Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 13:08:53 GMT *************** ✏️Title: How to Install Kali Linux on VirtualBox *************** 📎Link: https://medium.com/p/08e181ede0b1 *************** ⚙️Tags: #kali_linux #cybersecurity #linux #hacking #kali_linux_on_virtualbox *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 13:06:53 GMT *************** ✏️Title: Wi-Fi Pentest: Scenarios of Aircrack-ng and Evil Twin Attacks *************** 📎Link: https://medium.com/p/6afa69794f80 *************** ⚙️Tags: #wifi #security #pentesting #attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 12:41:04 GMT *************** ✏️Title: SQL Injection: When Websites Get Bamboozled (A Beginner’s Guide) *************** 📎Link: https://medium.com/p/3cade5fa9064 *************** ⚙️Tags: #sql_injection #cybersecurity #hacking #beginners_guide #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 12:52:49 GMT *************** ✏️Title: What Are the Best Practices for Safe Penetration? *************** 📎Link: https://medium.com/p/a8f1d3e1599d *************** ⚙️Tags: #penetrationtestingservice #penetration_testing #cybernx_technologies *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 13:21:54 GMT *************** ✏️Title: Brute It — TryHackMe *************** 📎Link: https://medium.com/p/dc7bf21c12d3 *************** ⚙️Tags: #tryhackme_brute_it #brute_it #tryhackme_walkthrough #tryhackme #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 13:19:11 GMT *************** ✏️Title: Pwny CTF *************** 📎Link: https://medium.com/p/6171b2a1bff6 *************** ⚙️Tags: #pwnyctf #wireshark #forensics #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 13:27:51 GMT *************** ✏️Title: Why Malware Is Dead: The Real Risk Is You(Humans) *************** 📎Link: https://medium.com/p/503ca4411d7a *************** ⚙️Tags: #malware #cyber_security_awareness #identity_management #cybersecurity #vishing_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 13:38:14 GMT *************** ✏️Title: Red Alert: Simulating a Malware Breach in Real Time *************** 📎Link: https://medium.com/p/12082e234d94 *************** ⚙️Tags: #malware #hacking #cyber_security_awareness #red_teaming #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:26:49 +0200 *************** ✏️Title: CVE-2025-5380 | ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb Image File Upload /upload/ path traversal (IC9VZD) *************** 📎Link: https://vuldb.com/?id.310673 *************** ⚙️Information: #Vendor: ashinigit 天青一白 #Product: XueShengZhuSu 学生住宿管理系统 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:35:10 +0200 *************** ✏️Title: CVE-2025-5381 | Yifang CMS up to 2.0.2 Admin Panel /api/File/downloadFile path traversal (IC0RCX) *************** 📎Link: https://vuldb.com/?id.310674 *************** ⚙️Information: #Vendor: Yifang #Product: CMS #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:35:31 +0200 *************** ✏️Title: CVE-2025-4433 | Devolutions Server up to 2025.1.7.0 User Group Management access control (DEVO-2025-0010) *************** 📎Link: https://vuldb.com/?id.310675 *************** ⚙️Information: #Vendor: Devolutions #Product: Server #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:39:19 +0200 *************** ✏️Title: CVE-2025-5383 | Yifang CMS up to 2.0.2 Article Management Module Default Value cross site scripting (IC41YQ) *************** 📎Link: https://vuldb.com/?id.310676 *************** ⚙️Information: #Vendor: Yifang #Product: CMS #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:51:50 +0200 *************** ✏️Title: CVE-2025-5384 | JeeWMS up to 20250504 cgAutoListController.do?datagrid CgAutoListController sql injection (IC5FNV) *************** 📎Link: https://vuldb.com/?id.310677 *************** ⚙️Information: #Product: JeeWMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:51:52 +0200 *************** ✏️Title: CVE-2025-5385 | JeeWMS up to 20250504 cgformTemplateController.do?doAdd path traversal (IC5FNV) *************** 📎Link: https://vuldb.com/?id.310678 *************** ⚙️Information: #Product: JeeWMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:51:53 +0200 *************** ✏️Title: CVE-2025-5386 | JeeWMS up to 20250504 cgformTransController.do?transEditor sql injection (IC5FNV) *************** 📎Link: https://vuldb.com/?id.310679 *************** ⚙️Information: #Product: JeeWMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:51:55 +0200 *************** ✏️Title: CVE-2025-5387 | JeeWMS up to 20250504 File generateController.do?dogenerate access control (IC5FNV) *************** 📎Link: https://vuldb.com/?id.310680 *************** ⚙️Information: #Product: JeeWMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:51:56 +0200 *************** ✏️Title: CVE-2025-5388 | JeeWMS up to 20250504 generateController.do?dogenerate sql injection (IC5FNV) *************** 📎Link: https://vuldb.com/?id.310681 *************** ⚙️Information: #Product: JeeWMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:51:58 +0200 *************** ✏️Title: CVE-2025-5389 | JeeWMS up to 20250504 File generateController.do?dogenerateOne2Many access control (IC5FNV) *************** 📎Link: https://vuldb.com/?id.310682 *************** ⚙️Information: #Product: JeeWMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:52:00 +0200 *************** ✏️Title: CVE-2025-5390 | JeeWMS up to 20250504 File filedeal.do filedeal access control (IC5FNV) *************** 📎Link: https://vuldb.com/?id.310683 *************** ⚙️Information: #Product: JeeWMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 11:15:20 +0000 *************** ✏️Title: CVE-2025-1763 - GitLab EE Cross-Site Scripting and Content Security Policy Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1763 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security