Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 06:15:19 +0000 *************** ✏️Title: CVE-2024-13543 - Zarinpal Paid Download WordPress Reflected Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13543 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 06:15:19 +0000 *************** ✏️Title: CVE-2024-13544 - Zarinpal Paid Download File Upload Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13544 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 06:15:19 +0000 *************** ✏️Title: CVE-2024-13570 - WordPress Stray Random Quotes Reflected Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13570 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-1176 - GNU Binutils Heap-Based Buffer Overflow Vulnerability in ld Component *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1176 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 06:15:22 +0000 *************** ✏️Title: CVE-2025-1177 - Dayrui XunRuiCMS Deserialization Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1177 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:00:34 GMT *************** ✏️Title: How to Prevent HTTP Parameter Pollution in Laravel: Best Practices & Code Examples *************** 📎Link: https://medium.com/p/f5d973cbaecc *************** ⚙️Tags: #cybersecurity #laravel #http_parameter_pollution #penetration_testing #vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 05:23:30 GMT *************** ✏️Title: HTTP in detail — TryHackMe *************** 📎Link: https://medium.com/p/2d24b69ebb6b *************** ⚙️Tags: #networking #tryhackme #cybersecurity #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os exploit =============== 📎 https://sploitus.com/exploit?id=EB9A4863-511A-565C-B464-A0BE48B43275&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2024-54772 exploit =============== 📎 https://sploitus.com/exploit?id=F939A0FF-264B-58A2-8652-C26A785A3360&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2024-6624 exploit =============== 📎 https://sploitus.com/exploit?id=DB56658D-ACFA-56C6-A811-445EC0F2D79B&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Cross-site Scripting in Mozilla Thunderbird exploit =============== 📎 https://sploitus.com/exploit?id=B24718BB-2452-5124-B4A2-5937C46F12FC&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 05:12:54 GMT *************** ✏️Title: Understanding XSS (Cross-Site Scripting) — A Complete Guide *************** 📎Link: https://medium.com/p/5b5732539013 *************** ⚙️Tags: #cross_site_scripting #bugbounty_writeup #xss_attack #hacking #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 05:11:46 GMT *************** ✏️Title: Notify Tutorial for Bug Hunters *************** 📎Link: https://medium.com/p/8ccb8d0d0b74 *************** ⚙️Tags: #bug_bounty #cybersecurity #pentesting #hacking #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 04:55:11 GMT *************** ✏️Title: Investigation: Profile of a Chinese Influencer Shang Zijian *************** 📎Link: https://medium.com/p/74de3ef20679 *************** ⚙️Tags: #china #social_media #osint #propaganda *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 04:59:45 GMT *************** ✏️Title: OSINT — KaffeeSec SoMeSINT— TryHackMe challanges #5 *************** 📎Link: https://medium.com/p/ae2844218bad *************** ⚙️Tags: #geoint #investigation #affairs #socmint #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 10:02:00 +0530 *************** ✏️Title: Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update *************** 📎Link: https://thehackernews.com/2025/02/apple-patches-actively-exploited-ios.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 04:52:03 GMT *************** ✏️Title: Unauthorized Access to the Uploads Directory in Web Applications *************** 📎Link: https://medium.com/p/b8d62581f7fb *************** ⚙️Tags: #security #web_development #penetration_testing #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 04:13:49 GMT *************** ✏️Title: LFI to RCE, Web Exploitation - Watcher : TryHackMe Walkthrough *************** 📎Link: https://medium.com/p/94240de32c45 *************** ⚙️Tags: #web_development #penetration_testing #cybersecurity #tryhackme #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 04:56:24 GMT *************** ✏️Title: Thompson — TryHackMe *************** 📎Link: https://medium.com/p/63a1cd797b0c *************** ⚙️Tags: #tryhackme #thompson_tryhackme #tryhackme_walkthrough #cybersecurity #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 03:43:52 GMT *************** ✏️Title: How CoinCollectExperts Recovered My BTC — A Life-Changing Experience *************** 📎Link: https://medium.com/p/1ebb01043b46 *************** ⚙️Tags: #recovery #recover_scammed_crypto #usd #recover_scammed_bitcoin #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security