Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 02:43:09 GMT *************** ✏️Title: How to find bugs in the Microsoft IIS page. *************** 📎Link: https://medium.com/p/120c2050b66f *************** ⚙️Tags: #bug_bounty #info_sec_writeups #hacking #bugs #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 02:31:29 GMT *************** ✏️Title: Spiderfoot vs Maltego for OSINT Research Cases *************** 📎Link: https://medium.com/p/a1e0c4d63aa2 *************** ⚙️Tags: #technology #osint #cybercrime #ethical_hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 03:01:03 GMT *************** ✏️Title: How I got Bounty and Hall of Fame for finding easy bugs *************** 📎Link: https://medium.com/p/1a72aefe6c3a *************** ⚙️Tags: #bug_bounty_writeup #ethical_hacking #bug_bounty #infosec #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 02:27:42 GMT *************** ✏️Title: Sniper: An Automated Penetration Testing Tool *************** 📎Link: https://medium.com/p/fb54c506f60d *************** ⚙️Tags: #hacking #bug_bounty_tips #bug_bounty #technology #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 02:30:47 GMT *************** ✏️Title: NoSQL Injection : Understanding the Vulnerability and Remediation *************** 📎Link: https://medium.com/p/ea1efcbda26f *************** ⚙️Tags: #penetration_testing #appsec #nosql #sast #vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 02:50:49 GMT *************** ✏️Title: Exploiting SSTI in Flask to Forge Admin Sessions: CTF “Birthday Card” Writeup of Pragyan CTF’25 By… *************** 📎Link: https://medium.com/p/d3343ca7add2 *************** ⚙️Tags: #techniques #exploit #ctf #hacking #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 01:43:05 GMT *************** ✏️Title: Pentesting Reimagined: Leveraging the power of AI *************** 📎Link: https://medium.com/p/e2485006b57d *************** ⚙️Tags: #pentesting #cybersecurity #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 02:13:42 GMT *************** ✏️Title: Linkook: Discover Associated Emails & Social Accounts with a Single Username *************** 📎Link: https://medium.com/p/0b5b93a1653e *************** ⚙️Tags: #username_enumeration #python #osint #osint_investigation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 01:00:41 GMT *************** ✏️Title: Lab: DOM XSS in document.write sink using source location.search inside a select element *************** 📎Link: https://medium.com/p/8ec7f3a98992 *************** ⚙️Tags: #portswigger_lab #cybersecurity #web_security_academy #infosec #portswigger *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 01:00:58 GMT *************** ✏️Title: Lab: Stored XSS into anchor href attribute with double quotes HTML-encoded *************** 📎Link: https://medium.com/p/395baf029376 *************** ⚙️Tags: #portswigger #portswigger_lab #infosec #cybersecurity #web_security_academy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 09 Feb 2025 01:01:00 GMT *************** ✏️Title: Lab: Excessive trust in client-side controls *************** 📎Link: https://medium.com/p/5050f30a3f9c *************** ⚙️Tags: #infosec #portswigger #portswigger_lab #cybersecurity #web_security_academy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 22:15:27 +0000 *************** ✏️Title: CVE-2023-4927 - CMS Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2023-4927 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 22:15:28 +0000 *************** ✏️Title: CVE-2024-5183 - CVE-2020-32262: Oracle Net Suite EnterpriseOne Client-Server Arbitrary File Write *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-5183 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 22:15:28 +0000 *************** ✏️Title: CVE-2024-6909 - "Microsoft Excel Integer Overflow Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-6909 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 22:15:28 +0000 *************** ✏️Title: CVE-2024-8377 - CVE-2019-5525 - Apache HTTP Server Unvalidated Pointer Dereference *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-8377 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 22:15:28 +0000 *************** ✏️Title: CVE-2025-0517 - "QNAP NAS Web Interface Authentication Bypass" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0517 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 23:15:08 +0000 *************** ✏️Title: CVE-2025-0169 - WordPress Theme DWT Stored Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0169 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 09 Feb 2025 00:51:34 +0100 *************** ✏️Title: CVE-2025-0316 | Chimpstudio WP Directorybox Manager Plugin up to 2.5 on WordPress wp_dp_enquiry_agent_contact_form_submit_callback authentication bypass *************** 📎Link: https://vuldb.com/?id.295044 *************** ⚙️Information: #Vendor: Chimpstudio #Product: WP Directorybox Manager Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 09 Feb 2025 00:51:42 +0100 *************** ✏️Title: CVE-2025-0169 | scriptsbundle DWT Plugin up to 3.3.4 on WordPress Shortcode cross site scripting *************** 📎Link: https://vuldb.com/?id.295045 *************** ⚙️Information: #Vendor: scriptsbundle #Product: DWT Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 23:25:28 GMT *************** ✏️Title: Building a Cybersecurity Home Lab on macOS: Kali Linux & Ubuntu with UTM (Free & Beginner-Friendly) *************** 📎Link: https://medium.com/p/fecb9bc47eb1 *************** ⚙️Tags: #cybersecurity #information_security #cyber_security_awareness #ethical_hacking #kali_linux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security