Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:22 +0200 *************** ✏️Title: CVE-2025-5426 | juzaweb CMS up to 3.4.2 Menu Page /admin-cp/menus access control *************** 📎Link: https://vuldb.com/?id.310759 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:23 +0200 *************** ✏️Title: CVE-2025-5427 | juzaweb CMS up to 3.4.2 Permalinks Page /admin-cp/permalinks access control *************** 📎Link: https://vuldb.com/?id.310760 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:24 +0200 *************** ✏️Title: CVE-2025-5428 | juzaweb CMS up to 3.4.2 Error Logs Page /admin-cp/log-viewer access control *************** 📎Link: https://vuldb.com/?id.310761 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:26 +0200 *************** ✏️Title: CVE-2025-5429 | juzaweb CMS up to 3.4.2 Plugins Page /admin-cp/plugin/install access control *************** 📎Link: https://vuldb.com/?id.310762 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:57:44 +0200 *************** ✏️Title: CVE-2025-5430 | AssamLook CMS 1.0 /product.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310763 *************** ⚙️Information: #Vendor: AssamLook #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:57:46 +0200 *************** ✏️Title: CVE-2025-5431 | AssamLook CMS 1.0 /department-profile.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310764 *************** ⚙️Information: #Vendor: AssamLook #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:57:47 +0200 *************** ✏️Title: CVE-2025-5432 | AssamLook CMS 1.0 /view_tender.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310765 *************** ⚙️Information: #Vendor: AssamLook #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 13:00:42 +0200 *************** ✏️Title: CVE-2025-5433 | Fengoffice Feng Office 3.5.1.5 index.php?c=account&a=set_timezone tz_offset sql injection *************** 📎Link: https://vuldb.com/?id.310766 *************** ⚙️Information: #Vendor: Fengoffice #Product: Feng Office #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 13:03:19 +0200 *************** ✏️Title: CVE-2025-5434 | Aem Solutions CMS up to 1.0 /page.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310767 *************** ⚙️Information: #Vendor: Aem Solutions #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 13:08:46 +0200 *************** ✏️Title: CVE-2025-5435 | Marwal Infotech CMS 1.0 /page.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310768 *************** ⚙️Information: #Vendor: Marwal Infotech #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 13:16:42 +0200 *************** ✏️Title: CVE-2025-5436 | Multilaser Sirius RE016 MLT1.0 /cgi-bin/cstecgi.cgi information disclosure *************** 📎Link: https://vuldb.com/?id.310769 *************** ⚙️Information: #Vendor: Multilaser #Product: Sirius RE016 #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 13:16:43 +0200 *************** ✏️Title: CVE-2025-5437 | Multilaser Sirius RE016 MLT1.0 Password Change /cgi-bin/cstecgi.cgi improper authentication *************** 📎Link: https://vuldb.com/?id.310770 *************** ⚙️Information: #Vendor: Multilaser #Product: Sirius RE016 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 09:18:22 GMT *************** ✏️Title: Beyond the Surface: Unearthing Hidden Subdomains for High-Impact Bug Bounties *************** 📎Link: https://medium.com/p/bef3e3f6a679 *************** ⚙️Tags: #reconnaissance #information_security #appsec #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 10:46:54 GMT *************** ✏️Title: When an Internal IP Slipped — and I Slid Right Into RCE *************** 📎Link: https://medium.com/p/afc93515bf76 *************** ⚙️Tags: #burpsuite #bug_bounty_writeup #ssrf_vulnerability #bug_bounty_tips #rce_vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 06:30:50 GMT *************** ✏️Title: Unleashing Systems: Hacking, Virtual Machines, Linux & Networking *************** 📎Link: https://medium.com/p/48cfb2f1b6fc *************** ⚙️Tags: #cybersecurity #linux #hacking #virtual_machine #networking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 31 May 2025 05:15:19 GMT *************** ✏️Title: CVE-2025-5369 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-5369 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 09:00:58 GMT *************** ✏️Title: Part 2: The Ghost Inside the Machine *************** 📎Link: https://medium.com/p/1d7dab12378e *************** ⚙️Tags: #hacking_training #hacking #hacking_tools #hackerspaces #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 31 May 2025 06:15:19 GMT *************** ✏️Title: CVE-2025-5370 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-5370 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 09:55:02 GMT *************** ✏️Title: When APIs Don’t Check Roles: Broken Authorization in Customer Deletion Endpoint *************** 📎Link: https://medium.com/p/8b318fd4c8f6 *************** ⚙️Tags: #roles #bug_bounty #burpsuite #hacking #broken *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 31 May 2025 07:15:20 GMT *************** ✏️Title: CVE-2025-4103 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-4103 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security