Sec WriteUp ~ CVE Alert

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-49113 exploit =============== 📎 https://sploitus.com/exploit?id=FAF2F50F-6066-565C-AF24-570675EF5264&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 02:09:31 GMT *************** ✏️Title: Cybersecurity Challenges and Incidents in Vodafone’s Global Operations *************** 📎Link: https://medium.com/p/3cd70b807b57 *************** ⚙️Tags: #cybersecurity #cybercrime #hacking #vodafone #telecommunication *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 02:32:13 GMT *************** ✏️Title: Deepfake Detection: The Next Frontier in Cybersecurity *************** 📎Link: https://medium.com/p/c1c9ea33d0af *************** ⚙️Tags: #deepfake_tools #fake_media_threats #contentintegrity #ethical_hacking #ai_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 02:06:52 GMT *************** ✏️Title: The 2016 Cyberattack on Thailand’s Ministry of Foreign Affairs *************** 📎Link: https://medium.com/p/54475915846c *************** ⚙️Tags: #cyberattack #hacking #cybersecurity #thailand #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 02:11:37 GMT *************** ✏️Title: Why Deloitte Faces Ongoing Risk from Infostealer Malware — Insights from a Real Incident *************** 📎Link: https://medium.com/p/b7f33e1a47e0 *************** ⚙️Tags: #hacking #cybersecurity #malware #deloitte #cyber_security_awareness *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 20:00:17 GMT *************** ✏️Title: Hire an Ethical Hacker to Expose Infidelity: A 2025 Guide — CyberSpac3 *************** 📎Link: https://medium.com/p/6161037d8cc4 *************** ⚙️Tags: #ethical_hacker #hire_a_hacker #ethical_hacking #catch_cheating_spouse #infidelity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 01:32:22 GMT *************** ✏️Title: L’ascension du Vibe Hacking : la nouvelle menace de l’IA *************** 📎Link: https://medium.com/p/6d913e2e9f79 *************** ⚙️Tags: #hacker #cybersecurity #hacking #artificial_intelligence #cybersécurité *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 01:30:50 GMT *************** ✏️Title: How a TryHackMe Box Gaslit Me Until C Saved the Day (Blog-CTF) *************** 📎Link: https://medium.com/p/4ce01b7f636a *************** ⚙️Tags: #reverse_engineering #tryhackme_walkthrough #hacking #c #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 00:02:25 GMT *************** ✏️Title: Guía completa de Linux para Ciberseguridad: Comandos, Permisos y Distribuciones esenciales *************** 📎Link: https://medium.com/p/d610e0464b32 *************** ⚙️Tags: #linux #cybersecurity #red_team #operating_systems #blue_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 23:26:34 +0000 *************** ✏️Title: Hundreds of GitHub Malware Repos Targeting Novice Cybercriminals Linked to Single User *************** 📎Link: https://cybersecuritynews.com/?p=110147 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 22:52:02 GMT *************** ✏️Title: A New Risk: Thought Time Bombs *************** 📎Link: https://medium.com/p/4c121f056b94 *************** ⚙️Tags: #emerging_risk #emerging_technology #risk_management #chatbots_for_business #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 23:14:56 GMT *************** ✏️Title: ️ Ticketmaster Hack 2025: 500K+ Records Leaked on Dark Web — What We Know So Far *************** 📎Link: https://medium.com/p/5d037e51f298 *************** ⚙️Tags: #data_breach #infostealer #ticketmaster #osint #stealer_logs *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 23:04:00 GMT *************** ✏️Title: HTB’s “Administrator” Machine Walkthrough *************** 📎Link: https://medium.com/p/f2151bd1c43a *************** ⚙️Tags: #htb #ethical_hacking #cybersecurity #hackthebox #htb_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 21:15:23 +0000 *************** ✏️Title: CVE-2025-49127 - Apache Kafka Kafbat UI Deserialization Remote Code Execution *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49127 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 22:15:23 +0000 *************** ✏️Title: CVE-2025-49128 - Jackson-core Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-49128 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 21:56:47 GMT *************** ✏️Title: TryHackMe: CMess | Subdomain Discovery, File Upload, and Privilege Escalation *************** 📎Link: https://medium.com/p/a15c67ebf0dd *************** ⚙️Tags: #walkthrough #cmess #tryhackme #easy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:35:36 +0200 *************** ✏️Title: CVE-2025-29003 | mva7 Holiday Calendar Plugin up to 1.18.2.1 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311485 *************** ⚙️Information: #Vendor: mva7 #Product: Holiday Calendar Plugin #Type: Calendar Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:35:53 +0200 *************** ✏️Title: CVE-2025-30624 | WordLift Plugin up to 3.54.4 on WordPress authorization *************** 📎Link: https://vuldb.com/?id.311486 *************** ⚙️Information: #Product: WordLift Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:36:04 +0200 *************** ✏️Title: CVE-2025-30638 | PowieT Powies Uptime Robot Plugin up to 0.9.7 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311487 *************** ⚙️Information: #Vendor: PowieT #Product: Powies Uptime Robot Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 15:36:08 +0200 *************** ✏️Title: CVE-2025-28984 | storepro Subscription Renewal Reminders for WooCommerce Plugin cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311488 *************** ⚙️Information: #Vendor: storepro #Product: Subscription Renewal Reminders for WooCommerce Plugin #Type: E_Commerce Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security