Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-5066 - Google Chrome Android Messages UI Spoofing *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5066 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-5067 - Inappropriate implementation in Tab Strip in Googl *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5067 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-5198 - Stackrox XSS Vulnerability in Role Object Name *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5198 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5222 - ICU Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5222 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5278 - "GNU Coreutils Sort Utility Heap Buffer Under-Read Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5278 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5279 - Amazon Redshift Python Connector AzureOAuth2CredentialsProvider SSL Certificate Validation Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5279 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5280 - Google Chrome V8 Out-of-Bounds Heap Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5280 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5281 - Google Chrome BFCache User Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5281 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5283 - Google Chrome libvpx Use-After-Free Heap Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5283 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 19:56:22 +0200 *************** ✏️Title: CVE-2025-5224 | Campcodes Online Hospital Management System 1.0 /admin/add-doctor.php Doctorspecialization sql injection *************** 📎Link: https://vuldb.com/?id.310320 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Hospital Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 19:57:33 +0200 *************** ✏️Title: CVE-2025-23394 | SUSE openSUSE Tumbleweed 2.5.0-1.1 cyrus-imapd symlink *************** 📎Link: https://vuldb.com/?id.310321 *************** ⚙️Information: #Vendor: SUSE #Product: openSUSE Tumbleweed #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 19:59:46 +0200 *************** ✏️Title: CVE-2025-23392 | SUSE Manager Server spacewalk-java cross site scripting *************** 📎Link: https://vuldb.com/?id.310322 *************** ⚙️Information: #Vendor: SUSE #Product: Manager Server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 20:02:31 +0200 *************** ✏️Title: CVE-2025-5225 | Campcodes Advanced Online Voting System 1.0 /index.php voter sql injection *************** 📎Link: https://vuldb.com/?id.310323 *************** ⚙️Information: #Vendor: Campcodes #Product: Advanced Online Voting System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 20:05:20 +0200 *************** ✏️Title: CVE-2025-5226 | PHPGurukul Small CRM 3.0 change-password.php oldpass sql injection *************** 📎Link: https://vuldb.com/?id.310324 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Small CRM #Type: Customer Relationship Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 20:05:22 +0200 *************** ✏️Title: CVE-2025-5227 | PHPGurukul Small CRM 3.0 manage-tickets.php aremark sql injection *************** 📎Link: https://vuldb.com/?id.310325 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Small CRM #Type: Customer Relationship Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 20:07:32 +0200 *************** ✏️Title: CVE-2025-5228 | D-Link DI-8100 up to 20250523 jhttpd /login.cgi httpd_get_parm notify stack-based overflow *************** 📎Link: https://vuldb.com/?id.310326 *************** ⚙️Information: #Vendor: D_Link #Product: DI_8100 #Risk: critical #Local: No #Remote: Partially #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 22:27:26 +0200 *************** ✏️Title: CVE-2025-5222 | ICU 76.0.1 SRBRoot::addTag stack-based overflow *************** 📎Link: https://vuldb.com/?id.310327 *************** ⚙️Information: #Product: ICU #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 22:28:59 +0200 *************** ✏️Title: CVE-2025-5229 | Campcodes Online Hospital Management System 1.0 /admin/view-patient.php viewid sql injection *************** 📎Link: https://vuldb.com/?id.310328 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Hospital Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 22:31:54 +0200 *************** ✏️Title: CVE-2025-5230 | PHPGurukul Online Nurse Hiring System 1.0 bwdates-report-details.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.310329 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Nurse Hiring System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 22:36:22 +0200 *************** ✏️Title: CVE-2025-5231 | PHPGurukul Company Visitor Management System 1.0 /forgot-password.php email sql injection *************** 📎Link: https://vuldb.com/?id.310330 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Company Visitor Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security