Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 22:04:31 GMT *************** ✏️Title: TryHackMe — NetSec Challenge (Medium Difficulty) *************** 📎Link: https://medium.com/p/3b4dcbc82847 *************** ⚙️Tags: #tryhackme #tryhackme_writeup #ctf #cybersecurity #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 22:18:01 GMT *************** ✏️Title: Lockbit [Reposted] *************** 📎Link: https://medium.com/p/9274d2e2824e *************** ⚙️Tags: #darkweb #threat_hunting #ransomware #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 22:19:26 GMT *************** ✏️Title: Bancoppel Domain Spoofing [Reposted] *************** 📎Link: https://medium.com/p/0f5bb640829e *************** ⚙️Tags: #osint #phishing #threat_hunting #web_development *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 21:07:01 GMT *************** ✏️Title: Shellcode Injection Methods for Windows *************** 📎Link: https://medium.com/p/6dde1c8253b0 *************** ⚙️Tags: #shellcode_injection #malware #hacking #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 22:58:44 +0200 *************** ✏️Title: CVE-2024-55585 | moPS up to 1.8.618 API Endpoint resetpassword missing authentication *************** 📎Link: https://vuldb.com/?id.311592 *************** ⚙️Information: #Product: moPS #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 19:15:22 +0000 *************** ✏️Title: CVE-2024-55585 - "moPS App Unauthenticated Administrative API Access Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-55585 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 20:53:20 GMT *************** ✏️Title: TryHackMe BadSuccessor Walkthrough *************** 📎Link: https://medium.com/p/2c5090bd31fc *************** ⚙️Tags: #active_directory_security #tryhackme_writeup #windows_domain_security #tryhackme_walkthrough #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 20:03:33 GMT *************** ✏️Title: Service URLs: The Hidden Gateways in Your Attack Surface *************** 📎Link: https://medium.com/p/cb22fcc74884 *************** ⚙️Tags: #bug_bounty #attack_surface_management #reconnaissance #penetration_testing #initial_access *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 20:03:14 GMT *************** ✏️Title: $3,000 Bug: HackerOne for Jira Plugin Exposed JWT to Unauthorized Users *************** 📎Link: https://medium.com/p/f1fcb08abde2 *************** ⚙️Tags: #technology #bug_bounty_tips #bug_bounty #tips_and_tricks #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 20:10:43 GMT *************** ✏️Title: Web Cache Deception Vulnerability Explained with Examples *************** 📎Link: https://medium.com/p/2a9654445383 *************** ⚙️Tags: #tips_and_tricks #technology #bug_bounty #penetration_testing #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 19:41:33 GMT *************** ✏️Title: My Virtual HomeLab: Active Directory — Part Two *************** 📎Link: https://medium.com/p/b636c9a9ea34 *************** ⚙️Tags: #homelab #personal #hacking #projects #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 19:50:39 GMT *************** ✏️Title: Technical Analysis and OSINT-based Research of CVE-2017–7921 in Hikvision IP Cameras *************** 📎Link: https://medium.com/p/6ff140a814a3 *************** ⚙️Tags: #cve_vulnerabilities #research #cyber #hikvision #cve *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 19:47:04 GMT *************** ✏️Title: What Is DNS? A Beginner’s Guide to the Domain Name System *************** 📎Link: https://medium.com/p/7ae20127446f *************** ⚙️Tags: #dns #ethical_hacking #tech #kali_linux #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 19:41:10 GMT *************** ✏️Title: $150 Bounty: How a 6-Digit Code Bypass Led to a Permanent Account Lockout on Evernote *************** 📎Link: https://medium.com/p/8d78e10557f4 *************** ⚙️Tags: #tips_and_tricks #penetration_testing #hacking #bug_bounty #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 19:54:39 GMT *************** ✏️Title: TURNING NUCLEI INTO A GOLD MINE! *************** 📎Link: https://medium.com/p/ba2ae1020015 *************** ⚙️Tags: #hacking #bug_bounty #bugbounty_tips #hacker #nuclei_template *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 18:15:25 +0000 *************** ✏️Title: CVE-2025-5839 - Tenda AC9 POST Request Handler Buffer Overflow Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5839 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 18:15:25 +0000 *************** ✏️Title: CVE-2025-5840 - SourceCodester Client Database Management System Unrestricted File Upload Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5840 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 19:10:28 GMT *************** ✏️Title: North Korean Hackers Might Be Faking DeFi’s Popularity, Here’s How They’re Doing It *************** 📎Link: https://medium.com/p/e9c40ff93a08 *************** ⚙️Tags: #hacking #crypto #cryptocurrency #cryptocurrency_news #crime *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 19:05:49 GMT *************** ✏️Title: Comprehensive Guide to IDOR and Access Control Testing *************** 📎Link: https://medium.com/p/d40bf8266f5b *************** ⚙️Tags: #bug_bounty #cybersecurity #ethical_hacking #web_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 16:49:34 GMT *************** ✏️Title: EBC Block Splicing Attack for Successful SQL Injection: Natas28 Overthewire Write Up *************** 📎Link: https://medium.com/p/6e83eb1815ac *************** ⚙️Tags: #cybersecurity #ctf_writeup #overthewire *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security