Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 08:27:48 GMT *************** ✏️Title: Walkthrough THM Surfer *************** 📎Link: https://medium.com/p/bb83c464c2bd *************** ⚙️Tags: #thm_writeup #learning #tryhackme #hacking #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 05:46:21 GMT *************** ✏️Title: How to Detect Wi-Fi Deauth DoS Attacks *************** 📎Link: https://medium.com/p/e6b3276b2974 *************** ⚙️Tags: #security #ethical_hacking #cybersecurity #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 06:14:34 GMT *************** ✏️Title: How Fake Apps on Play Store Are Hacking Your Data. *************** 📎Link: https://medium.com/p/03d1f3ca4787 *************** ⚙️Tags: #cybersecurity #malware #mobile_apps *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 06:39:35 GMT *************** ✏️Title: Visualization tools for OSINT investigators *************** 📎Link: https://medium.com/p/5f489e219315 *************** ⚙️Tags: #investigation #osint #tips #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 04:15:28 +0000 *************** ✏️Title: CVE-2025-5166 - Open Asset Import Library (Assimp) Out-of-Bounds Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5166 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 04:15:43 +0000 *************** ✏️Title: CVE-2025-5167 - Assimp Out-of-Bounds Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5167 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 04:15:44 +0000 *************** ✏️Title: CVE-2025-5168 - Assimp Out-of-Bounds Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5168 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 05:15:19 +0000 *************** ✏️Title: CVE-2025-5169 - Assimp MDLImporter Out-of-Bounds Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5169 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 05:15:20 +0000 *************** ✏️Title: CVE-2025-5170 - LliSoft MTA Maita Training System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5170 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 08:22:32 +0200 *************** ✏️Title: CVE-2025-2146 | Canon Satera MF656Cdw up to 05.07 WebService Authentication out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310275 *************** ⚙️Information: #Vendor: Canon #Product: Satera MF656Cdw/Satera MF654Cdw/Satera MF551dw/Satera MF457dw/Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw/imageCLASS MF455dw/imageCLASS MF453dw/imageCLASS MF452dw/imageCLASS MF451dw/imageCLASS LBP237dw/imageCLASS LBP236dw/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II/imageCLASS X LBP1238 II/i_SENSYS MF657Cdw/i_SENSYS MF655Cdw/i_SENSYS MF651Cdw/i_SENSYS LBP633Cdw/i_SENSYS LBP631Cdw/i_SENSYS MF553dw/i_SENSYS MF552dw/i_SENSYS MF455dw/i_SENSYS MF453dw/i_SENSYS LBP236dw/i_SENSYS LBP233dw/imageRUNNER 1643iF II/imageRUNNER 1643i II/i_SENSYS X 1238iF II/i_SENSYS X 1238i II/i_SENSYS X 1238P II/i_SENSYS X 1238Pr II #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 06:17:03 +0000 *************** ✏️Title: CVE-2025-5171 - LliSoft MTA Maita Training System Unrestricted File Upload Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5171 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 08:23:09 +0200 *************** ✏️Title: CVE-2025-35003 | Apache NuttX RTOS up to 12.8.x Bluetooth Stack stack-based overflow *************** 📎Link: https://vuldb.com/?id.310276 *************** ⚙️Information: #Vendor: Apache #Product: NuttX RTOS #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 06:17:03 +0000 *************** ✏️Title: CVE-2025-5172 - Econtrata SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5172 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 08:33:12 +0200 *************** ✏️Title: VDB-310277 | GuardDuty S3 Bucket Policy GetBucketPublicAccessBlock/GetBucketPolicyStatus permission *************** 📎Link: https://vuldb.com/?id.310277 *************** ⚙️Information: #Product: GuardDuty #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 07:15:25 +0000 *************** ✏️Title: CVE-2025-41441 - Mailform Pro CGI Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-41441 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 08:41:12 +0200 *************** ✏️Title: CVE-2025-41441 | Synck Graphica Mailform Pro CGI up to 4.3.3 information exposure *************** 📎Link: https://vuldb.com/?id.310278 *************** ⚙️Information: #Vendor: Synck Graphica #Product: Mailform Pro CGI #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 07:15:26 +0000 *************** ✏️Title: CVE-2025-5173 - HumanSignal Label Studio ML Backend Deserialization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5173 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 07:15:26 +0000 *************** ✏️Title: CVE-2025-5174 - Erdogant PyPickle Deserialization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5174 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 10:25:24 +0200 *************** ✏️Title: CVE-2025-5196 | Wing FTP Server up to 7.4.3 Lua Admin Console unnecessary privileges *************** 📎Link: https://vuldb.com/?id.310279 *************** ⚙️Information: #Vendor: Wing #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 04:45:54 GMT *************** ✏️Title: Bypassing iOS App Jailbreak Detection by Patching the Binary with Ghidra: Write-up of No-Escape Lab *************** 📎Link: https://medium.com/p/02b417b3a235 *************** ⚙️Tags: #mobile_app_security #ghidra #jailbreak_detection #red_team #binary_patching *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security