Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:03:09 +0200 *************** ✏️Title: CVE-2025-5562 | PHPGurukul Curfew e-Pass Management System 1.0 edit-category-detail.php editid sql injection *************** 📎Link: https://vuldb.com/?id.311012 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Curfew e_Pass Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 16:23:57 GMT *************** ✏️Title: OAuth 2.0 & OpenID Connect: Advanced Guide to Flows, Flaws & Fixes *************** 📎Link: https://medium.com/p/dea389cf6183 *************** ⚙️Tags: #security #api #bug_bounty #oauth2 #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 16:36:18 GMT *************** ✏️Title: What Hackers Know About You — and You Don’t *************** 📎Link: https://medium.com/p/47012d5b4e6b *************** ⚙️Tags: #hacking #hacks #cybersecurity #security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 16:05:27 GMT *************** ✏️Title: Understanding Host Header Attacks: How a Small Header Can Lead to Major Vulnerabilities *************** 📎Link: https://medium.com/p/0a123d2b47e3 *************** ⚙️Tags: #host_header_injection #https #web_application_security #cybersecurity #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 16:40:03 GMT *************** ✏️Title: What Is CREST Penetration Testing? Benefits & Importance *************** 📎Link: https://medium.com/p/bff51e4937f9 *************** ⚙️Tags: #crest_penetration_testing #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 16:50:20 GMT *************** ✏️Title: the hidden secret to hacking most bugbounty hunters don’t want you to know : the wayback url *************** 📎Link: https://medium.com/p/c0ce1a27bc03 *************** ⚙️Tags: #cybersecurity #wayback_machine #ethical_hacking #burpsuite #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 16:26:17 GMT *************** ✏️Title: Purple Teaming: When Hackers and Defenders Join Forces *************** 📎Link: https://medium.com/p/fee825f60de6 *************** ⚙️Tags: #purple_team #blue_team #cybersecurity #red_team #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 16:30:30 GMT *************** ✏️Title: Metasploit: Introduction | THM *************** 📎Link: https://medium.com/p/7340bdac5433 *************** ⚙️Tags: #metasploit #tryhackme_writeup #cybersecurity #tryhackme_walkthrough #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:15:48 +0000 *************** ✏️Title: CVE-2025-45855 - Erupt Elevation of Privilege (Arbitrary Code Execution) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-45855 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:15:48 +0000 *************** ✏️Title: CVE-2025-46154 - Foxcms SQL Time Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46154 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:15:51 +0000 *************** ✏️Title: CVE-2025-5498 - Slackero PHPwcms Remote Deserialization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5498 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:15:51 +0000 *************** ✏️Title: CVE-2025-5499 - Slackero PHPWCMS Deserialization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5499 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:15:51 +0000 *************** ✏️Title: CVE-2025-5501 - Open5GS NGAP PathSwitchRequest Message Handler Remote Assertion Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5501 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:15:51 +0000 *************** ✏️Title: CVE-2025-5502 - TOTOLINK X15 Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5502 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:15:58 +0000 *************** ✏️Title: CVE-2024-45655 - IBM Application Gateway Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-45655 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:15:58 +0000 *************** ✏️Title: CVE-2025-36564 - Dell Encryption Improper Link Resolution Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-36564 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:15:58 +0000 *************** ✏️Title: CVE-2025-43923 - Unicom Focal Point SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-43923 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:15:58 +0000 *************** ✏️Title: CVE-2025-43924 - Unicom Focal Point Stored Cross Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-43924 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:15:58 +0000 *************** ✏️Title: CVE-2025-43925 - Unicom Focal Point Data Encryption Key Hardcoded Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-43925 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:15:59 +0000 *************** ✏️Title: CVE-2025-46548 - Pekko Management Basic Authentication Misapplication *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46548 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security