Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:21:22 +0200 *************** ✏️Title: CVE-2025-23098 | Samsung Mobile Processor Exynos up to 2200 use after free *************** 📎Link: https://vuldb.com/?id.311025 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:22:00 +0200 *************** ✏️Title: CVE-2025-23097 | Samsung Mobile Processor Exynos 1380 out-of-bounds write *************** 📎Link: https://vuldb.com/?id.311026 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:33:53 +0200 *************** ✏️Title: CVE-2025-5569 | IdeaCMS up to 1.7 getList.html Article/Goods Field sql injection (ICBVWE) *************** 📎Link: https://vuldb.com/?id.311027 *************** ⚙️Information: #Product: IdeaCMS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:41:08 +0200 *************** ✏️Title: CVE-2025-5571 | D-Link DCS-932L 2.18.01 /setSystemAdmin AdminID os command injection *************** 📎Link: https://vuldb.com/?id.311028 *************** ⚙️Information: #Vendor: D_Link #Product: DCS_932L #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:41:10 +0200 *************** ✏️Title: CVE-2025-5572 | D-Link DCS-932L 2.18.01 /setSystemEmail EmailSMTPPortNumber stack-based overflow *************** 📎Link: https://vuldb.com/?id.311029 *************** ⚙️Information: #Vendor: D_Link #Product: DCS_932L #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:41:12 +0200 *************** ✏️Title: CVE-2025-5573 | D-Link DCS-932L 2.18.01 /setSystemWizard setSystemWizard/setSystemControl AdminID os command injection *************** 📎Link: https://vuldb.com/?id.311030 *************** ⚙️Information: #Vendor: D_Link #Product: DCS_932L #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:46:50 +0200 *************** ✏️Title: CVE-2025-5574 | PHPGurukul Dairy Farm Shop Management System 1.3 /add-company.php companyname sql injection *************** 📎Link: https://vuldb.com/?id.311031 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Dairy Farm Shop Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:46:52 +0200 *************** ✏️Title: CVE-2025-5575 | PHPGurukul Dairy Farm Shop Management System 1.3 /add-product.php productname sql injection *************** 📎Link: https://vuldb.com/?id.311032 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Dairy Farm Shop Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:46:53 +0200 *************** ✏️Title: CVE-2025-5576 | PHPGurukul Dairy Farm Shop Management System 1.3 bwdate-report-details.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.311033 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Dairy Farm Shop Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:46:55 +0200 *************** ✏️Title: CVE-2025-5577 | PHPGurukul Dairy Farm Shop Management System 1.3 /profile.php mobilenumber sql injection *************** 📎Link: https://vuldb.com/?id.311034 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Dairy Farm Shop Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:46:56 +0200 *************** ✏️Title: CVE-2025-5578 | PHPGurukul Dairy Farm Shop Management System 1.3 sales-report-details.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.311035 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Dairy Farm Shop Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:46:58 +0200 *************** ✏️Title: CVE-2025-5579 | PHPGurukul Dairy Farm Shop Management System 1.3 /search-product.php productname sql injection *************** 📎Link: https://vuldb.com/?id.311036 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Dairy Farm Shop Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:51:35 +0200 *************** ✏️Title: CVE-2025-5580 | CodeAstro Real Estate Management System 1.0 /login.php email sql injection *************** 📎Link: https://vuldb.com/?id.311037 *************** ⚙️Information: #Vendor: CodeAstro #Product: Real Estate Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:51:37 +0200 *************** ✏️Title: CVE-2025-5581 | CodeAstro Real Estate Management System 1.0 /admin/index.php User sql injection *************** 📎Link: https://vuldb.com/?id.311038 *************** ⚙️Information: #Vendor: CodeAstro #Product: Real Estate Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:51:39 +0200 *************** ✏️Title: CVE-2025-5582 | CodeAstro Real Estate Management System 1.0 /profile.php content sql injection *************** 📎Link: https://vuldb.com/?id.311039 *************** ⚙️Information: #Vendor: CodeAstro #Product: Real Estate Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:51:40 +0200 *************** ✏️Title: CVE-2025-5583 | CodeAstro Real Estate Management System 1.0 /register.php sql injection *************** 📎Link: https://vuldb.com/?id.311040 *************** ⚙️Information: #Vendor: CodeAstro #Product: Real Estate Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:52:38 +0200 *************** ✏️Title: CVE-2025-49001 | DataEase up to 2.10.9 Secret Verification improper authentication *************** 📎Link: https://vuldb.com/?id.311041 *************** ⚙️Information: #Product: DataEase #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:52:50 +0200 *************** ✏️Title: CVE-2025-49002 | DataEase up to 2.10.9 Incomplete Fix CVE-2025-32966 authentication spoofing *************** 📎Link: https://vuldb.com/?id.311042 *************** ⚙️Information: #Product: DataEase #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:53:17 +0200 *************** ✏️Title: CVE-2025-48999 | DataEase up to 2.10.9 Incomplete Fix CVE-2025-46566 getUrlType Hostname communication channel to intended endpoints *************** 📎Link: https://vuldb.com/?id.311043 *************** ⚙️Information: #Product: DataEase #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 22:53:42 +0200 *************** ✏️Title: CVE-2025-5482 | Sunshine Photo Cart Plugin up to 3.4.11 on WordPress password recovery *************** 📎Link: https://vuldb.com/?id.311044 *************** ⚙️Information: #Product: Sunshine Photo Cart Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security