Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 04:33:50 GMT *************** ✏️Title: The Artificial Intelligence Role in Penetration Testing and Cyber Defense *************** 📎Link: https://medium.com/p/ec152509fe8b *************** ⚙️Tags: #ai_in_cyber_security #penetration_testing #cyber_defense #cybersecurity_training *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 05:05:03 GMT *************** ✏️Title: HTTP Response Splitting in Symfony: Protect Your App *************** 📎Link: https://medium.com/p/b2aa85456e1d *************** ⚙️Tags: #vulnerability #cybersecurity #penetration_testing #symfony #http_response *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 05:19:46 GMT *************** ✏️Title: Webhook Vulnerabilities: Hidden Vulnerabilities in Automation Pipelines *************** 📎Link: https://medium.com/p/724d09ec6130 *************** ⚙️Tags: #bug_bounty #technology #cybersecurity #tips_and_tricks #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 05:24:49 GMT *************** ✏️Title: 404 to $4,000: Exposed .git, .env, and Hidden Dev Files via Predictable Paths” *************** 📎Link: https://medium.com/p/f5723b3ad3f8 *************** ⚙️Tags: #bug_bounty #tips_and_tricks #penetration_testing #hacking #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 05:08:36 GMT *************** ✏️Title: Dancing | Hack the box *************** 📎Link: https://medium.com/p/7f8c171f1601 *************** ⚙️Tags: #hackthebox_writeup #hackthebox_walkthrough #ctf #ctf_writeup #hackthebox *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:52:00 +0530 *************** ✏️Title: New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch *************** 📎Link: https://thehackernews.com/2025/06/new-chrome-zero-day-actively-exploited.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:04:26 +0200 *************** ✏️Title: CVE-2025-5068 | Google Chrome up to 137.0.7151.55 Blink use after free (ID 409059) *************** 📎Link: https://vuldb.com/?id.310900 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:04:34 +0200 *************** ✏️Title: CVE-2025-5419 | Google Chrome up to 137.0.7151.55 V8 out-of-bounds write (ID 420636) *************** 📎Link: https://vuldb.com/?id.310901 *************** ⚙️Information: #Vendor: Google #Product: Chrome #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:09:37 +0200 *************** ✏️Title: CVE-2025-49162 | Arris VIP1113 up to 2025-05-30 KreaTV SDK improper protection of alternate path *************** 📎Link: https://vuldb.com/?id.310902 *************** ⚙️Information: #Vendor: Arris #Product: VIP1113 #Risk: critical #Local: Partially #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:09:47 +0200 *************** ✏️Title: CVE-2025-49164 | Arris VIP1113 up to 2025-05-30 KreaTV SDK hard-coded key *************** 📎Link: https://vuldb.com/?id.310903 *************** ⚙️Information: #Vendor: Arris #Product: VIP1113 #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:09:58 +0200 *************** ✏️Title: CVE-2025-49163 | Arris VIP1113 up to 2025-05-30 KreaTV SDK /usr/bin/gunzip improper protection of alternate path *************** 📎Link: https://vuldb.com/?id.310904 *************** ⚙️Information: #Vendor: Arris #Product: VIP1113 #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:24:07 +0200 *************** ✏️Title: CVE-2025-4671 | Profile Builder Plugin up to 3.13.8 on WordPress Shortcode user_meta/compare cross site scripting *************** 📎Link: https://vuldb.com/?id.310905 *************** ⚙️Information: #Product: Profile Builder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:24:31 +0200 *************** ✏️Title: CVE-2025-4392 | Shared Files Plugin up to 1.7.48 on WordPress sanitize_file cross site scripting *************** 📎Link: https://vuldb.com/?id.310906 *************** ⚙️Information: #Product: Shared Files Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:24:37 +0200 *************** ✏️Title: CVE-2025-5340 | Music Player for Elementor Plugin up to 2.4.6 on WordPress album_buy_url cross site scripting *************** 📎Link: https://vuldb.com/?id.310907 *************** ⚙️Information: #Product: Music Player for Elementor Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:24:42 +0200 *************** ✏️Title: CVE-2025-4205 | Popup Maker Plugin up to 1.20.4 on WordPress popupID cross site scripting *************** 📎Link: https://vuldb.com/?id.310908 *************** ⚙️Information: #Product: Popup Maker Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:29:50 +0200 *************** ✏️Title: CVE-2025-5492 | D-Link DI-500WF-WT up to 20250511 /usr/sbin/jhttpd /msp_info.htm?flag=cmd sub_456DE8 command injection *************** 📎Link: https://vuldb.com/?id.310909 *************** ⚙️Information: #Vendor: D_Link #Product: DI_500WF_WT #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:36:50 +0200 *************** ✏️Title: CVE-2025-5493 | Baison Channel Middleware Product 2.0.1 ToJsonByControlName data sql injection *************** 📎Link: https://vuldb.com/?id.310910 *************** ⚙️Information: #Vendor: Baison #Product: Channel Middleware Product #Type: Middleware #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 04:08:06 GMT *************** ✏️Title: PENTINGNYA ICS & SCADA PADA DUNIA INDUSTRI *************** 📎Link: https://medium.com/p/9758f8789c5e *************** ⚙️Tags: #artificial_intelligence #industry #cybersecurity #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 04:12:03 GMT *************** ✏️Title: 4x Surge in PureRAT Malware Attacks Against Russian Businesses *************** 📎Link: https://medium.com/p/6fa4b5e87071 *************** ⚙️Tags: #cybersecurity #penetration_testing #malware #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 03:15:27 +0000 *************** ✏️Title: CVE-2025-2939 - WordPress Ninja Tables PHP Object Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2939 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security