Sec WriteUp ~ CVE Alert
Kanalga Telegram’da o‘tish
NOTIFICATIONS CHANNEL. 🔴 Security_WriteUp: #Medium #CyberSecurity #Hacker_News 🔴 CVE Reports #CVEfeed #Tenable #VulDb 🔴 Exploit Database #Exploit_DB #CXSECURITY #Sploitus Academy : @HackTheBox_Academy
Ko'proq ko'rsatishMamlakat belgilanmaganTexnologiyalar & Aralashmalar43 281
472
Obunachilar
Ma'lumot yo'q24 soatlar
Ma'lumot yo'q7 kun
-1030 kun
Postlar arxiv
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 15:48:23 +0200
***************
✏️Title: CVE-2025-30986 | CreativeMedia Elite Video Player Plugin up to 10.0.5 on WordPress cross-site request forgery (EUVD-2025-17231)
***************
📎Link: https://vuldb.com/?id.311541
***************
⚙️Information:
#Vendor: CreativeMedia #Product: Elite Video Player Plugin #Type: Multimedia Player Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 15:48:24 +0200
***************
✏️Title: CVE-2025-49453 | Jatinder Pal Singh BP Profile as Homepage Plugin up to 1.1 on WordPress cross-site request forgery
***************
📎Link: https://vuldb.com/?id.311542
***************
⚙️Information:
#Vendor: Jatinder Pal Singh #Product: BP Profile as Homepage Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 15:48:36 +0200
***************
✏️Title: CVE-2025-28964 | mangup Personal Favicon Plugin up to 2.0 on WordPress cross-site request forgery
***************
📎Link: https://vuldb.com/?id.311543
***************
⚙️Information:
#Vendor: mangup #Product: Personal Favicon Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 15:48:53 +0200
***************
✏️Title: CVE-2025-49435 | Hasina77 Wp Easy Allopass Plugin up to 4.1.1 on WordPress cross-site request forgery (EUVD-2025-17144)
***************
📎Link: https://vuldb.com/?id.311544
***************
⚙️Information:
#Vendor: Hasina77 #Product: Wp Easy Allopass Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 15:50:31 +0200
***************
✏️Title: CVE-2025-5806 | Jenkins Gatling Plugin 136.vb_9009b_3d33a_e Content-Security-Policy protection mechanism
***************
📎Link: https://vuldb.com/?id.311545
***************
⚙️Information:
#Vendor: Jenkins #Product: Gatling Plugin #Type: Continuous Integration Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 17:15:48 +0200
***************
✏️Title: CVE-2025-38001 | Linux Kernel up to 6.15.0 net_sched cl_nactive infinite loop
***************
📎Link: https://vuldb.com/?id.311546
***************
⚙️Information:
#Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 17:15:58 +0200
***************
✏️Title: CVE-2025-38002 | Linux Kernel up to 6.14.7 io_uring_show_fdinfo information disclosure
***************
📎Link: https://vuldb.com/?id.311547
***************
⚙️Information:
#Vendor: Linux #Product: Kernel #Type: Operating System #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 17:17:18 +0200
***************
✏️Title: CVE-2025-41646 | Kunbus Revolution Pi Webstatus up to 2.4.5 type conversion (Kunbus-2025-000000 / EUVD-2025-17316)
***************
📎Link: https://vuldb.com/?id.311548
***************
⚙️Information:
#Vendor: Kunbus #Product: Revolution Pi Webstatus #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:42:16 +0200
***************
✏️Title: CVE-2024-56805 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 buffer overflow (qsa-25-12)
***************
📎Link: https://vuldb.com/?id.311549
***************
⚙️Information:
#Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:42:54 +0200
***************
✏️Title: CVE-2025-22481 | QNAP QTS/QuTS hero prior 5.2.4.3079 Build 20250321 command injection (qsa-25-12)
***************
📎Link: https://vuldb.com/?id.311550
***************
⚙️Information:
#Vendor: QNAP #Product: QTS/QuTS hero #Type: Network Attached Storage Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:43:16 +0200
***************
✏️Title: CVE-2025-22484 | QNAP File Station 5.5.6.4847 allocation of resources (qsa-25-16)
***************
📎Link: https://vuldb.com/?id.311551
***************
⚙️Information:
#Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:43:41 +0200
***************
✏️Title: CVE-2025-29872 | QNAP File Station 5.5.6.4847 allocation of resources (qsa-25-16)
***************
📎Link: https://vuldb.com/?id.311552
***************
⚙️Information:
#Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:44:02 +0200
***************
✏️Title: CVE-2025-5747 | WOLFBOX Level 2 EV Charger MCU Command Parser interpretation input (ZDI-25-326)
***************
📎Link: https://vuldb.com/?id.311553
***************
⚙️Information:
#Vendor: WOLFBOX #Product: Level 2 EV Charger #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:55:29 +0200
***************
✏️Title: CVE-2025-5748 | WOLFBOX Level 2 EV Charger Tuya Communications Module routine (ZDI-25-327)
***************
📎Link: https://vuldb.com/?id.311554
***************
⚙️Information:
#Vendor: WOLFBOX #Product: Level 2 EV Charger #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:55:50 +0200
***************
✏️Title: CVE-2025-22482 | QNAP Qsync Central 4.3.0.11/4.4.0.15/4.4.0.16_20240819 format string (qsa-25-10)
***************
📎Link: https://vuldb.com/?id.311555
***************
⚙️Information:
#Vendor: QNAP #Product: Qsync Central #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:56:14 +0200
***************
✏️Title: CVE-2025-22486 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09)
***************
📎Link: https://vuldb.com/?id.311556
***************
⚙️Information:
#Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:57:53 +0200
***************
✏️Title: CVE-2025-29883 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09)
***************
📎Link: https://vuldb.com/?id.311557
***************
⚙️Information:
#Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 06 Jun 2025 18:58:09 +0200
***************
✏️Title: CVE-2025-29884 | QNAP File Station 5.5.6.4741 certificate validation (qsa-25-09)
***************
📎Link: https://vuldb.com/?id.311558
***************
⚙️Information:
#Vendor: QNAP #Product: File Station #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
📌#WriteUp Community
***************
🗓Date: Fri, 06 Jun 2025 16:58:31 +0000
***************
✏️Title: New PathWiper Malware Attacking Critical Infrastructure To Deploy Administrative Tools
***************
📎Link: https://cybersecuritynews.com/?p=110131
***************
⚙️Tags: #NEWS #Cyber_Security #Hacker_News
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
📌#WriteUp Community
***************
🗓Date: Fri, 06 Jun 2025 17:23:40 +0000
***************
✏️Title: Beware of Fake AI Business Tools That Hides Ransomware
***************
📎Link: https://cybersecuritynews.com/?p=110134
***************
⚙️Tags: #NEWS #Cyber_Security #Hacker_News
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
