Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:28 +0000 *************** ✏️Title: CVE-2025-5794 - Tenda AC5 PPTP User List Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5794 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 19:15:28 +0000 *************** ✏️Title: CVE-2025-5795 - Tenda AC5 Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5795 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 18:46:44 GMT *************** ✏️Title: The unlit eye and the broken wall *************** 📎Link: https://medium.com/p/e13d4fe11082 *************** ⚙️Tags: #incident_response #hacking #cyberwar #cybercrime #college *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 18:45:27 GMT *************** ✏️Title: ¿Qué es el “OSINT” y como protegerse de el ? *************** 📎Link: https://medium.com/p/8e1788980175 *************** ⚙️Tags: #mexico #cosplayer #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 19:30:07 GMT *************** ✏️Title: Inside the Mind of the Enemy: What Drives Cyber Threat Actors and Why Proactive Defense Is… *************** 📎Link: https://medium.com/p/01ced0d34099 *************** ⚙️Tags: #management #infosec #cybersecurity #business #business_strategy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 19:24:44 GMT *************** ✏️Title: Defeating AV/EDRs: Advanced Evasion Techniques *************** 📎Link: https://medium.com/p/d389fb21478d *************** ⚙️Tags: #red_team #malware #pentesting #hacker #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 18:53:13 GMT *************** ✏️Title: Targeted attacks are a new word in the world of threats *************** 📎Link: https://medium.com/p/a479a608772d *************** ⚙️Tags: #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:22 +0200 *************** ✏️Title: CVE-2025-30995 | OTWthemes Widgetize Pages Light Plugin up to 3.0 on WordPress OTWthemes Widgetize Page cross-site request forgery (EUVD-2025-17236) *************** 📎Link: https://vuldb.com/?id.311539 *************** ⚙️Information: #Vendor: OTWthemes #Product: Widgetize Pages Light Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:22 +0200 *************** ✏️Title: CVE-2025-28981 | Soli WP Mail Options Plugin up to 0.2.3 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311540 *************** ⚙️Information: #Vendor: Soli #Product: WP Mail Options Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:23 +0200 *************** ✏️Title: CVE-2025-30986 | CreativeMedia Elite Video Player Plugin up to 10.0.5 on WordPress cross-site request forgery (EUVD-2025-17231) *************** 📎Link: https://vuldb.com/?id.311541 *************** ⚙️Information: #Vendor: CreativeMedia #Product: Elite Video Player Plugin #Type: Multimedia Player Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:24 +0200 *************** ✏️Title: CVE-2025-49453 | Jatinder Pal Singh BP Profile as Homepage Plugin up to 1.1 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311542 *************** ⚙️Information: #Vendor: Jatinder Pal Singh #Product: BP Profile as Homepage Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:36 +0200 *************** ✏️Title: CVE-2025-28964 | mangup Personal Favicon Plugin up to 2.0 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311543 *************** ⚙️Information: #Vendor: mangup #Product: Personal Favicon Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:48:53 +0200 *************** ✏️Title: CVE-2025-49435 | Hasina77 Wp Easy Allopass Plugin up to 4.1.1 on WordPress cross-site request forgery (EUVD-2025-17144) *************** 📎Link: https://vuldb.com/?id.311544 *************** ⚙️Information: #Vendor: Hasina77 #Product: Wp Easy Allopass Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:50:31 +0200 *************** ✏️Title: CVE-2025-5806 | Jenkins Gatling Plugin 136.vb_9009b_3d33a_e Content-Security-Policy protection mechanism *************** 📎Link: https://vuldb.com/?id.311545 *************** ⚙️Information: #Vendor: Jenkins #Product: Gatling Plugin #Type: Continuous Integration Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:48 +0200 *************** ✏️Title: CVE-2025-38001 | Linux Kernel up to 6.15.0 net_sched cl_nactive infinite loop *************** 📎Link: https://vuldb.com/?id.311546 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:15:58 +0200 *************** ✏️Title: CVE-2025-38002 | Linux Kernel up to 6.14.7 io_uring_show_fdinfo information disclosure *************** 📎Link: https://vuldb.com/?id.311547 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 17:17:18 +0200 *************** ✏️Title: CVE-2025-41646 | Kunbus Revolution Pi Webstatus up to 2.4.5 type conversion (Kunbus-2025-000000 / EUVD-2025-17316) *************** 📎Link: https://vuldb.com/?id.311548 *************** ⚙️Information: #Vendor: Kunbus #Product: Revolution Pi Webstatus #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:42:16 +0200 *************** ✏️Title: CVE-2024-56805 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 buffer overflow (qsa-25-12 / EUVD-2024-54653) *************** 📎Link: https://vuldb.com/?id.311549 *************** ⚙️Information: #Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:42:54 +0200 *************** ✏️Title: CVE-2025-22481 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 command injection (qsa-25-12) *************** 📎Link: https://vuldb.com/?id.311550 *************** ⚙️Information: #Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 18:43:16 +0200 *************** ✏️Title: CVE-2025-22484 | QNAP File Station 5.5.6.4847 allocation of resources (qsa-25-16 / EUVD-2025-17339) *************** 📎Link: https://vuldb.com/?id.311551 *************** ⚙️Information: #Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security