Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 18:15:38 +0000 *************** ✏️Title: CVE-2025-5600 - TOTOLINK EX1200T Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5600 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 18:15:39 +0000 *************** ✏️Title: CVE-2025-5602 - Campcodes Hospital Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5602 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 18:15:39 +0000 *************** ✏️Title: CVE-2025-5603 - Campcodes Hospital Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5603 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 19:15:26 +0000 *************** ✏️Title: CVE-2025-5604 - Campcodes Hospital Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5604 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 19:15:26 +0000 *************** ✏️Title: CVE-2025-5606 - Tenda AC18 Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5606 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:25:03 +0200 *************** ✏️Title: CVE-2025-23101 | ProcessorSamsung Mobile Processor Exynos 1380 use after free (EUVD-2025-16881) *************** 📎Link: https://vuldb.com/?id.311189 *************** ⚙️Information: #Vendor: ProcessorSamsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:25:16 +0200 *************** ✏️Title: CVE-2025-23095 | Samsung Mobile Processor Exynos 1280/1380/1480/2200/2400 double free *************** 📎Link: https://vuldb.com/?id.311190 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:25:29 +0200 *************** ✏️Title: CVE-2025-23096 | Samsung Mobile Processor Exynos 1280/1380/1480/2200/2400 double free (EUVD-2025-16880) *************** 📎Link: https://vuldb.com/?id.311191 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:25:42 +0200 *************** ✏️Title: CVE-2025-23106 | Samsung Mobile Processor Exynos 1480/2200/2400 use after free *************** 📎Link: https://vuldb.com/?id.311192 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:26:03 +0200 *************** ✏️Title: CVE-2025-29093 | Motivian Content Mangment System 41.0.0 Images unrestricted upload *************** 📎Link: https://vuldb.com/?id.311193 *************** ⚙️Information: #Vendor: Motivian #Product: Content Mangment System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:27:15 +0200 *************** ✏️Title: CVE-2025-3055 | WP User Frontend Pro Plugin up to 4.1.3 on WordPress delete_avatar_ajax denial of service *************** 📎Link: https://vuldb.com/?id.311194 *************** ⚙️Information: #Product: WP User Frontend Pro Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:27:22 +0200 *************** ✏️Title: CVE-2025-3054 | WP User Frontend Pro Plugin up to 4.1.3 on WordPress upload_files unrestricted upload *************** 📎Link: https://vuldb.com/?id.311195 *************** ⚙️Information: #Product: WP User Frontend Pro Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 19:48:30 GMT *************** ✏️Title: Hikvision in Kerala: Navigating the Intersection of Surveillance, Security, and Sovereignty *************** 📎Link: https://medium.com/p/474d58c3d310 *************** ⚙️Tags: #education #cybersecurity #hacking #hacking_tools *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 20:28:07 +0200 *************** ✏️Title: CVE-2025-48432 | Django up to 4.2.21/5.1.9/5.2.1 neutralization for logs *************** 📎Link: https://vuldb.com/?id.311196 *************** ⚙️Information: #Product: Django #Type: Content Management System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 19:58:29 GMT *************** ✏️Title: How AI is making me rethink security automation, batch jobs, and my blog *************** 📎Link: https://medium.com/p/aa604216d5e5 *************** ⚙️Tags: #pentesting #aws #security #batch_job #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 21:59:20 +0200 *************** ✏️Title: CVE-2025-31134 | FreshRSS up to 1.26.1 insertion of sensitive information into sent data *************** 📎Link: https://vuldb.com/?id.311197 *************** ⚙️Information: #Product: FreshRSS #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 21:59:58 +0200 *************** ✏️Title: CVE-2025-31136 | FreshRSS up to 1.26.1 SVG Favicon f.php fetch cross site scripting *************** 📎Link: https://vuldb.com/?id.311198 *************** ⚙️Information: #Product: FreshRSS #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:00:17 +0200 *************** ✏️Title: CVE-2025-48888 | deno up to 2.1.12/2.2.12/2.3.1 authorization *************** 📎Link: https://vuldb.com/?id.311199 *************** ⚙️Information: #Product: deno #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:00:34 +0200 *************** ✏️Title: CVE-2025-48934 | deno up to 2.1.12/2.2.12 Environment Variable deno.env.toObject insertion of sensitive information into sent data *************** 📎Link: https://vuldb.com/?id.311200 *************** ⚙️Information: #Product: deno #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 22:00:53 +0200 *************** ✏️Title: CVE-2025-48935 | deno up to 2.2.4 authorization *************** 📎Link: https://vuldb.com/?id.311201 *************** ⚙️Information: #Product: deno #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security