Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:51:15 GMT *************** ✏️Title: Solution Of Lab: Unprotected admin functionality *************** 📎Link: https://medium.com/p/0807ffba7c4a *************** ⚙️Tags: #bug_bounty_writeup #portswigger_lab #bug_bounty #unprotected_admin #portswigger *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:46:07 GMT *************** ✏️Title: 10 Practical API Hacking Tips That Will Save You Time *************** 📎Link: https://medium.com/p/838ab59a9179 *************** ⚙️Tags: #api_security #hacking #application_security #api_testing #api *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:57:35 GMT *************** ✏️Title: BUG- First AI Powered, Voice Control, Ethical Hacking Device *************** 📎Link: https://medium.com/p/817132a71f41 *************** ⚙️Tags: #rubber_ducky #hacking #flipper_zero #kickstarter #bugs *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:52:00 GMT *************** ✏️Title: Ethical Hacking & Legal Considerations for Interns *************** 📎Link: https://medium.com/p/73b64a67e46d *************** ⚙️Tags: #cyber #cybercrime #ethical_hacking #cyber_security_internship #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:34:02 GMT *************** ✏️Title: Why Penetration Testing is Critical for Healthcare *************** 📎Link: https://medium.com/p/9a9bc6360093 *************** ⚙️Tags: #healthcare #penetration_testing #cybersecurity #security_testing #vulnerability_assessment *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:35:14 GMT *************** ✏️Title: One Click Account takeover *************** 📎Link: https://medium.com/p/38db9005533c *************** ⚙️Tags: #ethical_hacking #cybersecurity #bug_bounty #penetration_testing #vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:15:06 GMT *************** ✏️Title: TryHackMe “Bounty Hunter CTF walkthrough” *************** 📎Link: https://medium.com/p/35a3651b751c *************** ⚙️Tags: #bounty_hunter #ctf_writeup #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:27:27 +0200 *************** ✏️Title: CVE-2025-49012 | himmelblau up to 0.9.14/1.0.0-alpha improper authentication (ID 554) *************** 📎Link: https://vuldb.com/?id.311309 *************** ⚙️Information: #Product: himmelblau #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:27:43 +0200 *************** ✏️Title: CVE-2024-56342 | IBM Verify Identity Access Digital Credentials 24.06 information exposure *************** 📎Link: https://vuldb.com/?id.311310 *************** ⚙️Information: #Vendor: IBM #Product: Verify Identity Access Digital Credentials #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:27:58 +0200 *************** ✏️Title: CVE-2024-22330 | IBM Security Verify Governance 10.0.2 weak password *************** 📎Link: https://vuldb.com/?id.311311 *************** ⚙️Information: #Vendor: IBM #Product: Security Verify Governance #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:28:10 +0200 *************** ✏️Title: CVE-2024-56343 | IBM Verify Identity Access Digital Credentials 24.06 HTTP POST Request missing reference to active allocated resource *************** 📎Link: https://vuldb.com/?id.311312 *************** ⚙️Information: #Vendor: IBM #Product: Verify Identity Access Digital Credentials #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:28:54 +0200 *************** ✏️Title: CVE-2025-36513 | i-PRO Surveillance Camera cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311313 *************** ⚙️Information: #Vendor: i_PRO #Product: Surveillance Camera #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 07:29:16 +0200 *************** ✏️Title: CVE-2025-5719 | Vivo Wallet missing authentication *************** 📎Link: https://vuldb.com/?id.311314 *************** ⚙️Information: #Vendor: Vivo #Product: Wallet #Risk: problematic #Local: Partially #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:03:16 GMT *************** ✏️Title: SOC AUTOMATION — Part 4 *************** 📎Link: https://medium.com/p/47dfd7c311e5 *************** ⚙️Tags: #infosec_write_ups #cybersecurity #tech #soc_automation #linux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:11:47 GMT *************** ✏️Title: OIDC: The Fellowship of the Token (Part III) *************** 📎Link: https://medium.com/p/5132e4326783 *************** ⚙️Tags: #azure #kubernetes #aws #google_cloud_platform #oidc *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:16:11 GMT *************** ✏️Title: Why I’m Preparing for OSCP After Years of Theory and Breaks *************** 📎Link: https://medium.com/p/6f125dbdec67 *************** ⚙️Tags: #bug_bounty #cybersecurity #ethical_hacker #oscp_preparation #self_taught_developer *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:02:42 GMT *************** ✏️Title: A Step-by-Step Plan to Secure Web Backends with XAMPP (Part 1/3) *************** 📎Link: https://medium.com/p/6971d01467d2 *************** ⚙️Tags: #cybersecurity #web_security #pentesting #xss_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:10:15 GMT *************** ✏️Title: Part 3: How to Become a Pentester in 2025:Practical Practice: Labs & CTFs *************** 📎Link: https://medium.com/p/c218a22404d3 *************** ⚙️Tags: #ethical_hacking #cybersecurity #hacking_training #pentesting #oscp *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:05:08 GMT *************** ✏️Title: How Simple RECON Earned Me ₹XX,000 at Zerodha *************** 📎Link: https://medium.com/p/3172aea39c3e *************** ⚙️Tags: #infosec #hacking #bug_bounty #bug_bounty_writeup #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 05:16:12 GMT *************** ✏️Title: The Unavoidable Reality of Software Bugs *************** 📎Link: https://medium.com/p/275e463572b8 *************** ⚙️Tags: #software_engineering #programming #bugs #developer #software_development *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security