Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 18:35:05 +0200 *************** ✏️Title: CVE-2025-1499 | IBM InfoSphere Information Server 11.7 cleartext storage *************** 📎Link: https://vuldb.com/?id.310773 *************** ⚙️Information: #Vendor: IBM #Product: InfoSphere Information Server #Type: Reporting Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 18:35:11 +0200 *************** ✏️Title: CVE-2025-33004 | IBM Planning Analytics Local 2.0/2.1 path traversal *************** 📎Link: https://vuldb.com/?id.310774 *************** ⚙️Information: #Vendor: IBM #Product: Planning Analytics Local #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 18:35:17 +0200 *************** ✏️Title: CVE-2025-33005 | IBM Planning Analytics Local 2.0/2.1 session expiration *************** 📎Link: https://vuldb.com/?id.310775 *************** ⚙️Information: #Vendor: IBM #Product: Planning Analytics Local #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 18:35:45 +0200 *************** ✏️Title: CVE-2025-40908 | TINITA YAML-LibYAML up to 0.902.x on Perl YAML::LibYAML file access (Issue 120) *************** 📎Link: https://vuldb.com/?id.310776 *************** ⚙️Information: #Vendor: TINITA #Product: YAML_LibYAML #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:09:21 GMT *************** ✏️Title: Bypass of Date and Value Restrictions in Expense Submission *************** 📎Link: https://medium.com/p/f0cc6a5cb45a *************** ⚙️Tags: #bug_bounty #bug_bounty_writeup #web_security #vulnerability #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:49:40 GMT *************** ✏️Title: The New Generation of Cybercriminals *************** 📎Link: https://medium.com/p/07e19ba2b809 *************** ⚙️Tags: #crime #osint #safety #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:13:24 GMT *************** ✏️Title: TryHackMe Hammer Walkthrough: Bypassing Rate Limit & Exploiting JWT *************** 📎Link: https://medium.com/p/b62bd36de716 *************** ⚙️Tags: #authentication #penetration_testing #web_exploitation #jwt #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:46:49 GMT *************** ✏️Title: Roadmap Belajar Cyber Security: Transisi ke Pentesting dari IT Support dalam 5 Tahun ke Depan *************** 📎Link: https://medium.com/p/0473bb839f6b *************** ⚙️Tags: #cybersecurity #it_support #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:55:47 GMT *************** ✏️Title: Roadmap Cybersecurity *************** 📎Link: https://medium.com/p/9de9fc825f58 *************** ⚙️Tags: #soc #cybersecurity #red_team #blue_team #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:35:55 GMT *************** ✏️Title: Multiple Compression Peeling: Bandit12 Overthewire Write Up *************** 📎Link: https://medium.com/p/3bceb61310f7 *************** ⚙️Tags: #ctf_writeup #overthewire #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:47:28 GMT *************** ✏️Title: TryHackMe publisher CTF writeup very detailed *************** 📎Link: https://medium.com/p/02070ff1c89d *************** ⚙️Tags: #tryhackme #ctf_writeup #ctf #tryhackme_walkthrough #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:13:17 GMT *************** ✏️Title: Hasil analisa malware Trojan Koi Stealer *************** 📎Link: https://medium.com/p/d6a1b6599744 *************** ⚙️Tags: #malware_analysis #wireshark #cybersecurity #malware #cyber *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:38:07 GMT *************** ✏️Title: Incident Response : Analisis Serangan Malware di Broki Company *************** 📎Link: https://medium.com/p/ee7423e0ff7b *************** ⚙️Tags: #cybersecurity #malware #hacker #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 14:15:21 +0000 *************** ✏️Title: CVE-2025-40908 - LibYAML YAML File Modification Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-40908 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 14:15:21 +0000 *************** ✏️Title: CVE-2025-5402 - Chaitak-Gorai Blogbook SQL Injection Vulnerability in GET Parameter Handler *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5402 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 15:00:00 +0000 *************** ✏️Title: Cost of a Breach Calculating ROI for Cybersecurity Investments *************** 📎Link: https://cybersecuritynews.com/?p=108063 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 14:09:02 GMT *************** ✏️Title: From Forgot Password to Forgot Validation: A Broken Flow That Let Me Take Over Accounts *************** 📎Link: https://medium.com/p/04fb7c5b7ecc *************** ⚙️Tags: #infosec #hacking #cybersecurity #bug_bounty #money *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 14:25:08 GMT *************** ✏️Title: Deserialization zafiyetleri —  Deserialization vulnerabilities *************** 📎Link: https://medium.com/p/a3b17dcb7eb2 *************** ⚙️Tags: #cyberattack #cybersecurity #hacker #cyber #yazılım *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 14:31:21 GMT *************** ✏️Title: Active Directory Basics Write-Up — TryHackMe *************** 📎Link: https://medium.com/p/e0e0b30a506d *************** ⚙️Tags: #tryhackme #windows #tryhackme_writeup #active_directory #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 14:10:32 GMT *************** ✏️Title: Privilege Escalation and Exploits in Mr. Robot: A CTF Write-Up *************** 📎Link: https://medium.com/p/ba9bd4cd47b5 *************** ⚙️Tags: #pentesting #ctf_writeup #ctflearn #vulnhub #ctf_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security