Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:23:46 GMT *************** ✏️Title: HTB Season 6: Caption Machine Walk-through *************** 📎Link: https://medium.com/p/ce4fbc251d12 *************** ⚙️Tags: #hackthebox #ctf #walkthrough #htb #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:07:12 GMT *************** ✏️Title: ️ Laporan Insiden Keamanan Siber *************** 📎Link: https://medium.com/p/cfd0d116055a *************** ⚙️Tags: #incident_response #wireshark #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 05:15:20 +0000 *************** ✏️Title: CVE-2025-4797 - "Golo - City Travel Guide WordPress Theme Privilege Escalation via Account Takeover" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4797 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 06:09:04 +0000 *************** ✏️Title: Splunk Enterprise XSS Vulnerability Let Attackers Execute Unauthorized JavaScript Code *************** 📎Link: https://cybersecuritynews.com/?p=109475 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:05:45 +0200 *************** ✏️Title: CVE-2025-5495 | Netgear WNR614 1.1.0.28_1.0.1WW URL improper authentication *************** 📎Link: https://vuldb.com/?id.310911 *************** ⚙️Information: #Vendor: Netgear #Product: WNR614 #Type: Wireless LAN Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:19:42 +0200 *************** ✏️Title: CVE-2025-5497 | slackero phpwcms up to 1.9.45/1.10.8 Feedimport Module processing.inc.php cnt_text deserialization *************** 📎Link: https://vuldb.com/?id.310912 *************** ⚙️Information: #Vendor: slackero #Product: phpwcms #Type: Messaging Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:19:44 +0200 *************** ✏️Title: CVE-2025-5498 | slackero phpwcms up to 1.9.45/1.10.8 Custom Source Tab cnt21.readform.inc.php file_get_contents/is_file cpage_custom deserialization *************** 📎Link: https://vuldb.com/?id.310913 *************** ⚙️Information: #Vendor: slackero #Product: phpwcms #Type: Messaging Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:20:00 +0200 *************** ✏️Title: CVE-2025-5499 | slackero phpwcms up to 1.9.45/1.10.8 image_resized.php is_file/getimagesize imgfile deserialization *************** 📎Link: https://vuldb.com/?id.310914 *************** ⚙️Information: #Vendor: slackero #Product: phpwcms #Type: Messaging Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:25:58 +0200 *************** ✏️Title: CVE-2025-5501 | Open5GS up to 2.7.3 NGAP PathSwitchRequest Message src/smf/ngap-handler.c ngap_handle_path_switch_request_transfer assertion (Issue 3909) *************** 📎Link: https://vuldb.com/?id.310915 *************** ⚙️Information: #Product: Open5GS #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:36:41 +0200 *************** ✏️Title: CVE-2025-5502 | TOTOLINK X15 1.0.0-B20230714.1105 /boafrm/formMapReboot deviceMacAddr command injection *************** 📎Link: https://vuldb.com/?id.310916 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:36:45 +0200 *************** ✏️Title: CVE-2025-5503 | TOTOLINK X15 1.0.0-B20230714.1105 /boafrm/formMapReboot deviceMacAddr stack-based overflow *************** 📎Link: https://vuldb.com/?id.310917 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X15 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:48:37 +0200 *************** ✏️Title: CVE-2025-5504 | TOTOLINK X2000R 1.0.0-B20230726.1108 /boafrm/formWsc peerRptPin command injection *************** 📎Link: https://vuldb.com/?id.310918 *************** ⚙️Information: #Vendor: TOTOLINK #Product: X2000R #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:53:32 +0200 *************** ✏️Title: CVE-2025-5505 | TOTOLINK A3002RU 2.1.1-B20230720.1011 Virtual Server Page /boafrm/formPortFw service_type cross site scripting *************** 📎Link: https://vuldb.com/?id.310919 *************** ⚙️Information: #Vendor: TOTOLINK #Product: A3002RU #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:53:34 +0200 *************** ✏️Title: CVE-2025-5506 | TOTOLINK A3002RU 2.1.1-B20230720.1011 NAT Mapping Page Comment cross site scripting *************** 📎Link: https://vuldb.com/?id.310920 *************** ⚙️Information: #Vendor: TOTOLINK #Product: A3002RU #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:53:35 +0200 *************** ✏️Title: CVE-2025-5507 | TOTOLINK A3002RU 2.1.1-B20230720.1011 MAC Filtering Page Comment cross site scripting *************** 📎Link: https://vuldb.com/?id.310921 *************** ⚙️Information: #Vendor: TOTOLINK #Product: A3002RU #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 07:53:37 +0200 *************** ✏️Title: CVE-2025-5508 | TOTOLINK A3002RU 2.1.1-B20230720.1011 IP Port Filtering Page Comment cross site scripting *************** 📎Link: https://vuldb.com/?id.310922 *************** ⚙️Information: #Vendor: TOTOLINK #Product: A3002RU #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 05:18:34 GMT *************** ✏️Title: {CyberDefenders Write-up}OskiCategory: Threat Intel *************** 📎Link: https://medium.com/p/f45d1d7a674c *************** ⚙️Tags: No_Tags *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 05:19:02 GMT *************** ✏️Title: The Invisible Bottleneck: How IT Hierarchies Impact Growth *************** 📎Link: https://medium.com/p/2e23b65c3874 *************** ⚙️Tags: No_Tags *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 05:21:24 GMT *************** ✏️Title: 19 Billion Stolen Passwords?! Here’s Why You Should Care — And How to Beat the Hackers *************** 📎Link: https://medium.com/p/d3bff46be82f *************** ⚙️Tags: #passwords #computer_science #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 05:23:45 GMT *************** ✏️Title: How One Path Traversal in Grafana Unleashed XSS, Open Redirect and SSRF (CVE-2025–4123) *************** 📎Link: https://medium.com/p/b35245dccaab *************** ⚙️Tags: #grafana #cybersecurity #technology #bug_bounty #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security