Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 04:57:46 GMT *************** ✏️Title: CyberTalents CTF Writeups — My Real-World Exploitation Journey (2024) *************** 📎Link: https://medium.com/p/251c6dd7cf7f *************** ⚙️Tags: #penetration_testing #cybersecurity #hacking #information_security #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 03:15:25 +0000 *************** ✏️Title: CVE-2025-5856 - PHPGurukul BP Monitoring Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5856 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 03:15:26 +0000 *************** ✏️Title: CVE-2025-5857 - "Code-projects Patient Record Management System SQL Injection Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5857 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 03:15:26 +0000 *************** ✏️Title: CVE-2025-5858 - PHPGurukul Nipah Virus Testing Management System SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5858 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 04:15:45 +0000 *************** ✏️Title: CVE-2025-5859 - PHPGurukul Nipah Virus Testing Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5859 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 04:15:48 +0000 *************** ✏️Title: CVE-2025-5860 - PHPGurukul Maid Hiring Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5860 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 07:05:11 +0200 *************** ✏️Title: CVE-2025-3461 | ON Semiconductor Quantenna Wi-Fi Chipset up to 8.0.0.28 Telnet Interface missing authentication *************** 📎Link: https://vuldb.com/?id.311640 *************** ⚙️Information: #Vendor: ON Semiconductor #Product: Quantenna Wi_Fi Chipset #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 07:06:27 +0200 *************** ✏️Title: CVE-2025-35004 | Microhard IPn4Gii/Bullet-LTE up to 1.2.0-r1132 argument injection *************** 📎Link: https://vuldb.com/?id.311641 *************** ⚙️Information: #Vendor: Microhard #Product: IPn4Gii/Bullet_LTE #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 07:13:40 +0200 *************** ✏️Title: CVE-2025-35005 | Microhard IPn4Gii/Bullet-LTE up to 1.2.0-r1132 AT+MFMAC Command argument injection *************** 📎Link: https://vuldb.com/?id.311642 *************** ⚙️Information: #Vendor: Microhard #Product: IPn4Gii/Bullet_LTE #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ webapps Laravel Pulse 1.3.1 - Arbitrary Code Injection =============== 📎 https://www.exploit-db.com/exploits/52319 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ local Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege =============== 📎 https://www.exploit-db.com/exploits/52320 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 04:10:15 GMT *************** ✏️Title: My Laptop Died, So I Hacked with My Phone. No Excuse *************** 📎Link: https://medium.com/p/8dc8d030e43e *************** ⚙️Tags: #linux #laptop #cybersecurity #bug_bounty #termux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 04:31:55 GMT *************** ✏️Title: Earned My First 3-Digit Bounty with a Reflected XSS: Here’s How I Did It *************** 📎Link: https://medium.com/p/372a35573d55 *************** ⚙️Tags: #security #bug_bounty_writeup #bug_bounty_tips #owasp #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 04:02:13 GMT *************** ✏️Title: OSINT-Related Articles, 20250609 *************** 📎Link: https://medium.com/p/bf9dc772a33f *************** ⚙️Tags: #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 04:37:46 GMT *************** ✏️Title: Best Cyber Security Courses for Freelancers and Consultants in India *************** 📎Link: https://medium.com/p/fed03906ffb7 *************** ⚙️Tags: #cybersecurity #cyber_security_awareness #ethical_hacking #cybersecurity_course *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 04:03:25 GMT *************** ✏️Title: Building Your Own Test Environment For Pentesting *************** 📎Link: https://medium.com/p/b88ec28434ef *************** ⚙️Tags: #penetration_testing #labs #tools #cybersecurity #hacking_for_defense *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 03:00:08 GMT *************** ✏️Title: $500 OTP Bypass: Found It, Proved It, Then… *************** 📎Link: https://medium.com/p/3930c9e45d4f *************** ⚙️Tags: #bug_bounty_writeup #bug_bounty_hunter #2fa_bypass #bug_bounty #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 02:52:18 GMT *************** ✏️Title: HTB Academy — Information Gathering Web Edition (skill assessment) *************** 📎Link: https://medium.com/p/39ad5d294b3c *************** ⚙️Tags: #htb #hacking #htb_writeup #htb_academy #htb_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 03:26:28 GMT *************** ✏️Title: “Phishing, Explained Simply: Why One Click Can Compromise a Whole Organization” *************** 📎Link: https://medium.com/p/b432bef4c4bb *************** ⚙️Tags: #infosec #cybersecurity #security_awareness #threat_detection #phishing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 02:15:23 +0000 *************** ✏️Title: CVE-2025-5855 - Tenda AC6 Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5855 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security