Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:54:56 +0200 *************** ✏️Title: CVE-2025-0620 | Samba up to 4.21.5 Group Membership Change improper authentication *************** 📎Link: https://vuldb.com/?id.311045 *************** ⚙️Information: #Product: Samba #Type: File Transfer Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:56:53 +0200 *************** ✏️Title: CVE-2025-5584 | PHPGurukul Hospital Management System 4.0 POST Parameter edit-patient.php?editid=2 patname cross site scripting *************** 📎Link: https://vuldb.com/?id.311046 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Hospital Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 20:35:41 GMT *************** ✏️Title: Your 30-Day Bug Bounty Kickstart for 2025 (Using Only Free Tools) *************** 📎Link: https://medium.com/p/5a323ff82bbc *************** ⚙️Tags: #bug_bounty_writeup #hacking #programming #cybersecurity #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 20:46:10 GMT *************** ✏️Title: 5 Minutes, 3 Sites, 1 WordPress Vulnerability: My Bug Bounty Win *************** 📎Link: https://medium.com/p/9d4d90042833 *************** ⚙️Tags: #penetration_testing #bug_bounty_writeup #cybersecurity #bug_bounty #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:15:25 +0000 *************** ✏️Title: CVE-2025-30359 - Webpack-dev-server Cross-Site Scripting (XSS) and Prototype Pollution *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-30359 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:15:25 +0000 *************** ✏️Title: CVE-2025-30360 - Webpack-dev-server Cross-site WebSocket Hijacking Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-30360 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:15:26 +0000 *************** ✏️Title: CVE-2025-5513 - Quequnlong Shiyi-Blog Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5513 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:15:26 +0000 *************** ✏️Title: CVE-2025-5515 - TOTOLINK X2000R Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5515 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:15:27 +0000 *************** ✏️Title: CVE-2025-5516 - TOTOLINK X2000R Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5516 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:15:27 +0000 *************** ✏️Title: CVE-2025-5520 - Open5GS AMF/MME Reachable Assertion Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5520 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:15:38 +0000 *************** ✏️Title: CVE-2025-23102 - Samsung Exynos Double Free Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-23102 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:15:39 +0000 *************** ✏️Title: CVE-2025-48950 - MaxKB Sandbox Directory Permission Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48950 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:15:39 +0000 *************** ✏️Title: CVE-2025-48953 - Umbraco File Upload Extension Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48953 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:15:39 +0000 *************** ✏️Title: CVE-2025-48997 - Multer DoS Denial of Service Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48997 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:15:39 +0000 *************** ✏️Title: CVE-2025-48998 - DataEase Arbitrary File Deserialization *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48998 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:15:40 +0000 *************** ✏️Title: CVE-2025-5521 - WuKongOpenSource WukongCRM Cross-Site Request Forgery Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5521 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:15:40 +0000 *************** ✏️Title: CVE-2025-5522 - Jack0240 魏 bskms 蓝天幼儿园管理系统 Unauthenticated Remote Authorization Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5522 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 20:00:00 +0000 *************** ✏️Title: Top 10 Advanced Threat Detection Techniques for Modern Cybersecurity *************** 📎Link: https://cybersecuritynews.com/?p=108560 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 19:25:13 GMT *************** ✏️Title: Servers used during a Red Teaming engagement — Overview *************** 📎Link: https://medium.com/p/86ec28c24c63 *************** ⚙️Tags: #cybersecurity #penetration_testing #technology #writing #productivity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 19:03:26 GMT *************** ✏️Title: HTB Academy writeup-Introduction to Web Applications *************** 📎Link: https://medium.com/p/425443cc77e9 *************** ⚙️Tags: #cybersecurity #web_app_security #hackthebox #htb_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security