Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:19:24 +0200 *************** ✏️Title: CVE-2025-47570 | villatheme WooCommerce Photo Reviews Premium Plugin up to 1.3.13 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.312373 *************** ⚙️Information: #Vendor: villatheme #Product: WooCommerce Photo Reviews Premium Plugin #Type: E_Commerce Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:19:42 +0200 *************** ✏️Title: CVE-2025-47566 | ZoomSounds Plugin up to 6.91 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.312374 *************** ⚙️Information: #Product: ZoomSounds Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 08:47:07 +0200 *************** ✏️Title: CVE-2025-35978 | Fujitsu Client Computing UpdateNavi/UpdateNaviInstallService communication channel to intended endpoints *************** 📎Link: https://vuldb.com/?id.312375 *************** ⚙️Information: #Vendor: Fujitsu Client Computing #Product: UpdateNavi/UpdateNaviInstallService #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 08:54:04 +0200 *************** ✏️Title: CVE-2025-49795 | libxml Schematron Schema Report xmlSchematronFormatReport null pointer dereference *************** 📎Link: https://vuldb.com/?id.312376 *************** ⚙️Information: #Product: libxml #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 08:54:27 +0200 *************** ✏️Title: CVE-2025-49796 | libxml type confusion *************** 📎Link: https://vuldb.com/?id.312377 *************** ⚙️Information: #Product: libxml #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:13:14 GMT *************** ✏️Title: How to Protect Your Personal Info When Shopping Online *************** 📎Link: https://medium.com/p/de5d21e377ab *************** ⚙️Tags: #online_shopping #tech #privacy #information #data *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:13:51 GMT *************** ✏️Title: Urgent: CVE-2025–47273 Exposes Python SetupTools — Here’s How to Stay Secure *************** 📎Link: https://medium.com/p/843a183a02dc *************** ⚙️Tags: #technology #devsecops #cyber_security_awareness #python_programming *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 07:02:44 GMT *************** ✏️Title: Critical CVEs Patched in Easy2Patch E2P-20250614 Catalog *************** 📎Link: https://medium.com/p/6082670862cf *************** ⚙️Tags: #cve #easy2patch #endpoint_security #zero_day #patch_tuesday *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:13:42 GMT *************** ✏️Title: Metodologia OSINT: Abordagens Técnicas, Automatizadas e Comportamentais. (pt.1) *************** 📎Link: https://medium.com/p/2d25a83f59f7 *************** ⚙️Tags: #osint_investigation #research #osint #investigation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:48:59 GMT *************** ✏️Title: Harnessing the Power of OSINT by PurpleRadiance for Crime Investigation *************** 📎Link: https://medium.com/p/0379b0244b20 *************** ⚙️Tags: #osint #cdr_analysis_software *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:13:06 GMT *************** ✏️Title: Broken Object Level Authorization (BOLA): Complete Guide — Part 3 *************** 📎Link: https://medium.com/p/14128a447743 *************** ⚙️Tags: #cybersecurity #bug_bounty #infosec #ai #owasp *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:11:02 GMT *************** ✏️Title: A classic file based IDOR on NIELIT portal *************** 📎Link: https://medium.com/p/064604c7fc62 *************** ⚙️Tags: #bug_bounty #ethical_hacking #web_security #idor_vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:27:46 GMT *************** ✏️Title: The Hidden Danger in the Cloud: S3 Buckets & Random URLs *************** 📎Link: https://medium.com/p/74d8461f2888 *************** ⚙️Tags: #cybersecurity #ethical_hacking #aws_s3 #cloud_security #data_privacy_protection *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:51:27 GMT *************** ✏️Title: How I Gained Root via LFI and a CVE in Backdrop CMS — Hack The Box ‘Dog’ Write-Up *************** 📎Link: https://medium.com/p/f3c2427dbd18 *************** ⚙️Tags: #hackthebox_writeup #ethical_hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:14:38 GMT *************** ✏️Title: GraphQL in the Wild: Recon to RCE via Introspection, Nested Queries & Batching Attacks *************** 📎Link: https://medium.com/p/dbd2d704fbdf *************** ⚙️Tags: #bug_bounty #hacking #bug_bounty_tips #penetration_testing #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:44:29 GMT *************** ✏️Title: Why Every Business Needs a Strong Penetration Testing Report — A Guide by CyberNX *************** 📎Link: https://medium.com/p/e7a3f6cfb693 *************** ⚙️Tags: #pt #cybersecurity #penetration_testing #cybernx *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:43:22 GMT *************** ✏️Title: Anonforce — TryHackMe *************** 📎Link: https://medium.com/p/98447b9ee484 *************** ⚙️Tags: #anonforce_tryhackme #tryhackme #tryhackme_walkthrough #anonforce #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:12:08 +0200 *************** ✏️Title: CVE-2025-49487 | Trend Micro Worry-Free Business Security uncontrolled search path *************** 📎Link: https://vuldb.com/?id.312355 *************** ⚙️Information: #Vendor: Trend Micro #Product: Worry_Free Business Security #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:12:24 +0200 *************** ✏️Title: CVE-2025-5820 | Sony XAV-AX8500 Bluetooth ERTM Channel improper authentication *************** 📎Link: https://vuldb.com/?id.312356 *************** ⚙️Information: #Vendor: Sony #Product: XAV_AX8500 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:12:37 +0200 *************** ✏️Title: CVE-2025-5476 | Sony XAV-AX8500 Bluetooth improper authentication *************** 📎Link: https://vuldb.com/?id.312357 *************** ⚙️Information: #Vendor: Sony #Product: XAV_AX8500 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security