Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:15:22 +0000 *************** ✏️Title: CVE-2025-5510 - Shiyi-Blog Remote Server-Side Request Forgery (SSRF) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5510 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:15:22 +0000 *************** ✏️Title: CVE-2025-5511 - "Quequnlong Shiyi-Blog Remote Unauthorized File Access Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5511 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:15:22 +0000 *************** ✏️Title: CVE-2025-5512 - Quequnlong Shiyi-Blog Administrator Backend Improper Authentication Remote Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5512 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 18:00:00 +0000 *************** ✏️Title: Threat Modeling for DevSecOps Practical Guide *************** 📎Link: https://cybersecuritynews.com/?p=108426 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:49:08 +0200 *************** ✏️Title: CVE-2025-5566 | PHPGurukul Notice Board System 1.0 /search-notice.php searchdata sql injection *************** 📎Link: https://vuldb.com/?id.311013 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Notice Board System #Type: Forum Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:49:38 +0200 *************** ✏️Title: CVE-2025-30167 | Jupyter Core up to 5.7.x on Windows Environment Variable SYSTEM_CONFIG_PATH/SYSTEM_JUPYTER_PATH uncontrolled search path (GHSA-33p9-3p43-82vq) *************** 📎Link: https://vuldb.com/?id.311014 *************** ⚙️Information: #Vendor: Jupyter #Product: Core #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 19:49:51 +0200 *************** ✏️Title: CVE-2025-23107 | Samsung Mobile Processor Exynos 1480/2400 out-of-bounds write *************** 📎Link: https://vuldb.com/?id.311015 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:29:57 GMT *************** ✏️Title: How Hackers Help NASA Stay Secure: Inside the NASA VDP *************** 📎Link: https://medium.com/p/07ec255c46f3 *************** ⚙️Tags: #nasa #vdp #hall_of_fame #bug_bounty #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:36:10 GMT *************** ✏️Title: How to Maximize Earnings with Curvance $CVE *************** 📎Link: https://medium.com/p/59d873c5dbdc *************** ⚙️Tags: #cve #web3 #crypto #ethereum #curvance *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:14:54 GMT *************** ✏️Title: BountyOS: A Powerful OS for Bug Bounty Hunters *************** 📎Link: https://medium.com/p/2c08cb63ef8b *************** ⚙️Tags: #pentesting #security #bug_bounty #hacking #linux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:11:52 GMT *************** ✏️Title: Ethical Hacking with Burp Suite: Enhancing Web Security *************** 📎Link: https://medium.com/p/181fbd7778b1 *************** ⚙️Tags: #penetration_testing #cybersecurity #burpsuite #hacking #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:17:05 GMT *************** ✏️Title: What is Broken Access Control? Explained Simply with Real-Life Examples *************** 📎Link: https://medium.com/p/54f07c39b1eb *************** ⚙️Tags: #penetration_testing #hacking #cybercrime #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:18:41 GMT *************** ✏️Title: Mastering Nmap: From Beginner to Advanced Scanning Techniques *************** 📎Link: https://medium.com/p/f0af0fbab37c *************** ⚙️Tags: #nmap #vulnerability #nmap_command #computer_science #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:34:10 GMT *************** ✏️Title: GamingServer — TryHackMe *************** 📎Link: https://medium.com/p/c1652aed823e *************** ⚙️Tags: #tryhackme_writeup #gamingserver_tryhackme #tryhackme_walkthrough #tryhackme #gamingserver *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:51:29 GMT *************** ✏️Title: TryHackMe | AD: BadSuccessor | WriteUp *************** 📎Link: https://medium.com/p/2dc83b271d80 *************** ⚙️Tags: #cybersecurity #tryhackme_writeup #tryhackme #tryhackme_walkthrough #active_directory *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:31:50 GMT *************** ✏️Title: The North Face Data Breach: April 2025 Credential Stuffing Attack Exposes Customer Data *************** 📎Link: https://medium.com/p/74293b1c7686 *************** ⚙️Tags: #breach #hacking #ai #malware #the_north_face *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:32:57 GMT *************** ✏️Title: Malware Development: Reverse Shell Disguised as a PDF *************** 📎Link: https://medium.com/p/985a5150597e *************** ⚙️Tags: #cybersecurity #hacking #malware #reverse_engineering #malware_development *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:00:00 +0000 *************** ✏️Title: CISOs Role in Driving Secure Digital Transformation *************** 📎Link: https://cybersecuritynews.com/?p=108418 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 17:15:22 +0000 *************** ✏️Title: 10-Year-Old Roundcube RCE Vulnerability Let Attackers Execute Malicious Code *************** 📎Link: https://cybersecuritynews.com/?p=109640 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:28:14 +0200 *************** ✏️Title: CVE-2025-5539 | Simplify Contact Management Plugin up to 4.0.0 on WordPress Shortcode emd_mb_meta cross site scripting *************** 📎Link: https://vuldb.com/?id.310991 *************** ⚙️Information: #Product: Simplify Contact Management Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security