Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:23 +0000 *************** ✏️Title: CVE-2025-5082 - "WordPress WP Attachments Reflected Cross-Site Scripting Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5082 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 09:15:21 +0000 *************** ✏️Title: CVE-2025-5287 - WordPress Likes and Dislikes Plugin SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5287 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 10:15:21 +0000 *************** ✏️Title: CVE-2025-1753 - LLama-Index OS Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1753 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 10:15:21 +0000 *************** ✏️Title: CVE-2025-4963 - "WordPress WP Extended Stored Cross-Site Scripting" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4963 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 13:34:41 GMT *************** ✏️Title: How a Simple Payment Exploit Could Take Down a Prop Firm — And No One Cared *************** 📎Link: https://medium.com/p/026509b54002 *************** ⚙️Tags: #bug_bounty #prop_firm #dos_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 11:15:20 +0000 *************** ✏️Title: CVE-2025-40673 - DinoRANK Unauthorized Invoice Access *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-40673 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 11:15:20 +0000 *************** ✏️Title: CVE-2025-5295 - FreeFloat FTP Server Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5295 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 13:20:50 GMT *************** ✏️Title: How to Become a Penetration Tester in 5 Years — A Complete Roadmap *************** 📎Link: https://medium.com/p/e2e56cc9cf77 *************** ⚙️Tags: #cybersecurity #computer_science #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 12:58:50 GMT *************** ✏️Title: Leveraging Regex Error For Successful Boolean-Based Blind Command Injection: Write Up Overthewire… *************** 📎Link: https://medium.com/p/77e814ecadf3 *************** ⚙️Tags: #cybersecurity #ctf_writeup #overthewire *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 16:55:00 +0530 *************** ✏️Title: From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign *************** 📎Link: https://thehackernews.com/2025/05/from-infection-to-access-24-hour.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 18:00:00 +0530 *************** ✏️Title: New PumaBot Botnet Targets Linux IoT Devices to Steal SSH Credentials and Mine Crypto *************** 📎Link: https://thehackernews.com/2025/05/new-pumabot-botnet-targets-linux-iot.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-4800 - WordPress MasterStudy LMS Pro Arbitrary File Upload Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4800 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:15:24 +0000 *************** ✏️Title: CVE-2025-4009 - Evertz SVDN 3080ipx-10G PHP Web Management Interface Command Injection and Authentication Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4009 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:15:24 +0000 *************** ✏️Title: CVE-2025-4947 - libcurl QUIC Certificate Verification Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4947 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:15:24 +0000 *************** ✏️Title: CVE-2025-5025 - libcurl wolfSSL QUIC Certificate Pinning Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5025 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:20 +0000 *************** ✏️Title: CVE-2024-54020 - Fortinet FortiManager Authorization Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-54020 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-22252 - Fortinet FortiProxy Authentication Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-22252 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-24473 - Fortinet FortiClient Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-24473 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-25251 - FortiClient Mac Incorrect Authorization Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25251 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-27522 - Apache InLong Deserialization of Untrusted Data Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27522 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security