Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 19:52:23 +0200 *************** ✏️Title: CVE-2025-5152 | Chanjet CRM up to 20250510 gblOrgID sql injection *************** 📎Link: https://vuldb.com/?id.310240 *************** ⚙️Information: #Vendor: Chanjet #Product: CRM #Type: Customer Relationship Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 19:55:33 +0200 *************** ✏️Title: CVE-2025-5153 | CMS Made Simple 2.2.21 Design Manager Module Description cross site scripting *************** 📎Link: https://vuldb.com/?id.310241 *************** ⚙️Information: #Product: CMS Made Simple #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 16:45:58 GMT *************** ✏️Title: How Google Attracts More Bug Bounty Hunters *************** 📎Link: https://medium.com/p/5dca91957032 *************** ⚙️Tags: #program #bug_bounty #psvr #vulnerability_reward #google *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 17:05:50 GMT *************** ✏️Title: Race Conditions: The Silent Exploit That Can Break Systems (and Earn Bounties) *************** 📎Link: https://medium.com/p/a35e7677c96a *************** ⚙️Tags: #threads #vulnerability #cybersecurity #bug_bounty #race_condition *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 16:58:24 GMT *************** ✏️Title: CORS (cross-origin resource sharing) *************** 📎Link: https://medium.com/p/226551329253 *************** ⚙️Tags: #pentesting #cors #web_penetration_testing #vulnerability #portswigger *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 15:45:50 GMT *************** ✏️Title: Day 5 of my AWS Pentesting journey — Privilege Escalation *************** 📎Link: https://medium.com/p/cfc60ffb3b9a *************** ⚙️Tags: #cloud_services #penetration_testing #cybersecurity #privilege_escalation #aws *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 17:21:35 GMT *************** ✏️Title: Day 1 — Python Foundations Refresher + Data Structures *************** 📎Link: https://medium.com/p/45b704270014 *************** ⚙️Tags: #tryhackme #python #pentesting #ai #hackthebox *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 16:00:54 GMT *************** ✏️Title: Mayhem | THM | Writeup *************** 📎Link: https://medium.com/p/bd7d37eed69a *************** ⚙️Tags: #soc #mayhem #tryhackme_writeup #forensics #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 17:26:10 GMT *************** ✏️Title: Cat Pictures — TryHackMe *************** 📎Link: https://medium.com/p/660c610ef73d *************** ⚙️Tags: #cat_pictures_tryhackme #tryhackme_writeup #tryhackme #cat_pictures #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 16:18:25 GMT *************** ✏️Title: PicoCTF 2025 | SSTI1 | CTF Writeup *************** 📎Link: https://medium.com/p/a5bf0d4977b5 *************** ⚙️Tags: #ctf #ctf_writeup #picoctf_2025 #red_team_exercises #web_exploitation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 15:15:24 +0000 *************** ✏️Title: CVE-2025-5126 - "FLIR AX8 Remote Command Injection Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5126 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 16:15:23 +0000 *************** ✏️Title: CVE-2025-5127 - FLIR AX8 Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5127 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 16:15:24 +0000 *************** ✏️Title: CVE-2025-5128 - ScriptAndTools Real-Estate-website-in-PHP SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5128 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 18:30:42 +0200 *************** ✏️Title: CVE-2025-5148 | FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd Pickle Data model.py load_state_dict deserialization *************** 📎Link: https://vuldb.com/?id.310236 *************** ⚙️Information: #Vendor: FunAudioLLM #Product: InspireMusic #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 14:50:32 GMT *************** ✏️Title: How to Prepare for OSCP exam if you’re broke *************** 📎Link: https://medium.com/p/585d3aa8615b *************** ⚙️Tags: #oscp_preparation #homelab #hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 15:24:36 GMT *************** ✏️Title: Time to Hack Password via Brute Force *************** 📎Link: https://medium.com/p/10a3139cdfa4 *************** ⚙️Tags: #passwords #brute_force #hacking #secure #brute_force_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 16:00:03 GMT *************** ✏️Title: El ataque del Gatito Ninja: Entendiendo XSS sin morir de aburrimiento *************** 📎Link: https://medium.com/p/06f827d84489 *************** ⚙️Tags: #bug_bounty_tips #hacking #bug_bounty #xss_attack #bug_bounty_hunter *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 16:20:31 GMT *************** ✏️Title: .hack//SIGN: Sessiz Bir Devrim ve Kaybolmuşluk Hissi *************** 📎Link: https://medium.com/p/94c068fb68f5 *************** ⚙️Tags: #hacking #hackathons #revelation #hacks #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 16:28:35 GMT *************** ✏️Title: EscapeTwo *************** 📎Link: https://medium.com/p/dc5544831b41 *************** ⚙️Tags: #mssql #cybersecurity #pentesting #active_directory #hack_the_box_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 13:41:11 GMT *************** ✏️Title: Bugs Word Search Puzzle Book: 50+ Fun & Easy-to-Read Puzzles Featuring Insects, Creepy Crawlies… *************** 📎Link: https://medium.com/p/cd08eb091a75 *************** ⚙️Tags: #bugs_word_search #bugs_lovers #insects #bugs #bugs_puzzle *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security