Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 14:03:51 GMT *************** ✏️Title: The Complete Guide to Malware Analysis Lab Setup *************** 📎Link: https://medium.com/p/fcd90b3d9a15 *************** ⚙️Tags: #cybersecurity #malware_analysis #virtual_machine #cyberattack #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 14:52:13 GMT *************** ✏️Title: TryHackMe Athena Writeup *************** 📎Link: https://medium.com/p/742e7bcab1c1 *************** ⚙️Tags: #cybersecurity #ctf #penetration_testing #writeup #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 13:52:00 GMT *************** ✏️Title: Rootme CTF Walkthrough (Tryhackme) *************** 📎Link: https://medium.com/p/63a831ddbfd6 *************** ⚙️Tags: #ctf #bugbounty_writeup #infosec_write_ups #ctf_writeup #ctf_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 14:30:45 GMT *************** ✏️Title: Resolviendo la maquina retirada GreenHorn-HTB WriteUp en español *************** 📎Link: https://medium.com/p/7c23cdc96c86 *************** ⚙️Tags: #hacking #hacking_tools #ctf_writeup #ethical_hacking #hackthebox_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 14:28:31 GMT *************** ✏️Title: Consumption: Defeating SentinelOne through resource consumption. *************** 📎Link: https://medium.com/p/ff164771f6e2 *************** ⚙️Tags: #red_team_tools #malware #penetration_testing #hacking #information_technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 13:54:20 +0100 *************** ✏️Title: CVE-2025-1175 | Kelio Visio 1/Visio X7/Visio X4 up to 5.1K HTTP POST Request /PageLoginVisio.do cross site scripting *************** 📎Link: https://vuldb.com/?id.295091 *************** ⚙️Information: #Vendor: Kelio #Product: Visio 1/Visio X7/Visio X4 #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 13:54:48 +0100 *************** ✏️Title: CVE-2025-1099 | TP-Link Tapo C500 V1 Wi-Fi Camera RSA Private Key hard-coded key (CIVN-2025-0017) *************** 📎Link: https://vuldb.com/?id.295092 *************** ⚙️Information: #Vendor: TP_Link #Product: Tapo C500 V1 Wi_Fi Camera/Tapo C500 V2 Wi_Fi Camera #Risk: critical #Local: Partially #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 13:58:54 +0100 *************** ✏️Title: CVE-2025-1187 | code-projects Police FIR Record Management System 1.0 Delete Record stack-based overflow *************** 📎Link: https://vuldb.com/?id.295093 *************** ⚙️Information: #Vendor: code_projects #Product: Police FIR Record Management System #Type: Project Management Software #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:01:32 +0100 *************** ✏️Title: CVE-2025-1188 | Codezips Gym Management System 1.0 updateroutine.php tid sql injection *************** 📎Link: https://vuldb.com/?id.295094 *************** ⚙️Information: #Vendor: Codezips #Product: Gym Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:03:48 +0100 *************** ✏️Title: CVE-2025-1189 | 1000 Projects Attendance Tracking Management System 1.0 /admin/chart1.php course_id sql injection *************** 📎Link: https://vuldb.com/?id.295095 *************** ⚙️Information: #Vendor: 1000 Projects #Product: Attendance Tracking Management System #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:09:42 +0100 *************** ✏️Title: CVE-2025-1190 | code-projects Job Recruitment 1.0 load_user-profile.php cross site scripting *************** 📎Link: https://vuldb.com/?id.295096 *************** ⚙️Information: #Vendor: code_projects #Product: Job Recruitment #Type: Project Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:36:11 +0100 *************** ✏️Title: CVE-2025-1191 | SourceCodester Multi Restaurant Table Reservation System 1.0 approve-reject.php breject_id sql injection *************** 📎Link: https://vuldb.com/?id.295097 *************** ⚙️Information: #Vendor: SourceCodester #Product: Multi Restaurant Table Reservation System #Type: Hospitality Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 14:36:31 +0100 *************** ✏️Title: CVE-2025-1192 | SourceCodester Multi Restaurant Table Reservation System 1.0 select-menu.php table sql injection *************** 📎Link: https://vuldb.com/?id.295098 *************** ⚙️Information: #Vendor: SourceCodester #Product: Multi Restaurant Table Reservation System #Type: Hospitality Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 13:48:25 +0000 *************** ✏️Title: LLM Hijackers Gained Stolen Access to DeepSeek-V3 Model Very Next Day After Release *************** 📎Link: https://cybersecuritynews.com/?p=92047 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 13:57:20 +0000 *************** ✏️Title: 1M+ Malware Samples Analysis Reveal Application Layer Abused for Stealthy C2 *************** 📎Link: https://cybersecuritynews.com/?p=92053 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 14:06:00 +0000 *************** ✏️Title: GitHub Copilot’s New Agent Mode Let Developers Autonomously Complete Coding Tasks *************** 📎Link: https://cybersecuritynews.com/?p=92037 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 14:21:12 +0000 *************** ✏️Title: Microsoft SharePoint Connector Vulnerability Let Attackers Steal User’s Credentials *************** 📎Link: https://cybersecuritynews.com/?p=92063 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 13:15:26 +0000 *************** ✏️Title: CVE-2024-8684 - KUNBUS Revolution Pi OS Command Injection *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-8684 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 13:26:25 GMT *************** ✏️Title: OSCPOSWE — Sick *************** 📎Link: https://medium.com/p/e1c99f8341ff *************** ⚙️Tags: #oscp #pentesting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 13:28:51 GMT *************** ✏️Title: Bug Immortality and Mortality: Understanding the Lifecycle of Persistent Bugs in Software… *************** 📎Link: https://medium.com/p/dea3ca30cffd *************** ⚙️Tags: #qa #software_development #quality_assurance #bugs #software_engineering *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security