Sec WriteUp ~ CVE Alert

👾New Exploit👾 =============== ✏️ webapps Campcodes Online Hospital Management System 1.0 - SQL Injection =============== 📎 https://www.exploit-db.com/exploits/52312 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:08:37 GMT *************** ✏️Title: Unauthenticated Remote Code Execution in vBulletin 6.0.1 via replaceAdTemplate Method *************** 📎Link: https://medium.com/p/a221f46b9415 *************** ⚙️Tags: #bug_bounty_writeup #vbulletin_rce #php_code_execution #bug_bounty_tips #vbulletin_remote_exploit *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:16:02 GMT *************** ✏️Title: How Hackers Drain Smart Contracts: The Reentrancy Attack That Stole $60M *************** 📎Link: https://medium.com/p/360ae43e88d1 *************** ⚙️Tags: #blockchain_development #security_audit #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:54:58 GMT *************** ✏️Title: I Hacked the Secret to Making Money Online (It Wasn’t What I Expected) *************** 📎Link: https://medium.com/p/94cecba6d274 *************** ⚙️Tags: #life #self_improvement #hacking #online_business #writing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:02:08 GMT *************** ✏️Title: JALAN NINJA CYBER SECURITY: ROADMAP 5 TAHUN UNTUK TAKLUKKAN DUNIA SIBER *************** 📎Link: https://medium.com/p/6b8f09a789fc *************** ⚙️Tags: #pentesting #progamming #python #cybersecurity #digital_forensics *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:49:22 GMT *************** ✏️Title: The Quantum Leap: Redefining Cybersecurity in 2025 *************** 📎Link: https://medium.com/p/4c19e340b164 *************** ⚙️Tags: #cybersecurity #infosec #information_security #cyber_security_awareness #ciso *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:14:08 GMT *************** ✏️Title: ROAD TO RED TEAM (Pentest Roadmap 5 Tahun — Dari Skiddie Jadi Pro Pentest) *************** 📎Link: https://medium.com/p/9c4dada9356e *************** ⚙️Tags: #roadmaps #hacker #red_team #cybersecurity #pentesting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:13:12 GMT *************** ✏️Title: Overthewire - Bandit *************** 📎Link: https://medium.com/p/03ff0b58779b *************** ⚙️Tags: #linux #linux_commands #ctf #openssl #overthewire *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:48:32 GMT *************** ✏️Title: PicoCTF Write-Up — n0s4n1ty 1 *************** 📎Link: https://medium.com/p/284dc8ee0236 *************** ⚙️Tags: #cybersecurity #ctf #ctf_walkthrough #picoctf #web_exploitation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:11:29 GMT *************** ✏️Title: AWS Lambda . AWS Attack and Defense . TryHackMe Walkthrough *************** 📎Link: https://medium.com/p/aeaf57f237b8 *************** ⚙️Tags: #tryhackme_walkthrough #cybersecurity #aws #cloud_computing #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:50:30 GMT *************** ✏️Title: Walkthrough THM Silver-Platter *************** 📎Link: https://medium.com/p/62e469b087f3 *************** ⚙️Tags: #ctf_writeup #hacking #thm_walkthrough #ctf_walkthrough #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:02:13 GMT *************** ✏️Title: When Your Calendar Becomes a Weapon: APT41’s Ingenious Use of Google Calendar for Malware Command &… *************** 📎Link: https://medium.com/p/d3f1daa76ee7 *************** ⚙️Tags: #apt_group #cybersecurity #malware #malware_analysis #cloud_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:12:12 +0200 *************** ✏️Title: CVE-2025-5320 | gradio-app gradio up to 5.29.1 CORS is_valid_origin localhost_aliases origin validation *************** 📎Link: https://vuldb.com/?id.310491 *************** ⚙️Information: #Vendor: gradio_app #Product: gradio #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:16:14 +0200 *************** ✏️Title: CVE-2025-5321 | aimhubio aim up to 3.29.1 run_view Object /aim/storage/query.py RestrictedPythonQuery sandbox *************** 📎Link: https://vuldb.com/?id.310492 *************** ⚙️Information: #Vendor: aimhubio #Product: aim #Type: Messaging Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:25:53 +0200 *************** ✏️Title: CVE-2025-5323 | fossasia open-event-server 1.19.1 Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking *************** 📎Link: https://vuldb.com/?id.310493 *************** ⚙️Information: #Vendor: fossasia #Product: open_event_server #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:32:32 +0200 *************** ✏️Title: CVE-2025-5324 | TechPowerUp GPU-Z 2.23.0 0x8000645C IOCTL GPU-Z.sys sub_140001880 memory leak *************** 📎Link: https://vuldb.com/?id.310494 *************** ⚙️Information: #Vendor: TechPowerUp #Product: GPU_Z #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:39:39 +0200 *************** ✏️Title: CVE-2025-5325 | zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testService special elements used in a template engine *************** 📎Link: https://vuldb.com/?id.310495 *************** ⚙️Information: #Vendor: zhilink 智互联(深圳)科技有限公司 #Product: ADP Application Developer Platform 应用开发者平台 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:39:41 +0200 *************** ✏️Title: CVE-2025-5326 | zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 verifyToken deserialization *************** 📎Link: https://vuldb.com/?id.310496 *************** ⚙️Information: #Vendor: zhilink 智互联(深圳)科技有限公司 #Product: ADP Application Developer Platform 应用开发者平台 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ webapps WordPress Digits Plugin 8.4.6.1 - Authentication Bypass via OTP Bruteforcing =============== 📎 https://www.exploit-db.com/exploits/52307 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:50:11 GMT *************** ✏️Title: 7 Principles of Software Testing Every QA Should Know *************** 📎Link: https://medium.com/p/c38255e81415 *************** ⚙️Tags: #software_development #software_testing #ai #bug_bounty #automation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security