Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 20:15:43 +0000 *************** ✏️Title: CVE-2025-48873 - Apache Web Framework Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48873 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 20:15:43 +0000 *************** ✏️Title: CVE-2025-48874 - Apache HTTP Server Insecure Deserialization *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48874 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 20:15:43 +0000 *************** ✏️Title: CVE-2025-48882 - PHPOffice Math XML External Entity (XXE) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48882 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 20:15:43 +0000 *************** ✏️Title: CVE-2025-48946 - Liboqs HQC Algorithmic Design Flaw Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48946 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 20:15:43 +0000 *************** ✏️Title: CVE-2025-48948 - Navidrome Unauthorized Transcoding Configuration *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48948 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 20:15:44 +0000 *************** ✏️Title: CVE-2025-48949 - Navidrome SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48949 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 20:15:44 +0000 *************** ✏️Title: CVE-2025-5360 - Campcodes Online Hospital Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5360 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 20:15:44 +0000 *************** ✏️Title: CVE-2025-5361 - Campcodes Online Hospital Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5361 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 21:15:04 GMT *************** ✏️Title: Whispers of the Windows Vault: Uncovering DPAPI *************** 📎Link: https://medium.com/p/55cde2410be9 *************** ⚙️Tags: #windows #penetration_testing #post_exploitation #mimikatz #dpapi *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 21:23:45 GMT *************** ✏️Title: Aragog VulnHub Walkthrough — Easy Linux CTF for Beginners *************** 📎Link: https://medium.com/p/a85b098328ef *************** ⚙️Tags: #harry_potter #ctf #ctf_walkthrough #vulnhub_walkthrough #vulnhub *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 20:53:34 GMT *************** ✏️Title: Ledger -THM *************** 📎Link: https://medium.com/p/bac5260a94bd *************** ⚙️Tags: #pentesting #active_directory #tryhackme #ethical_hacking #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 21:01:31 GMT *************** ✏️Title: Crocodilus in the wild: Mapping the campaign in Poland *************** 📎Link: https://medium.com/p/15d3078eb954 *************** ⚙️Tags: #cybersecurity #mobile_malware #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 21:01:33 GMT *************** ✏️Title: Day 3 - Report Analisis Malware menggunakan Wireshark *************** 📎Link: https://medium.com/p/b6166abee096 *************** ⚙️Tags: #malware #pcap #wireshark *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 22:39:16 +0200 *************** ✏️Title: CVE-2025-48887 | vLLM up to 0.8.x pythonic_tool_parser.py redos (GHSA-w6q7-j642-7c25) *************** 📎Link: https://vuldb.com/?id.310710 *************** ⚙️Information: #Product: vLLM #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 22:39:18 +0200 *************** ✏️Title: CVE-2025-48882 | PHPOffice Math up to 0.2.x libxml xml external entity reference (GHSA-42hm-pq2f-3r7m) *************** 📎Link: https://vuldb.com/?id.310711 *************** ⚙️Information: #Vendor: PHPOffice #Product: Math #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 22:39:34 +0200 *************** ✏️Title: CVE-2024-42191 | HCL Traveler for Microsoft Outlook up to 3.0.11 COM uncontrolled search path (KB0120745) *************** 📎Link: https://vuldb.com/?id.310712 *************** ⚙️Information: #Vendor: HCL #Product: Traveler for Microsoft Outlook #Type: Groupware Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 22:40:06 +0200 *************** ✏️Title: CVE-2025-48883 | chrome-php chrome PHP up to 1.13.x cross site scripting (GHSA-3432-fmrf-7vmh) *************** 📎Link: https://vuldb.com/?id.310713 *************** ⚙️Information: #Vendor: chrome_php #Product: chrome PHP #Type: Programming Language Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 22:40:36 +0200 *************** ✏️Title: CVE-2025-48949 | Navidrome up to 0.55.2 API Endpoint /api/artist role sql injection (GHSA-5wgp-vjxm-3x2r) *************** 📎Link: https://vuldb.com/?id.310714 *************** ⚙️Information: #Product: Navidrome #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 22:40:50 +0200 *************** ✏️Title: CVE-2025-48885 | xwikisas application-urlshortener up to 1.2.3 cross-site request forgery (GHSA-c57g-9v2r-w8v3) *************** 📎Link: https://vuldb.com/?id.310715 *************** ⚙️Information: #Vendor: xwikisas #Product: application_urlshortener #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 22:41:08 +0200 *************** ✏️Title: CVE-2025-48948 | Navidrome up to 0.55.x authorization (GHSA-f238-rggp-82m3) *************** 📎Link: https://vuldb.com/?id.310716 *************** ⚙️Information: #Product: Navidrome #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security