Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-5250 - PHPGurukul News Portal Project SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5250 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-5251 - PHPGurukul News Portal Project SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5251 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:15:30 +0000 *************** ✏️Title: CVE-2024-49197 - Samsung Exynos Wi-Fi Out-of-Bounds Access Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-49197 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:15:31 +0000 *************** ✏️Title: CVE-2025-45475 - Maccms SSRF Vulnerability in Friend Link Management *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-45475 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:15:31 +0000 *************** ✏️Title: CVE-2025-5252 - PHPGurukul News Portal Project SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5252 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:15:24 +0000 *************** ✏️Title: CVE-2024-13966 - ZKTeco BioTime Default Password Authentication Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13966 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:15:25 +0000 *************** ✏️Title: CVE-2025-2872 - Apache HTTP Server Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2872 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 19:15:25 +0000 *************** ✏️Title: CVE-2025-45529 - SSCMS File Read Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-45529 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 19:40:00 +0530 *************** ✏️Title: Cybercriminals Clone Antivirus Site to Spread Venom RAT and Steal Crypto Wallets *************** 📎Link: https://thehackernews.com/2025/05/cybercriminals-clone-antivirus-site-to_4.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 07:01:59 GMT *************** ✏️Title: Day 4: DOM XSS in innerHTML sink using source location.search: Zero to Hero Series — Portswigger *************** 📎Link: https://medium.com/p/32c993b86584 *************** ⚙️Tags: #ethical_hacking #web_penetration_testing #dom_xss #cross_site_scripting #xs *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 07:06:05 GMT *************** ✏️Title: Beyond best practices: Using OWASP ASVS to bake security into your delivery pipeline for 2025 *************** 📎Link: https://medium.com/p/36ff24c06960 *************** ⚙️Tags: #owasp #cybersecurity #application_security #devsecops #owasp_top_10 *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 07:00:06 GMT *************** ✏️Title: Breaking Twitter’s VPN: $20,160 Bounty for a Pre-Auth RCE via Pulse Secure Chain *************** 📎Link: https://medium.com/p/ab0ad708e988 *************** ⚙️Tags: #hacking #bug_bounty #cybersecurity #technology #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 07:00:16 GMT *************** ✏️Title: The Image That Spoke JavaScript *************** 📎Link: https://medium.com/p/bdbd368921e4 *************** ⚙️Tags: #bug_bounty #cybersecurity #penetration_testing #hacking #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 07:03:43 GMT *************** ✏️Title: Find Secrets in Hidden Directories Using Fuzzing ️ *************** 📎Link: https://medium.com/p/1666d6f34fd8 *************** ⚙️Tags: #hidden #secrets #hacking #bug_bounty #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 11:28:20 GMT *************** ✏️Title: CSRF in Profile Update Endpoint *************** 📎Link: https://medium.com/p/ddaf0295c217 *************** ⚙️Tags: #bug_bounty #csrf #cybersecurity #web_security #hackerone *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 12:02:26 GMT *************** ✏️Title: Beyond Internal Testing: What Claude’s Bug Bounty Program Reveals About the Strategic Role of Crowd… *************** 📎Link: https://medium.com/p/cefa028382c3 *************** ⚙️Tags: #quality_assurance #crowdtesting #quality_engineering #software_testing #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 13:08:07 GMT *************** ✏️Title: NahamCon CTF 2025 “The Mission” *************** 📎Link: https://medium.com/p/b16d4f3279e4 *************** ⚙️Tags: #graphql #api #web_security #bug_bounty #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 14:52:27 GMT *************** ✏️Title: Full Credit Card Data in SessionStorage: A Real-World Web Security Breakdown *************** 📎Link: https://medium.com/p/c1ac4e8169e2 *************** ⚙️Tags: #bug_bounty #web_security #cybersecurity #information_security #owasp *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 17:32:30 GMT *************** ✏️Title: Breaking Boundaries: Vertical Privilege Escalation to Admin via Insecure Direct Request *************** 📎Link: https://medium.com/p/f4897877649f *************** ⚙️Tags: #hunting #web_penetration_testing #privilege_escalation #bug_bounty #improper_access_control *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 18:02:38 GMT *************** ✏️Title: domainsniffer: A Bash-Powered Subdomain Extraction Tool for OSINT and Bug Bounty Recon *************** 📎Link: https://medium.com/p/ac8026449d2f *************** ⚙️Tags: #hacking_tools #info_sec_writeups #cybersecurity #bug_bounty #enumeration *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security