Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:59:46 +0200 *************** ✏️Title: CVE-2025-45854 | JEHC-BPM 2.0.1 /server/executeExec unrestricted upload *************** 📎Link: https://vuldb.com/?id.310986 *************** ⚙️Information: #Product: JEHC_BPM #Type: Business Process Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 17:59:58 +0200 *************** ✏️Title: CVE-2025-44148 | MailEnable up to 9 failure.aspx cross site scripting *************** 📎Link: https://vuldb.com/?id.310987 *************** ⚙️Information: #Product: MailEnable #Type: Mail Server Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:00:33 +0200 *************** ✏️Title: CVE-2025-23103 | Samsung Mobile Processor Exynos 1480/2400 out-of-bounds write *************** 📎Link: https://vuldb.com/?id.310988 *************** ⚙️Information: #Vendor: Samsung #Product: Mobile Processor Exynos #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:01:00 +0200 *************** ✏️Title: CVE-2025-5531 | Employee Directory Plugin up to 4.5.0 on WordPress Shortcode emd_mb_meta cross site scripting *************** 📎Link: https://vuldb.com/?id.310989 *************** ⚙️Information: #Product: Employee Directory Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 03 Jun 2025 18:01:09 +0200 *************** ✏️Title: CVE-2025-5532 | Campus Directory Plugin up to 1.9.0 on WordPress Shortcode emd_mb_meta cross site scripting *************** 📎Link: https://vuldb.com/?id.310990 *************** ⚙️Information: #Product: Campus Directory Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 14:58:50 GMT *************** ✏️Title: Stop Flying Blind in Salesforce! Master Health Check in 20 Minutes *************** 📎Link: https://medium.com/p/007da177adb3 *************** ⚙️Tags: #salesforce #cybersecurity #security #hacking #cybercrime *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:25:44 GMT *************** ✏️Title: Why Small Businesses Are the New #1 Target for Hackers (And It’s Not Because Hackers Hate Coffee… *************** 📎Link: https://medium.com/p/a1a044f1f7ac *************** ⚙️Tags: #small_business #hacking #marketing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:03:50 GMT *************** ✏️Title: I Built an MCP Server for XSS Testing — Here’s What Happened *************** 📎Link: https://medium.com/p/1c097e79eb8d *************** ⚙️Tags: #bug_bounty #web_hacking #ai #pentesting #mcp_server *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:26:04 GMT *************** ✏️Title: Penetration Testing: The Ethical Way to Expose Security Flaws Before Hackers Do *************** 📎Link: https://medium.com/p/25ffd54c428f *************** ⚙️Tags: #safeaeon #penetration_testing #information_security #cybersecurity #pentesting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:42:38 GMT *************** ✏️Title: Rust Is What Happens When You Optimize for Hacker News Approval *************** 📎Link: https://medium.com/p/6623d3808b94 *************** ⚙️Tags: #programming #rust_programming_language #optimize #software_engineering #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:34:23 GMT *************** ✏️Title: Ransomware Investigation Using Splunk — BOTSv1 Scenario 2 Walkthrough *************** 📎Link: https://medium.com/p/23465aa33c71 *************** ⚙️Tags: #siem #blue_team #ctf #learning #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:53:39 GMT *************** ✏️Title: TryHackMe: Unbaked Pie *************** 📎Link: https://medium.com/p/4f2a21d29491 *************** ⚙️Tags: #tryhackme_writeup #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:08:36 GMT *************** ✏️Title: N0PS CTF — Break My Stream *************** 📎Link: https://medium.com/p/8b882b68a7f2 *************** ⚙️Tags: #ctf_writeup #ctf #crypto #ksa #cryptography *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 15:55:00 GMT *************** ✏️Title: SQL Injection 101: Write Up Overthewire Natas14 *************** 📎Link: https://medium.com/p/8a3809533f5c *************** ⚙️Tags: #ctf_writeup #overthewire #cyberseurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 20:30:00 +0530 *************** ✏️Title: Fake DocuSign, Gitcode Sites Spread NetSupport RAT via Multi-Stage PowerShell Attack *************** 📎Link: https://thehackernews.com/2025/06/fake-docusign-gitcode-sites-spread.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 14:07:08 GMT *************** ✏️Title: IDOR allows unauthorized payment hijacking *************** 📎Link: https://medium.com/p/3abf642c0cca *************** ⚙️Tags: #idor #bug_bounty #cybersecurity #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 13:59:36 GMT *************** ✏️Title: The Life Hacker: Finding Smart Shortcuts to Financial Success and Overcoming Complacency *************** 📎Link: https://medium.com/p/cf893615a63d *************** ⚙️Tags: #growth_hacking #money #hacking #focus #development *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 14:26:33 GMT *************** ✏️Title: Shelly — Serve and Execute ShellCode over the wire *************** 📎Link: https://medium.com/p/8e8a98416831 *************** ⚙️Tags: #hacking_tools #shellcode #hacking #python #windows *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 14:01:12 GMT *************** ✏️Title: Cyber Briefing: 2025.06.03 *************** 📎Link: https://medium.com/p/fd4533bb0287 *************** ⚙️Tags: #technology #fashion #infosec #cyber_briefing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 03 Jun 2025 14:01:43 GMT *************** ✏️Title: IMMERSIVE *************** 📎Link: https://medium.com/p/da368ed5a693 *************** ⚙️Tags: #immersive #cybersecurity #penetration_testing #soc_analyst *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security