Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 12:56:55 +0200 *************** ✏️Title: CVE-2025-5609 | Tenda AC18 15.03.05.05 /goform/AdvSetLanip fromadvsetlanip lanMask buffer overflow *************** 📎Link: https://vuldb.com/?id.311095 *************** ⚙️Information: #Vendor: Tenda #Product: AC18 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:00:14 +0200 *************** ✏️Title: CVE-2025-5610 | CodeAstro Real Estate Management System 1.0 submitpropertydelete.php ID sql injection *************** 📎Link: https://vuldb.com/?id.311096 *************** ⚙️Information: #Vendor: CodeAstro #Product: Real Estate Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 10:22:34 GMT *************** ✏️Title: ขโมยข้อมูลผ่าน Keyboard บน iOS *************** 📎Link: https://medium.com/p/c44965169727 *************** ⚙️Tags: #mobile_security #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:00:16 +0200 *************** ✏️Title: CVE-2025-5611 | CodeAstro Real Estate Management System 1.0 submitpropertyupdate.php ID sql injection *************** 📎Link: https://vuldb.com/?id.311097 *************** ⚙️Information: #Vendor: CodeAstro #Product: Real Estate Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 10:29:04 GMT *************** ✏️Title: URGENT REPORT – ORGANIZED SCAM RING OPERATING ON TELEGRAM #cardingscam *************** 📎Link: https://medium.com/p/6cf57040cf70 *************** ⚙️Tags: #carding_forums #bugbounty_writeup #infosec #information_security #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:05:03 +0200 *************** ✏️Title: CVE-2025-5612 | PHPGurukul Online Fire Reporting System 1.2 /reporting.php fullname sql injection *************** 📎Link: https://vuldb.com/?id.311098 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Fire Reporting System #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 10:41:50 GMT *************** ✏️Title: DGACTF — Ear *************** 📎Link: https://medium.com/p/3168c780220f *************** ⚙️Tags: #ctf #hacking #ctf_writeup #pentesting #hackathons *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:05:04 +0200 *************** ✏️Title: CVE-2025-5613 | PHPGurukul Online Fire Reporting System 1.2 /request-details.php requestid sql injection *************** 📎Link: https://vuldb.com/?id.311099 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Fire Reporting System #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:05:06 +0200 *************** ✏️Title: CVE-2025-5614 | PHPGurukul Online Fire Reporting System 1.2 search-report-result.php serachdata sql injection *************** 📎Link: https://vuldb.com/?id.311100 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Fire Reporting System #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:05:07 +0200 *************** ✏️Title: CVE-2025-5615 | PHPGurukul Online Fire Reporting System 1.2 /details.php requestid sql injection *************** 📎Link: https://vuldb.com/?id.311101 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Fire Reporting System #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:05:09 +0200 *************** ✏️Title: CVE-2025-5616 | PHPGurukul Online Fire Reporting System 1.2 /admin/profile.php mobilenumber sql injection *************** 📎Link: https://vuldb.com/?id.311102 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Fire Reporting System #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:05:10 +0200 *************** ✏️Title: CVE-2025-5617 | PHPGurukul Online Fire Reporting System 1.2 /admin/manage-teams.php teamid sql injection *************** 📎Link: https://vuldb.com/?id.311103 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Fire Reporting System #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:05:12 +0200 *************** ✏️Title: CVE-2025-5618 | PHPGurukul Online Fire Reporting System 1.2 /admin/edit-team.php teamid sql injection *************** 📎Link: https://vuldb.com/?id.311104 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Fire Reporting System #Type: Reporting Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 13:06:57 +0200 *************** ✏️Title: CVE-2025-5619 | Tenda CH22 1.0.0.1 /goform/addUserName formaddUserName Password stack-based overflow *************** 📎Link: https://vuldb.com/?id.311105 *************** ⚙️Information: #Vendor: Tenda #Product: CH22 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-5571 - D-Link DCS-932L OS Command Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5571 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-5572 - D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5572 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-5573 - D-Link DCS-932L OS Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5573 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:15:23 +0000 *************** ✏️Title: CVE-2025-5574 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5574 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:15:23 +0000 *************** ✏️Title: CVE-2025-5575 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5575 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 08:15:21 +0000 *************** ✏️Title: CVE-2024-13967 - EIBPORT Web Server Configuration Page Authentication Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13967 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security