Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:27:12 +0200 *************** ✏️Title: CVE-2025-5210 | PHPGurukul Employee Record Management System 1.3 /loginerms.php Email sql injection *************** 📎Link: https://vuldb.com/?id.310306 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Employee Record Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:27:13 +0200 *************** ✏️Title: CVE-2025-5211 | PHPGurukul Employee Record Management System 1.3 /myprofile.php EmpCode sql injection *************** 📎Link: https://vuldb.com/?id.310307 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Employee Record Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:27:15 +0200 *************** ✏️Title: CVE-2025-5212 | PHPGurukul Employee Record Management System 1.3 /admin/editempexp.php emp1name sql injection *************** 📎Link: https://vuldb.com/?id.310308 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Employee Record Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:33:45 +0200 *************** ✏️Title: CVE-2025-5213 | projectworlds Responsive E-Learning System 1.0 /admin/delete_file.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310309 *************** ⚙️Information: #Vendor: projectworlds #Product: Responsive E_Learning System #Type: Learning Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:35:46 +0200 *************** ✏️Title: CVE-2025-5214 | Kashipara Responsive Online Learing Platform 1.0 course_detail_user_new.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310310 *************** ⚙️Information: #Vendor: Kashipara #Product: Responsive Online Learing Platform #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:38:59 +0200 *************** ✏️Title: CVE-2025-5215 | D-Link DCS-5020L 1.01_B2 /rame/ptdc.cgi websReadEvent Authorization stack-based overflow *************** 📎Link: https://vuldb.com/?id.310311 *************** ⚙️Information: #Vendor: D_Link #Product: DCS_5020L #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:40:55 +0200 *************** ✏️Title: CVE-2025-5216 | PHPGurukul Student Record System 3.20 /login.php ID sql injection *************** 📎Link: https://vuldb.com/?id.310312 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Student Record System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:43:45 +0200 *************** ✏️Title: CVE-2025-5217 | FreeFloat FTP Server 1.0.0 RMDIR Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310313 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:43:46 +0200 *************** ✏️Title: CVE-2025-5218 | FreeFloat FTP Server 1.0.0 LITERAL Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310314 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:43:48 +0200 *************** ✏️Title: CVE-2025-5219 | FreeFloat FTP Server 1.0.0 ASCII Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310315 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:43:49 +0200 *************** ✏️Title: CVE-2025-5220 | FreeFloat FTP Server 1.0.0 GET Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310316 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:43:50 +0200 *************** ✏️Title: CVE-2025-5221 | FreeFloat FTP Server 1.0.0 QUOTE Command buffer overflow *************** 📎Link: https://vuldb.com/?id.310317 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:44:25 +0200 *************** ✏️Title: CVE-2025-4682 | Essential Blocks Plugin up to 5.4.0 on WordPress Slider Widget/Post Carousel Widget cross site scripting *************** 📎Link: https://vuldb.com/?id.310318 *************** ⚙️Information: #Product: Essential Blocks Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 12:34:38 GMT *************** ✏️Title: Organization Takeover via Privilege Escalation (IDOR) *************** 📎Link: https://medium.com/p/14786a2fa174 *************** ⚙️Tags: #idor #bug_bounty #cybersecurity #penetration_testing #writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 11:54:35 GMT *************** ✏️Title: BreachForums Boss Ordered to Pay $700K in Healthcare Data Breach Settlement: What It Means for… *************** 📎Link: https://medium.com/p/d831f112b6b2 *************** ⚙️Tags: #hacking #data_breach #digital_privacy #healthcare #healthcare_technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 12:21:38 GMT *************** ✏️Title: API5:2023 — Broken Function Level Authorization — PT-BR *************** 📎Link: https://medium.com/p/32f47a8e3134 *************** ⚙️Tags: #api #hacking #tutorial #technology #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 12:31:14 GMT *************** ✏️Title: Top 10 Security Tips to Keep Your Crypto Safe in 2025 *************** 📎Link: https://medium.com/p/6648e2e2f1ab *************** ⚙️Tags: #bitcoin #hacking #cryptocurrency_investment #scam #crypto *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 12:52:22 GMT *************** ✏️Title: Zimbabwe and OSINT: Unlocking Open Source Intelligence in Southern Africa *************** 📎Link: https://medium.com/p/4de77a02aa60 *************** ⚙️Tags: #search #search_engines #osint_tool #osint_investigation #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 12:54:34 GMT *************** ✏️Title: Israel and OSINT: Harnessing Open Source Intelligence in the Middle East *************** 📎Link: https://medium.com/p/55d984150d0d *************** ⚙️Tags: #search_engines #osint_investigation #osint_tool #osint #search *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 12:56:55 GMT *************** ✏️Title: India and OSINT: Exploring Open Source Intelligence in the World’s Largest Democracy *************** 📎Link: https://medium.com/p/b54adf05e7c8 *************** ⚙️Tags: #osint_investigation #osint_tool #search_engines #osint #search *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security