Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:21:19 +0000 *************** ✏️Title: New Lyrix Ransomware Attacking Windows Users With New Evasion Tactics *************** 📎Link: https://cybersecuritynews.com/?p=109500 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:48:34 +0000 *************** ✏️Title: New ModSecurity WAF Vulnerability Let Attackers Crash the System *************** 📎Link: https://cybersecuritynews.com/?p=109555 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 10:09:26 +0000 *************** ✏️Title: Microsoft and CrowdStrike Teaming Up to Bring Clarity To Threat Actor Mapping *************** 📎Link: https://cybersecuritynews.com/?p=109550 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:04:00 +0530 *************** ✏️Title: Android Trojan Crocodilus Now Active in 8 Countries, Targeting Banks and Crypto Wallets *************** 📎Link: https://thehackernews.com/2025/06/android-trojan-crocodilus-now-active-in.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 11:25:40 +0200 *************** ✏️Title: CVE-2025-5520 | Open5GS up to 2.7.3 AMF/MME gmm_state_authentication/emm_state_authentication assertion (Issue 3910) *************** 📎Link: https://vuldb.com/?id.310956 *************** ⚙️Information: #Product: Open5GS #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 11:32:15 +0200 *************** ✏️Title: CVE-2025-5521 | WuKongOpenSource WukongCRM 9.0 updataPassword cross-site request forgery *************** 📎Link: https://vuldb.com/?id.310957 *************** ⚙️Information: #Vendor: WuKongOpenSource #Product: WukongCRM #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 11:42:38 +0200 *************** ✏️Title: CVE-2025-5522 | jack0240 魏 bskms 蓝天幼儿园管理系统 up to dffe6640b5b54d8e29da6f060e0493fea74b3fad User Creation /sa/addUser improper authorization (ICAOOU) *************** 📎Link: https://vuldb.com/?id.310958 *************** ⚙️Information: #Vendor: jack0240 魏 #Product: bskms 蓝天幼儿园管理系统 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 11:44:32 +0200 *************** ✏️Title: CVE-2025-5523 | enilu web-flash 1.0 File Upload upload fileService.upload cross site scripting (ICAXTM) *************** 📎Link: https://vuldb.com/?id.310959 *************** ⚙️Information: #Vendor: enilu #Product: web_flash #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:03:20 GMT *************** ✏️Title: INE — eJPT: Host & Network Penetration Testing: Exploitation CTF 1 *************** 📎Link: https://medium.com/p/aed96dde4f7b *************** ⚙️Tags: #ejpt #plugins #nmap #hacking #ine *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:32:29 GMT *************** ✏️Title: How to Temporarily Change Your MAC Address in Linux *************** 📎Link: https://medium.com/p/d2086b89ecae *************** ⚙️Tags: #networking #privacy #linux #cybersecurity #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:44:44 GMT *************** ✏️Title: Cartier Discloses Data Breach Affecting Client Information *************** 📎Link: https://medium.com/p/5d2b77249f30 *************** ⚙️Tags: #cybersecurity #hacking #data_breach *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:06:51 GMT *************** ✏️Title: OneDrive File Picker Vulnerability Exposes Users to Potential Data Theft — CVE-2024–29990 *************** 📎Link: https://medium.com/p/addc672392fc *************** ⚙️Tags: #cyberattack #cyber #cyber_security_awareness #pentesting #microsoft *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:11:53 GMT *************** ✏️Title: Comprehensive Pest Control Services in Chennai: Safeguarding Your Home and Health *************** 📎Link: https://medium.com/p/f4e97a437418 *************** ⚙️Tags: #pest_control #bugs *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:13:00 GMT *************** ✏️Title: Abusing GraphQL Introspection: A Gateway for Recon and Exploitation *************** 📎Link: https://medium.com/p/ab5440ee6ade *************** ⚙️Tags: #cybersecurity #information_technology #graphql_introduction #graphql #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:44:26 GMT *************** ✏️Title: eJPT - 1.4 CTF Vulnerability Assessment *************** 📎Link: https://medium.com/p/f2b556fef126 *************** ⚙️Tags: #ejpt #ctf_writeup #ctf #vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 09:40:18 GMT *************** ✏️Title: NJRat: Anti-Analysis and Persistence Behavior *************** 📎Link: https://medium.com/p/792d804977ce *************** ⚙️Tags: #information_security #cybersecurity #malware #reverse_engineering #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:15:22 GMT *************** ✏️Title: CVE-2024-3509 *************** 📎Link: https://www.tenable.com/cve/CVE-2024-3509 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:15:36 GMT *************** ✏️Title: CVE-2024-7073 *************** 📎Link: https://www.tenable.com/cve/CVE-2024-7073 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:15:36 GMT *************** ✏️Title: CVE-2024-7074 *************** 📎Link: https://www.tenable.com/cve/CVE-2024-7074 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 17:15:36 GMT *************** ✏️Title: CVE-2024-8008 *************** 📎Link: https://www.tenable.com/cve/CVE-2024-8008 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security