Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:04:04 +0200 *************** ✏️Title: CVE-2025-5905 | TOTOLINK T10 4.1.8cu.5207 POST Request /cgi-bin/cstecgi.cgi setWiFiRepeaterCfg Password buffer overflow *************** 📎Link: https://vuldb.com/?id.311678 *************** ⚙️Information: #Vendor: TOTOLINK #Product: T10 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:06:22 +0200 *************** ✏️Title: CVE-2025-5906 | code-projects Laundry System 1.0 /data/ missing authentication *************** 📎Link: https://vuldb.com/?id.311679 *************** ⚙️Information: #Vendor: code_projects #Product: Laundry System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:09:30 +0200 *************** ✏️Title: CVE-2025-5907 | TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 HTTP POST Request /boafrm/formFilter buffer overflow *************** 📎Link: https://vuldb.com/?id.311680 *************** ⚙️Information: #Vendor: TOTOLINK #Product: EX1200T #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:09:31 +0200 *************** ✏️Title: CVE-2025-5908 | TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 HTTP POST Request /boafrm/formIpQoS buffer overflow *************** 📎Link: https://vuldb.com/?id.311681 *************** ⚙️Information: #Vendor: TOTOLINK #Product: EX1200T #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:09:33 +0200 *************** ✏️Title: CVE-2025-5909 | TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 HTTP POST Request formReflashClientTbl buffer overflow *************** 📎Link: https://vuldb.com/?id.311682 *************** ⚙️Information: #Vendor: TOTOLINK #Product: EX1200T #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:09:34 +0200 *************** ✏️Title: CVE-2025-5910 | TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 HTTP POST Request /boafrm/formWsc buffer overflow *************** 📎Link: https://vuldb.com/?id.311683 *************** ⚙️Information: #Vendor: TOTOLINK #Product: EX1200T #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:09:36 +0200 *************** ✏️Title: CVE-2025-5911 | TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 HTTP POST Request /boafrm/formDMZ buffer overflow *************** 📎Link: https://vuldb.com/?id.311684 *************** ⚙️Information: #Vendor: TOTOLINK #Product: EX1200T #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:12:25 +0200 *************** ✏️Title: CVE-2025-5894 | Honding Smart Parking Management System up to 1.4 authorization *************** 📎Link: https://vuldb.com/?id.311685 *************** ⚙️Information: #Vendor: Honding #Product: Smart Parking Management System #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:12:50 +0200 *************** ✏️Title: CVE-2025-5912 | D-Link DIR-632 FW103B08 HTTP POST Request do_file stack-based overflow *************** 📎Link: https://vuldb.com/?id.311686 *************** ⚙️Information: #Vendor: D_Link #Product: DIR_632 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:14:31 +0200 *************** ✏️Title: CVE-2025-5913 | PHPGurukul Vehicle Record Management System 1.0 search-vehicle.php searchinputdata sql injection *************** 📎Link: https://vuldb.com/?id.311687 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Vehicle Record Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 07:28:53 +0000 *************** ✏️Title: New Malware Attack Via “I’m not a Robot Check” to Trick Users into Running Malware *************** 📎Link: https://cybersecuritynews.com/?p=110167 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 12:15:00 +0530 *************** ✏️Title: OpenAI Bans ChatGPT Accounts Used by Russian, Iranian and Chinese Hacker Groups *************** 📎Link: https://thehackernews.com/2025/06/openai-bans-chatgpt-accounts-used-by.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for Authentication Bypass by Primary Weakness in Crushftp exploit =============== 📎 https://sploitus.com/exploit?id=4ACEDAC4-67CC-542E-A2D1-BEB3B60357FF&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-30208 exploit =============== 📎 https://sploitus.com/exploit?id=B0BE9CF7-B549-5C3C-A205-8B332D51F3D6&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-49113 exploit =============== 📎 https://sploitus.com/exploit?id=AC01E106-A22F-5D44-88F6-2C4C34CD4258&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-49113 exploit =============== 📎 https://sploitus.com/exploit?id=8C5FC076-FDD4-5DF2-BC81-FF8870666EE9&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ remote ProSSHD 1.2 20090726 - Denial of Service (DoS) =============== 📎 https://www.exploit-db.com/exploits/52321 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ local TightVNC 2.8.83 - Control Pipe Manipulation =============== 📎 https://www.exploit-db.com/exploits/52322 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 06:10:39 GMT *************** ✏️Title: OIDC: The Digitally signed Pinky Swear “It’s Me” (Part I) *************** 📎Link: https://medium.com/p/222147b3877c *************** ⚙️Tags: #aws #cloud_computing #authentication #oidc #azure *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 06:10:52 GMT *************** ✏️Title: OIDC: Game of RBAC (Part II) *************** 📎Link: https://medium.com/p/e1fedea63003 *************** ⚙️Tags: #azure_active_directory #cloud #google_cloud_platform #oidc #aws *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security