Sec WriteUp ~ CVE Alert
前往频道在 Telegram
NOTIFICATIONS CHANNEL. 🔴 Security_WriteUp: #Medium #CyberSecurity #Hacker_News 🔴 CVE Reports #CVEfeed #Tenable #VulDb 🔴 Exploit Database #Exploit_DB #CXSECURITY #Sploitus Academy : @HackTheBox_Academy
显示更多未指定国家技术与应用43 281
472
订阅者
无数据24 小时
无数据7 天
-1030 天
帖子存档
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:22:12 +0200
***************
✏️Title: CVE-2025-5128 | ScriptAndTools Real-Estate-website-in-PHP 1.0 Admin Login Panel /admin/ Password sql injection
***************
📎Link: https://vuldb.com/?id.310206
***************
⚙️Information:
#Vendor: ScriptAndTools #Product: Real_Estate_website_in_PHP #Type: Programming Language Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:23:59 +0200
***************
✏️Title: CVE-2025-5129 | Sangfor 零信任访问控制系统 aTrust 2.3.10.60 MSASN1.dll uncontrolled search path
***************
📎Link: https://vuldb.com/?id.310207
***************
⚙️Information:
#Vendor: Sangfor #Product: 零信任访问控制系统 aTrust #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:24:29 +0200
***************
✏️Title: CVE-2024-51102 | PHPGurukul Student Management System 1.0 login.php username/password sql injection
***************
📎Link: https://vuldb.com/?id.310208
***************
⚙️Information:
#Vendor: PHPGurukul #Product: Student Management System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:46:53 +0200
***************
✏️Title: CVE-2025-5130 | Tmall Demo up to 20250505 uploadProductImage File unrestricted upload
***************
📎Link: https://vuldb.com/?id.310209
***************
⚙️Information:
#Vendor: Tmall #Product: Demo #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:46:55 +0200
***************
✏️Title: CVE-2025-5131 | Tmall Demo up to 20250505 uploadCategoryImage File unrestricted upload
***************
📎Link: https://vuldb.com/?id.310210
***************
⚙️Information:
#Vendor: Tmall #Product: Demo #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:46:56 +0200
***************
✏️Title: CVE-2025-5132 | Tmall Demo up to 20250505 logout cross-site request forgery
***************
📎Link: https://vuldb.com/?id.310211
***************
⚙️Information:
#Vendor: Tmall #Product: Demo #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:46:58 +0200
***************
✏️Title: CVE-2025-5133 | Tmall Demo up to 20250505 Search Box cross site scripting
***************
📎Link: https://vuldb.com/?id.310212
***************
⚙️Information:
#Vendor: Tmall #Product: Demo #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:47:00 +0200
***************
✏️Title: CVE-2025-5134 | Tmall Demo up to 20250505 Buy Item Page Detailed Address cross site scripting
***************
📎Link: https://vuldb.com/?id.310213
***************
⚙️Information:
#Vendor: Tmall #Product: Demo #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:47:08 +0200
***************
✏️Title: CVE-2025-5135 | Tmall Demo up to 20250505 Product Details Page /tmall/admin/ Product Name/Product Title cross site scripting
***************
📎Link: https://vuldb.com/?id.310214
***************
⚙️Information:
#Vendor: Tmall #Product: Demo #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:47:09 +0200
***************
✏️Title: CVE-2025-5136 | Tmall Demo up to 20250505 Payment Identifier /tmall/order/pay/ random values
***************
📎Link: https://vuldb.com/?id.310215
***************
⚙️Information:
#Vendor: Tmall #Product: Demo #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:48:20 +0200
***************
✏️Title: CVE-2025-44998 | TinyFileManager 2.4.7 /tinyfilemanager.php cross site scripting
***************
📎Link: https://vuldb.com/?id.310216
***************
⚙️Information:
#Product: TinyFileManager #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:48:34 +0200
***************
✏️Title: CVE-2025-46176 | D-Link DIR-605L/DIR-816L Telnet Service hard-coded credentials
***************
📎Link: https://vuldb.com/?id.310217
***************
⚙️Information:
#Vendor: D_Link #Product: DIR_605L/DIR_816L #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:54:10 +0200
***************
✏️Title: CVE-2025-5137 | DedeCMS 5.7.117 Incomplete Fix CVE-2018-9175 sys_verifies.php?action=getfiles refiles code injection
***************
📎Link: https://vuldb.com/?id.310218
***************
⚙️Information:
#Product: DedeCMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 20:56:50 +0200
***************
✏️Title: CVE-2025-5138 | Bitwarden up to 2.25.1 PDF File cross site scripting
***************
📎Link: https://vuldb.com/?id.310219
***************
⚙️Information:
#Product: Bitwarden #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 21:02:02 +0200
***************
✏️Title: CVE-2025-5139 | Qualitor 8.20 testaConexaoOffice365.php nmconexao command injection
***************
📎Link: https://vuldb.com/?id.310220
***************
⚙️Information:
#Product: Qualitor #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
‼️ CVE ALERT ‼️
***************
🗓Date: Fri, 23 May 2025 21:07:14 +0200
***************
✏️Title: CVE-2025-5140 | Seeyon Zhiyuan OA Web Application System up to 8.1 SP2 ThirdMenuController.class this.oursNetService.getData url server-side request forgery
***************
📎Link: https://vuldb.com/?id.310221
***************
⚙️Information:
#Vendor: Seeyon #Product: Zhiyuan OA Web Application System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
📌#WriteUp Community
***************
🗓Date: Fri, 23 May 2025 22:54:00 +0530
***************
✏️Title: Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique
***************
📎Link: https://thehackernews.com/2025/05/hackers-use-tiktok-videos-to-distribute.html
***************
⚙️Tags: #NEWS #Cyber_Security #Hacker_News
***************
♦️Join: @HackTheBox_Academy
♦️Join: @HackTheBox_Security
👾New Exploit👾
===============
✏️ ABB Cylon Aspect Studio 3.08.03 (CylonLicence.dll) Binary Planting exploit
===============
📎 https://sploitus.com/exploit?id=ZSL-2025-5952&utmsource=rss&utmmedium=rss
===============
⚙️Tags: #Vulnerability #CVE #Exploit #POC
===============
♦️Join: @HackTheBoxAcademy
♦️Join: @HackTheBoxSecurity
👾New Exploit👾
===============
✏️ ABB Cylon Aspect 3.08.03 (login.php) Obscure Authentication Bypass exploit
===============
📎 https://sploitus.com/exploit?id=ZSL-2025-5949&utmsource=rss&utmmedium=rss
===============
⚙️Tags: #Vulnerability #CVE #Exploit #POC
===============
♦️Join: @HackTheBoxAcademy
♦️Join: @HackTheBoxSecurity
👾New Exploit👾
===============
✏️ ABB Cylon Aspect Studio 3.08.03 Insecure Permissions exploit
===============
📎 https://sploitus.com/exploit?id=ZSL-2025-5951&utmsource=rss&utmmedium=rss
===============
⚙️Tags: #Vulnerability #CVE #Exploit #POC
===============
♦️Join: @HackTheBoxAcademy
♦️Join: @HackTheBoxSecurity
