Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-5539 - WordPress WP Easy Contact Stored Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5539 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-5561 - PHPGurukul Curfew e-Pass Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5561 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:25 +0000 *************** ✏️Title: CVE-2025-5562 - PHPGurukul Curfew SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5562 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 05:15:25 +0000 *************** ✏️Title: CVE-2025-5566 - PHPGurukul Notice Board System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5566 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:21 +0000 *************** ✏️Title: CVE-2025-48710 - Kro Kube Resource Orchestrator Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48710 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:21 +0000 *************** ✏️Title: CVE-2025-4578 - WordPress File Provider SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4578 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:21 +0000 *************** ✏️Title: CVE-2025-4580 - WordPress File Provider CSRF Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4580 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:21 +0000 *************** ✏️Title: CVE-2025-5569 - IdeaCMS SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5569 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-5571 - D-Link DCS-932L OS Command Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5571 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-5572 - D-Link DCS-932L Stack-Based Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5572 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-5573 - D-Link DCS-932L OS Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5573 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:15:23 +0000 *************** ✏️Title: CVE-2025-5574 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5574 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 07:15:23 +0000 *************** ✏️Title: CVE-2025-5575 - PHPGurukul Dairy Farm Shop Management System SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5575 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 10:06:51 +0200 *************** ✏️Title: CVE-2025-4578 | File Provider Plugin up to 1.2.3 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.311070 *************** ⚙️Information: #Product: File Provider Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 10:06:58 +0200 *************** ✏️Title: CVE-2025-4580 | File Provider Plugin up to 1.2.3 on WordPress Setting cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311071 *************** ⚙️Information: #Product: File Provider Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 10:07:16 +0200 *************** ✏️Title: CVE-2025-47724 | Delta Electronics CNCSoft File out-of-bounds write (PCSA-2025-00006) *************** 📎Link: https://vuldb.com/?id.311072 *************** ⚙️Information: #Vendor: Delta Electronics #Product: CNCSoft #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 10:07:29 +0200 *************** ✏️Title: CVE-2025-47725 | Delta Electronics CNCSoft File out-of-bounds write (PCSA-2025-00006) *************** 📎Link: https://vuldb.com/?id.311073 *************** ⚙️Information: #Vendor: Delta Electronics #Product: CNCSoft #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 10:07:40 +0200 *************** ✏️Title: CVE-2025-47726 | Delta Electronics CNCSoft File out-of-bounds write (PCSA-2025-00006) *************** 📎Link: https://vuldb.com/?id.311074 *************** ⚙️Information: #Vendor: Delta Electronics #Product: CNCSoft #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 10:07:52 +0200 *************** ✏️Title: CVE-2025-47727 | Delta Electronics CNCSoft File out-of-bounds write (PCSA-2025-00006) *************** 📎Link: https://vuldb.com/?id.311075 *************** ⚙️Information: #Vendor: Delta Electronics #Product: CNCSoft #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 10:08:14 +0200 *************** ✏️Title: CVE-2025-27444 | rsjoomla RSform Pro Component 3.0.0-3.3.13 on Joomla filter[dateFrom] cross site scripting *************** 📎Link: https://vuldb.com/?id.311076 *************** ⚙️Information: #Vendor: rsjoomla #Product: RSform Pro Component #Type: Joomla Component #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security