Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 12:04:34 GMT *************** ✏️Title: Understanding Basic SSRF: How Visible Server Responses Can Leak Your Internal Secrets *************** 📎Link: https://medium.com/p/444326d8c870 *************** ⚙️Tags: #bug_bounty #web_development #penetration_testing #api #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 11:53:20 GMT *************** ✏️Title: Hire a Hacker to Recover an Account *************** 📎Link: https://medium.com/p/8667c6ab1384 *************** ⚙️Tags: #hacker #hacking #hire_a_hacker #hire_a_hacker_online #account_recover *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 11:38:26 GMT *************** ✏️Title: HackTheBox - Dancing *************** 📎Link: https://medium.com/p/b0a87b72bda8 *************** ⚙️Tags: #cybersecurity #hackthebox #linux #htb #smb *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 09:08:39 GMT *************** ✏️Title: How a Simple URL Exposed Thousands of Users *************** 📎Link: https://medium.com/p/d048cfa20aed *************** ⚙️Tags: #cybersecurity #bug_bounty #bug_bounty_writeup #ethical_hacking #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 09:54:18 GMT *************** ✏️Title: My Experience Pen testing an E-Learning Platform *************** 📎Link: https://medium.com/p/d63a64adc8ab *************** ⚙️Tags: #cybersecurity #ethical_hacking #web_app_pentesting #network_scanning *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 10:22:16 GMT *************** ✏️Title: Day 1: Reflected XSS into HTML context with nothing encoded: Zero to Hero Series— Portswigger *************** 📎Link: https://medium.com/p/8cb15403ba29 *************** ⚙️Tags: #xs #web_penetration_testing #ethical_hacking #cross_site_scripting #reflected_xss *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 07:13:08 GMT *************** ✏️Title: How Bug Bounties & VAPT Coexist for Web3 Projects *************** 📎Link: https://medium.com/p/5e22cf7ad209 *************** ⚙️Tags: #web3 #smart_contracts #vapt #bug_bounty #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 10:29:04 GMT *************** ✏️Title: Online vs. Offline Ethical Hacking Training *************** 📎Link: https://medium.com/p/a87e25eaf7d1 *************** ⚙️Tags: #ethical_hacking_training #ethical_hacking #ethical_hacking_online #offline_ethical_hacking #ethical_hacking_center *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 09:33:03 GMT *************** ✏️Title: SSRF Vulnerability Explained: Server-Side Request Forgery Attack Types, Real-World Examples &… *************** 📎Link: https://medium.com/p/c55a3bf8540c *************** ⚙️Tags: #bug_bounty #apache #penetration_testing #cybersecurity #web_development *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 10:06:54 GMT *************** ✏️Title: $1,000 Bounty: ReaderMode XSS in Brave via %READER-TITLE-NONCE% *************** 📎Link: https://medium.com/p/4204606dfe20 *************** ⚙️Tags: #technology #hacking #bug_bounty #penetration_testing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 10:56:14 GMT *************** ✏️Title: TryHackMe | Sandbox Evasion | WriteUp *************** 📎Link: https://medium.com/p/bf717fbce02e *************** ⚙️Tags: #cybersecurity #tryhackme #tryhackme_walkthrough #sandbox #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 08:12:35 GMT *************** ✏️Title: Understanding Malware *************** 📎Link: https://medium.com/p/dbe61cc9c30c *************** ⚙️Tags: #ransomware #cyber_security_awareness #cyberattack #malware #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 05:15:21 +0000 *************** ✏️Title: CVE-2025-4223 - WordPress Pagelayer Reflected Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4223 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 06:07:50 GMT *************** ✏️Title: The Rise of Nation-State Hackers: GRU’s Unit 26165 in the Spotlight *************** 📎Link: https://medium.com/p/8ef96fde933a *************** ⚙️Tags: #bluedelta #forest_blizzard #fancybear #hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 06:42:32 GMT *************** ✏️Title: Manus AI HACK: Broken Code Reveals the Explosive Truth Behind “Autonomous” AI! *************** 📎Link: https://medium.com/p/31c284144cf3 *************** ⚙️Tags: #hacking #manusia #money #prompt_engineering #intelligence_artificielle *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 06:12:28 GMT *************** ✏️Title: Agent T TryHackMe Walkthrough *************** 📎Link: https://medium.com/p/0bdb54e5ae9f *************** ⚙️Tags: #cybersecurity #education #ctf_walkthrough #hacking #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:37:53 +0200 *************** ✏️Title: CVE-2025-48738 | StrangeBee TheHive up to 5.2.15/5.3.10/5.4.9/5.5.0 Password Reset allocation of resources (ADV-2025-003) *************** 📎Link: https://vuldb.com/?id.310222 *************** ⚙️Information: #Vendor: StrangeBee #Product: TheHive #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:38:19 +0200 *************** ✏️Title: CVE-2025-48735 | BOS IP Camera prior 21.45.8.2.3_230220 sql injection *************** 📎Link: https://vuldb.com/?id.310223 *************** ⚙️Information: #Vendor: BOS #Product: IP Camera #Type: Network Camera Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:38:39 +0200 *************** ✏️Title: CVE-2025-48741 | StrangeBee TheHive up to 5.2.15/5.3.10/5.4.9 API Endpoint privileges assignment (SB-SEC-ADV-2025-004) *************** 📎Link: https://vuldb.com/?id.310224 *************** ⚙️Information: #Vendor: StrangeBee #Product: TheHive #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 07:39:42 +0200 *************** ✏️Title: CVE-2025-48739 | StrangeBee TheHive up to 5.2.15/5.3.10/5.4.9/5.5.0 API Endpoint server-side request forgery (SB-SEC-ADV-2025-002) *************** 📎Link: https://vuldb.com/?id.310225 *************** ⚙️Information: #Vendor: StrangeBee #Product: TheHive #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security