Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:01:10 +0200 *************** ✏️Title: CVE-2025-5671 | TOTOLINK N302R Plus up to 3.4.0-B20201028 HTTP POST Request /boafrm/formPortFw service_type buffer overflow *************** 📎Link: https://vuldb.com/?id.311160 *************** ⚙️Information: #Vendor: TOTOLINK #Product: N302R Plus #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:01:11 +0200 *************** ✏️Title: CVE-2025-5672 | TOTOLINK N302R Plus up to 3.4.0-B20201028 HTTP POST Request /boafrm/formFilter url buffer overflow *************** 📎Link: https://vuldb.com/?id.311161 *************** ⚙️Information: #Vendor: TOTOLINK #Product: N302R Plus #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:04:36 +0200 *************** ✏️Title: CVE-2025-5674 | code-projects Patient Record Management System 1.0 urinalysis_form.php urinalysis_id sql injection *************** 📎Link: https://vuldb.com/?id.311162 *************** ⚙️Information: #Vendor: code_projects #Product: Patient Record Management System #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:05:47 +0200 *************** ✏️Title: CVE-2025-5675 | Campcodes Online Teacher Record Management System 1.0 bwdates-reports-details.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.311163 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Teacher Record Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:07:38 +0200 *************** ✏️Title: CVE-2025-5676 | Campcodes Online Recruitment Management System 1.0 ajax.php?action=login Username sql injection *************** 📎Link: https://vuldb.com/?id.311164 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Recruitment Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:07:39 +0200 *************** ✏️Title: CVE-2025-5677 | Campcodes Online Recruitment Management System 1.0 ajax.php?action=save_application position_id sql injection *************** 📎Link: https://vuldb.com/?id.311165 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Recruitment Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:22:46 +0200 *************** ✏️Title: CVE-2025-5679 | Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0 SysToolsController.java parseStrByFreeMarker str deserialization (ICAQWG) *************** 📎Link: https://vuldb.com/?id.311166 *************** ⚙️Information: #Vendor: Shenzhen Dashi Tongzhou Information Technology #Product: AgileBPM #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:22:48 +0200 *************** ✏️Title: CVE-2025-5680 | Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0 Groovy Script SysScriptController.java executeScript script deserialization (ICAPT5) *************** 📎Link: https://vuldb.com/?id.311167 *************** ⚙️Information: #Vendor: Shenzhen Dashi Tongzhou Information Technology #Product: AgileBPM #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:34:09 +0200 *************** ✏️Title: CVE-2025-1701 | MIM Admin Service up to 7.2.12/7.3.7/7.4.2 RMI Interface input validation (EUVD-2025-16870) *************** 📎Link: https://vuldb.com/?id.311168 *************** ⚙️Information: #Vendor: MIM #Product: Admin Service #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:36:25 +0200 *************** ✏️Title: CVE-2025-5685 | Tenda CH22 1.0.0.1 /goform/Natlimit formNatlimit page stack-based overflow *************** 📎Link: https://vuldb.com/?id.311169 *************** ⚙️Information: #Vendor: Tenda #Product: CH22 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:45:22 +0200 *************** ✏️Title: CVE-2025-48962 | Acronis Cyber Protect 16 up to 39937 server-side request forgery *************** 📎Link: https://vuldb.com/?id.311170 *************** ⚙️Information: #Vendor: Acronis #Product: Cyber Protect 16 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:45:38 +0200 *************** ✏️Title: CVE-2025-48960 | Acronis Cyber Protect 16 up to 39937 TLS inadequate encryption *************** 📎Link: https://vuldb.com/?id.311171 *************** ⚙️Information: #Vendor: Acronis #Product: Cyber Protect 16 #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:45:50 +0200 *************** ✏️Title: CVE-2025-48961 | Acronis Cyber Protect 16 up to 39937 on Windows permission assignment *************** 📎Link: https://vuldb.com/?id.311172 *************** ⚙️Information: #Vendor: Acronis #Product: Cyber Protect 16 #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 16:53:24 +0200 *************** ✏️Title: CVE-2025-27811 | Razer Synapse up to 4.0.86.250218 COM Interface razer_elevation_service.exe Local Privilege Escalation *************** 📎Link: https://vuldb.com/?id.311173 *************** ⚙️Information: #Vendor: Razer #Product: Synapse #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 14:42:06 GMT *************** ✏️Title: Bypassing Watermark Implementations *************** 📎Link: https://medium.com/p/fe39e98ca22b *************** ⚙️Tags: #penetration_testing #watermarking #application_security #watermark #security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 15:15:49 GMT *************** ✏️Title: What is Flipper Zero? *************** 📎Link: https://medium.com/p/e1607d2c1787 *************** ⚙️Tags: #ethical_hacking #penetration_testing #cybersecurity #flipper_zero #cyberattack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 15:04:58 GMT *************** ✏️Title: Investigação Interna de Vazamentos de Dados *************** 📎Link: https://medium.com/p/ccb341ea4cd5 *************** ⚙️Tags: #hacker #leaked #data_leak #investigation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 15:13:55 GMT *************** ✏️Title: Hacking the Headlines: A Pen Tester’s Take on June 2025 Cybersecurity Chaos *************** 📎Link: https://medium.com/p/db3e3017bfa8 *************** ⚙️Tags: #cyber_news #cybersecurity #cyber_security_awareness #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 14:27:27 GMT *************** ✏️Title: Hacking My Own Google Cloud Project: A Red Team Simulation *************** 📎Link: https://medium.com/p/4605791bb417 *************** ⚙️Tags: #red_team #google_cloud_security #cloud_security #cyber_attack_simulation #google_cloud_platform *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 04 Jun 2025 14:38:10 GMT *************** ✏️Title: Hacking Mr Robot (CTF Walkthrough) *************** 📎Link: https://medium.com/p/44584424654d *************** ⚙️Tags: #penetration_test #ctf #penetration_testing #ethical_hacking #ctf_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security