Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 12:12:24 GMT *************** ✏️Title: Brute Force Password Cracking with John the Ripper *************** 📎Link: https://medium.com/p/057e0779baee *************** ⚙️Tags: #hacking_tools #hacking #penetration_testing #kali_linux #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 12:00:47 GMT *************** ✏️Title: Windows AD Exploitation Guide *************** 📎Link: https://medium.com/p/3f15be4075e9 *************** ⚙️Tags: #windows #hackthebox #active_directory #hacking #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 12:43:29 GMT *************** ✏️Title: AnyDesk Exploit Alert: CVE-2024–12754 Enables Privilege Escalation — PoC Now Available *************** 📎Link: https://medium.com/p/b9a7026f1daa *************** ⚙️Tags: #exploit #vulnerability #cybersecurity #cyberattack #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 12:36:31 GMT *************** ✏️Title: Fake CAPTCHA leads to Vidar Stealer *************** 📎Link: https://medium.com/p/e40fb8e42019 *************** ⚙️Tags: #incident_response #threat_hunting #malware #cybercrime #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:13:40 GMT *************** ✏️Title: Is Nikto Allowed in OSCP? Understanding Its Role in the Exam *************** 📎Link: https://medium.com/p/6d35486ca8ba *************** ⚙️Tags: #nikto #offensive_security #ethical_hacking_tools #penetration_testing #oscp *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 11:21:01 GMT *************** ✏️Title: Setting up Frida Server on Windows to grab a Tinder Auth Token on an Infinix X678B (Part 2: Install… *************** 📎Link: https://medium.com/p/92a45c5d51a4 *************** ⚙️Tags: #tinder #python #frida #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 11:44:49 GMT *************** ✏️Title: HackTheBox Flag Command Writeup | HackTheBox Walkthrough *************** 📎Link: https://medium.com/p/7b0a08fef9b7 *************** ⚙️Tags: #infosec #hackthebox #cybersecurity #tryhackme #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 09:36:39 GMT *************** ✏️Title: Complete Beginner-Web Hacking Fundamentals-How Websites Work-TryHackMe *************** 📎Link: https://medium.com/p/358e78d122fb *************** ⚙️Tags: #tryhackme #fundamentals #html_injection #web_hacking #complete_beginner *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:39:25 GMT *************** ✏️Title: Complete Beginner-Web Hacking Fundamentals-Burp Suite: The Basics-TryHackMe *************** 📎Link: https://medium.com/p/f831f696f3b4 *************** ⚙️Tags: #burpsuite #fundamentals #complete_beginner #web_hacking #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:53:49 GMT *************** ✏️Title: TryHackMe Cyber Kill Chain Write-Up: Explained *************** 📎Link: https://medium.com/p/037ef54ffce4 *************** ⚙️Tags: #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 09:36:57 GMT *************** ✏️Title: Bounty Hacker CTF *************** 📎Link: https://medium.com/p/72f4b2b1dba8 *************** ⚙️Tags: #walkthrough #ctf_writeup #bounty_hacker_tryhackme #journey #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:27:15 GMT *************** ✏️Title: Error based SQL Injection Challenges *************** 📎Link: https://medium.com/p/ed2001801117 *************** ⚙️Tags: #sql_injection #error_based_sql_injection #ctf_writeup #ctf #sql_challenge *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:52:05 GMT *************** ✏️Title: Remove Malware and Safeguard Your Website *************** 📎Link: https://medium.com/p/633b7b5cd658 *************** ⚙️Tags: #malware_analysis #wordpress_malware_cleanup #malware #malware_removal #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 11:18:15 GMT *************** ✏️Title: Remcos: Malware Overview *************** 📎Link: https://medium.com/p/b37c9d201aac *************** ⚙️Tags: #malware #threat_intelligence #malware_analysis #threat_hunting #threat_detection *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:59:40 +0100 *************** ✏️Title: CVE-2025-1167 | Mayuri K Employee Management System up to 192.168.70.3 Update_User.php id sql injection *************** 📎Link: https://vuldb.com/?id.295070 *************** ⚙️Information: #Vendor: Mayuri K #Product: Employee Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 10:09:19 +0100 *************** ✏️Title: CVE-2024-12243 | GnuTLS DER Decoding denial of service *************** 📎Link: https://vuldb.com/?id.295071 *************** ⚙️Information: #Product: GnuTLS #Type: Network Encryption Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 10:11:00 +0100 *************** ✏️Title: CVE-2025-1168 | SourceCodester Contact Manager with Export to VCF 1.0 delete-contact.php contact sql injection *************** 📎Link: https://vuldb.com/?id.295072 *************** ⚙️Information: #Vendor: SourceCodester #Product: Contact Manager with Export to VCF #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 10:14:11 +0100 *************** ✏️Title: CVE-2025-1169 | SourceCodester Image Compressor Tool 1.0 compressor.php image cross site scripting *************** 📎Link: https://vuldb.com/?id.295073 *************** ⚙️Information: #Vendor: SourceCodester #Product: Image Compressor Tool #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 10:23:20 +0100 *************** ✏️Title: CVE-2025-1170 | code-projects Real Estate Property Management System 1.0 /Admin/Category.php Desc cross site scripting *************** 📎Link: https://vuldb.com/?id.295074 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 10:23:21 +0100 *************** ✏️Title: CVE-2025-1171 | code-projects Real Estate Property Management System 1.0 CustomerReport.php Address cross site scripting *************** 📎Link: https://vuldb.com/?id.295075 *************** ⚙️Information: #Vendor: code_projects #Product: Real Estate Property Management System #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security