Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 10:22:10 +0200 *************** ✏️Title: CVE-2025-5249 | PHPGurukul News Portal Project 4.1 /admin/add-category.php Category sql injection *************** 📎Link: https://vuldb.com/?id.310351 *************** ⚙️Information: #Vendor: PHPGurukul #Product: News Portal Project #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 10:22:11 +0200 *************** ✏️Title: CVE-2025-5250 | PHPGurukul News Portal Project 4.1 /admin/edit-category.php Category sql injection *************** 📎Link: https://vuldb.com/?id.310352 *************** ⚙️Information: #Vendor: PHPGurukul #Product: News Portal Project #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 10:22:13 +0200 *************** ✏️Title: CVE-2025-5251 | PHPGurukul News Portal Project 4.1 edit-subcategory.php Category sql injection *************** 📎Link: https://vuldb.com/?id.310353 *************** ⚙️Information: #Vendor: PHPGurukul #Product: News Portal Project #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 10:22:15 +0200 *************** ✏️Title: CVE-2025-5252 | PHPGurukul News Portal Project 4.1 /admin/edit-subadmin.php emailid sql injection *************** 📎Link: https://vuldb.com/?id.310354 *************** ⚙️Information: #Vendor: PHPGurukul #Product: News Portal Project #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:53:45 +0200 *************** ✏️Title: CVE-2025-41652 | Weidmueller IE-SW-VL05M-5TX reliance on security through obscurity (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310355 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:53:46 +0200 *************** ✏️Title: CVE-2025-4412 | SparkLabs Viscosity up to 1.11.4 on macOS viscosity_openvpn default permission *************** 📎Link: https://vuldb.com/?id.310356 *************** ⚙️Information: #Vendor: SparkLabs #Product: Viscosity #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 27 May 2025 22:40:09 GMT *************** ✏️Title: BUGCODE_NDIS_DRIVER nel momento in cui click click *************** 📎Link: https://medium.com/p/fba39b4ea7ca *************** ⚙️Tags: #bsod #bugs #bugcode *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:54:08 +0200 *************** ✏️Title: CVE-2025-41649 | Weidmueller IE-SW-VL05M-5TX out-of-bounds write (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310357 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:54:40 +0200 *************** ✏️Title: CVE-2025-41653 | Weidmueller IE-SW-VL05M-5TX HTTP Request insufficient resource pool (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310358 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:54:53 +0200 *************** ✏️Title: CVE-2025-41651 | Weidmueller IE-SW-VL05M-5TX missing authentication (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310359 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 13:55:00 +0200 *************** ✏️Title: CVE-2025-41650 | Weidmueller IE-SW-VL05M-5TX improper validation of specified type of input (VDE-2025-044) *************** 📎Link: https://vuldb.com/?id.310360 *************** ⚙️Information: #Vendor: Weidmueller #Product: IE_SW_VL05M_5TX/IE_SW_VL05MT_5TX/IE_SW_VL08MT_8TX/IE_SW_VL08MT_5TX_1SC_2SCS/IE_SW_VL08MT_6TX_2SC/IE_SW_VL08MT_6TX_2ST/IE_SW_VL08MT_6TX_2SCS/IE_SW_PL10M_3GT_7TX/IE_SW_PL10MT_3GT_7TX/IE_SW_PL16M_16TX/IE_SW_PL16MT_16TX/IE_SW_PL18M_2GC_16TX/IE_SW_PL18MT_2GC_16TX #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:09:20 +0200 *************** ✏️Title: CVE-2025-5266 | Mozilla Firefox up to 138 cross-domain policy *************** 📎Link: https://vuldb.com/?id.310361 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:10 +0200 *************** ✏️Title: CVE-2025-5268 | Mozilla Firefox up to 138 memory corruption (Nessus ID 237297) *************** 📎Link: https://vuldb.com/?id.310362 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:10 +0200 *************** ✏️Title: CVE-2025-5268 | Mozilla Thunderbird up to 138 memory corruption (Nessus ID 237297) *************** 📎Link: https://vuldb.com/?id.310363 *************** ⚙️Information: #Vendor: Mozilla #Product: Thunderbird #Type: Mail Client Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:20 +0200 *************** ✏️Title: CVE-2025-5269 | Mozilla Firefox ESR up to 128.10 memory corruption *************** 📎Link: https://vuldb.com/?id.310364 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox ESR #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:20 +0200 *************** ✏️Title: CVE-2025-5269 | Mozilla Thunderbird up to 128.10 memory corruption *************** 📎Link: https://vuldb.com/?id.310365 *************** ⚙️Information: #Vendor: Mozilla #Product: Thunderbird #Type: Mail Client Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:27 +0200 *************** ✏️Title: CVE-2025-5272 | Mozilla Firefox up to 138 memory corruption (Nessus ID 237299) *************** 📎Link: https://vuldb.com/?id.310366 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:10:42 +0200 *************** ✏️Title: CVE-2025-5262 | Mozilla Firefox up to 138 WebRTC vpx_codec_enc_init_multi memory corruption (Nessus ID 237301) *************** 📎Link: https://vuldb.com/?id.310367 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:11:06 +0200 *************** ✏️Title: CVE-2025-5263 | Mozilla Firefox up to 138.0.4 cross-domain policy (Nessus ID 237301) *************** 📎Link: https://vuldb.com/?id.310368 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 15:11:14 +0200 *************** ✏️Title: CVE-2025-5267 | Mozilla Firefox up to 138 clickjacking *************** 📎Link: https://vuldb.com/?id.310369 *************** ⚙️Information: #Vendor: Mozilla #Product: Firefox #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security