Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 23:59:52 GMT *************** ✏️Title: Shocking Malware Campaign Exposed! *************** 📎Link: https://medium.com/p/3d504731704f *************** ⚙️Tags: #malware #cyber_security_awareness #information_security #cybersecurity #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 23:15:20 +0000 *************** ✏️Title: CVE-2025-3919 - WordPress Comments Import & Export Plugin Unauthenticated Cross-Site Scripting (XSS) Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-3919 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 23:12:12 GMT *************** ✏️Title: Breaking into the Cloud: Reviewing Tyler Ramsbey’s AWS Pentesting Course ‍ *************** 📎Link: https://medium.com/p/b7027aac5574 *************** ⚙️Tags: #cloud_security #computer_science #penetration_testing #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 23:17:39 GMT *************** ✏️Title: Hackers (1995) — Movie Review, Analysis, and Deconstruction *************** 📎Link: https://medium.com/p/2d575c1a835a *************** ⚙️Tags: #hacker #cinema_decon #podcast #movie_review *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 22:31:33 GMT *************** ✏️Title: Documents & Their Malicious Use *************** 📎Link: https://medium.com/p/3ab372029352 *************** ⚙️Tags: #dynamic_analysis #static_analysis #tryhackme #miss_robot #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:15:22 +0000 *************** ✏️Title: CVE-2025-47585 - Mage People Team Booking and Rental Manager Missing Authorization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-47585 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:15:22 +0000 *************** ✏️Title: CVE-2025-48387 - Tar-fs Directory Traversal Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48387 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 20:15:23 +0000 *************** ✏️Title: CVE-2025-48996 - HAX Penn State University Open-Apis Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48996 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 22:18:52 GMT *************** ✏️Title: Enough with the Hacks, Strategies, and Hustle: I’m Over It *************** 📎Link: https://medium.com/p/3489421a9e3e *************** ⚙️Tags: #storyofmylife #introspection #hacking #reflections #success *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 21:33:11 GMT *************** ✏️Title: The Art of Penetration Testing Communication: Beyond Technical Findings *************** 📎Link: https://medium.com/p/788657483ef4 *************** ⚙️Tags: #communication #reporting #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 21:37:20 GMT *************** ✏️Title: Creating the Knot Easter CTF 2025 *************** 📎Link: https://medium.com/p/e4af5103f56f *************** ⚙️Tags: #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 21:54:58 GMT *************** ✏️Title: Sometimes an informative report can also get you $$ in Bug Bounty. *************** 📎Link: https://medium.com/p/6aa2cda9ec7b *************** ⚙️Tags: #bug_bounty #infosec #bugbounty_writeup #bounty_program #disclosed *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 02 Jun 2025 22:10:44 GMT *************** ✏️Title: Shocker: A Penetration Testing Walkthrough *************** 📎Link: https://medium.com/p/e055a313ff79 *************** ⚙️Tags: #penetration_testing #hackthebox #ethical_hacking #cybersecurity #application_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 22:55:15 +0200 *************** ✏️Title: CVE-2025-49077 | Dynamic Pricing and Discount Rules Plugin up to 2.2.9 on WordPress cross-site request forgery *************** 📎Link: https://vuldb.com/?id.310886 *************** ⚙️Information: #Product: Dynamic Pricing and Discount Rules Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 22:55:28 +0200 *************** ✏️Title: CVE-2025-48330 | Real Time Validation for Gravity Forms Plugin up to 1.7.0 on WordPress file inclusion *************** 📎Link: https://vuldb.com/?id.310887 *************** ⚙️Information: #Product: Real Time Validation for Gravity Forms Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 22:55:29 +0200 *************** ✏️Title: CVE-2025-31920 | WP Guppy Plugin up to 4.3.3 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.310888 *************** ⚙️Information: #Product: WP Guppy Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 22:55:38 +0200 *************** ✏️Title: CVE-2025-1725 | Bit File Manager Plugin up to 6.7 on WordPress SVG File Upload cross site scripting *************** 📎Link: https://vuldb.com/?id.310889 *************** ⚙️Information: #Product: Bit File Manager Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 22:55:39 +0200 *************** ✏️Title: CVE-2025-47601 | MaxiBlocks Plugin up to 2.1.0/14.3K on WordPress authorization *************** 📎Link: https://vuldb.com/?id.310890 *************** ⚙️Information: #Product: MaxiBlocks Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 22:55:40 +0200 *************** ✏️Title: CVE-2025-4420 | Vayu Blocks Plugin up to 1.3.1 on WordPress vayu_blocks_option_panel_callback containerWidth cross site scripting *************** 📎Link: https://vuldb.com/?id.310891 *************** ⚙️Information: #Product: Vayu Blocks Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 02 Jun 2025 22:55:41 +0200 *************** ✏️Title: CVE-2025-31059 | WBW Product Table Pro Plugin up to 2.1.3 on WordPress sql injection *************** 📎Link: https://vuldb.com/?id.310892 *************** ⚙️Information: #Product: WBW Product Table Pro Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security