Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 13:55:55 GMT *************** ✏️Title: Medusa Brute Force: Full Guide for Ethical Hackers & Bounty Hunters *************** 📎Link: https://medium.com/p/c73492419140 *************** ⚙️Tags: #penetration_testing #brute_force_attack #cybersecurity_tools #credential_cracking_tools #bug_bounty_hunting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 14:01:37 GMT *************** ✏️Title: U.S. charged 16 individuals tied to DanaBot — DanaBot Developers Infected Their Own Systems — A… *************** 📎Link: https://medium.com/p/b42bbb30c8bd *************** ⚙️Tags: #penetration_testing #vulnerability_assessment #cybersecurity #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 12:15:19 +0000 *************** ✏️Title: CVE-2025-5147 - Netcore NBR1005GPEV2, NBR200V2, B6V2 Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5147 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 12:15:20 +0000 *************** ✏️Title: CVE-2025-5148 - FunAudioLLM InspireMusic Pickle Data Handler Deserialization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5148 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 13:15:19 +0000 *************** ✏️Title: CVE-2025-5149 - WCMS Remote Authentication Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5149 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:40:32 +0200 *************** ✏️Title: CVE-2025-5173 | HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf PT File neural_nets.py load path deserialization (Issue 765) *************** 📎Link: https://vuldb.com/?id.310261 *************** ⚙️Information: #Vendor: HumanSignal #Product: label_studio_ml_backend #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:47:14 +0200 *************** ✏️Title: CVE-2025-5174 | erdogant pypickle up to 1.1.5 pypickle/pypickle.py load deserialization *************** 📎Link: https://vuldb.com/?id.310262 *************** ⚙️Information: #Vendor: erdogant #Product: pypickle #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:52:19 +0200 *************** ✏️Title: CVE-2025-5175 | erdogant pypickle up to 1.1.5 pypickle/pypickle.py save improper authorization *************** 📎Link: https://vuldb.com/?id.310263 *************** ⚙️Information: #Vendor: erdogant #Product: pypickle #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for Out-of-bounds Write in Fortinet Fortiproxy exploit =============== 📎 https://sploitus.com/exploit?id=2D78F8DD-AC60-50A2-9D10-FB6E4E4E3867&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-4123 exploit =============== 📎 https://sploitus.com/exploit?id=8A91329B-955B-5844-A815-40570AA4E0F9&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-4322 exploit =============== 📎 https://sploitus.com/exploit?id=CD5B2728-B79F-546D-8FC3-272F6FBF6418&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.03 (MIX->UserManager) Auth Bypass Create MIXAdmin exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5939&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.03 (logMixDownload.php) Remote Code Execution exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5946&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon BACnet MS/TP Kernel Module (mstp.ko) Out-of-Bounds Write in SendFrame() exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5953&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 13:55:08 GMT *************** ✏️Title: Blind SQL Injection with Conditional Responses *************** 📎Link: https://medium.com/p/46ee90b5f2c0 *************** ⚙️Tags: #portswigger #sql_injection #blind_sql_injection #cybersecurity #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 13:30:40 GMT *************** ✏️Title: Exploiting Security Misconfiguration to Gain Full Account Takeover *************** 📎Link: https://medium.com/p/eb7a3da01f14 *************** ⚙️Tags: #vulnerability #hacking #bug_bounty #web_vulnerabilities #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 13:12:40 GMT *************** ✏️Title: Exploiting Unsecured IoTs: Outsourced Scamming and How a YouTuber hijacked an organized crime in… *************** 📎Link: https://medium.com/p/abfe5de0aeb5 *************** ⚙️Tags: #osint #dorks #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 13:02:01 GMT *************** ✏️Title: Mr Robot CTF-TryHackme Walkthrough *************** 📎Link: https://medium.com/p/9f896cbe0986 *************** ⚙️Tags: #tryhackme_walkthrough #hacker #cyber_security_awareness #tryhackme #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 13:23:20 GMT *************** ✏️Title: TryHackMe PT1 vs HackTheBox CPTS vs OSCP | Review *************** 📎Link: https://medium.com/p/b6344f07d354 *************** ⚙️Tags: #oscp #tryhackme #cybersecurity #hackthebox #certification *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:19:37 +0200 *************** ✏️Title: CVE-2025-5165 | Open Asset Import Library Assimp 5.4.3 MDCLoader.cpp ValidateSurfaceHeader pcSurface2 out-of-bounds (Issue 6167) *************** 📎Link: https://vuldb.com/?id.310253 *************** ⚙️Information: #Vendor: Open Asset Import Library #Product: Assimp #Type: Software Library #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security