Sec WriteUp ~ CVE Alert

Kanalga Telegram’da o‘tish

NOTIFICATIONS CHANNEL. 🔴 Security_WriteUp: #Medium #CyberSecurity #Hacker_News 🔴 CVE Reports #CVEfeed #Tenable #VulDb 🔴 Exploit Database #Exploit_DB #CXSECURITY #Sploitus Academy : @HackTheBox_Academy

Ko'proq ko'rsatish

Mamlakat belgilanmaganTexnologiyalar & Aralashmalar43 281

472

Obunachilar

Ma'lumot yo'q24 soatlar

Ma'lumot yo'q7 kun

-1030 kun

Post ko'rishlar

Ma'lumot yo'q24 soatlar

Ma'lumot yo'q48 soatlar

0.42%

Muloqot nisbati

~ 244

Kuniga postlar

Ads index

beta

Postlar arxiv

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:15:27 GMT *************** ✏️Title: CVE-2025-31711 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-31711 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:15:27 GMT *************** ✏️Title: CVE-2025-31712 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-31712 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:15:27 GMT *************** ✏️Title: CVE-2025-3584 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-3584 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:15:27 GMT *************** ✏️Title: CVE-2025-3662 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-3662 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 06:15:27 GMT *************** ✏️Title: CVE-2025-4567 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-4567 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:19:52 +0000 *************** ✏️Title: Hackers Exploit AI Tools Misconfiguration To Run Malicious AI-generated Payloads *************** 📎Link: https://cybersecuritynews.com/?p=109466 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:03:20 +0200 *************** ✏️Title: CVE-2025-5509 | quequnlong shiyi-blog up to 1.2.1 /api/file/upload file/source path traversal *************** 📎Link: https://vuldb.com/?id.310923 *************** ⚙️Information: #Vendor: quequnlong #Product: shiyi_blog #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:03:21 +0200 *************** ✏️Title: CVE-2025-5510 | quequnlong shiyi-blog up to 1.2.1 optimize url server-side request forgery *************** 📎Link: https://vuldb.com/?id.310924 *************** ⚙️Information: #Vendor: quequnlong #Product: shiyi_blog #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:03:22 +0200 *************** ✏️Title: CVE-2025-5511 | quequnlong shiyi-blog up to 1.2.1 photos improper authorization *************** 📎Link: https://vuldb.com/?id.310925 *************** ⚙️Information: #Vendor: quequnlong #Product: shiyi_blog #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:03:24 +0200 *************** ✏️Title: CVE-2025-5512 | quequnlong shiyi-blog up to 1.2.1 Administrator Backend verifyPassword improper authentication *************** 📎Link: https://vuldb.com/?id.310926 *************** ⚙️Information: #Vendor: quequnlong #Product: shiyi_blog #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:03:25 +0200 *************** ✏️Title: CVE-2025-5513 | quequnlong shiyi-blog up to 1.2.1 /dev-api/api/comment/add content cross site scripting *************** 📎Link: https://vuldb.com/?id.310927 *************** ⚙️Information: #Vendor: quequnlong #Product: shiyi_blog #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:34:45 +0200 *************** ✏️Title: CVE-2025-3584 | Newsletter Plugin up to 8.8.1 on WordPress Setting cross site scripting *************** 📎Link: https://vuldb.com/?id.310928 *************** ⚙️Information: #Product: Newsletter Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:34:46 +0200 *************** ✏️Title: CVE-2025-4567 | Post Slider and Post Carousel with Post Vertical Scrolling Widget Plugin cross site scripting *************** 📎Link: https://vuldb.com/?id.310929 *************** ⚙️Information: #Product: Post Slider and Post Carousel with Post Vertical Scrolling Widget Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:34:56 +0200 *************** ✏️Title: CVE-2025-3662 | FancyBox Plugin up to 3.3.5 on WordPress caption cross site scripting *************** 📎Link: https://vuldb.com/?id.310930 *************** ⚙️Information: #Product: FancyBox Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:34:56 +0200 *************** ✏️Title: CVE-2025-31710 | Unisoc T9300 Engineermode Service command injection *************** 📎Link: https://vuldb.com/?id.310931 *************** ⚙️Information: #Vendor: Unisoc #Product: SC9863A/T606/T612/T616/T750/T765/T760/T770/T820/S8000/T8300/T9300 #Type: Chip Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:35:11 +0200 *************** ✏️Title: CVE-2024-53019 | Qualcomm Snapdragon Auto FastConnect 6200 up to WSA8845 RTP Header Length buffer over-read *************** 📎Link: https://vuldb.com/?id.310932 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon Compute/Snapdragon Connectivity/Snapdragon Industrial IOT/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:35:34 +0200 *************** ✏️Title: CVE-2024-53020 | Qualcomm Snapdragon Auto up to XR1 Platform RTP Packet buffer over-read *************** 📎Link: https://vuldb.com/?id.310933 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon Compute/Snapdragon Connectivity/Snapdragon Consumer IOT/Snapdragon Industrial IOT/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:35:45 +0200 *************** ✏️Title: CVE-2024-53021 | Qualcomm Snapdragon Auto up to XR1 Platform RTCP Packet buffer over-read *************** 📎Link: https://vuldb.com/?id.310934 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon Compute/Snapdragon Connectivity/Snapdragon Consumer IOT/Snapdragon Industrial IOT/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:35:56 +0200 *************** ✏️Title: CVE-2024-53026 | Qualcomm Snapdragon Auto up to XR1 Platform VoLTE/VoWiFi buffer over-read *************** 📎Link: https://vuldb.com/?id.310935 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon Compute/Snapdragon Connectivity/Snapdragon Consumer IOT/Snapdragon Industrial IOT/Snapdragon Mobile/Snapdragon Wearables #Type: Chip Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

472

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 08:36:05 +0200 *************** ✏️Title: CVE-2025-21463 | Qualcomm Snapdragon Auto up to WSA8845H Beacon Frame buffer over-read *************** 📎Link: https://vuldb.com/?id.310936 *************** ⚙️Information: #Vendor: Qualcomm #Product: Snapdragon Auto/Snapdragon CCW/Snapdragon Compute/Snapdragon Consumer Electronics Connectivity/Snapdragon Consumer IOT/Snapdragon Industrial IOT/Snapdragon Mobile/Snapdragon Technology/Snapdragon WBC/Snapdragon Wired Infrastructure and Networking #Type: Chip Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security