Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:58:13 +0200 *************** ✏️Title: CVE-2025-6007 | kiCode111 like-girl 5.2.0 /admin/CopyadminPost.php icp/Copyright sql injection *************** 📎Link: https://vuldb.com/?id.312330 *************** ⚙️Information: #Vendor: kiCode111 #Product: like_girl #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:58:20 +0200 *************** ✏️Title: CVE-2025-6008 | kiCode111 like-girl 5.2.0 /admin/ImgAddPost.php imgDatd/imgText/imgUrl sql injection *************** 📎Link: https://vuldb.com/?id.312331 *************** ⚙️Information: #Vendor: kiCode111 #Product: like_girl #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:58:26 +0200 *************** ✏️Title: CVE-2025-6009 | kiCode111 like-girl 5.2.0 /admin/ipAddPost.php bz/ipdz sql injection *************** 📎Link: https://vuldb.com/?id.312332 *************** ⚙️Information: #Vendor: kiCode111 #Product: like_girl #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:15:24 +0000 *************** ✏️Title: CVE-2025-0913 - Apache os File Symlink Creation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0913 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:15:24 +0000 *************** ✏️Title: CVE-2025-0917 - IBM Cognos Analytics Stored Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0917 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:15:24 +0000 *************** ✏️Title: CVE-2025-0923 - IBM Cognos Analytics Source Code Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0923 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:15:25 +0000 *************** ✏️Title: CVE-2025-25032 - IBM Cognos Analytics Memory Exhaustion Denial of Service *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25032 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:15:25 +0000 *************** ✏️Title: CVE-2025-40912 - CryptX for Perl Malformed Unicode Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-40912 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 18:15:26 +0000 *************** ✏️Title: CVE-2025-49150 - Cursor JSON File Remote Request Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49150 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 19:38:54 GMT *************** ✏️Title: HOW I WOULD START BUG BOUNTY IN MID 2025!? *************** 📎Link: https://medium.com/p/3cdbd3f726fb *************** ⚙️Tags: #bug_bounty #hacker #technology #tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 19:40:36 GMT *************** ✏️Title: PostgreSQL in Docker: The Mysterious ‘No Space Left on Device’ Error (and How to Fix It on macOS) *************** 📎Link: https://medium.com/p/ee7371d4eae8 *************** ⚙️Tags: #postgresql #bugs #docker #troubleshooting #devops *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 19:28:16 GMT *************** ✏️Title: Busqueda — HTB *************** 📎Link: https://medium.com/p/ccc87a7bc0e8 *************** ⚙️Tags: #docker #hackthebox #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 11 Jun 2025 19:00:35 GMT *************** ✏️Title: Sécuriser les applications open source à grande échelle : Les cinq principes fondamentaux *************** 📎Link: https://medium.com/p/d48b1d04286a *************** ⚙️Tags: #sql_injection #cross_selling #malware #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:39:37 +0200 *************** ✏️Title: CVE-2025-5012 | Workreap Plugin up to 3.3.2 on WordPress workreap_temp_upload_to_media unrestricted upload *************** 📎Link: https://vuldb.com/?id.312320 *************** ⚙️Information: #Product: Workreap Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:39:43 +0200 *************** ✏️Title: CVE-2025-4973 | Workreap Plugin up to 3.3.1 on WordPress workreap_verify_user_account improper authentication *************** 📎Link: https://vuldb.com/?id.312321 *************** ⚙️Information: #Product: Workreap Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:40:47 +0200 *************** ✏️Title: CVE-2025-0923 | IBM Cognos Analytics up to 12.0.4 sensitive information in source *************** 📎Link: https://vuldb.com/?id.312322 *************** ⚙️Information: #Vendor: IBM #Product: Cognos Analytics #Type: Business Process Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:40:54 +0200 *************** ✏️Title: CVE-2025-25032 | IBM Cognos Analytics up to 12.0.4 allocation of resources *************** 📎Link: https://vuldb.com/?id.312323 *************** ⚙️Information: #Vendor: IBM #Product: Cognos Analytics #Type: Business Process Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:40:59 +0200 *************** ✏️Title: CVE-2025-0917 | IBM Cognos Analytics up to 12.0.4 cross site scripting *************** 📎Link: https://vuldb.com/?id.312324 *************** ⚙️Information: #Vendor: IBM #Product: Cognos Analytics #Type: Business Process Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:41:25 +0200 *************** ✏️Title: CVE-2025-40912 | MIK CryptX up to 0.064 on Perl LibTomCrypt vulnerable third-party component (Issue 507) *************** 📎Link: https://vuldb.com/?id.312325 *************** ⚙️Information: #Vendor: MIK #Product: CryptX #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 11 Jun 2025 20:41:50 +0200 *************** ✏️Title: CVE-2025-49150 | cursor up to 0.50.x JSON File Parser information disclosure (GHSA-9h3v-h59j-v6rj) *************** 📎Link: https://vuldb.com/?id.312326 *************** ⚙️Information: #Product: cursor #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security