Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 12:15:21 +0000 *************** ✏️Title: CVE-2025-5190 - WordPress Browse As Plugin Authentication Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5190 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 12:02:25 GMT *************** ✏️Title: Shodan.io — The Search Engine for Hackers ‍ *************** 📎Link: https://medium.com/p/38b05085572d *************** ⚙️Tags: #reconnaissance #shodan #bug_bounty #pentesting #discovery *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 12:11:54 GMT *************** ✏️Title: CTF Day(5) *************** 📎Link: https://medium.com/p/421663cda66d *************** ⚙️Tags: #cybersecurity #web_pen_testing #bug_bounty #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:02:06 +0200 *************** ✏️Title: CVE-2025-5369 | SourceCodester PHP Display Username After Login 1.0 /login.php sql injection *************** 📎Link: https://vuldb.com/?id.310662 *************** ⚙️Information: #Vendor: SourceCodester #Product: PHP Display Username After Login #Type: Programming Language Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:03:51 +0200 *************** ✏️Title: CVE-2025-5370 | PHPGurukul News Portal 4.1 forgot-password.php Username sql injection *************** 📎Link: https://vuldb.com/?id.310663 *************** ⚙️Information: #Vendor: PHPGurukul #Product: News Portal #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:23:22 +0200 *************** ✏️Title: CVE-2025-5371 | SourceCodester Health Center Patient Record Management System 1.0 /admin/admin.php Username sql injection *************** 📎Link: https://vuldb.com/?id.310664 *************** ⚙️Information: #Vendor: SourceCodester #Product: Health Center Patient Record Management System #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:27:07 +0200 *************** ✏️Title: CVE-2025-1763 | GitLab Enterprise Edition up to 17.9.6/17.10.4/17.11.0 Content Security Policy cross site scripting (Issue 521718) *************** 📎Link: https://vuldb.com/?id.310665 *************** ⚙️Information: #Vendor: GitLab #Product: Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:28:42 +0200 *************** ✏️Title: CVE-2025-5373 | PHPGurukul Online Birth Certificate System 2.0 users-applications.php userid sql injection *************** 📎Link: https://vuldb.com/?id.310666 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Birth Certificate System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:28:44 +0200 *************** ✏️Title: CVE-2025-5374 | PHPGurukul Online Birth Certificate System 2.0 all-applications.php del sql injection *************** 📎Link: https://vuldb.com/?id.310667 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Online Birth Certificate System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:28:45 +0200 *************** ✏️Title: CVE-2025-5375 | PHPGurukul HPGurukul Online Birth Certificate System 2.0 registered-users.php del sql injection *************** 📎Link: https://vuldb.com/?id.310668 *************** ⚙️Information: #Vendor: PHPGurukul #Product: HPGurukul Online Birth Certificate System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:32:25 +0200 *************** ✏️Title: CVE-2025-5376 | SourceCodester Health Center Patient Record Management System 1.0 /patient.php itr_no sql injection *************** 📎Link: https://vuldb.com/?id.310669 *************** ⚙️Information: #Vendor: SourceCodester #Product: Health Center Patient Record Management System #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:36:33 +0200 *************** ✏️Title: CVE-2025-5377 | Astun Technology iShare Maps 5.4.0 historic1.asp Zoom cross site scripting *************** 📎Link: https://vuldb.com/?id.310670 *************** ⚙️Information: #Vendor: Astun Technology #Product: iShare Maps #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:36:39 +0200 *************** ✏️Title: CVE-2025-5378 | Astun Technology iShare Maps 5.4.0 mycouncil2.aspx atTxtStreet cross site scripting *************** 📎Link: https://vuldb.com/?id.310671 *************** ⚙️Information: #Vendor: Astun Technology #Product: iShare Maps #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:39:55 +0200 *************** ✏️Title: CVE-2025-5379 | NuCom NC-WR744G 8.5.5 Build 20200530.307 Console Application CMCCAdmin/useradmin/CUAdmin hard-coded credentials *************** 📎Link: https://vuldb.com/?id.310672 *************** ⚙️Information: #Vendor: NuCom #Product: NC_WR744G #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 16:00:00 +0530 *************** ✏️Title: From the "Department of No" to a "Culture of Yes": A Healthcare CISO's Journey to Enabling Modern Care *************** 📎Link: https://thehackernews.com/2025/05/from-department-of-no-to-culture-of-yes.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 16:42:00 +0530 *************** ✏️Title: China-Linked Hackers Exploit SAP and SQL Server Flaws in Attacks Across Asia and Brazil *************** 📎Link: https://thehackernews.com/2025/05/china-linked-hackers-exploit-sap-and.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 09:15:23 +0000 *************** ✏️Title: CVE-2025-48334 - BinaryCarpenter Woo Slider Pro Missing Authorization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48334 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 09:15:25 +0000 *************** ✏️Title: CVE-2025-48912 - Apache Superset SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48912 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 09:15:25 +0000 *************** ✏️Title: CVE-2025-4633 - Airpointer Default Credentials Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4633 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 09:15:25 +0000 *************** ✏️Title: CVE-2025-4634 - Airpointer Local File Inclusion Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4634 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security