Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:37:58 +0200 *************** ✏️Title: CVE-2025-5704 | code-projects Real Estate Property Management System 1.0 /Admin/User.php txtUserName sql injection *************** 📎Link: https://vuldb.com/?id.311225 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:38:00 +0200 *************** ✏️Title: CVE-2025-5705 | code-projects Real Estate Property Management System 1.0 /Admin/Property.php cmbCat sql injection *************** 📎Link: https://vuldb.com/?id.311226 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:42:33 +0200 *************** ✏️Title: CVE-2025-5706 | PHPGurukul Human Metapneumovirus Testing Management System 1.0 /new-user-testing.php state sql injection *************** 📎Link: https://vuldb.com/?id.311227 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Human Metapneumovirus Testing Management System #Type: Testing Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:42:35 +0200 *************** ✏️Title: CVE-2025-5707 | PHPGurukul Human Metapneumovirus Testing Management System 1.0 registered-user-testing.php testtype sql injection *************** 📎Link: https://vuldb.com/?id.311228 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Human Metapneumovirus Testing Management System #Type: Testing Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:44:40 +0200 *************** ✏️Title: CVE-2025-5708 | code-projects Real Estate Property Management System 1.0 /Admin/NewsReport.php txtFrom sql injection *************** 📎Link: https://vuldb.com/?id.311229 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:44:42 +0200 *************** ✏️Title: CVE-2025-5709 | code-projects Real Estate Property Management System 1.0 InsertCategory.php txtCategoryName sql injection *************** 📎Link: https://vuldb.com/?id.311230 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:45:50 +0200 *************** ✏️Title: CVE-2025-5710 | code-projects Real Estate Property Management System 1.0 /Admin/InsertState.php txtStateName sql injection *************** 📎Link: https://vuldb.com/?id.311231 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:45:52 +0200 *************** ✏️Title: CVE-2025-5711 | code-projects Real Estate Property Management System 1.0 /Admin/InsertCity.php cmbState sql injection *************** 📎Link: https://vuldb.com/?id.311232 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:48:59 +0200 *************** ✏️Title: CVE-2025-5712 | SourceCodester Open Source Clinic Management System 1.0 /appointment.php patient sql injection *************** 📎Link: https://vuldb.com/?id.311233 *************** ⚙️Information: #Vendor: SourceCodester #Product: Open Source Clinic Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:58:18 +0200 *************** ✏️Title: CVE-2025-5713 | SoluçõesCoop iSoluçõesWEB up to 20250519 Flow /fluxos-dashboard Descrição da solicitação cross site scripting *************** 📎Link: https://vuldb.com/?id.311234 *************** ⚙️Information: #Vendor: SoluçõesCoop #Product: iSoluçõesWEB #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 06:58:20 +0200 *************** ✏️Title: CVE-2025-5714 | SoluçõesCoop iSoluçõesWEB up to 20250516 Profile Information Update /sys/up.upload.php nomeArquivo path traversal *************** 📎Link: https://vuldb.com/?id.311235 *************** ⚙️Information: #Vendor: SoluçõesCoop #Product: iSoluçõesWEB #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 07:10:40 +0200 *************** ✏️Title: CVE-2025-5715 | Signal App 7.41.4 on Android Biometric Authentication missing critical step in authentication *************** 📎Link: https://vuldb.com/?id.311236 *************** ⚙️Information: #Vendor: Signal #Product: App #Type: Android App Software #Risk: problematic #Local: Partially #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 07:11:10 +0200 *************** ✏️Title: CVE-2025-1793 | run-llama llama_index up to 0.12.27 sql injection *************** 📎Link: https://vuldb.com/?id.311237 *************** ⚙️Information: #Vendor: run_llama #Product: llama_index #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-47577 exploit =============== 📎 https://sploitus.com/exploit?id=A75F7663-6D70-5D4C-83D7-0FB7D242274C&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 03:54:38 GMT *************** ✏️Title: How to Start In CyberSecurity. Complete Roadmap. *************** 📎Link: https://medium.com/p/87eb22d608ac *************** ⚙️Tags: #linux #cybersecurity #hacking #roadmaps #networking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 04:20:26 GMT *************** ✏️Title: Knowing XSS(); — Basic *************** 📎Link: https://medium.com/p/2ede2022701f *************** ⚙️Tags: #exploit #indonesia #content_spoofing #browser_security #xss_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 04:01:31 GMT *************** ✏️Title: Ever Wonder What REALLY Runs Your World? Spoiler: It’s ICS/SCADA (and it’s Kinda Vulnerable) *************** 📎Link: https://medium.com/p/7bdaa5534d3d *************** ⚙️Tags: #scada_system #cybersecurity #scada #malware #cybercrime *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 02:15:24 +0000 *************** ✏️Title: CVE-2025-5628 - SourceCodester Food Menu Manager Cross Site Scripting (XSS) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5628 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 03:15:25 +0000 *************** ✏️Title: CVE-2025-48432 - Apache Django Log Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48432 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 03:15:26 +0000 *************** ✏️Title: CVE-2025-49466 - AERC Directory Traversal Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49466 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security