Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 15:51:30 +0200 *************** ✏️Title: CVE-2025-4435 | Python CPython up to 3.14.0b1 (Issue 135034) *************** 📎Link: https://vuldb.com/?id.310972 *************** ⚙️Information: #Vendor: Python #Product: CPython #Type: Programming Language Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 13:06:59 GMT *************** ✏️Title: Hack Email Account || Hacking Services *************** 📎Link: https://medium.com/p/0ac2bc814b4b *************** ⚙️Tags: #social_media #hacking #business #blockchain #artificial_intelligence *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 13:15:46 GMT *************** ✏️Title: How I made 600$ in 60 secs ? *************** 📎Link: https://medium.com/p/f2b085731b59 *************** ⚙️Tags: #bug_bounty #bug_bounty_tips #offensive_security #hacking #bug_bounty_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 13:33:52 GMT *************** ✏️Title: Gmail hacking in 2025: MFA can’t stop increasingly effective attacks *************** 📎Link: https://medium.com/p/6878f6975ff8 *************** ⚙️Tags: #how_hackers_hack_gmail #cybersecurity #gmail #hacking #cyberattack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 13:34:04 GMT *************** ✏️Title: Alessandrastic No BS: How Self-Development Can Transform Your Life - Straight Talk!" *************** 📎Link: https://medium.com/p/78ac0e821caf *************** ⚙️Tags: #development #hacking #focus #money #growth_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 13:16:34 GMT *************** ✏️Title: How to Install and Use Hopper Disassembler on Linux: Your Reverse Engineering Toolkit *************** 📎Link: https://medium.com/p/ad46df223f06 *************** ⚙️Tags: #infosec #cybersecurity #digital_forensics #reverse_engineering #information_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 13:18:35 GMT *************** ✏️Title: NOPS CTF — XSS lab *************** 📎Link: https://medium.com/p/6d2cc26a8561 *************** ⚙️Tags: #ctf #xss_bypass #xss_challenge #web_penetration_testing #web_pen_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 13:09:37 GMT *************** ✏️Title: What is ICS/SCADA in the world of Cybersecurity *************** 📎Link: https://medium.com/p/2d236cbe10ec *************** ⚙️Tags: #cybersecurity #industrial #scada #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 12:20:42 +0000 *************** ✏️Title: Splunk Universal Forwarder on Windows Lets Non-Admin Users Access All Contents *************** 📎Link: https://cybersecuritynews.com/?p=109577 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 12:28:36 +0000 *************** ✏️Title: New Safari XSS Flaw Leverages JavaScript Error Handling to Execute Arbitrary Code *************** 📎Link: https://cybersecuritynews.com/?p=109601 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:04:20 +0200 *************** ✏️Title: CVE-2024-36486 | Parallels Desktop 20.1.1 on macOS Virtual Machine Archive Restoration prl_vmarchiver unix hard link (TALOS-2024-2126 / EUVD-2024-54643) *************** 📎Link: https://vuldb.com/?id.310960 *************** ⚙️Information: #Vendor: Parallels #Product: Desktop #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:04:35 +0200 *************** ✏️Title: CVE-2024-52561 | Parallels Desktop 20.1.1 on macOS Snapshot incorrect ownership assignment (TALOS-2024-2123 / EUVD-2024-54641) *************** 📎Link: https://vuldb.com/?id.310961 *************** ⚙️Information: #Vendor: Parallels #Product: Desktop #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:04:47 +0200 *************** ✏️Title: CVE-2024-54189 | Parallels Desktop 20.1.1 on macOS Snapshot unix hard link (TALOS-2024-2124 / EUVD-2024-54642) *************** 📎Link: https://vuldb.com/?id.310962 *************** ⚙️Information: #Vendor: Parallels #Product: Desktop #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:05:06 +0200 *************** ✏️Title: CVE-2025-31359 | Parallels Desktop 20.2.2 (55879) on macOS PVMP Package Unpacking path traversal (TALOS-2025-2160 / EUVD-2025-16718) *************** 📎Link: https://vuldb.com/?id.310963 *************** ⚙️Information: #Vendor: Parallels #Product: Desktop #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:05:37 +0200 *************** ✏️Title: CVE-2025-5116 | brikou WP Plugin Info Card up to 5.3.1 on WordPress cross site scripting (EUVD-2025-16712) *************** 📎Link: https://vuldb.com/?id.310964 *************** ⚙️Information: #Vendor: brikou #Product: WP Plugin Info Card #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:45:57 +0200 *************** ✏️Title: CVE-2025-46548 | Apache Pekko Management up to 1.1.0 Java DSL improper authentication *************** 📎Link: https://vuldb.com/?id.310965 *************** ⚙️Information: #Vendor: Apache #Product: Pekko Management #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 14:55:22 +0200 *************** ✏️Title: CVE-2025-5525 | Jrohy trojan up to 2.15.3 trojan/util/linux.go LogChan c os command injection *************** 📎Link: https://vuldb.com/?id.310966 *************** ⚙️Information: #Vendor: Jrohy #Product: trojan #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 11:48:18 GMT *************** ✏️Title: Race Condition leads to use-after-free *************** 📎Link: https://medium.com/p/38af439e3cfd *************** ⚙️Tags: #source_code #cybersecurity #race_condition #bug_bounty #c_programming *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 11:51:10 GMT *************** ✏️Title: Geliştirici Hatalarıyla Zafiyet Bulma: Açıkta Kalan Debug Paneller, Swagger UI ve .git Sızıntıları *************** 📎Link: https://medium.com/p/73ff26a26281 *************** ⚙️Tags: #vulnerability #cybersecurity #swagger #hacking #git *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 12:06:07 GMT *************** ✏️Title: picoCTFchallenges on: A Beginners Guide. *************** 📎Link: https://medium.com/p/8714346ee6be *************** ⚙️Tags: #cybersecurity #picoctf_2025 #hacking #picoctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security