Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 16:24:32 GMT *************** ✏️Title: I’m the Lone Man who Thinks I can make Difference Epi 05 *************** 📎Link: https://medium.com/p/672243ef64a9 *************** ⚙️Tags: #money #writing #hacking #business *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 16:21:41 GMT *************** ✏️Title: Cyber Threat Intelligence (CTI) *************** 📎Link: https://medium.com/p/c2678c27dab3 *************** ⚙️Tags: #osint #cyber_threat_intelligence #cti *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 15:55:32 GMT *************** ✏️Title: Exploiting Windows 7 *************** 📎Link: https://medium.com/p/89115cb0b10c *************** ⚙️Tags: #network_security #cybersecurity #enumeration #exploitation #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 16:00:52 GMT *************** ✏️Title: How I Bypassed a Famous Regional Newspaper’s Subscription Plan By Http Response Manipulation *************** 📎Link: https://medium.com/p/ac5bd9d2eaea *************** ⚙️Tags: #programming #web_development #cybersecurity #ethical_hacking #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 16:32:50 GMT *************** ✏️Title: You’ll find my thought processes, challenges I faced, and what I learned along the way — whether… *************** 📎Link: https://medium.com/p/6dd5c9f4ad83 *************** ⚙️Tags: #writing #tryhackme #cybersecurity #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 15:48:58 GMT *************** ✏️Title: How Malware Infects Your Devices: Common Entry Points You Ignore *************** 📎Link: https://medium.com/p/82d31e8280ec *************** ⚙️Tags: #information_security #safeaeon #malware #cybersecurity #computer_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:22 +0000 *************** ✏️Title: CVE-2025-5063 - Google Chrome Use After Free in Compositing Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5063 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-5280 - Google Chrome V8 Out-of-Bounds Heap Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5280 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 14:15:34 +0000 *************** ✏️Title: CVE-2025-48734 - Apache Commons BeanUtils Uncontrolled Enum Property Access Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48734 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 14:15:35 +0000 *************** ✏️Title: CVE-2025-5277 - Amazon Web Services (AWS) MCP-Server Command Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5277 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 16:47:40 +0200 *************** ✏️Title: CVE-2025-40651 | Real Easy Store /index.php?a=search keyword cross site scripting *************** 📎Link: https://vuldb.com/?id.310437 *************** ⚙️Information: #Product: Real Easy Store #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 16:47:41 +0200 *************** ✏️Title: CVE-2025-45997 | SourceCodester Pharmacy Product Management System 1.0 Image unrestricted upload *************** 📎Link: https://vuldb.com/?id.310438 *************** ⚙️Information: #Vendor: SourceCodester #Product: Pharmacy Product Management System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 16:48:02 +0200 *************** ✏️Title: CVE-2025-4493 | Devolutions Server up to 2024.3.15.0/2025.1.7.0 PAM JIT Request privileges assignment (DEVO-2025-0008) *************** 📎Link: https://vuldb.com/?id.310439 *************** ⚙️Information: #Vendor: Devolutions #Product: Server #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 16:48:47 +0200 *************** ✏️Title: CVE-2025-48734 | Apache Commons BeanUtils up to 1.10.x/2.0.0-/1 org.apache.commons getProperty access control *************** 📎Link: https://vuldb.com/?id.310440 *************** ⚙️Information: #Vendor: Apache #Product: Commons BeanUtils #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 16:49:06 +0200 *************** ✏️Title: CVE-2025-5277 | alexei-led aws-mcp-server up to 1.2.x os command injection *************** 📎Link: https://vuldb.com/?id.310441 *************** ⚙️Information: #Vendor: alexei_led #Product: aws_mcp_server #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 16:49:30 +0200 *************** ✏️Title: CVE-2025-4134 | Avast Business Antivirus 4.5.1 on Linux do_update_vps file access *************** 📎Link: https://vuldb.com/?id.310442 *************** ⚙️Information: #Vendor: Avast #Product: Business Antivirus #Type: Anti_Malware Software #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 16:50:34 +0200 *************** ✏️Title: CVE-2025-47952 | Traefik up to 1.7.34/2.11.24/3.4.0 URL Encoding path traversal *************** 📎Link: https://vuldb.com/?id.310443 *************** ⚙️Information: #Product: Traefik #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 15:25:42 GMT *************** ✏️Title: Spidering in Security *************** 📎Link: https://medium.com/p/104900f56836 *************** ⚙️Tags: #security #browsers #spidering #cybersecurity #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 15:28:17 GMT *************** ✏️Title: How Web Cache Poisoning via Unkeyed Query Strings Can Lead to Reflected XSS *************** 📎Link: https://medium.com/p/0c0ce45cb5d9 *************** ⚙️Tags: #reflected_xss #bug_bounty_tips #web_cache_poisoning #bug_bounty #cache_poisoning_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 15:02:29 GMT *************** ✏️Title: Secure Protocols: HTTPS, TLS, SSH vs. Telnet, and Capturing SSL/TLS Handshakes *************** 📎Link: https://medium.com/p/86928757d731 *************** ⚙️Tags: #networking #security #learning #ethical_hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security