Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:35:27 +0200 *************** ✏️Title: CVE-2025-5598 | WF Steuerungstechnik airleader MASTER 3.0046 path traversal (msec-2025-004 / EUVD-2025-16866) *************** 📎Link: https://vuldb.com/?id.311117 *************** ⚙️Information: #Vendor: WF Steuerungstechnik #Product: airleader MASTER #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:35:44 +0200 *************** ✏️Title: CVE-2025-5631 | code-projects/anirbandutta9 Content Management System/News-Buzz 1.0 /publicposts.php post sql injection *************** 📎Link: https://vuldb.com/?id.311118 *************** ⚙️Information: #Vendor: code_projects/anirbandutta9 #Product: Content Management System/News_Buzz #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:35:45 +0200 *************** ✏️Title: CVE-2025-5632 | code-projects/anirbandutta9 Content Management System/News-Buzz 1.0 /admin/users.php change_to_admin sql injection *************** 📎Link: https://vuldb.com/?id.311119 *************** ⚙️Information: #Vendor: code_projects/anirbandutta9 #Product: Content Management System/News_Buzz #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:36:36 +0200 *************** ✏️Title: CVE-2025-5633 | code-projects/anirbandutta9 Content Management System/News-Buzz 1.0 /admin/users.php delete sql injection *************** 📎Link: https://vuldb.com/?id.311120 *************** ⚙️Information: #Vendor: code_projects/anirbandutta9 #Product: Content Management System/News_Buzz #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:41:04 +0200 *************** ✏️Title: CVE-2025-5634 | PCMan FTP Server 2.0.7 NOOP Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311121 *************** ⚙️Information: #Vendor: PCMan #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:41:06 +0200 *************** ✏️Title: CVE-2025-5635 | PCMan FTP Server 2.0.7 PLS Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311122 *************** ⚙️Information: #Vendor: PCMan #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:41:07 +0200 *************** ✏️Title: CVE-2025-5636 | PCMan FTP Server 2.0.7 SET Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311123 *************** ⚙️Information: #Vendor: PCMan #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:41:09 +0200 *************** ✏️Title: CVE-2025-5637 | PCMan FTP Server 2.0.7 SYSTEM Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311124 *************** ⚙️Information: #Vendor: PCMan #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:42:29 +0200 *************** ✏️Title: CVE-2025-5638 | PHPGurukul Notice Board System 1.0 /admin-profile.php mobilenumber sql injection *************** 📎Link: https://vuldb.com/?id.311125 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Notice Board System #Type: Forum Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:42:30 +0200 *************** ✏️Title: CVE-2025-5639 | PHPGurukul Notice Board System 1.0 /forgot-password.php email sql injection *************** 📎Link: https://vuldb.com/?id.311126 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Notice Board System #Type: Forum Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:48:24 +0200 *************** ✏️Title: CVE-2025-5640 | PX4-Autopilot 1.12.3 TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow (Issue 24915) *************** 📎Link: https://vuldb.com/?id.311127 *************** ⚙️Information: #Product: PX4_Autopilot #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:49:10 +0200 *************** ✏️Title: CVE-2025-5597 | WF Steuerungstechnik airleader MASTER 3.00571 improper authentication (msec-2025-003 / EUVD-2025-16865) *************** 📎Link: https://vuldb.com/?id.311128 *************** ⚙️Information: #Vendor: WF Steuerungstechnik #Product: airleader MASTER #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:05:51 +0200 *************** ✏️Title: CVE-2025-5641 | Radare2 5.9.9 radiff2 /libr/cons/cons.c r_cons_is_breaked -T memory corruption (Issue 24230) *************** 📎Link: https://vuldb.com/?id.311129 *************** ⚙️Information: #Product: Radare2 #Type: Programming Tool Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:10:36 +0200 *************** ✏️Title: CVE-2025-5642 | Radare2 5.9.9 radiff2 /libr/cons/pal.c r_cons_pal_init memory corruption (Issue 24231) *************** 📎Link: https://vuldb.com/?id.311130 *************** ⚙️Information: #Product: Radare2 #Type: Programming Tool Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:16:24 +0200 *************** ✏️Title: CVE-2025-5643 | Radare2 5.9.9 radiff2 /libr/cons/cons.c cons_stack_load -T memory corruption (Issue 24232) *************** 📎Link: https://vuldb.com/?id.311131 *************** ⚙️Information: #Product: Radare2 #Type: Programming Tool Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:19:25 +0200 *************** ✏️Title: CVE-2025-5644 | Radare2 5.9.9 radiff2 /libr/cons/cons.c r_cons_flush -T use after free (Issue 24233) *************** 📎Link: https://vuldb.com/?id.311132 *************** ⚙️Information: #Product: Radare2 #Type: Programming Tool Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:22:47 +0200 *************** ✏️Title: CVE-2025-5645 | Radare2 5.9.9 radiff2 /libr/cons/pal.c r_cons_pal_init -T memory corruption (Issue 24234) *************** 📎Link: https://vuldb.com/?id.311133 *************** ⚙️Information: #Product: Radare2 #Type: Programming Tool Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:25:39 +0200 *************** ✏️Title: CVE-2025-5646 | Radare2 5.9.9 radiff2 /libr/cons/pal.c r_cons_rainbow_free -T memory corruption (Issue 24235) *************** 📎Link: https://vuldb.com/?id.311134 *************** ⚙️Information: #Product: Radare2 #Type: Programming Tool Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:28:02 +0200 *************** ✏️Title: CVE-2025-5647 | Radare2 5.9.9 radiff2 /libr/cons/cons.c r_cons_context_break_pop -T memory corruption (Issue 24237) *************** 📎Link: https://vuldb.com/?id.311135 *************** ⚙️Information: #Product: Radare2 #Type: Programming Tool Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:31:20 +0200 *************** ✏️Title: CVE-2025-5648 | Radare2 5.9.9 radiff2 /libr/cons/pal.c r_cons_pal_init -T memory corruption *************** 📎Link: https://vuldb.com/?id.311136 *************** ⚙️Information: #Product: Radare2 #Type: Programming Tool Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security