Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 22:48:06 +0200 *************** ✏️Title: CVE-2025-6012 | Auto Attachments Plugin up to 1.8.5 on WordPress Setting cross site scripting *************** 📎Link: https://vuldb.com/?id.312456 *************** ⚙️Information: #Product: Auto Attachments Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 20:12:51 GMT *************** ✏️Title: Ignite — TryHackMe *************** 📎Link: https://medium.com/p/8084b0eed968 *************** ⚙️Tags: #tryhackme_writeup #tryhackme_walkthrough #tryhackme_ignite #tryhackme #ignite *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 20:07:04 GMT *************** ✏️Title: JA4 in Action: Detecting Bots, Malware, and Fake Browsers at the TLS Level *************** 📎Link: https://medium.com/p/3ccd890fbce9 *************** ⚙️Tags: #threat_detection #tls #bots #malware #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 20:55:28 GMT *************** ✏️Title: Ghostly Hollowing Crypter: Evading AV and EDR *************** 📎Link: https://medium.com/p/0369a3d3114c *************** ⚙️Tags: #pentesting #hacking #tryhackme #cybersecurity #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 20:23:22 GMT *************** ✏️Title: Shodan Dorking for Hackers: Easy CVEs and How I Found Them *************** 📎Link: https://medium.com/p/ecf6c56e7075 *************** ⚙️Tags: #cybersecurity #cve #bug_bounty #tomcat #apache *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 20:06:10 GMT *************** ✏️Title: What is an API? A Simple Guide for Beginners *************** 📎Link: https://medium.com/p/bf3429553880 *************** ⚙️Tags: #penetration_testing #api #bug_bounty #apihacking #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 20:13:13 GMT *************** ✏️Title: Setting up a home lab for Penetration testing and Ethical hacking simulations *************** 📎Link: https://medium.com/p/f76bea09d4d4 *************** ⚙️Tags: #cybersecurity #penetration_testing #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 15:15:40 +0000 *************** ✏️Title: CVE-2025-49200 - VMware vSphere Unencrypted Backup Files Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49200 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:22 +0000 *************** ✏️Title: CVE-2024-44905 - Go-Pg SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-44905 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:22 +0000 *************** ✏️Title: CVE-2024-44906 - Uptrace PGDriver SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-44906 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:22 +0000 *************** ✏️Title: CVE-2024-7562 - InstallShield Elevated Privilege Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-7562 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:22 +0000 *************** ✏️Title: CVE-2025-29744 - PostgreSQL pg-promise SQL Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-29744 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:23 +0000 *************** ✏️Title: CVE-2025-36573 - Dell Smart Dock Firmware Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-36573 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:23 +0000 *************** ✏️Title: CVE-2025-46035 - Tenda AC6 Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46035 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:15:23 +0000 *************** ✏️Title: CVE-2025-49467 - JEvents SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49467 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 17:15:26 +0000 *************** ✏️Title: CVE-2023-45256 - PrestaShop EuroInformation MoneticoPaiement SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2023-45256 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 17:15:28 +0000 *************** ✏️Title: CVE-2024-55567 - Insyde H2O UsbCoreDxe SMM Call Out Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-55567 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 17:15:29 +0000 *************** ✏️Title: CVE-2025-49080 - "Absolute Secure Access Server Denial of Service Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49080 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 17:15:29 +0000 *************** ✏️Title: CVE-2025-5982 - GitLab EE IP Access Restriction Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5982 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 18:15:20 +0000 *************** ✏️Title: CVE-2025-43863 - vantage6 is an open source framework built to enab *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-43863 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security