Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 09:47:57 GMT *************** ✏️Title: The Red Flags I’ve Seen from Pentest Vendors After 25 Years in Cybersecurity *************** 📎Link: https://medium.com/p/c4c0fae6e158 *************** ⚙️Tags: #penetration_testing #ethical_hacking #cyber_security_awareness #cybersecurity #information_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 08:33:03 GMT *************** ✏️Title: Connect to Hack The Box VPN with a Single Command on Linux *************** 📎Link: https://medium.com/p/3fc4e7e491a7 *************** ⚙️Tags: #ctf #hackthebox *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 09:09:36 GMT *************** ✏️Title: All in One — TryHackMe *************** 📎Link: https://medium.com/p/cd8deeb2dbf2 *************** ⚙️Tags: #tryhackme #tryhackme_walkthrough #tryhackme_writeup #all_in_one *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 09:33:29 GMT *************** ✏️Title: eJPT - 1.3 CTF Enumeration *************** 📎Link: https://medium.com/p/ed81a8778a9b *************** ⚙️Tags: #nmap #ctf_writeup #ctf #enumeration #ejpt *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 10:13:59 GMT *************** ✏️Title: Exploitasi Metasploitable Sampai Privilege Escalation *************** 📎Link: https://medium.com/p/98b50d92cdfa *************** ⚙️Tags: #privilege_escalation #exploit #metasploitable #penetration_testing #metasploit *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 10:02:31 GMT *************** ✏️Title: Tycoon 2FA: Malware Overview *************** 📎Link: https://medium.com/p/1758fe4fe211 *************** ⚙️Tags: #threat_hunting #threat_detection #malware #threat_intelligence #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:06:25 +0200 *************** ✏️Title: CVE-2025-48912 | Apache Superset up to 4.1.1 sqlExpression Field sql injection *************** 📎Link: https://vuldb.com/?id.310644 *************** ⚙️Information: #Vendor: Apache #Product: Superset #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:06:57 +0200 *************** ✏️Title: CVE-2025-4636 | JCT Airpointer 2.4.107-2 privileges management *************** 📎Link: https://vuldb.com/?id.310645 *************** ⚙️Information: #Vendor: JCT #Product: Airpointer #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:06:58 +0200 *************** ✏️Title: CVE-2025-4635 | JCT Airpointer 2.4.107-2 Diagnostics Module input validation *************** 📎Link: https://vuldb.com/?id.310646 *************** ⚙️Information: #Vendor: JCT #Product: Airpointer #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:07:01 +0200 *************** ✏️Title: CVE-2025-4634 | JCT Airpointer 2.4.107-2 Web Portal file access *************** 📎Link: https://vuldb.com/?id.310647 *************** ⚙️Information: #Vendor: JCT #Product: Airpointer #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:07:14 +0200 *************** ✏️Title: CVE-2025-48334 | BinaryCarpenter Woo Slider Pro Plugin up to 1.12 on WordPress woo_slide_pro_delete_slider authorization *************** 📎Link: https://vuldb.com/?id.310648 *************** ⚙️Information: #Vendor: BinaryCarpenter #Product: Woo Slider Pro Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:07:29 +0200 *************** ✏️Title: CVE-2025-4633 | JCT Airpointer 2.4.107-2 Web Portal hard-coded credentials *************** 📎Link: https://vuldb.com/?id.310649 *************** ⚙️Information: #Vendor: JCT #Product: Airpointer #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:11:15 +0200 *************** ✏️Title: CVE-2025-5356 | FreeFloat FTP Server 1.0 BYE Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310650 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:11:16 +0200 *************** ✏️Title: CVE-2025-5357 | FreeFloat FTP Server 1.0 PWD Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310651 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:18:11 +0200 *************** ✏️Title: CVE-2025-5358 | PHPGurukul/Campcodes Cyber Cafe Management System 1.0 bwdates-reports-details.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.310652 *************** ⚙️Information: #Vendor: PHPGurukul/Campcodes #Product: Cyber Cafe Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:21:31 +0200 *************** ✏️Title: CVE-2025-5359 | Campcodes Online Hospital Management System 1.0 /appointment-history.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310653 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Hospital Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:21:32 +0200 *************** ✏️Title: CVE-2025-5360 | Campcodes Online Hospital Management System 1.0 /book-appointment.php doctor sql injection *************** 📎Link: https://vuldb.com/?id.310654 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Hospital Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:21:33 +0200 *************** ✏️Title: CVE-2025-5361 | Campcodes Online Hospital Management System 1.0 /contact.php fullname sql injection *************** 📎Link: https://vuldb.com/?id.310655 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Hospital Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:21:35 +0200 *************** ✏️Title: CVE-2025-5362 | Campcodes Online Hospital Management System 1.0 doctor-specilization.php doctorspecilization sql injection *************** 📎Link: https://vuldb.com/?id.310656 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Hospital Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:21:37 +0200 *************** ✏️Title: CVE-2025-5363 | Campcodes Online Hospital Management System 1.0 /doctor/index.php Username sql injection *************** 📎Link: https://vuldb.com/?id.310657 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Hospital Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security