Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 11:03:24 GMT *************** ✏️Title: The Hidden Web: How Bing Dorks Reveal What Google Won’t Show You *************** 📎Link: https://medium.com/p/a3c87bfac6f2 *************** ⚙️Tags: #cybersecurity #search_engines #hacking #cybercrime #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:12:20 GMT *************** ✏️Title: „Изкуственият интелект — новото лице на фалшивите новини“ *************** 📎Link: https://medium.com/p/6121f00c8f3a *************** ⚙️Tags: #ai #fake_news #infosec #online_security #deepfakes *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:19:21 GMT *************** ✏️Title: phpmailer vs PHPMailer: My Windows and Linux server experience *************** 📎Link: https://medium.com/p/107a625e3aef *************** ⚙️Tags: #phpmailer_vs_phpmailer #php_developers #bugs #software_development #linux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:36:29 GMT *************** ✏️Title: Crack the Code: A Beginner’s Guide to Wi-Fi Hacking with Aircrack-ng *************** 📎Link: https://medium.com/p/a1b2fdf10838 *************** ⚙️Tags: #ethical_hacking #wifihacking #aircrack_ng #wireless_security #network_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 08:15:23 +0000 *************** ✏️Title: CVE-2025-40592 - Mendix Studio Pro Path Traversal Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-40592 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 08:15:23 +0000 *************** ✏️Title: CVE-2025-5301 - ONLYOFFICE Docs DocumentServer Reflected Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5301 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 09:15:22 +0000 *************** ✏️Title: CVE-2025-4613 - Google Web Designer Path Traversal Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4613 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 09:15:22 +0000 *************** ✏️Title: CVE-2025-6003 - WordPress Single Sign-On (SSO) Plugin Unauthenticated Sensitive Data Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-6003 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:06:28 GMT *************** ✏️Title: Stop Network Hijacks: A Hacker’s Guide to DNS & DHCP Pen Testing *************** 📎Link: https://medium.com/p/c6c215ef4c50 *************** ⚙️Tags: #penetration_testing #dhcp #cybersecurity #dns #information_technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:09:28 GMT *************** ✏️Title: Information Disclosure via GraphQL in Production *************** 📎Link: https://medium.com/p/64c62c9dbe4c *************** ⚙️Tags: #information_security #bug_bounty #penetration_testing #graphql #writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 09:45:46 GMT *************** ✏️Title: TryHackMe SAL1 Exam Review: My First-Ever SOC Analyst Experience *************** 📎Link: https://medium.com/p/2b4422f8a999 *************** ⚙️Tags: #tryhackme #sal1 #soc #certification #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 09:52:31 GMT *************** ✏️Title: TryHackMe PT1 Exam Review: Is It Really for Juniors? *************** 📎Link: https://medium.com/p/6a9540ccf3d8 *************** ⚙️Tags: #tryhackme #pentesting #cybersecurity #pt1 #certification *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:13:40 GMT *************** ✏️Title: The Game—TryHackMe Write-up *************** 📎Link: https://medium.com/p/fa1bad3820f0 *************** ⚙️Tags: #tryhackme #the_game #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 09:41:35 GMT *************** ✏️Title: Soupedecode 01 *************** 📎Link: https://medium.com/p/cca082a6a5bc *************** ⚙️Tags: #writeup #ctf_writeup #dc01 #walkthrough #soupedecode_01 *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:12:02 GMT *************** ✏️Title: 5 Key Ways Threat Intelligence Feeds Drive SOC Performance *************** 📎Link: https://medium.com/p/48441c31bda1 *************** ⚙️Tags: #threat_intelligence #threat_hunting #malware #threat_detection #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 09:54:39 +0000 *************** ✏️Title: New Account Takeover Campaign Leverages Pentesting Tool to Attack Entra ID User Accounts *************** 📎Link: https://cybersecuritynews.com/?p=110835 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:07:42 +0000 *************** ✏️Title: Threat Actors Weaponizing Bat Files to Deliver Quasar RAT *************** 📎Link: https://cybersecuritynews.com/?p=110843 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:22:01 +0000 *************** ✏️Title: Windows SMB Client Zero-Day Vulnerability Exploited Using Reflective Kerberos Relay Attack *************** 📎Link: https://cybersecuritynews.com/?p=110837 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 10:29:48 +0000 *************** ✏️Title: Hackers Attacking Apache Tomcat Manager From 400 Unique IPs *************** 📎Link: https://cybersecuritynews.com/?p=110847 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 10:50:03 +0200 *************** ✏️Title: CVE-2025-40592 | Siemens Mendix Studio Pro 9 path traversal (ssa-627195) *************** 📎Link: https://vuldb.com/?id.312378 *************** ⚙️Information: #Vendor: Siemens #Product: Mendix Studio Pro 10/Mendix Studio Pro 10.12/Mendix Studio Pro 10.18/Mendix Studio Pro 10.6/Mendix Studio Pro 11/Mendix Studio Pro 8/Mendix Studio Pro 9 #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security