Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 10:15:22 +0000 *************** ✏️Title: CVE-2025-5179 - Realce Tecnologia Queue Ticket Kiosk Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5179 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 10:15:22 +0000 *************** ✏️Title: CVE-2025-5180 - Wondershare Filmora Local Path Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5180 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 11:15:24 +0000 *************** ✏️Title: CVE-2025-5181 - Summer Pearl Group Vacation Rental Management Platform Cross Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5181 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 11:15:24 +0000 *************** ✏️Title: CVE-2025-5182 - "Summer Pearl Group Vacation Rental Management Platform Listing Handler Authorization Bypass" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5182 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 09:49:33 GMT *************** ✏️Title: Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale *************** 📎Link: https://medium.com/p/db68094f971f *************** ⚙️Tags: #api #bug_bounty #bug_bounty_writeup #apihacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 10:52:02 GMT *************** ✏️Title: Hackthebox.com/Machines/Cap *************** 📎Link: https://medium.com/p/519d78712a82 *************** ⚙️Tags: #infosecjack #hackthebox_writeup #hackthebox #cap #machine *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 10:42:07 GMT *************** ✏️Title: Everything You Should Know About STON.fi’s $500K Bug Bounty Program *************** 📎Link: https://medium.com/p/d8007c9d618b *************** ⚙️Tags: #crypto #bug_bounty #defi #blockchain *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 10:38:31 GMT *************** ✏️Title: Chaining Unauthorized User Registration, Broken Access Control, and Insecure CSRF Token Exposure to… *************** 📎Link: https://medium.com/p/4c2897e261ad *************** ⚙️Tags: #ctf #ctf_writeup #wordpress #wordpress_security #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 09:47:27 GMT *************** ✏️Title: Hacking Chess.com: How I Unlocked Unlimited Lessons in Chess.com *************** 📎Link: https://medium.com/p/65572b613d28 *************** ⚙️Tags: #hacking #chess #cybersecurity #chesscom #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 10:14:30 GMT *************** ✏️Title: Threat of TCC Bypasses on macOS *************** 📎Link: https://medium.com/p/45948bc89a9a *************** ⚙️Tags: #apple #cybersecurity #macos #vulnerability #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 10:15:54 GMT *************** ✏️Title: Bug Bounty — Mail Injection *************** 📎Link: https://medium.com/p/6ec9ffefc24b *************** ⚙️Tags: #bug_bounty #hacking #cybersecurity #programming #pentesting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 11:59:31 +0200 *************** ✏️Title: CVE-2025-40671 | AES Multimedia Gestnet 1.07 articles.php fk_remoto_central sql injection *************** 📎Link: https://vuldb.com/?id.310280 *************** ⚙️Information: #Vendor: AES Multimedia #Product: Gestnet #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 11:59:45 +0200 *************** ✏️Title: CVE-2025-40672 | Grupo Espiral MS ProactivaNet 3.24.0.0 panLoad.exe permission assignment *************** 📎Link: https://vuldb.com/?id.310281 *************** ⚙️Information: #Vendor: Grupo Espiral MS #Product: ProactivaNet #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 12:00:54 +0200 *************** ✏️Title: CVE-2025-41654 | Pepperl+Fuchs Profinet Gateway FB8122A.1.EL up to 1.3.12 SNMP Protocol information disclosure (VDE-2025-011) *************** 📎Link: https://vuldb.com/?id.310282 *************** ⚙️Information: #Vendor: Pepperl+Fuchs #Product: Profinet Gateway FB8122A.1.EL/Profinet Gateway LB8122A.1.EL #Type: Programming Language Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 12:10:07 +0200 *************** ✏️Title: CVE-2025-41655 | Pepperl+Fuchs Profinet Gateway FB8122A.1.EL up to 1.3.12 URL missing authentication (VDE-2025-011) *************** 📎Link: https://vuldb.com/?id.310283 *************** ⚙️Information: #Vendor: Pepperl+Fuchs #Product: Profinet Gateway FB8122A.1.EL/Profinet Gateway LB8122A.1.EL #Type: Programming Language Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 12:10:32 +0200 *************** ✏️Title: CVE-2025-4057 | Red Hat AMQ Broker 7 ActiveMQ Artemis weak credentials *************** 📎Link: https://vuldb.com/?id.310284 *************** ⚙️Information: #Vendor: Red Hat #Product: AMQ Broker #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 12:10:44 +0200 *************** ✏️Title: CVE-2025-1985 | Pepperl+Fuchs Profinet Gateway FB8122A.1.EL up to 1.3.12 Web UI cross site scripting (VDE-2025-011) *************** 📎Link: https://vuldb.com/?id.310285 *************** ⚙️Information: #Vendor: Pepperl+Fuchs #Product: Profinet Gateway FB8122A.1.EL/Profinet Gateway LB8122A.1.EL #Type: Programming Language Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 06:10:03 GMT *************** ✏️Title: Is Your Website Really Secure? Discover the Truth with AI1 Site Security Scanner *************** 📎Link: https://medium.com/p/a99025ead1c8 *************** ⚙️Tags: #cyber_security_awareness #cybersecurity #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 06:37:06 GMT *************** ✏️Title: OWASP Pentest Series (5/12) *************** 📎Link: https://medium.com/p/89c942caff11 *************** ⚙️Tags: #web #penetration_testing #owasp *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 09:29:04 GMT *************** ✏️Title: GOAD Part 3: The Art of Extraction - Roasting and Poisoning for Domain Dominance *************** 📎Link: https://medium.com/p/240aa6490dd1 *************** ⚙️Tags: #cybersecurity #active_directory #kerberos_authentication #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security