Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 07:15:23 +0000 *************** ✏️Title: CVE-2025-5644 - Radare2 Use After Free Vulnerability in r_cons_flush Function *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5644 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 08:15:20 +0000 *************** ✏️Title: CVE-2025-5645 - Radare2 r_cons_pal_init Memory Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5645 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 08:15:21 +0000 *************** ✏️Title: CVE-2025-5646 - "Radare2 Rainbow Free Memory Corruption Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5646 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 07:46:06 GMT *************** ✏️Title: ️ NASA/JPL Credentials & Email Leak via Public Pastebin — An Unexpected Find *************** 📎Link: https://medium.com/p/38fb4ee6ad83 *************** ⚙️Tags: #bug_bounty_tips #bugbounty_writeup #cybersecurity #bug_bounty #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 07:43:56 GMT *************** ✏️Title: ️‍♂️ OSINT Using Kali Linux — Full Guide *************** 📎Link: https://medium.com/p/7296590e907d *************** ⚙️Tags: #kali_linux #osint #cybersecurity #infosec #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 07:22:20 GMT *************** ✏️Title: The Time Contains() in C# Broke My Code — A Small Mistake With a Big Impact *************** 📎Link: https://medium.com/p/adf36cf93dd7 *************** ⚙️Tags: #bugs #c_sharp_programming #string_comparison #contains_duplicate *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 07:22:26 GMT *************** ✏️Title: How to Keep Our Smartphones Secure from Data Breaches *************** 📎Link: https://medium.com/p/e2a2ddb19c94 *************** ⚙️Tags: #cyberattack #securing_data #cyber_security_awareness #ethical_hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 07:35:55 +0200 *************** ✏️Title: CVE-2025-5716 | SourceCodester Open Source Clinic Management System 1.0 /login.php email sql injection *************** 📎Link: https://vuldb.com/?id.311238 *************** ⚙️Information: #Vendor: SourceCodester #Product: Open Source Clinic Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 05 Jun 2025 08:08:04 +0200 *************** ✏️Title: CVE-2025-5683 | Qt up to 6.2.x/6.5.9/6.8.4/6.9.0 ICNS Image File denial of service (EUVD-2025-16968) *************** 📎Link: https://vuldb.com/?id.311239 *************** ⚙️Information: #Product: Qt #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 07:19:50 GMT *************** ✏️Title: Certified Ethical Hacker V13 (CEH) in New Jersey: Secure Your Future in Cybersecurity *************** 📎Link: https://medium.com/p/bb759ff27da9 *************** ⚙️Tags: #éducation #hacker #ethical_hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 07:11:41 GMT *************** ✏️Title: VBE to .NET: A fileless execution story *************** 📎Link: https://medium.com/p/dd9c4f8393dd *************** ⚙️Tags: #malware #incident_response #reverse_engineering #cybersecurity #threat_hunting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for Incorrect Privilege Assignment in Tenda Fh1202 Firmware exploit =============== 📎 https://sploitus.com/exploit?id=661A07AD-6DB3-57D2-B88C-664063FF8B94&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 05:49:47 GMT *************** ✏️Title: DOM XSS Exploit: Using postMessage and JSON.parse in iframe Attacks *************** 📎Link: https://medium.com/p/fc312eaa48c2 *************** ⚙️Tags: #dom_based_xss_attack #bug_bounty_writeup #dom_xss #cross_origin_exploit #iframe_xss_payload *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 05:50:51 GMT *************** ✏️Title: Atomic Red Team Setup on Windows for ATT&CK-Based Adversary Simulation *************** 📎Link: https://medium.com/p/ef37e1b0acec *************** ⚙️Tags: #mitre_attack #technology #programming #cybersecurity #framework *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 05:54:19 GMT *************** ✏️Title: {CyberDefenders Write-up} Yellow RAT *************** 📎Link: https://medium.com/p/8f727fde2e47 *************** ⚙️Tags: #cyber #threat_intelligence #blue_teaming #cyberdefender #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 05:47:24 GMT *************** ✏️Title: Clicking ‘Update’ Could Be Your Biggest Mistake: How Cybercriminals Exploit Your Trust *************** 📎Link: https://medium.com/p/9871788de2ee *************** ⚙️Tags: #ransomware #malware_analysis #cyberpsychology #digital_hygiene #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 05:51:23 GMT *************** ✏️Title: Cookie Attributes — More Than Just Name & Value *************** 📎Link: https://medium.com/p/a95591be6fba *************** ⚙️Tags: #development #hacking #infosec #bug_bounty #devops *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 05:47:13 GMT *************** ✏️Title: WPDirectory Mass Hunting Plugin Vulnerabilities *************** 📎Link: https://medium.com/p/e65b6ac30ab9 *************** ⚙️Tags: #white_box_testing #ethical_hacking #pentesting #bug_bounty_tips #wordpress_plugins *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 06:08:21 GMT *************** ✏️Title: The Hidden Power of Mobile Phones: Ethical Hacking Without a PC *************** 📎Link: https://medium.com/p/9208286e8335 *************** ⚙️Tags: #ethical_hacking #mobile_phone #termux #computer_science *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 05 Jun 2025 05:49:31 GMT *************** ✏️Title: Bypassing HackerOne Report Ban Using API Key *************** 📎Link: https://medium.com/p/061711e873c6 *************** ⚙️Tags: #tips_and_tricks #penetration_testing #bug_bounty #bug_bounty_tips #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security