Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:23 +0000 *************** ✏️Title: CVE-2025-36573 - Dell Smart Dock Firmware Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-36573 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:23 +0000 *************** ✏️Title: CVE-2025-46035 - Tenda AC6 Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46035 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:23 +0000 *************** ✏️Title: CVE-2025-49467 - JEvents SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49467 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 17:15:26 +0000 *************** ✏️Title: CVE-2023-45256 - PrestaShop EuroInformation MoneticoPaiement SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2023-45256 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2024-55567 - Insyde H2O UsbCoreDxe SMM Call Out Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-55567 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 17:15:29 +0000 *************** ✏️Title: CVE-2025-49080 - "Absolute Secure Access Server Denial of Service Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49080 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 17:15:29 +0000 *************** ✏️Title: CVE-2025-5982 - GitLab EE IP Access Restriction Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5982 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:26:19 +0200 *************** ✏️Title: CVE-2023-45256 | EuroInformation MoneticoPaiement module up to 1.1.0 on PrestaShop transaction.php TPE/societe/MAC/reference/aliascb sql injection *************** 📎Link: https://vuldb.com/?id.312436 *************** ⚙️Information: #Vendor: EuroInformation #Product: MoneticoPaiement module #Type: PrestaShop Module #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:26:50 +0200 *************** ✏️Title: CVE-2024-55567 | Insyde InsydeH2O prior 05.47.01/05.55.01/05.62.01/05.71.01 UsbCoreDxe input validation *************** 📎Link: https://vuldb.com/?id.312437 *************** ⚙️Information: #Vendor: Insyde #Product: InsydeH2O #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:27:38 +0200 *************** ✏️Title: CVE-2025-5982 | GitLab Enterprise Edition up to 17.10.7/17.11.3/18.0.1 IP Access Restriction insufficient granularity of access control (Issue 514456) *************** 📎Link: https://vuldb.com/?id.312438 *************** ⚙️Information: #Vendor: GitLab #Product: Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:27:57 +0200 *************** ✏️Title: CVE-2025-49080 | Absolute Security Secure Access up to 13.53 denial of service *************** 📎Link: https://vuldb.com/?id.312439 *************** ⚙️Information: #Vendor: Absolute Security #Product: Secure Access #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 19:27:59 +0200 *************** ✏️Title: CVE-2025-6035 | GIMP Despeckle Plugin integer overflow *************** 📎Link: https://vuldb.com/?id.312440 *************** ⚙️Information: #Product: GIMP #Type: Image Processing Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Laravel Pulse 1.3.1 - Arbitrary Code Injection exploit =============== 📎 https://sploitus.com/exploit?id=EDB-ID:52319&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege exploit =============== 📎 https://sploitus.com/exploit?id=EDB-ID:52320&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ProSSHD 1.2 20090726 - Denial of Service (DoS) exploit =============== 📎 https://sploitus.com/exploit?id=EDB-ID:52321&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ TightVNC 2.8.83 - Control Pipe Manipulation exploit =============== 📎 https://sploitus.com/exploit?id=EDB-ID:52322&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 17:22:03 GMT *************** ✏️Title: Penetration Testing: Kioptrix Level 1 *************** 📎Link: https://medium.com/p/2368b126a24e *************** ⚙️Tags: #cybersecurity #it #security #penetration_testing #information_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 16:52:50 GMT *************** ✏️Title: TryHackMe “Lookup ”WriteUp *************** 📎Link: https://medium.com/p/92efc6ed3d50 *************** ⚙️Tags: #tryhackme_writeup #look_up #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 17:37:38 GMT *************** ✏️Title: Hack The Box Writeup — OpenAdmin *************** 📎Link: https://medium.com/p/f09da9c7ee0c *************** ⚙️Tags: #ethical_hacking #hackthebox #vulnerability #ctf #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 17:52:40 GMT *************** ✏️Title: Tutorial - TryHackMe *************** 📎Link: https://medium.com/p/0c4fb9ede7d0 *************** ⚙️Tags: #hacking #tutorial #ctf #cybersecurity #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security