Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 07:15:16 +0000 *************** ✏️Title: Hackers Exploited 3,000+ ASP.NET Keys To Execute Code on IIS Server Remotely *************** 📎Link: https://cybersecuritynews.com/?p=91741 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 10:49:00 +0530 *************** ✏️Title: Hackers Exploiting SimpleHelp RMM Flaws for Persistent Access and Ransomware *************** 📎Link: https://thehackernews.com/2025/02/hackers-exploit-simplehelp-rmm-flaws.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 06:08:06 GMT *************** ✏️Title: How I Found an Excel Sheet with 200+ Bank Testing Account Login Details! *************** 📎Link: https://medium.com/p/883c38492424 *************** ⚙️Tags: #google_dork #reconnaissance #bug_bounty #dorking #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 06:09:04 GMT *************** ✏️Title: Best Certified Ethical Hacker Course Training In Delhi *************** 📎Link: https://medium.com/p/821872a025b1 *************** ⚙️Tags: #hacking #cybersecurity #ethical_hacking_training #ethical_hacking #ethical_ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 06:20:08 GMT *************** ✏️Title: Master Cybersecurity with Certified Ethical Hacker V12 (CEH) in Pennsylvania *************** 📎Link: https://medium.com/p/83382d1860b9 *************** ⚙️Tags: #ethical_hacking_course #pmp #aws_certification #ethical_hacking #pmp_certification *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 06:40:10 GMT *************** ✏️Title: Malware Analysis: Introductory *************** 📎Link: https://medium.com/p/849be5cec612 *************** ⚙️Tags: #dynamic_analysis #malware #apu #malware_analysis #static_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:10:03 +0100 *************** ✏️Title: CVE-2025-21279 | Microsoft Edge up to 132.0.2957.115 type confusion *************** 📎Link: https://vuldb.com/?id.294899 *************** ⚙️Information: #Vendor: Microsoft #Product: Edge #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:10:25 +0100 *************** ✏️Title: CVE-2025-21342 | Microsoft Edge up to 132.0.2957.115 type confusion *************** 📎Link: https://vuldb.com/?id.294900 *************** ⚙️Information: #Vendor: Microsoft #Product: Edge #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:10:29 +0100 *************** ✏️Title: CVE-2025-21408 | Microsoft Edge up to 132.0.2957.115 type confusion *************** 📎Link: https://vuldb.com/?id.294901 *************** ⚙️Information: #Vendor: Microsoft #Product: Edge #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:10:46 +0100 *************** ✏️Title: CVE-2025-21283 | Microsoft Edge up to 132.0.2957.115 insufficient granularity of address regions protected by register locks *************** 📎Link: https://vuldb.com/?id.294902 *************** ⚙️Information: #Vendor: Microsoft #Product: Edge #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:11:13 +0100 *************** ✏️Title: CVE-2025-21404 | Microsoft Edge up to 132.0.2957.115 *************** 📎Link: https://vuldb.com/?id.294903 *************** ⚙️Information: #Vendor: Microsoft #Product: Edge #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:11:33 +0100 *************** ✏️Title: CVE-2025-21267 | Microsoft Edge up to 132.0.2957.115 security check *************** 📎Link: https://vuldb.com/?id.294904 *************** ⚙️Information: #Vendor: Microsoft #Product: Edge #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:12:12 +0100 *************** ✏️Title: CVE-2025-21253 | Microsoft Edge up to 132.0.2957.115 on iOS/Android clickjacking *************** 📎Link: https://vuldb.com/?id.294905 *************** ⚙️Information: #Vendor: Microsoft #Product: Edge #Type: Web Browser #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:15:05 +0100 *************** ✏️Title: CVE-2024-56467 | IBM EntireX 11.1 information exposure *************** 📎Link: https://vuldb.com/?id.294906 *************** ⚙️Information: #Vendor: IBM #Product: EntireX #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:15:25 +0100 *************** ✏️Title: CVE-2024-54171 | IBM EntireX 11.1 xml external entity reference *************** 📎Link: https://vuldb.com/?id.294907 *************** ⚙️Information: #Vendor: IBM #Product: EntireX #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:15:26 +0100 *************** ✏️Title: CVE-2025-1061 | nextendweb Nextend Social Login Pro Plugin up to 3.1.16 on WordPress authentication bypass *************** 📎Link: https://vuldb.com/?id.294908 *************** ⚙️Information: #Vendor: nextendweb #Product: Nextend Social Login Pro Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:16:06 +0100 *************** ✏️Title: CVE-2025-23093 | Mitel OpenScape 4000/OpenScape 4000 Manager up to V10 1.54.1/V11 0.22.1 Platform unnecessary privileges *************** 📎Link: https://vuldb.com/?id.294909 *************** ⚙️Information: #Vendor: Mitel #Product: OpenScape 4000/OpenScape 4000 Manager #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:17:04 +0100 *************** ✏️Title: CVE-2024-57392 | ProFTPd 4017eff8 Service Port buffer overflow *************** 📎Link: https://vuldb.com/?id.294910 *************** ⚙️Information: #Product: ProFTPd #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:17:26 +0100 *************** ✏️Title: CVE-2025-23094 | Mitel OpenScape 4000/OpenScape 4000 Manager Platform command injection *************** 📎Link: https://vuldb.com/?id.294911 *************** ⚙️Information: #Vendor: Mitel #Product: OpenScape 4000/OpenScape 4000 Manager #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:17:57 +0100 *************** ✏️Title: CVE-2024-57609 | Kanaries Pygwalker Login Redirection redirect_path information disclosure *************** 📎Link: https://vuldb.com/?id.294912 *************** ⚙️Information: #Vendor: Kanaries #Product: Pygwalker #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security