Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 14:15:19 +0000 *************** ✏️Title: CVE-2025-39498 - Spotlight Spotlight Social Media Feeds (Premium) Sensitive Data Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-39498 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 14:15:19 +0000 *************** ✏️Title: CVE-2025-46804 - Screen Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46804 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 14:15:20 +0000 *************** ✏️Title: CVE-2025-46805 - Screen Privilege Escalation TOCTOU Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46805 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 14:15:20 +0000 *************** ✏️Title: CVE-2025-5196 - Wing FTP Server Lua Admin Console Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5196 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:15:19 +0000 *************** ✏️Title: CVE-2025-37992 - Linux Kernel net_sched NULL Pointer Dereference Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-37992 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 15:15:19 +0000 *************** ✏️Title: CVE-2025-46803 - Screen PTY Escalation of Privilege *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-46803 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 26 May 2025 17:10:13 +0200 *************** ✏️Title: CVE-2025-37992 | Linux Kernel up to 5.15.183/6.1.139/6.6.91/6.12.29/6.14.7 net_sched change null pointer dereference *************** 📎Link: https://vuldb.com/?id.310319 *************** ⚙️Information: #Vendor: Linux #Product: Kernel #Type: Operating System #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 15:15:47 GMT *************** ✏️Title: Why Fuzzing Matters: Real Incidents That Prove the Power of Smart Endpoint Discovery *************** 📎Link: https://medium.com/p/60cdc8a7b1ff *************** ⚙️Tags: #ffuf #detailed #bug_bounty #fuzzing #dirsearch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 15:25:10 GMT *************** ✏️Title: This is The Easiest Bug You Can Find✨ *************** 📎Link: https://medium.com/p/e50e0b68c641 *************** ⚙️Tags: #cybersecurity #bug_bounty #careers #hacking #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 14:36:54 GMT *************** ✏️Title: Nmap and its excellence *************** 📎Link: https://medium.com/p/185a9feeb80c *************** ⚙️Tags: #hacking #technology #cybersecurity #nmap *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 15:12:48 GMT *************** ✏️Title: Staying Ahead of the Storm: Why Proactive Security Is a Business Imperative *************** 📎Link: https://medium.com/p/0c34e1cf19f1 *************** ⚙️Tags: #proactive #cybersecurity #phishing #hacking #rsac *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 14:53:01 GMT *************** ✏️Title: Beginner's Guide to $CVE Yield Generation on StakingRewards *************** 📎Link: https://medium.com/p/1b3bb2f3282c *************** ⚙️Tags: #staking #crypto #cve #staking_rewards #web3 *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 14:38:50 GMT *************** ✏️Title: Why Continuous Threat Exposure Management (CTEM) Is the Future of Pentesting: A Look into Modern… *************** 📎Link: https://medium.com/p/1cc21875300b *************** ⚙️Tags: #pentesting #cybersecurity #pen_testing_service *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 14:32:24 GMT *************** ✏️Title: Lab: Exploiting server-side parameter pollution in a query string *************** 📎Link: https://medium.com/p/e07a341c44d5 *************** ⚙️Tags: #bug_bounty #information_security #cybersecurity #security #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 15:01:38 GMT *************** ✏️Title: Day 47: Network Attacks: SYN Flood, Smurf, and DoS *************** 📎Link: https://medium.com/p/b6871b0a895e *************** ⚙️Tags: #learning #ethical_hacking #progress #cybersecurity #networking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 14:26:50 GMT *************** ✏️Title: Smuggling in the Web World: Understanding HTTP Request Smuggling with examples *************** 📎Link: https://medium.com/p/9094ac400d16 *************** ⚙️Tags: #cybersecurity #web_security #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 14:37:52 GMT *************** ✏️Title: Day 7 of my AWS Pentesting Journey — Secrets in SNS *************** 📎Link: https://medium.com/p/a8fb510a307d *************** ⚙️Tags: #aws #sns #cloud_security #penetration_testing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 19:47:00 +0530 *************** ✏️Title: Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto *************** 📎Link: https://thehackernews.com/2025/05/over-70-malicious-npm-and-vs-code.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 14:14:06 GMT *************** ✏️Title: How CoinCollectExperts Helped Me Recover My BTC After a Fake Hack Online *************** 📎Link: https://medium.com/p/1c11c8ca6783 *************** ⚙️Tags: #recover_scammed_crypto #btc_mining_for_free #hacking #usd #recover_scammed_bitcoin *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 26 May 2025 14:02:34 GMT *************** ✏️Title: What to Expect From This Cybersecurity Page Going Forward *************** 📎Link: https://medium.com/p/4dad9e49eeb3 *************** ⚙️Tags: #cybersecurity #infosec #tech_career #soc_analyst *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security