Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 07:15:22 +0000 *************** ✏️Title: CVE-2025-5433 - Fengoffice SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5433 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 07:15:22 +0000 *************** ✏️Title: CVE-2025-5434 - Aem Solutions CMS SQL Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5434 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 07:44:56 +0000 *************** ✏️Title: CISA Warns of Consilium Fire Panel Vulnerabilities Allowing Remote Takeover *************** 📎Link: https://cybersecuritynews.com/?p=109358 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 08:00:00 +0000 *************** ✏️Title: CISOs Guide to Regulatory Compliance in Global Landscapes *************** 📎Link: https://cybersecuritynews.com/?p=108253 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Automic Agent 24.3.0 HF4 - Privilege Escalation exploit =============== 📎 https://sploitus.com/exploit?id=EDB-ID:52309&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:31:22 GMT *************** ✏️Title: Wazuh: The Free and Open Source SIEM/XDR Platform *************** 📎Link: https://medium.com/p/416f157f1c62 *************** ⚙️Tags: #security #wazuh #open_source #cybersecurity #linux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:30:33 GMT *************** ✏️Title: Easiest Bug: Improper Token invalidation. *************** 📎Link: https://medium.com/p/378e1bc60d94 *************** ⚙️Tags: #bug_bounty_tips #bug_bounty_writeup #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:38:01 GMT *************** ✏️Title: OSWE Web Hacking Tips (IPPSEC): My Study Journey #1 *************** 📎Link: https://medium.com/p/4455f8bc7428 *************** ⚙️Tags: #infosec #oswe #pentesting #oscp #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:41:12 GMT *************** ✏️Title: Ethical Hacking Bootcamps: Are They Worth It? *************** 📎Link: https://medium.com/p/a38977121ccd *************** ⚙️Tags: #ethical_hacking_training #cybersecurity_bootcamp #ethical_hacking #cybersecurity_course *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:25:17 GMT *************** ✏️Title: Security Testing Market Size, Share, Key Drivers, Growth Opportunities and Global Trends 2032 *************** 📎Link: https://medium.com/p/0e05127bfedb *************** ⚙️Tags: #application_security #cyber_security_testing #vulnerability_assessment #penetration_testing #security_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:36:23 GMT *************** ✏️Title: $540 Bounty: How a Misconfigured Warning Endpoint in Apache Airflow Exposed DAG Secrets *************** 📎Link: https://medium.com/p/ceafdad57673 *************** ⚙️Tags: #penetration_testing #tips_and_tricks #bug_bounty #technology #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:51:45 GMT *************** ✏️Title: Key things to know before Starting Bug bounty hunting journey *************** 📎Link: https://medium.com/p/d52cd6ffc2bd *************** ⚙️Tags: #bug_bounty #cybersecurity #bug_bounty_hunter #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:37:11 GMT *************** ✏️Title: Building a Time-Aware, AI-Infused Pen-Testing Engine That Evolves Like a Living Adversary (Chrono… *************** 📎Link: https://medium.com/p/a941048fd280 *************** ⚙️Tags: #red_team #ai #llm #pentesting #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 06:13:55 GMT *************** ✏️Title: Win32/Koi Stealer: Investigasi Infeksi Malware dan Komunikasi C2 di PT.ABC *************** 📎Link: https://medium.com/p/6bc35ce0b1d3 *************** ⚙️Tags: #malware #cyber #analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 07:00:00 +0000 *************** ✏️Title: Securing Remote Work Zero Trust for Distributed Workforces *************** 📎Link: https://cybersecuritynews.com/?p=108242 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 11:21:00 +0530 *************** ✏️Title: Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions *************** 📎Link: https://thehackernews.com/2025/06/fake-recruiter-emails-target-cfos-using.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 08:20:09 +0200 *************** ✏️Title: CVE-2025-49113 | Roundcube Webmail up to 1.5.9/1.6.10 upload.php _from deserialization *************** 📎Link: https://vuldb.com/?id.310787 *************** ⚙️Information: #Vendor: Roundcube #Product: Webmail #Type: Mail Client Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 08:20:18 +0200 *************** ✏️Title: CVE-2025-20674 | MediaTek MT7993 WLAN AP Driver authorization (MSV-3303) *************** 📎Link: https://vuldb.com/?id.310788 *************** ⚙️Information: #Vendor: MediaTek #Product: MT6890/MT6990/MT7915/MT7916/MT7981/MT7986/MT7990/MT7992/MT7993 #Type: Chip Software #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 08:20:38 +0200 *************** ✏️Title: CVE-2025-20678 | MediaTek MT8893 up to NR17R Ims Service recursion (MSV-2739 / MOLY01394606) *************** 📎Link: https://vuldb.com/?id.310789 *************** ⚙️Information: #Vendor: MediaTek #Product: MT6739/MT6761/MT6762/MT6762D/MT6762M/MT6763/MT6765/MT6765T/MT6767/MT6768/MT6769/MT6769K/MT6769S/MT6769T/MT6769Z/MT6771/MT6779/MT6781/MT6783/MT6785/MT6785T/MT6785U/MT6789/MT6813/MT6833/MT6833P/MT6835/MT6835T/MT6853/MT6853T/MT6855/MT6855T/MT6873/MT6875/MT6875T/MT6877/MT6877T/MT6877TT/MT6878/MT6878M/MT6879/MT6880/MT6883/MT6885/MT6886/MT6889/MT6890/MT6891/MT6893/MT6895/MT6895TT/MT6896/MT6897/MT6899/MT6980/MT6983/MT6983T/MT6985/MT6985T/MT6989/MT6989T/MT6990/MT6991/MT8666/MT8667/MT8673/MT8675/MT8676/MT8678/MT8765/MT8766/MT8766R/MT8768/MT8771/MT8781/MT8786/MT8788/MT8788E/MT8789/MT8791/MT8791T/MT8795T/MT8797/MT8798/MT8863/MT8873/MT8883/MT8893 #Type: Chip Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 08:20:50 +0200 *************** ✏️Title: CVE-2024-11857 | Realtek Bluetooth HCI Adaptor prior 1.1.73.1 link following *************** 📎Link: https://vuldb.com/?id.310790 *************** ⚙️Information: #Vendor: Realtek #Product: Bluetooth HCI Adaptor #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security