Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:20:54 +0100 *************** ✏️Title: CVE-2024-55213 | dhtmlxFileExplorer 8.4.6 File Listing path traversal *************** 📎Link: https://vuldb.com/?id.295016 *************** ⚙️Information: #Product: dhtmlxFileExplorer #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:21:04 +0100 *************** ✏️Title: CVE-2024-57707 | DataEase Privilege Escalation *************** 📎Link: https://vuldb.com/?id.295017 *************** ⚙️Information: #Product: DataEase #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:21:29 +0100 *************** ✏️Title: CVE-2024-55214 | dhtmlxFileExplorer 8.4.6 File Download file inclusion *************** 📎Link: https://vuldb.com/?id.295018 *************** ⚙️Information: #Product: dhtmlxFileExplorer #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:24:09 +0100 *************** ✏️Title: CVE-2025-1113 | taisan tarzan-cms up to 1.0.0 Add Theme /admin#themes upload deserialization (IBHZ0J) *************** 📎Link: https://vuldb.com/?id.295019 *************** ⚙️Information: #Vendor: taisan #Product: tarzan_cms #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:30:29 +0100 *************** ✏️Title: CVE-2025-1114 | newbee-mall 1.0 Add Category Page /admin/categories/save categoryName cross site scripting *************** 📎Link: https://vuldb.com/?id.295020 *************** ⚙️Information: #Product: newbee_mall #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:33:24 +0100 *************** ✏️Title: CVE-2025-1115 | RT-Thread up to 5.1.0 lwp_syscall.c sys_thread_create arg[0] information disclosure (Issue 9877) *************** 📎Link: https://vuldb.com/?id.295021 *************** ⚙️Information: #Product: RT_Thread #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:40:42 +0100 *************** ✏️Title: CVE-2025-1116 | Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart live_search.searchresults searchresults/search keyword sql injection *************** 📎Link: https://vuldb.com/?id.295022 *************** ⚙️Information: #Vendor: Dreamvention #Product: Live AJAX Search Free #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 20:28:00 +0530 *************** ✏️Title: DeepSeek App Transmits Sensitive User and Device Data Without Encryption *************** 📎Link: https://thehackernews.com/2025/02/deepseek-app-transmits-sensitive-user.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 15:15:16 +0000 *************** ✏️Title: CVE-2024-10383 - GitLab Web IDE VSCode Fork XSS *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-10383 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 15:15:16 +0000 *************** ✏️Title: CVE-2024-35106 - NEXTU FLETA AX1500 WIFI6 Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-35106 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 15:15:17 +0000 *************** ✏️Title: CVE-2025-1103 - D-Link DIR-823X HTTP POST Request Handler Null Pointer Dereference Remote Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1103 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Checkmk 2.3.0p2 / NagVis 1.9.40 Cross Site Scripting exploit =============== 📎 https://sploitus.com/exploit?id=PACKETSTORM:189008&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 16:06:32 GMT *************** ✏️Title: How I Found Sensitive Log Files *************** 📎Link: https://medium.com/p/2336cd86226f *************** ⚙️Tags: #bug_bounty #infosec #logistics #hacking #money *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 15:28:33 GMT *************** ✏️Title: Transferencia de zona *************** 📎Link: https://medium.com/p/aaffb833f33e *************** ⚙️Tags: #transfer_zone #hacker #transferencia_de_zona #pentesting #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 15:51:03 GMT *************** ✏️Title: VulnHub:MoneyHeist Çözümü *************** 📎Link: https://medium.com/p/0a1e6bd8c5fa *************** ⚙️Tags: #money_heist #hacker #vulnhub #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 15:37:44 GMT *************** ✏️Title: Introduction to Cyber Security-Introduction to Offensive Security-Network Security-TryHackMe *************** 📎Link: https://medium.com/p/738f6fcd71fb *************** ⚙️Tags: #intro_to_cybersecurity #hacking #methodology #tryhackme #network_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 15:06:28 GMT *************** ✏️Title: Russian Cybercrime Groups Exploit 7-Zip Vulnerability to Evade Windows MotW Protections *************** 📎Link: https://medium.com/p/ecef381ce46a *************** ⚙️Tags: #cybersecurity #vulnerability #cybercrime #exploit #windows *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 15:28:40 GMT *************** ✏️Title: Arbitrary Command Execution in Metadata Hub (CVE-2024–37382) *************** 📎Link: https://medium.com/p/d0879ae41683 *************** ⚙️Tags: #cybersecurity #security #exploit #cve *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:15:48 +0000 *************** ✏️Title: CVE-2025-1107 - Janto Password Change Encryption Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1107 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 14:15:48 +0000 *************** ✏️Title: CVE-2025-1108 - Janto Email Password Reset Replay Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1108 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security