Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 20:41:11 +0200 *************** ✏️Title: CVE-2025-45475 | Maccms10 2025.1000.4047 Friend Link Management server-side request forgery *************** 📎Link: https://vuldb.com/?id.310390 *************** ⚙️Information: #Product: Maccms10 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 20:41:47 +0200 *************** ✏️Title: CVE-2025-4800 | MasterStudy LMS Pro Plugin up to 4.7.0 on WordPress stm_lms_add_assignment_attachment unrestricted upload *************** 📎Link: https://vuldb.com/?id.310391 *************** ⚙️Information: #Product: MasterStudy LMS Pro Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:16:32 +0200 *************** ✏️Title: CVE-2025-5066 | Google Chrome up to 136.0.7103.113 on Android Messages ui layer (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310392 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:16:43 +0200 *************** ✏️Title: CVE-2025-5063 | Google Chrome up to 136.0.7103.113 Compositing use after free (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310393 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:16:57 +0200 *************** ✏️Title: CVE-2025-5064 | Google Chrome up to 136.0.7103.113 Background Fetch API cross-domain policy (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310394 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:17:10 +0200 *************** ✏️Title: CVE-2025-5065 | Google Chrome up to 136.0.7103.113 FileSystemAccess API ui layer (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310395 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:17:22 +0200 *************** ✏️Title: CVE-2025-5067 | Google Chrome up to 136.0.7103.113 Tab Strip ui layer (Nessus ID 237121) *************** 📎Link: https://vuldb.com/?id.310396 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:17:33 +0200 *************** ✏️Title: CVE-2025-5280 | Google Chrome up to 136.0.7103.113 V8 out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310397 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:18:42 +0200 *************** ✏️Title: CVE-2025-5281 | Google Chrome up to 136.0.7103.113 BFCache information disclosure *************** 📎Link: https://vuldb.com/?id.310398 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:19:07 +0200 *************** ✏️Title: CVE-2025-5279 | Amazon Redshift Python Connector up to 2.1.6 BrowserAzureOAuth2CredentialsProvider Plugin certificate validation *************** 📎Link: https://vuldb.com/?id.310399 *************** ⚙️Information: #Vendor: Amazon #Product: Redshift Python Connector #Type: Programming Language Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:19:22 +0200 *************** ✏️Title: CVE-2024-13966 | ZKTeco BioTime Setting default password *************** 📎Link: https://vuldb.com/?id.310400 *************** ⚙️Information: #Vendor: ZKTeco #Product: BioTime #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:20:02 +0200 *************** ✏️Title: CVE-2025-45529 | SSCMS 7.3.1 GET Request templatesAssetsEditor ReadTextAsynchronous path traversal *************** 📎Link: https://vuldb.com/?id.310401 *************** ⚙️Information: #Product: SSCMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:20:35 +0200 *************** ✏️Title: CVE-2025-5198 | Red Hat Advanced Cluster Security 4 Stackrox cross site scripting *************** 📎Link: https://vuldb.com/?id.310402 *************** ⚙️Information: #Vendor: Red Hat #Product: Advanced Cluster Security #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:20:49 +0200 *************** ✏️Title: CVE-2025-46173 | code-projects Online Exam Mastering System 1.0 Feedback Form Name cross site scripting *************** 📎Link: https://vuldb.com/?id.310403 *************** ⚙️Information: #Vendor: code_projects #Product: Online Exam Mastering System #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:22:36 +0200 *************** ✏️Title: CVE-2025-5287 | Likes and Dislikes Plugin Plugin up to 1.0.0 on WordPress post sql injection *************** 📎Link: https://vuldb.com/?id.310404 *************** ⚙️Information: #Product: Likes and Dislikes Plugin Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:22:42 +0200 *************** ✏️Title: CVE-2025-5082 | WP Attachments Plugin up to 5.0.12 on WordPress attachment_id cross site scripting *************** 📎Link: https://vuldb.com/?id.310405 *************** ⚙️Information: #Product: WP Attachments Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:25:06 +0200 *************** ✏️Title: CVE-2025-5283 | Google Chrome up to 136.0.7103.113 libvpx use after free *************** 📎Link: https://vuldb.com/?id.310406 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 22:36:51 GMT *************** ✏️Title: Found Memory — Nahamcon CTF 2025 *************** 📎Link: https://medium.com/p/7a91047b4d38 *************** ⚙️Tags: #heap #binary_exploitation #ctf #writeup #nahamcon_ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 22:43:57 GMT *************** ✏️Title: EG-CTF Finals: WEB-FlagFinder *************** 📎Link: https://medium.com/p/1ffb92a81889 *************** ⚙️Tags: #sqli #ctf #waf_bypass #ssrf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 22:32:27 GMT *************** ✏️Title: Debugging *************** 📎Link: https://medium.com/p/d1e5f1dfd377 *************** ⚙️Tags: #miss_robot #malware_analysis #static_analysis #dynamic_analysis #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security