Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:33:47 +0200 *************** ✏️Title: CVE-2025-30415 | Acronis Cyber Protect Cloud Agent up to 40076 improper validation of syntactic correctness of input (EUVD-2025-16869) *************** 📎Link: https://vuldb.com/?id.311137 *************** ⚙️Information: #Vendor: Acronis #Product: Cyber Protect Cloud Agent #Type: Cloud Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:34:03 +0200 *************** ✏️Title: CVE-2025-48959 | Acronis Cyber Protect Cloud Agent up to 40076 on Windows default permission (EUVD-2025-16868) *************** 📎Link: https://vuldb.com/?id.311138 *************** ⚙️Information: #Vendor: Acronis #Product: Cyber Protect Cloud Agent #Type: Cloud Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:38:29 +0200 *************** ✏️Title: CVE-2025-5649 | SourceCodester Student Result Management System 1.0 Register Interface /admin/core/new_user access control *************** 📎Link: https://vuldb.com/?id.311139 *************** ⚙️Information: #Vendor: SourceCodester #Product: Student Result Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:41:40 +0200 *************** ✏️Title: CVE-2025-5650 | 1000projects Online Notice Board 1.0 /register.php fname sql injection *************** 📎Link: https://vuldb.com/?id.311140 *************** ⚙️Information: #Vendor: 1000projects #Product: Online Notice Board #Type: Forum Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:43:45 +0200 *************** ✏️Title: CVE-2025-5651 | code-projects Traffic Offense Reporting System 1.0 saveuser.php user_id/username/email/name/position cross site scripting *************** 📎Link: https://vuldb.com/?id.311141 *************** ⚙️Information: #Vendor: code_projects #Product: Traffic Offense Reporting System #Type: Reporting Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:30 +0200 *************** ✏️Title: CVE-2025-5652 | PHPGurukul Complaint Management System 2.0 between-date-complaintreport.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.311142 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:32 +0200 *************** ✏️Title: CVE-2025-5653 | PHPGurukul Complaint Management System 2.0 between-date-userreport.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.311143 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:34 +0200 *************** ✏️Title: CVE-2025-5654 | PHPGurukul Complaint Management System 2.0 /admin/edit-state.php description sql injection *************** 📎Link: https://vuldb.com/?id.311144 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:35 +0200 *************** ✏️Title: CVE-2025-5655 | PHPGurukul Complaint Management System 2.0 edit-subcategory.php subcategory sql injection *************** 📎Link: https://vuldb.com/?id.311145 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:37 +0200 *************** ✏️Title: CVE-2025-5656 | PHPGurukul Complaint Management System 2.0 /admin/edit-category.php description sql injection *************** 📎Link: https://vuldb.com/?id.311146 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:38 +0200 *************** ✏️Title: CVE-2025-5657 | PHPGurukul Complaint Management System 2.0 /admin/manage-users.php uid sql injection *************** 📎Link: https://vuldb.com/?id.311147 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:40 +0200 *************** ✏️Title: CVE-2025-5658 | PHPGurukul Complaint Management System 2.0 updatecomplaint.php Status sql injection *************** 📎Link: https://vuldb.com/?id.311148 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:41 +0200 *************** ✏️Title: CVE-2025-5659 | PHPGurukul Complaint Management System 2.0 /user/profile.php pincode sql injection *************** 📎Link: https://vuldb.com/?id.311149 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:43 +0200 *************** ✏️Title: CVE-2025-5660 | PHPGurukul Complaint Management System 2.0 register-complaint.php noc sql injection *************** 📎Link: https://vuldb.com/?id.311150 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:50:06 +0200 *************** ✏️Title: CVE-2025-5661 | code-projects Traffic Offense Reporting System 1.0 Setting /save-settings.php site_name cross site scripting *************** 📎Link: https://vuldb.com/?id.311151 *************** ⚙️Information: #Vendor: code_projects #Product: Traffic Offense Reporting System #Type: Reporting Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:52:15 +0200 *************** ✏️Title: CVE-2025-5663 | PHPGurukul Auto Taxi Stand Management System 1.0 search-autoortaxi.php searchdata sql injection *************** 📎Link: https://vuldb.com/?id.311152 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Auto Taxi Stand Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:55:21 +0200 *************** ✏️Title: CVE-2025-5664 | FreeFloat FTP Server 1.0 RESTART Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311153 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:55:23 +0200 *************** ✏️Title: CVE-2025-5665 | FreeFloat FTP Server 1.0 XCWD Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311154 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:55:24 +0200 *************** ✏️Title: CVE-2025-5666 | FreeFloat FTP Server 1.0 XMKD Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311155 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:55:25 +0200 *************** ✏️Title: CVE-2025-5667 | FreeFloat FTP Server 1.0 REIN Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311156 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security