Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 10:27:36 +0100 *************** ✏️Title: CVE-2025-1172 | 1000 Projects Bookstore Management System 1.0 addtocart.php bcid sql injection *************** 📎Link: https://vuldb.com/?id.295076 *************** ⚙️Information: #Vendor: 1000 Projects #Product: Bookstore Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 10:27:38 +0100 *************** ✏️Title: CVE-2025-1173 | 1000 Projects Bookstore Management System 1.0 process_users_del.php id sql injection *************** 📎Link: https://vuldb.com/?id.295077 *************** ⚙️Information: #Vendor: 1000 Projects #Product: Bookstore Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 10:27:39 +0100 *************** ✏️Title: CVE-2025-1174 | 1000 Projects Bookstore Management System 1.0 Add Book Page process_book_add.php Book Name cross site scripting *************** 📎Link: https://vuldb.com/?id.295078 *************** ⚙️Information: #Vendor: 1000 Projects #Product: Bookstore Management System #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 11:23:52 +0100 *************** ✏️Title: CVE-2025-1176 | GNU Binutils 2.43 ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow *************** 📎Link: https://vuldb.com/?id.295079 *************** ⚙️Information: #Vendor: GNU #Product: Binutils #Type: Programming Tool Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 11:27:26 +0100 *************** ✏️Title: CVE-2025-1177 | dayrui XunRuiCMS 4.6.3 Linkage.php import_add deserialization *************** 📎Link: https://vuldb.com/?id.295080 *************** ⚙️Information: #Vendor: dayrui #Product: XunRuiCMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 11:52:42 +0100 *************** ✏️Title: CVE-2025-1178 | GNU Binutils 2.43 ld libbfd.c bfd_putl64 memory corruption *************** 📎Link: https://vuldb.com/?id.295081 *************** ⚙️Information: #Vendor: GNU #Product: Binutils #Type: Programming Tool Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 11:55:23 +0100 *************** ✏️Title: CVE-2025-1179 | GNU Binutils 2.43 ld bfd/libbfd.c bfd_putl64 memory corruption *************** 📎Link: https://vuldb.com/?id.295082 *************** ⚙️Information: #Vendor: GNU #Product: Binutils #Type: Programming Tool Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 12:03:51 +0100 *************** ✏️Title: CVE-2025-1180 | GNU Binutils 2.43 ld bfd/elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption *************** 📎Link: https://vuldb.com/?id.295083 *************** ⚙️Information: #Vendor: GNU #Product: Binutils #Type: Programming Tool Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 12:06:36 +0100 *************** ✏️Title: CVE-2025-1181 | GNU Binutils 2.43 ld bfd/elflink.c _bfd_elf_gc_mark_rsec memory corruption *************** 📎Link: https://vuldb.com/?id.295084 *************** ⚙️Information: #Vendor: GNU #Product: Binutils #Type: Programming Tool Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 12:07:45 +0100 *************** ✏️Title: CVE-2024-11831 | npm-serialize-javascript up to 6.0.1 cross site scripting *************** 📎Link: https://vuldb.com/?id.295085 *************** ⚙️Information: #Product: npm_serialize_javascript #Type: Software Library #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 12:08:59 +0100 *************** ✏️Title: CVE-2025-1182 | GNU Binutils 2.43 ld bfd/elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption *************** 📎Link: https://vuldb.com/?id.295086 *************** ⚙️Information: #Vendor: GNU #Product: Binutils #Type: Programming Tool Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 12:10:27 +0100 *************** ✏️Title: CVE-2025-1183 | CodeZips Gym Management System 1.0 more-userprofile.php login_id sql injection *************** 📎Link: https://vuldb.com/?id.295087 *************** ⚙️Information: #Vendor: CodeZips #Product: Gym Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 12:14:36 +0100 *************** ✏️Title: CVE-2025-1184 | pihome-shc PiHome 1.77 ajax.php?Ajax=GetModal_MQTTEdit id sql injection *************** 📎Link: https://vuldb.com/?id.295088 *************** ⚙️Information: #Vendor: pihome_shc #Product: PiHome #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 12:14:38 +0100 *************** ✏️Title: CVE-2025-1185 | pihome-shc PiHome 2.0 ajax.php?Ajax=GetModal_Sensor_Graph sql injection *************** 📎Link: https://vuldb.com/?id.295089 *************** ⚙️Information: #Vendor: pihome_shc #Product: PiHome #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 12:20:17 +0100 *************** ✏️Title: CVE-2025-1186 | dayrui XunRuiCMS up to 4.6.4 /Control/Api/Api.php thumb deserialization *************** 📎Link: https://vuldb.com/?id.295090 *************** ⚙️Information: #Vendor: dayrui #Product: XunRuiCMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 14:39:00 +0530 *************** ✏️Title: Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities *************** 📎Link: https://thehackernews.com/2025/02/zimbra-releases-security-updates-for.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 15:14:00 +0530 *************** ✏️Title: DragonRank Exploits IIS Servers with BadIIS Malware for SEO Fraud and Gambling Redirects *************** 📎Link: https://thehackernews.com/2025/02/dragonrank-exploits-iis-servers-with.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 09:05:56 GMT *************** ✏️Title: Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters —… *************** 📎Link: https://medium.com/p/ee347b9e19d9 *************** ⚙️Tags: #exploiting_onclick_xss #bug_bounty #portswigger_xss_lab #stored_xss_bypass #bypass_html_encoding *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:54:45 GMT *************** ✏️Title: SOCIAL MEDIA HACKERS FOR HIRE | BEST PLATFORM TO HIRE A PROFESSIONAL HACKER | AT SMATCHOICEHACKERS.C *************** 📎Link: https://medium.com/p/6bafba75b106 *************** ⚙️Tags: #hacking #help #apps #account #social_media *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:55:10 GMT *************** ✏️Title: Hackers Steal These Things – Keep Them Safe! *************** 📎Link: https://medium.com/p/5d3c43f4bef7 *************** ⚙️Tags: #web_development #writing #technology #data_engineering #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security