Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 20:07:53 GMT *************** ✏️Title: Why Protecting Proprietary Data? *************** 📎Link: https://medium.com/p/4e271c6af2bf *************** ⚙️Tags: #cybercriminals #cybersecurity #proprietary_software #criminal #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 20:19:29 GMT *************** ✏️Title: TryHackMe Walkthrough — EDR Defensive — Retracted *************** 📎Link: https://medium.com/p/233becb3ba47 *************** ⚙️Tags: #tryhackme #cybersecurity #sysmon #tryhackme_writeup #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ SIAKAD STEKOM - Stored XSS Vulnerability(Login Page) =============== 📎 https://cxsecurity.com/issue/WLB-2025050045 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Casdoor 1.901.0 Cross-Site Request Forgery (CSRF) =============== 📎 https://cxsecurity.com/issue/WLB-2025050046 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ TechKnock Digital Services - Xpath Injection Vulnerability =============== 📎 https://cxsecurity.com/issue/WLB-2025050047 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 18:28:26 GMT *************** ✏️Title: How I Found Dom Xss on School Website. *************** 📎Link: https://medium.com/p/defcaa2a4455 *************** ⚙️Tags: #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 18:59:34 GMT *************** ✏️Title: Do you know what Yescrypt is, how it hashes passwords, and how to crack those hashes if you get… *************** 📎Link: https://medium.com/p/89090e92c3af *************** ⚙️Tags: #security #ethical_hacking #kali_linux #hashing #yescrypt *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 19:20:47 GMT *************** ✏️Title: Light Mode for HackTheBox *************** 📎Link: https://medium.com/p/bff9ed4c8922 *************** ⚙️Tags: #light_mode #cybersecurity #hackthebox *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 17:15:26 +0000 *************** ✏️Title: CVE-2025-5129 - Sangfor aTrust Directory Traversal Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5129 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 17:45:46 GMT *************** ✏️Title: Comprehensive OSINT Resources Guide *************** 📎Link: https://medium.com/p/ee2b639969f7 *************** ⚙️Tags: #osint #investigation #intelligence #osint_intelligence #osint_investigation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 18:30:26 GMT *************** ✏️Title: The Cybersecurity Frontier of 2025: AI, Privacy, and the New Digital Defense *************** 📎Link: https://medium.com/p/53de817b210e *************** ⚙️Tags: #cyber_awareness #privacy #infosec #cybersecurity #digital_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 17:51:44 GMT *************** ✏️Title: How to Earn Exclusive $BUGS Rewards on StakingRewards *************** 📎Link: https://medium.com/p/cff9273d5ba7 *************** ⚙️Tags: #exclusive_rewards #bugs #staking_rewards #ethereum #crypto *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 17:48:40 GMT *************** ✏️Title: Unraveling the Scattered Spider Cyber Attacks on UK Retailers *************** 📎Link: https://medium.com/p/1e161aa25fbf *************** ⚙️Tags: #ransomeware #ethical_hacking #cybersecurity #retail_security #scattered_spider *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 17:56:49 GMT *************** ✏️Title: Cybersecurity for Everyone: Not Just Hackers or Techies *************** 📎Link: https://medium.com/p/eb3f745afa9c *************** ⚙️Tags: #cybersecurity #security #technology #ethical_hacking #blue_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 18:31:38 GMT *************** ✏️Title: Hack The Box Season 8 “Puppy” Walkthrough *************** 📎Link: https://medium.com/p/07b2ec1b30c1 *************** ⚙️Tags: #hackthebox_walkthrough #hackthebox #cybersecurity #active_directory_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 18:09:47 GMT *************** ✏️Title: When Trusted Downloads Turn Toxic: How SEO Poisoning Is Fueling the Spread of Bumblebee Malware… *************** 📎Link: https://medium.com/p/e8d53388136b *************** ⚙️Tags: #malware #seo #cybersecurity #endpoint_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 18:22:05 GMT *************** ✏️Title: Bumblebee Malware Uses SEO Poisoning to Target Pentesters & IT Pros *************** 📎Link: https://medium.com/p/fc37a3c81032 *************** ⚙️Tags: #bumblebee #hacking #usa #ai #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 19:37:09 +0200 *************** ✏️Title: CVE-2025-5149 | WCMS up to 8.3.11 Login getallcon getMemberByUid uid improper authentication *************** 📎Link: https://vuldb.com/?id.310237 *************** ⚙️Information: #Product: WCMS #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 19:41:02 +0200 *************** ✏️Title: CVE-2025-5150 | docarray up to 0.40.1 Web API torch_dataset.py __getitem__ prototype pollution *************** 📎Link: https://vuldb.com/?id.310238 *************** ⚙️Information: #Product: docarray #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 19:48:50 +0200 *************** ✏️Title: CVE-2025-5151 | defog-ai introspect up to 0.1.4 analysis_tools.py execute_analysis_code_safely code code injection (Issue 495 / ID 502) *************** 📎Link: https://vuldb.com/?id.310239 *************** ⚙️Information: #Vendor: defog_ai #Product: introspect #Type: Artificial Intelligence Software #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security