Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 11:35:14 +0200 *************** ✏️Title: CVE-2025-5856 | PHPGurukul BP Monitoring Management System 1.0 /registration.php emailid sql injection *************** 📎Link: https://vuldb.com/?id.311602 *************** ⚙️Information: #Vendor: PHPGurukul #Product: BP Monitoring Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 11:38:08 +0200 *************** ✏️Title: CVE-2025-5857 | code-projects Patient Record Management System 1.0 /urinalysis_record.php itr_no sql injection *************** 📎Link: https://vuldb.com/?id.311603 *************** ⚙️Information: #Vendor: code_projects #Product: Patient Record Management System #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 11:39:32 +0200 *************** ✏️Title: CVE-2025-5858 | PHPGurukul Nipah Virus Testing Management System 1.0 /patient-report.php searchdata sql injection *************** 📎Link: https://vuldb.com/?id.311604 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Nipah Virus Testing Management System #Type: Testing Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 11:39:34 +0200 *************** ✏️Title: CVE-2025-5859 | PHPGurukul Nipah Virus Testing Management System 1.0 /test-details.php assignto sql injection *************** 📎Link: https://vuldb.com/?id.311605 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Nipah Virus Testing Management System #Type: Testing Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 09:55:07 GMT *************** ✏️Title: ESC1 AD CS Misconfigurations exploitation — Active Directory Pentesting *************** 📎Link: https://medium.com/p/ff86bff6ae64 *************** ⚙️Tags: #hacking #active_directory #pentest #esc1 #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 13:31:00 +0530 *************** ✏️Title: Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025 *************** 📎Link: https://thehackernews.com/2025/06/malicious-browser-extensions-infect-722.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 09:03:43 GMT *************** ✏️Title: Memahami ICS/SCADA dan Ancaman Serangan Siber Terhadapnya *************** 📎Link: https://medium.com/p/dc763725ec2b *************** ⚙️Tags: #cybersecurity #scada_cyber_security #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 08:49:06 GMT *************** ✏️Title: What is Social Engineering? Real-World Examples That’ll Blow Your Mind *************** 📎Link: https://medium.com/p/41b98c236281 *************** ⚙️Tags: #social_engineering #cybersecurity #phishing #ethical_hacking #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 08:25:08 GMT *************** ✏️Title: Investigating with Splunk — TryHackME SOC L1 *************** 📎Link: https://medium.com/p/5ed7e742e320 *************** ⚙️Tags: #log_analysis #splunk #tryhackme_writeup #tryhackme #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 08:27:43 GMT *************** ✏️Title: TryHackMe | OAuth Vulnerabilities | WriteUp *************** 📎Link: https://medium.com/p/48f3f72439b3 *************** ⚙️Tags: #oauth #tryhackme_writeup #tryhackme_walkthrough #oauth2 #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 09:03:24 GMT *************** ✏️Title: TryHackMe Include *************** 📎Link: https://medium.com/p/93fa0505cd53 *************** ⚙️Tags: #writeup #tryhackme #ctf #cybersecurity #web_penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 09:01:32 GMT *************** ✏️Title: picoCTF —what’s a net cat *************** 📎Link: https://medium.com/p/31fc13bb3dff *************** ⚙️Tags: #ctf #ctf_walkthrough #picoctf #ctf_writeup #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-0316 exploit =============== 📎 https://sploitus.com/exploit?id=6F666CEF-2548-5541-8B75-0231AEE2FE07&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Code Injection in Xwiki exploit =============== 📎 https://sploitus.com/exploit?id=AE81CE34-AE2D-520F-9D1B-C50C25E2C321&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-5701 exploit =============== 📎 https://sploitus.com/exploit?id=E3E03105-4F0F-5A4B-99DF-C25BD432EE61&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Stack-based Buffer Overflow in Fortinet Fortimail exploit =============== 📎 https://sploitus.com/exploit?id=FCBD1D9F-62EC-597C-A62D-B4E5790BCE8D&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Cross-site Scripting in Cpanel exploit =============== 📎 https://sploitus.com/exploit?id=9365088C-EC21-55BB-AB71-18554D1F42DA&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Unrestricted Upload of File with Dangerous Type in Tecrail Responsive Filemanager exploit =============== 📎 https://sploitus.com/exploit?id=0C46CBD1-E3AD-567E-86B8-27EADF97D7BD&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Apache Tomcat 10.1.39 - Denial of Service (DoS) exploit =============== 📎 https://sploitus.com/exploit?id=EDB-ID:52318&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 08:09:06 GMT *************** ✏️Title: Stolen Property resources for OSINT investigators *************** 📎Link: https://medium.com/p/2100b4322344 *************** ⚙️Tags: #hacking #osint #osint_investigation #investigation #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security