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 06:00:00 +0000 *************** ✏️Title: Comprehensive Ransomware Mitigation Strategies for 2025 Enterprises *************** 📎Link: https://cybersecuritynews.com/?p=106959 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 06:30:00 +0000 *************** ✏️Title: Securing Multi-Cloud Infrastructures in 2025 Enterprise Deployments *************** 📎Link: https://cybersecuritynews.com/?p=107012 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 06:36:06 +0000 *************** ✏️Title: ConnectWise Hacked – Nation State Actors Compromised the Systems to Access Customer Data *************** 📎Link: https://cybersecuritynews.com/?p=109160 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 11:41:00 +0530 *************** ✏️Title: ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach *************** 📎Link: https://thehackernews.com/2025/05/connectwise-hit-by-cyberattack-nation.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 06:15:26 +0000 *************** ✏️Title: CVE-2025-41235 - Spring Cloud Gateway Server Untrusted Proxy Header Manipulation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-41235 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 06:15:28 +0000 *************** ✏️Title: CVE-2025-48881 - Valtimo Object Management Configuration Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48881 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 05:28:09 GMT *************** ✏️Title: Cracking JWTs: A Bug Bounty Hunting Guide — Part 2 *************** 📎Link: https://medium.com/p/7bd111ddadd8 *************** ⚙️Tags: #jwt #jwt_exploitation #bug_bounty #jwt_token #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 05:53:03 GMT *************** ✏️Title: From Novice to Net-Defender: Your First Steps into the World of Bug Bounty Programs *************** 📎Link: https://medium.com/p/efc40a86bcfc *************** ⚙️Tags: #cloud_security_solution #cloud_security #bug_bounty_tips #bug_bounty_program *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 05:47:52 GMT *************** ✏️Title: How I Hacked the Hackers: The Day I Outsmarted a WhatsApp Scam *************** 📎Link: https://medium.com/p/181d0d66b2e7 *************** ⚙️Tags: #memories #crypto #hacking #self_improvement #writing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 05:44:31 GMT *************** ✏️Title: WAP/WAP2 Hacking-Basic *************** 📎Link: https://medium.com/p/56dc59e1fdaf *************** ⚙️Tags: #reaver #ethical_hacking #airodump_ng #cybersecurity #wifihacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 06:11:35 GMT *************** ✏️Title: top cyber security course in India for beginners on affordable price *************** 📎Link: https://medium.com/p/35851f0144a1 *************** ⚙️Tags: #cybersecurity #network_security #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security