Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 08:13:12 GMT *************** ✏️Title: Web Security 101: Understanding LFI and RFI Attacks: A Bug Bounty Hunter’s Guide *************** 📎Link: https://medium.com/p/299b6b1d76e7 *************** ⚙️Tags: #vulnerability #lfi #hacking #cybersecurity #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 08:22:17 GMT *************** ✏️Title: Best Browser Extensions for Bug Hunting and Cybersecurity *************** 📎Link: https://medium.com/p/77faf6bd8188 *************** ⚙️Tags: #bug_bounty #hacking #bug_bounty_tips #cybersecurity #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 08:24:06 GMT *************** ✏️Title: Stealing Accesses tokens from Cloud Functions in GCP *************** 📎Link: https://medium.com/p/e2593dd4a4bf *************** ⚙️Tags: #pentesting #google #hacking #cloud *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 08:07:05 GMT *************** ✏️Title: Evolusi Peretasan: Dari Pahlawan Kode Hingga Penjahat Siber *************** 📎Link: https://medium.com/p/21026f3ddaa3 *************** ⚙️Tags: #hacker #sejarah #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 08:17:11 GMT *************** ✏️Title: Part [1] | Panduan Lengkap Mengimport File OVA Yang Telah Tersedia Lingkungan LAMP (Linux, Apache… *************** 📎Link: https://medium.com/p/fd9edd6e39ee *************** ⚙️Tags: #cybersecurity #ethical_hacking #hacker #owasp #security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 08:22:54 GMT *************** ✏️Title: Behind the Message: Two Critical XSS Vulnerabilities in Zoho’s Web Applications *************** 📎Link: https://medium.com/p/86aa42887129 *************** ⚙️Tags: #javascript #bugbounty_writeup #bug_bounty #vulnerability #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 07:59:45 GMT *************** ✏️Title: Trace the Unseen (Catch me if you can -Crime investigation) writeup *************** 📎Link: https://medium.com/p/2386ce99ca86 *************** ⚙️Tags: #ctf #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:24:38 +0100 *************** ✏️Title: CVE-2025-25183 | vllm up to 0.7.1 hash constant integrity check (GHSA-rm76-4mrf-v9r8) *************** 📎Link: https://vuldb.com/?id.295027 *************** ⚙️Information: #Product: vllm #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:25:50 +0100 *************** ✏️Title: CVE-2021-41528 | Flexera RISC Platform prior saas-2021-12-29 authorization *************** 📎Link: https://vuldb.com/?id.295028 *************** ⚙️Information: #Vendor: Flexera #Product: RISC Platform #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:26:08 +0100 *************** ✏️Title: CVE-2021-41527 | Flexera RISC Platform prior saas-2021-12-29 2FA improper authorization *************** 📎Link: https://vuldb.com/?id.295029 *************** ⚙️Information: #Vendor: Flexera #Product: RISC Platform #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:27:30 +0100 *************** ✏️Title: CVE-2024-57279 | LDAP User Manager up to ce92321 /setup/index.php returnto cross site scripting (Issue 232) *************** 📎Link: https://vuldb.com/?id.295030 *************** ⚙️Information: #Product: LDAP User Manager #Type: Directory Service Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:30:53 +0100 *************** ✏️Title: CVE-2025-25187 | laurent22 joplin up to 3.1.23 Content-Security-Policy cross site scripting (GHSA-9gfv-q6wj-fr3c) *************** 📎Link: https://vuldb.com/?id.295031 *************** ⚙️Information: #Vendor: laurent22 #Product: joplin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:31:07 +0100 *************** ✏️Title: CVE-2025-24980 | Pimcore admin-ui-classic-bundle up to 1.7.3 observable response discrepancy (GHSA-vr5f-php7-rg24) *************** 📎Link: https://vuldb.com/?id.295032 *************** ⚙️Information: #Vendor: Pimcore #Product: admin_ui_classic_bundle #Type: Information Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:31:33 +0100 *************** ✏️Title: CVE-2024-55630 | laurent22 joplin up to 3.2.7 name denial of service (GHSA-5cch-jr52-qffh) *************** 📎Link: https://vuldb.com/?id.295033 *************** ⚙️Information: #Vendor: laurent22 #Product: joplin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:32:02 +0100 *************** ✏️Title: CVE-2024-57357 | TP-Link TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 sub_4256CC devpwd command injection *************** 📎Link: https://vuldb.com/?id.295034 *************** ⚙️Information: #Vendor: TP_Link #Product: TL_WPA 8630 #Type: Router Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:33:37 +0100 *************** ✏️Title: CVE-2025-24366 | drakkan sftpgo up to 2.6.4 os command injection (GHSA-vj7w-3m8c-6vpx) *************** 📎Link: https://vuldb.com/?id.295035 *************** ⚙️Information: #Vendor: drakkan #Product: sftpgo #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:33:52 +0100 *************** ✏️Title: CVE-2025-24028 | laurent22 joplin up to 3.2.11 cross site scripting (GHSA-5w3c-wph9-hq92) *************** 📎Link: https://vuldb.com/?id.295036 *************** ⚙️Information: #Vendor: laurent22 #Product: joplin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:39:54 +0100 *************** ✏️Title: CVE-2024-57606 | JeecgBoot 3.7.2 TotalData Component sql injection (Issue 7665) *************** 📎Link: https://vuldb.com/?id.295037 *************** ⚙️Information: #Product: JeecgBoot #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:40:20 +0100 *************** ✏️Title: CVE-2024-55272 | Brainasoft Braina 2.8 Chat Window information disclosure *************** 📎Link: https://vuldb.com/?id.295038 *************** ⚙️Information: #Vendor: Brainasoft #Product: Braina #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 08:44:12 +0100 *************** ✏️Title: CVE-2024-55215 | trojan up to 2.15.3 Initialization Interface /auth/register initialization *************** 📎Link: https://vuldb.com/?id.295039 *************** ⚙️Information: #Product: trojan #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security