Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 02:15:37 +0000 *************** ✏️Title: CVE-2025-1166 - SourceCodester Food Menu Manager Unrestricted File Upload Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1166 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 02:15:37 +0000 *************** ✏️Title: CVE-2025-1167 - Mayuri K Employee Management System SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1167 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 02:15:37 +0000 *************** ✏️Title: CVE-2025-1168 - SourceCodester Contact Manager SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1168 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 01:02:54 GMT *************** ✏️Title: Technical Analysis of Silver Fox Trojan *************** 📎Link: https://medium.com/p/a4c5a059cabb *************** ⚙️Tags: #cybersecurity #reverse_engineering #malware #shellcode #dynamic_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 00:40:28 GMT *************** ✏️Title: The Hidden Business Logic Error That Exists On Most E-Commerce Web Application *************** 📎Link: https://medium.com/p/7b9be9113073 *************** ⚙️Tags: #bug_bounty_writeup #business_logic #bug_bounty #web_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 00:54:31 GMT *************** ✏️Title: BITSCTF 2025 WriteUp | STELK_CSC *************** 📎Link: https://medium.com/p/b2baf7d3327f *************** ⚙️Tags: #ctf #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 00:01:11 +0100 *************** ✏️Title: CVE-2025-1215 | vim up to 9.1.1096 src/main.c --log memory corruption (Issue 16606) *************** 📎Link: https://vuldb.com/?id.295174 *************** ⚙️Information: #Product: vim #Type: Word Processing Software #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 00:11:22 +0100 *************** ✏️Title: CVE-2025-1216 | ywoa up to 2024.07.03 OaNoticeMapper.xml selectNoticeList sort sql injection (IBI74K) *************** 📎Link: https://vuldb.com/?id.295175 *************** ⚙️Information: #Product: ywoa #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 22:15:37 +0000 *************** ✏️Title: CVE-2025-1158 - ESAfenet CDG SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1158 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 22:15:37 +0000 *************** ✏️Title: CVE-2025-1159 - CampCodes School Management Software Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1159 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 22:15:38 +0000 *************** ✏️Title: CVE-2025-24970 - Netty SslHandler Native Crash Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-24970 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 22:15:38 +0000 *************** ✏️Title: CVE-2025-25189 - ZOO-Project Web Processing Service (WPS) Reflected Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25189 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 22:15:38 +0000 *************** ✏️Title: CVE-2025-25190 - "ZOO-Project WPS Server XSS EchoProcess Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25190 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 22:15:38 +0000 *************** ✏️Title: CVE-2025-25193 - Netty Windows Environment File Denial of Service (DoS) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25193 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:15:15 +0000 *************** ✏️Title: CVE-2025-1160 - SourceCodester Employee Management System Default Credentials Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1160 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:15:15 +0000 *************** ✏️Title: CVE-2025-1162 - Code-Projects Job Recruitment SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1162 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 23:15:16 +0000 *************** ✏️Title: CVE-2025-25194 - Lemmy ActivityPub Federation SSRF *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25194 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 00:15:29 +0000 *************** ✏️Title: CVE-2025-1163 - Vehicle Parking Management System Stack-Based Buffer Overflow *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1163 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 00:15:29 +0000 *************** ✏️Title: CVE-2025-1164 - "Police FIR Record Management System Stack-Based Buffer Overflow Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1164 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 23:52:00 GMT *************** ✏️Title: The Hunt for the Xbox Hackers *************** 📎Link: https://medium.com/p/631d063bc67f *************** ⚙️Tags: #coding #data_science #programming #crime #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security