Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 09:23:13 +0200 *************** ✏️Title: CVE-2025-5789 | TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formPortFw service_type buffer overflow *************** 📎Link: https://vuldb.com/?id.311337 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 09:23:15 +0200 *************** ✏️Title: CVE-2025-5790 | TOTOLINK X15 1.0.0-B20230714.1105 HTTP POST Request /boafrm/formIpQoS mac buffer overflow *************** 📎Link: https://vuldb.com/?id.311338 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 05:15:25 +0000 *************** ✏️Title: CVE-2025-36513 - i-PRO Co., Ltd. Surveillance Cameras CSRF Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-36513 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 05:15:25 +0000 *************** ✏️Title: CVE-2025-5722 - SourceCodester Student Result Management System Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5722 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 05:15:26 +0000 *************** ✏️Title: CVE-2025-5723 - SourceCodester Student Result Management System Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5723 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 06:15:30 +0000 *************** ✏️Title: CVE-2023-2921 - WordPress Short URL SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2023-2921 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 06:15:31 +0000 *************** ✏️Title: CVE-2025-1777 - WordPress BM Content Builder Cross-Site Scripting (XSS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1777 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 06:15:31 +0000 *************** ✏️Title: CVE-2025-1778 - "WordPress Art Theme Unauthorized Theme Option Deletion Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1778 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 06:15:31 +0000 *************** ✏️Title: CVE-2025-5724 - SourceCodester Student Result Management System Cross Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5724 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 06:15:32 +0000 *************** ✏️Title: CVE-2025-5725 - SourceCodester Student Result Management System Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5725 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 06:15:32 +0000 *************** ✏️Title: CVE-2025-5726 - SourceCodester Student Result Management System Cross-Site Scripting (XSS) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5726 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 07:13:58 GMT *************** ✏️Title: Bounty Hacker : TryHackMe Write-Up *************** 📎Link: https://medium.com/p/025a45fbb8b2 *************** ⚙️Tags: #beginner #security #tryhackme_walkthrough #pentesting #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 06:35:43 GMT *************** ✏️Title: HTB — Fluffy Writeup *************** 📎Link: https://medium.com/p/d1aaf09b6e2b *************** ⚙️Tags: #hackthebox #hackthebox_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:29:48 +0200 *************** ✏️Title: CVE-2024-46941 | Vivo SystemUI Component Protection Setting permissions *************** 📎Link: https://vuldb.com/?id.311315 *************** ⚙️Information: #Vendor: Vivo #Product: SystemUI #Type: Smartphone Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:31:40 +0200 *************** ✏️Title: CVE-2025-5760 | Simple History Plugin up to 5.8.1 on WordPress Detective Mode append_debug_info_to_context information disclosure *************** 📎Link: https://vuldb.com/?id.311316 *************** ⚙️Information: #Product: Simple History Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:31:52 +0200 *************** ✏️Title: CVE-2025-5239 | Domain for Sale Plugin up to 3.0.10 on WordPress class_name cross site scripting *************** 📎Link: https://vuldb.com/?id.311317 *************** ⚙️Information: #Product: Domain for Sale Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 08:01:55 +0200 *************** ✏️Title: CVE-2025-4673 | Google Go up to 1.23.9/1.24.3 net-http Proxy-Authorization/Proxy-Authenticate cross-domain policy *************** 📎Link: https://vuldb.com/?id.311318 *************** ⚙️Information: #Vendor: Google #Product: Go #Type: Programming Language Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 08:02:34 +0200 *************** ✏️Title: CVE-2025-0913 | Google Go up to 1.23.9/1.24.3 File os.OpenFile symlink *************** 📎Link: https://vuldb.com/?id.311319 *************** ⚙️Information: #Vendor: Google #Product: Go #Type: Programming Language Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 08:03:12 +0200 *************** ✏️Title: CVE-2025-22874 | Google Go up to 1.23.9/1.24.3 crypto-x509 VerifyOptions.KeyUsages certificate validation *************** 📎Link: https://vuldb.com/?id.311320 *************** ⚙️Information: #Vendor: Google #Product: Go #Type: Programming Language Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 08:14:26 +0200 *************** ✏️Title: CVE-2023-2921 | Short URL Plugin up to 1.6.8 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.311321 *************** ⚙️Information: #Product: Short URL Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security