Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-22252 - Fortinet FortiProxy Authentication Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-22252 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 15:02:00 +0530 *************** ✏️Title: How 'Browser-in-the-Middle' Attacks Steal Sessions in Seconds *************** 📎Link: https://thehackernews.com/2025/05/how-browser-in-middle-attacks-steal.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-24473 - Fortinet FortiClient Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-24473 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-25251 - FortiClient Mac Incorrect Authorization Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25251 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-27522 - Apache InLong Deserialization of Untrusted Data Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27522 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-27526 - Apache InLong Deserialization of Untrusted Data JDBC Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27526 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-27528 - Apache InLong Deserialization of Untrusted Data Remote File Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27528 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:22 +0000 *************** ✏️Title: CVE-2025-46777 - Fortinet FortiPortal Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46777 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:22 +0000 *************** ✏️Title: CVE-2025-47294 - Fortinet FortiOS Integer Overflow DoS *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-47294 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:22 +0000 *************** ✏️Title: CVE-2025-47295 - Fortinet FortiOS Buffer Over-Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-47295 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:23 +0000 *************** ✏️Title: CVE-2025-5082 - "WordPress WP Attachments Reflected Cross-Site Scripting Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5082 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 09:15:21 +0000 *************** ✏️Title: CVE-2025-5287 - WordPress Likes and Dislikes Plugin SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5287 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 05:44:50 GMT *************** ✏️Title: Broken Access Control: The Quiet Killer in Web Applications *************** 📎Link: https://medium.com/p/79cb85f72cd8 *************** ⚙️Tags: #idor #bug_bounty #admin_access #jwt_exploitation #broken_access_control *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 06:00:34 GMT *************** ✏️Title: ️ 184 Million Login Credentials Leaked: Instagram, Facebook, and Roblox Users at Risk *************** 📎Link: https://medium.com/p/0a2cbda6cdd0 *************** ⚙️Tags: #hacking #instagram #facebook *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 06:02:48 GMT *************** ✏️Title: Unlock Super-Productivity: 15 Essential Linux Commands You Need to Know *************** 📎Link: https://medium.com/p/93514f1ba674 *************** ⚙️Tags: #linux #bash #productivity #hacking #software_development *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 06:05:31 GMT *************** ✏️Title: Web archive tools for OSINT investigators *************** 📎Link: https://medium.com/p/2c65c7b7ffe3 *************** ⚙️Tags: #archive #osint_investigation #osint #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:23:07 +0200 *************** ✏️Title: CVE-2025-2826 | Arista EOS 4.33.2F ACL Policy improper validation of specified quantity in input *************** 📎Link: https://vuldb.com/?id.310410 *************** ⚙️Information: #Vendor: Arista #Product: EOS #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:23:15 +0200 *************** ✏️Title: CVE-2025-25026 | IBM Security Guardium 12.0 authorization *************** 📎Link: https://vuldb.com/?id.310411 *************** ⚙️Information: #Vendor: IBM #Product: Security Guardium #Type: Policy Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:23:25 +0200 *************** ✏️Title: CVE-2025-25029 | IBM Security Guardium 12.0 escape output *************** 📎Link: https://vuldb.com/?id.310412 *************** ⚙️Information: #Vendor: IBM #Product: Security Guardium #Type: Policy Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:24:06 +0200 *************** ✏️Title: CVE-2024-11185 | Arista EOS up to 4.29.10M/4.30.9M/4.31.6M/4.32.3M/4.33.1F VLAN access control *************** 📎Link: https://vuldb.com/?id.310413 *************** ⚙️Information: #Vendor: Arista #Product: EOS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security