Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 13:15:21 +0000 *************** ✏️Title: CVE-2025-5659 - PHPGurukul Complaint Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5659 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 13:15:22 +0000 *************** ✏️Title: CVE-2025-5660 - PHPGurukul Complaint Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5660 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:30 +0000 *************** ✏️Title: CVE-2025-0691 - Devolutions Server Access Control Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0691 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:31 +0000 *************** ✏️Title: CVE-2025-27445 - RSFirewall Joomla Path Traversal Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27445 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:31 +0000 *************** ✏️Title: CVE-2025-27753 - Joomla RSMediaGallery SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27753 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:31 +0000 *************** ✏️Title: CVE-2025-27754 - Joomla RSBlog! Stored Cross-Site Scripting (XSS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-27754 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:31 +0000 *************** ✏️Title: CVE-2025-30084 - Joomla RSMail! Stored XSS *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-30084 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:32 +0000 *************** ✏️Title: CVE-2025-3768 - Devolutions Server Tor Network Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-3768 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:32 +0000 *************** ✏️Title: CVE-2025-47827 - IGEL OS Boot Signature Verification Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-47827 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 16:59:26 +0200 *************** ✏️Title: CVE-2025-47827 | IGEL OS up to 10 igel-flash-driver Module signature verification *************** 📎Link: https://vuldb.com/?id.311255 *************** ⚙️Information: #Product: IGEL OS #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:33 +0000 *************** ✏️Title: CVE-2025-5382 - Devolutions Server Access Control Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5382 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:02:39 +0200 *************** ✏️Title: CVE-2025-3768 | Devolutions Server up to 2025.1.10.0 Tor Network Blocking access control (DEVO-2025-0011) *************** 📎Link: https://vuldb.com/?id.311256 *************** ⚙️Information: #Vendor: Devolutions #Product: Server #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:38 +0000 *************** ✏️Title: CVE-2025-5661 - "Traffic Offense Reporting System XSS Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5661 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:03:00 +0200 *************** ✏️Title: CVE-2025-0691 | Devolutions Server up to 2025.1.10.0 Edit Permission access control (DEVO-2025-0011) *************** 📎Link: https://vuldb.com/?id.311257 *************** ⚙️Information: #Vendor: Devolutions #Product: Server #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 14:15:38 +0000 *************** ✏️Title: CVE-2025-5663 - PHPGurukul Auto Taxi Stand Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5663 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:03:23 +0200 *************** ✏️Title: CVE-2025-5382 | Devolutions Server up to 2025.1.7.0 MFA access control (DEVO-2025-0011) *************** 📎Link: https://vuldb.com/?id.311258 *************** ⚙️Information: #Vendor: Devolutions #Product: Server #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:07:36 +0200 *************** ✏️Title: CVE-2025-5732 | code-projects Traffic Offense Reporting System 1.0 cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311259 *************** ⚙️Information: #Vendor: code_projects #Product: Traffic Offense Reporting System #Type: Reporting Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:16:41 +0200 *************** ✏️Title: CVE-2025-5734 | TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formWlanRedirect redirect-url buffer overflow *************** 📎Link: https://vuldb.com/?id.311260 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:16:43 +0200 *************** ✏️Title: CVE-2025-5735 | TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formSetLg submit-url buffer overflow *************** 📎Link: https://vuldb.com/?id.311261 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 17:16:44 +0200 *************** ✏️Title: CVE-2025-5736 | TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formNtp submit-url buffer overflow *************** 📎Link: https://vuldb.com/?id.311262 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security