Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:16:46 +0200 *************** ✏️Title: CVE-2025-5737 | TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formDosCfg submit-url buffer overflow *************** 📎Link: https://vuldb.com/?id.311263 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:16:48 +0200 *************** ✏️Title: CVE-2025-5738 | TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formStats submit-url buffer overflow *************** 📎Link: https://vuldb.com/?id.311264 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:16:49 +0200 *************** ✏️Title: CVE-2025-5739 | TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formSaveConfig submit-url buffer overflow *************** 📎Link: https://vuldb.com/?id.311265 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 19:23:00 +0530 *************** ✏️Title: Researchers Detail Bitter APT’s Evolving Tactics as Its Geographic Scope Expands *************** 📎Link: https://thehackernews.com/2025/06/bitter-hacker-group-expands-cyber.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 14:40:15 GMT *************** ✏️Title: ️ Inside the 160-Comment Fight to Fix SnakeYAML’s RCE Default *************** 📎Link: https://medium.com/p/1a20c5ca4d4c *************** ⚙️Tags: #cybersecurity #software_development #information_security #java #open_source *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 14:23:43 GMT *************** ✏️Title: Claude 4: Between Displayed Security and Rumors of “Hack” — What is Really Happening? *************** 📎Link: https://medium.com/p/46e2bdfd9c59 *************** ⚙️Tags: #chatgpt #artificial_intelligence #anthropic_claude #hacking #claude *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 14:56:30 GMT *************** ✏️Title: Hack The Box: Netmon Walkthrough *************** 📎Link: https://medium.com/p/70c0dcb74e0f *************** ⚙️Tags: #cybersecurity #windows #ftp #pentesting #prtg_network_monitor *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 13:59:43 GMT *************** ✏️Title: Cyber Briefing: 2025.06.05 *************** 📎Link: https://medium.com/p/54eec4409be7 *************** ⚙️Tags: #ukraine #cybersecurity #infosec #technology #cyber_briefing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 14:01:37 GMT *************** ✏️Title: How I Made $1,250 in 5 Minutes with One SQL Injection *************** 📎Link: https://medium.com/p/6a67e255b4a2 *************** ⚙️Tags: #sql #bug_bounty #sqli #hackerone #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 14:27:56 GMT *************** ✏️Title: Burp suite for vulnerability assessment: Using Burp suite to Test for Code Injection… *************** 📎Link: https://medium.com/p/8525b174ecde *************** ⚙️Tags: #ethical_hacking #vulnerability_management #burpsuite #cybersecurity #vulnerability_assessment *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 14:30:58 GMT *************** ✏️Title: 404 to Root : How a Forgotten Subdomain Led to Server Takeover ‍☠️ *************** 📎Link: https://medium.com/p/6284d0264c7e *************** ⚙️Tags: #bug_bounty #hacking #ctf #infosec #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 14:08:28 GMT *************** ✏️Title: ChatGPT & Gemini in Ethical Hacking & Cyber Security | TryHackMe BadSuccessor Walkthrough *************** 📎Link: https://medium.com/p/17d149123ae6 *************** ⚙️Tags: #hackthebox #gemini #tryhackme #cybersecurity #chatgpt *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 14:28:50 GMT *************** ✏️Title: Analyzed Steam Phishing Page — Here’s What I Found *************** 📎Link: https://medium.com/p/c90e41ffb43e *************** ⚙️Tags: #steam #cybersecurity #malware #phishing #analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 11:15:22 +0000 *************** ✏️Title: CVE-2025-5654 - PHPGurukul Complaint Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5654 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 11:15:22 +0000 *************** ✏️Title: CVE-2025-5655 - PHPGurukul Complaint Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5655 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 12:15:22 +0000 *************** ✏️Title: CVE-2011-10007 - Apache::FileFind::Rule Arbitrary Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2011-10007 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 15:38:03 +0200 *************** ✏️Title: CVE-2025-27445 | rsjoomla RSFirewall Component up to 3.1.5 on Joomla path traversal (EUVD-2025-16991) *************** 📎Link: https://vuldb.com/?id.311251 *************** ⚙️Information: #Vendor: rsjoomla #Product: RSFirewall Component #Type: Joomla Component #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 12:15:23 +0000 *************** ✏️Title: CVE-2025-5341 - Forminator Forms Stored Cross-Site Scripting (XSS) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5341 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 15:38:30 +0200 *************** ✏️Title: CVE-2025-27753 | rsjoomla RSMediaGallery Component up to 2.1.6 on Joomla sql injection (EUVD-2025-16990) *************** 📎Link: https://vuldb.com/?id.311252 *************** ⚙️Information: #Vendor: rsjoomla #Product: RSMediaGallery Component #Type: Joomla Component #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 12:15:23 +0000 *************** ✏️Title: CVE-2025-5656 - PHPGurukul Complaint Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5656 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security