Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-5249 - PHPGurukul News Portal Project SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5249 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-5250 - PHPGurukul News Portal Project SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5250 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-5251 - PHPGurukul News Portal Project SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5251 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 12:24:00 +0530 *************** ✏️Title: Russia-Linked Hackers Target Tajikistan Government with Weaponized Word Documents *************** 📎Link: https://thehackernews.com/2025/05/russia-linked-hackers-target-tajikistan.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 12:41:00 +0530 *************** ✏️Title: Hackers Are Calling Your Office: FBI Alerts Law Firms to Luna Moth’s Stealth Phishing Campaign *************** 📎Link: https://thehackernews.com/2025/05/hackers-are-calling-your-office-fbi.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 15:22:00 +0530 *************** ✏️Title: Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers *************** 📎Link: https://thehackernews.com/2025/05/employees-searching-payroll-portals-on.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 16:30:00 +0530 *************** ✏️Title: AI Agents and the Non‑Human Identity Crisis: How to Deploy AI More Securely at Scale *************** 📎Link: https://thehackernews.com/2025/05/ai-agents-and-nonhuman-identity-crisis.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 17:21:00 +0530 *************** ✏️Title: Russian Hackers Breach 20+ NGOs Using Evilginx Phishing via Fake Microsoft Entra Pages *************** 📎Link: https://thehackernews.com/2025/05/russian-hackers-breach-20-ngos-using.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 21:53:00 +0530 *************** ✏️Title: New Self-Spreading Malware Infects Docker Containers to Mine Dero Cryptocurrency *************** 📎Link: https://thehackernews.com/2025/05/new-self-spreading-malware-infects.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:12:07 +0200 *************** ✏️Title: CVE-2025-5270 | Mozilla Firefox up to 138 cleartext transmission *************** 📎Link: https://vuldb.com/?id.310372 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:12:23 +0200 *************** ✏️Title: CVE-2025-5271 | Mozilla Firefox up to 138 Devtools injection *************** 📎Link: https://vuldb.com/?id.310373 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:39:49 +0200 *************** ✏️Title: CVE-2025-48796 | GIMP ANI File Parser ani_load_image stack-based overflow *************** 📎Link: https://vuldb.com/?id.310374 *************** ⚙️Information: #Product: GIMP #Type: Image Processing Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:39:50 +0200 *************** ✏️Title: CVE-2025-48797 | GIMP TGA Image Parser heap-based overflow *************** 📎Link: https://vuldb.com/?id.310375 *************** ⚙️Information: #Product: GIMP #Type: Image Processing Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:39:56 +0200 *************** ✏️Title: CVE-2025-48798 | GIMP XCF Image Parser use after free *************** 📎Link: https://vuldb.com/?id.310376 *************** ⚙️Information: #Product: GIMP #Type: Image Processing Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:40:11 +0200 *************** ✏️Title: CVE-2025-3704 | DBAR Productions Volunteer Sign Up Sheets Plugin up to 5.5.4 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.310377 *************** ⚙️Information: #Vendor: DBAR Productions #Product: Volunteer Sign Up Sheets Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:40:24 +0200 *************** ✏️Title: CVE-2025-2236 | OpenText Advanced Authentication up to 6.4 exposure of sensitive system information to an unauthorized control sphere *************** 📎Link: https://vuldb.com/?id.310378 *************** ⚙️Information: #Vendor: OpenText #Product: Advanced Authentication #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:40:48 +0200 *************** ✏️Title: CVE-2025-48383 | codingjoe django-select2 up to 8.4.0 on Select2 ModelSelect2MultipleWidget/ModelSelect2Widget transmission of private resources into a new sphere ('resource leak') (GHSA-wjrh-hj83-3wh7) *************** 📎Link: https://vuldb.com/?id.310379 *************** ⚙️Information: #Vendor: codingjoe #Product: django_select2 #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:41:09 +0200 *************** ✏️Title: CVE-2025-48370 | auth-js up to 2.69.0 API improper authentication (GHSA-8r88-6cj9-9fh5) *************** 📎Link: https://vuldb.com/?id.310380 *************** ⚙️Information: #Product: auth_js #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:41:29 +0200 *************** ✏️Title: CVE-2024-56193 | Google Android Bluetooth Adapter information disclosure *************** 📎Link: https://vuldb.com/?id.310381 *************** ⚙️Information: #Vendor: Google #Product: Android #Type: Smartphone Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 18:41:37 +0200 *************** ✏️Title: CVE-2025-27700 | Google Android Local Privilege Escalation *************** 📎Link: https://vuldb.com/?id.310382 *************** ⚙️Information: #Vendor: Google #Product: Android #Type: Smartphone Operating System #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security