Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:19:39 +0200 *************** ✏️Title: CVE-2025-5166 | Open Asset Import Library Assimp 5.4.3 MDC File Parser MDCLoader.cpp InternReadFile pcVerts out-of-bounds *************** 📎Link: https://vuldb.com/?id.310254 *************** ⚙️Information: #Vendor: Open Asset Import Library #Product: Assimp #Type: Software Library #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:19:40 +0200 *************** ✏️Title: CVE-2025-5167 | Open Asset Import Library Assimp 5.4.3 LWOLoader.h LWOImporter::GetS0 out out-of-bounds (Issue 6169) *************** 📎Link: https://vuldb.com/?id.310255 *************** ⚙️Information: #Vendor: Open Asset Import Library #Product: Assimp #Type: Software Library #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:19:41 +0200 *************** ✏️Title: CVE-2025-5168 | Open Asset Import Library Assimp 5.4.3 MDLLoader.cpp ImportUVCoordinate_3DGS_MDL345 iIndex out-of-bounds (Issue 6170) *************** 📎Link: https://vuldb.com/?id.310256 *************** ⚙️Information: #Vendor: Open Asset Import Library #Product: Assimp #Type: Software Library #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:19:43 +0200 *************** ✏️Title: CVE-2025-5169 | Open Asset Import Library Assimp 5.4.3 MDLLoader.cpp InternReadFile_3DGS_MDL345 out-of-bounds (Issue 6171) *************** 📎Link: https://vuldb.com/?id.310257 *************** ⚙️Information: #Vendor: Open Asset Import Library #Product: Assimp #Type: Software Library #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:29:05 +0200 *************** ✏️Title: CVE-2025-5170 | llisoft MTA Maita Training System 4.5 AdminShitiController.java AdminShitiListRequestVo stTypeIds sql injection *************** 📎Link: https://vuldb.com/?id.310258 *************** ⚙️Information: #Vendor: llisoft #Product: MTA Maita Training System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:29:06 +0200 *************** ✏️Title: CVE-2025-5171 | llisoft MTA Maita Training System 4.5 OpenController.java this.fileService.download url unrestricted upload *************** 📎Link: https://vuldb.com/?id.310259 *************** ⚙️Information: #Vendor: llisoft #Product: MTA Maita Training System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:36:47 +0200 *************** ✏️Title: CVE-2025-5172 | Econtrata up to 20250516 /valida usuario sql injection *************** 📎Link: https://vuldb.com/?id.310260 *************** ⚙️Information: #Product: Econtrata #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 10:51:50 GMT *************** ✏️Title: The Phantom Redirect: How I Fooled a Web Server for $100 *************** 📎Link: https://medium.com/p/b13e177f02f2 *************** ⚙️Tags: #my_first_bounty #bug_bounty_tips #my_first_bug #bug_bounty_writeup #open_redirect *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 11:17:54 GMT *************** ✏️Title: ️ BGP Hijacking: The Silent Killer of the Internet *************** 📎Link: https://medium.com/p/da78dea80b07 *************** ⚙️Tags: #hacking #programming_languages #isp #programming #networking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 12:47:13 GMT *************** ✏️Title: Metasploit Framework *************** 📎Link: https://medium.com/p/757b9110ff78 *************** ⚙️Tags: #kali_linux #metasploit #cybersecurity #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 11:13:47 GMT *************** ✏️Title: Silent but Deadly: How Blind XSS in Email Notifications Gave Me Root Alerts *************** 📎Link: https://medium.com/p/e7d21972cdfc *************** ⚙️Tags: #cybersecurity #money #hacking #infosec #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 12:32:34 GMT *************** ✏️Title: Ethical Hacking Training Course in Delhi with Certificate *************** 📎Link: https://medium.com/p/ade30edfdd97 *************** ⚙️Tags: #ethical_ai #ethical_hacking #ethical_hacking_training #craw_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 12:22:36 GMT *************** ✏️Title: White Hat in Computer Security How Ethical Hackers Like Wire Tor Keep Your Business Safe *************** 📎Link: https://medium.com/p/1a5fb2332d34 *************** ⚙️Tags: #ai #whitehat #hacker #hacking #computer_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 12:55:55 GMT *************** ✏️Title: A Silent Breach: The Enigma Behind the Alias Ryuhan Minamoto *************** 📎Link: https://medium.com/p/8fb2e01c08b4 *************** ⚙️Tags: #cyberattack #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 12:01:03 GMT *************** ✏️Title: Exploring Cybersecurity Basics with TryHackMe Challenges *************** 📎Link: https://medium.com/p/34aaab9ee7d1 *************** ⚙️Tags: #engineering #ctf #tryhackme #sybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 12:27:49 GMT *************** ✏️Title: CTF WRITEUP *************** 📎Link: https://medium.com/p/76af80d48981 *************** ⚙️Tags: #cybersecurity #ctf_writeup #penetration_testing #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 09:56:53 GMT *************** ✏️Title: Deep Dive into Zeek: A Powerful Network Security Monitoring Tool *************** 📎Link: https://medium.com/p/f52ff3485035 *************** ⚙️Tags: #cybersecurity #tryhackme #security_operation_center #network_security_tools #pcap_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ remote Windows 2024.15 - Unauthenticated Desktop Screenshot Capture =============== 📎 https://www.exploit-db.com/exploits/52300 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ local Microsoft Windows Server 2016 - Win32k Elevation of Privilege =============== 📎 https://www.exploit-db.com/exploits/52301 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ webapps WordPress User Registration & Membership Plugin 4.1.2 - Authentication Bypass =============== 📎 https://www.exploit-db.com/exploits/52302 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity