Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:30:21 +0000 *************** ✏️Title: MediaTek Vulnerabilities Let Attackers Escalate Privileges Without User Interaction *************** 📎Link: https://cybersecuritynews.com/?p=109443 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:44:22 +0000 *************** ✏️Title: Vulnerabilities in Preinstalled Android Apps Expose PIN Codes and Allow Command Injection *************** 📎Link: https://cybersecuritynews.com/?p=109446 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:20:49 +0000 *************** ✏️Title: DSPM vs. DLP:Understanding the Key Differences *************** 📎Link: https://cybersecuritynews.com/?p=109450 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:24:31 +0000 *************** ✏️Title: Qualcomm Adreno GPU 0-Day Vulnerabilities Exploited to Attack Android Users *************** 📎Link: https://cybersecuritynews.com/?p=109452 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:30:00 +0000 *************** ✏️Title: Future of Passwords Biometrics and Passwordless Authentication *************** 📎Link: https://cybersecuritynews.com/?p=108342 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 17:00:00 +0000 *************** ✏️Title: Ransomware Negotiation When and How to Engage Attackers *************** 📎Link: https://cybersecuritynews.com/?p=108346 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 20:42:00 +0530 *************** ✏️Title: Preinstalled Apps on Ulefone, Krüger&Matz Phones Let Any App Reset Device, Steal PIN *************** 📎Link: https://thehackernews.com/2025/06/preinstalled-apps-on-ulefone-kruger.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 21:33:00 +0530 *************** ✏️Title: Cryptojacking Campaign Exploits DevOps APIs Using Off-the-Shelf Tools from GitHub *************** 📎Link: https://thehackernews.com/2025/06/cryptojacking-campaign-exploits-devops.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:50:15 +0200 *************** ✏️Title: CVE-2025-45542 | CloudClassroom-PHP-Project 1.0 registrationform pass sql injection *************** 📎Link: https://vuldb.com/?id.310846 *************** ⚙️Information: #Product: CloudClassroom_PHP_Project #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:51:02 +0200 *************** ✏️Title: CVE-2025-44115 | Cotonti Siena 0.9.25 admin.php?m=config&n=edit&o=core&p=title Title cross site scripting *************** 📎Link: https://vuldb.com/?id.310847 *************** ⚙️Information: #Vendor: Cotonti #Product: Siena #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 18:06:20 +0200 *************** ✏️Title: CVE-2025-48940 | MyBB up to 1.8.38 path traversal *************** 📎Link: https://vuldb.com/?id.310848 *************** ⚙️Information: #Product: MyBB #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 18:06:57 +0200 *************** ✏️Title: CVE-2025-48866 | OWASP ModSecurity up to 2.9.9 sanitiseArg/sanitizeArg excessive platform resource consumption within a loop *************** 📎Link: https://vuldb.com/?id.310849 *************** ⚙️Information: #Vendor: OWASP #Product: ModSecurity #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:27:12 GMT *************** ✏️Title: Navigating the Digital Frontier: Hacking, Virtual Machines, Linux, and Networking *************** 📎Link: https://medium.com/p/2a99b933e4a8 *************** ⚙️Tags: #networking #linux #cybersecurity #virtual_machine #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:46:51 GMT *************** ✏️Title: S3 Me Rolling: How an Exposed Bucket Gave Me Source Code, Secrets, and a Way In *************** 📎Link: https://medium.com/p/14835098048e *************** ⚙️Tags: #bug_bounty #cybersecurity #infosec #money #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:51:29 GMT *************** ✏️Title: The Future of Yields: Maximizing Bug Potential *************** 📎Link: https://medium.com/p/efe01b4bbf7d *************** ⚙️Tags: #crypto #bugs #yield_farming #web3 #defi *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 16:22:22 GMT *************** ✏️Title: Failing with Grace: Why Testers Should Care About Error Culture *************** 📎Link: https://medium.com/p/2cbbf51979ab *************** ⚙️Tags: #bugs #software_testing #software_engineering #test_case #testers *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:35:09 GMT *************** ✏️Title: Network Scanning: Mapping the Road to Exploitation *************** 📎Link: https://medium.com/p/14c93550dd16 *************** ⚙️Tags: #cybersecurity #ethical_hacking #penetration_testing #network_scanning *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:40:55 GMT *************** ✏️Title: Bind Shell Practice *************** 📎Link: https://medium.com/p/46906591e362 *************** ⚙️Tags: #nmap #penetration_testing #cybersecurity #bind_shell *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:56:25 GMT *************** ✏️Title: Gopher Protocol — A Forgotten Protocol with Modern Security Implications *************** 📎Link: https://medium.com/p/932188d5c65e *************** ⚙️Tags: #web_development #cybersecurity #penetration_testing #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 15:56:57 GMT *************** ✏️Title: Ultimate Guide to Gopher Protocol — From Basics to Real Exploits *************** 📎Link: https://medium.com/p/ed2fb788d8e0 *************** ⚙️Tags: #web3 #bug_bounty #web_development #penetration_testing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security