Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 20:06:50 +0200 *************** ✏️Title: CVE-2025-5876 | Lucky LM-520-SC/LM-520-FSC/LM-520-FSC-SAM up to 20250321 missing authentication *************** 📎Link: https://vuldb.com/?id.311635 *************** ⚙️Information: #Vendor: Lucky #Product: LM_520_SC/LM_520_FSC/LM_520_FSC_SAM #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Firewall *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 20:10:12 +0200 *************** ✏️Title: CVE-2025-5877 | Fengoffice Feng Office 3.2.2.1 Document Upload ApplicationDataObject.class.php xml external entity reference *************** 📎Link: https://vuldb.com/?id.311636 *************** ⚙️Information: #Vendor: Fengoffice #Product: Feng Office #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 20:16:17 +0200 *************** ✏️Title: CVE-2025-5879 | WuKongOpenSource WukongCRM 9.0 File Upload AdminSysConfigController.java cross site scripting *************** 📎Link: https://vuldb.com/?id.311637 *************** ⚙️Information: #Vendor: WuKongOpenSource #Product: WukongCRM #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 20:18:05 +0200 *************** ✏️Title: CVE-2025-5880 | Whistle 2.9.98 get-temp-file filename path traversal *************** 📎Link: https://vuldb.com/?id.311638 *************** ⚙️Information: #Product: Whistle #Risk: problematic #Local: No #Remote: Partially #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 18:53:56 GMT *************** ✏️Title: Day 16: Even More CSRF *************** 📎Link: https://medium.com/p/a4eb96ae9254 *************** ⚙️Tags: #cybersecurity #ethical_hacking #csrf #penetration_testing #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 18:08:49 GMT *************** ✏️Title: Your Ultimate Guide to Receiving INT OS $INTOS Tokens *************** 📎Link: https://medium.com/p/e0f0585c75a8 *************** ⚙️Tags: #osint #airdrop #into #crypto *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 17:52:27 GMT *************** ✏️Title: Strutted HTB Walkthrough *************** 📎Link: https://medium.com/p/31bd09097eb0 *************** ⚙️Tags: #oscp_preparation #infosec #cybersecurity #pentesting #htb_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 18:04:37 GMT *************** ✏️Title: Is anyone Using AI for Bug Triage and Bug Assignment to Developers ? *************** 📎Link: https://medium.com/p/276f5d0340be *************** ⚙️Tags: #bugs #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:41:42 +0200 *************** ✏️Title: CVE-2025-5865 | RT-Thread 5.1.0 Parameter lwp_syscall.c sys_select timeout memory corruption (Issue 10298) *************** 📎Link: https://vuldb.com/?id.311624 *************** ⚙️Information: #Product: RT_Thread #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:41:44 +0200 *************** ✏️Title: CVE-2025-5866 | RT-Thread 5.1.0 lwp_syscall.c sys_sigprocmask how array index (Issue 10300) *************** 📎Link: https://vuldb.com/?id.311625 *************** ⚙️Information: #Product: RT_Thread #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:41:45 +0200 *************** ✏️Title: CVE-2025-5867 | RT-Thread 5.1.0 lwp_syscall.c csys_sendto null pointer dereference (Issue 10299) *************** 📎Link: https://vuldb.com/?id.311626 *************** ⚙️Information: #Product: RT_Thread #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:41:46 +0200 *************** ✏️Title: CVE-2025-5868 | RT-Thread 5.1.0 lwp_syscall.c sys_thread_sigprocmask how array index (Issue 10303) *************** 📎Link: https://vuldb.com/?id.311627 *************** ⚙️Information: #Product: RT_Thread #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:41:48 +0200 *************** ✏️Title: CVE-2025-5869 | RT-Thread 5.1.0 lwp_syscall.c sys_recvfrom memory corruption (Issue 10304) *************** 📎Link: https://vuldb.com/?id.311628 *************** ⚙️Information: #Product: RT_Thread #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:44:54 +0200 *************** ✏️Title: CVE-2025-5870 | TRENDnet TV-IP121W 1.1.1 Build 36 Web Interface /admin/setup.cgi improper authentication *************** 📎Link: https://vuldb.com/?id.311629 *************** ⚙️Information: #Vendor: TRENDnet #Product: TV_IP121W #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:49:40 +0200 *************** ✏️Title: CVE-2025-5871 | Papendorf SOL Connect Center 3.3.0.0 Web Interface missing authentication *************** 📎Link: https://vuldb.com/?id.311630 *************** ⚙️Information: #Vendor: Papendorf #Product: SOL Connect Center #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Firewall *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:51:43 +0200 *************** ✏️Title: CVE-2025-5872 | eGauge EG3000 Energy Monitor 3.6.3 Setting missing authentication *************** 📎Link: https://vuldb.com/?id.311631 *************** ⚙️Information: #Vendor: eGauge #Product: EG3000 Energy Monitor #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Firewall *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:54:57 +0200 *************** ✏️Title: CVE-2025-5873 | eCharge Hardy Barth Salia PLCC 2.2.0 Web UI /firmware.php media unrestricted upload *************** 📎Link: https://vuldb.com/?id.311632 *************** ⚙️Information: #Vendor: eCharge Hardy Barth #Product: Salia PLCC #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 19:58:26 +0200 *************** ✏️Title: CVE-2025-5874 | Redash up to 10.1.0/25.1.0 getattr /query_runner/python.py run_query sandbox *************** 📎Link: https://vuldb.com/?id.311633 *************** ⚙️Information: #Product: Redash #Risk: critical #Local: No #Remote: Partially #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 08 Jun 2025 20:04:10 +0200 *************** ✏️Title: CVE-2025-5875 | TP-Link TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n /bin/main sub_69064 text buffer overflow *************** 📎Link: https://vuldb.com/?id.311634 *************** ⚙️Information: #Vendor: TP_Link #Product: TL_IPC544EP_W4 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 08 Jun 2025 17:34:21 GMT *************** ✏️Title: Telnet Exploit on Metasploitable 2 Port 23 *************** 📎Link: https://medium.com/p/0a9ec4aa498b *************** ⚙️Tags: #hacker #hacking #telnet #cybersecurity #nmap *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security