Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 18:15:19 +0000 *************** ✏️Title: CVE-2025-5153 - CMS Made Simple Design Manager Module Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5153 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:15:19 +0000 *************** ✏️Title: CVE-2025-5154 - PhonePe SQLite Database Cleartext Storage Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5154 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 18:20:43 GMT *************** ✏️Title: Zero Trust: A Simple Explanation *************** 📎Link: https://medium.com/p/716f650b074c *************** ⚙️Tags: #protection #bug_bounty #browsers #zero_trust #security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 18:14:20 GMT *************** ✏️Title: Speed Up WordPress on Shared Hosting: Proven Methods *************** 📎Link: https://medium.com/p/501980e276c6 *************** ⚙️Tags: #cybersecurity #wordpress_web_development #wordpress_optimization #wordpress_security #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 18:33:41 GMT *************** ✏️Title: picoCTF Web Exploitation: login *************** 📎Link: https://medium.com/p/8297e7f72990 *************** ⚙️Tags: #ctf #picoctf #decoding #capture_the_flag #login *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 18:08:53 GMT *************** ✏️Title: JPGChat — TryHackMe *************** 📎Link: https://medium.com/p/b862ec60fa3a *************** ⚙️Tags: #tryhackme_walkthrough #jpgchat_tryhackme #tryhackme #jpgchat #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:19:35 +0200 *************** ✏️Title: CVE-2025-5176 | Realce Tecnologia Queue Ticket Kiosk up to 20250517 Admin Login Page /adm/index.php Usuário sql injection *************** 📎Link: https://vuldb.com/?id.310264 *************** ⚙️Information: #Vendor: Realce Tecnologia #Product: Queue Ticket Kiosk #Type: Ticket Tracking Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:19:36 +0200 *************** ✏️Title: CVE-2025-5177 | Realce Tecnologia Queue Ticket Kiosk up to 20250517 Admin Login Page /adm/index.php Usuário cross site scripting *************** 📎Link: https://vuldb.com/?id.310265 *************** ⚙️Information: #Vendor: Realce Tecnologia #Product: Queue Ticket Kiosk #Type: Ticket Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:19:38 +0200 *************** ✏️Title: CVE-2025-5178 | Realce Tecnologia Queue Ticket Kiosk up to 20250517 Image File /adm/ajax.php files[] unrestricted upload *************** 📎Link: https://vuldb.com/?id.310266 *************** ⚙️Information: #Vendor: Realce Tecnologia #Product: Queue Ticket Kiosk #Type: Ticket Tracking Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:19:39 +0200 *************** ✏️Title: CVE-2025-5179 | Realce Tecnologia Queue Ticket Kiosk up to 20250517 Cadastro de Administrador Page /adm/index.php Name/Usuário cross site scripting *************** 📎Link: https://vuldb.com/?id.310267 *************** ⚙️Information: #Vendor: Realce Tecnologia #Product: Queue Ticket Kiosk #Type: Ticket Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:21:48 +0200 *************** ✏️Title: CVE-2025-5180 | Wondershare Filmora 14.5.16 Installer NFWCHK.exe uncontrolled search path *************** 📎Link: https://vuldb.com/?id.310268 *************** ⚙️Information: #Vendor: Wondershare #Product: Filmora #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:32:52 +0200 *************** ✏️Title: CVE-2025-5181 | Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 /spgpm/updateListing spgLsTitle cross site scripting *************** 📎Link: https://vuldb.com/?id.310269 *************** ⚙️Information: #Vendor: Summer Pearl Group #Product: Vacation Rental Management Platform #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:32:54 +0200 *************** ✏️Title: CVE-2025-5182 | Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 Listing authorization *************** 📎Link: https://vuldb.com/?id.310270 *************** ⚙️Information: #Vendor: Summer Pearl Group #Product: Vacation Rental Management Platform #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:32:55 +0200 *************** ✏️Title: CVE-2025-5183 | Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 Header Host redirect *************** 📎Link: https://vuldb.com/?id.310271 *************** ⚙️Information: #Vendor: Summer Pearl Group #Product: Vacation Rental Management Platform #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:32:57 +0200 *************** ✏️Title: CVE-2025-5184 | Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 HTTP Response Header information disclosure *************** 📎Link: https://vuldb.com/?id.310272 *************** ⚙️Information: #Vendor: Summer Pearl Group #Product: Vacation Rental Management Platform #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:32:59 +0200 *************** ✏️Title: CVE-2025-5185 | Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 cross-site request forgery *************** 📎Link: https://vuldb.com/?id.310273 *************** ⚙️Information: #Vendor: Summer Pearl Group #Product: Vacation Rental Management Platform #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 19:38:25 +0200 *************** ✏️Title: CVE-2025-5186 | thinkgem JeeSite up to 5.11.1 URI Scheme /cms/fileTemplate/form ResourceLoader.getResource Name server-side request forgery *************** 📎Link: https://vuldb.com/?id.310274 *************** ⚙️Information: #Vendor: thinkgem #Product: JeeSite #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 17:21:44 GMT *************** ✏️Title: Bug Bounty Practical Lab: Finding and Exploiting an Unused API Endpoint *************** 📎Link: https://medium.com/p/68da63caf005 *************** ⚙️Tags: #cybersecurity #bug_bounty_writeup #apihacking #bug_bounty #api *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 17:35:45 GMT *************** ✏️Title: 0x00 Welcome to my new blog *************** 📎Link: https://medium.com/p/111d030fcfdd *************** ⚙️Tags: #information_technology #hacking #artificial_intelligence #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 17:04:43 GMT *************** ✏️Title: Building a SOC Analyst Home Lab *************** 📎Link: https://medium.com/p/a172154d34de *************** ⚙️Tags: #cybersecurity #security #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security