Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 22:15:22 +0000 *************** ✏️Title: CVE-2025-40911 - Apache Net::CIDR::Set IP CIDR Leading Zero Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-40911 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:15:19 +0000 *************** ✏️Title: CVE-2022-21150 - Apache Struts Deserialization Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-21150 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:15:20 +0000 *************** ✏️Title: CVE-2022-21200 - Apache HTTP Server Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2022-21200 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:15:20 +0000 *************** ✏️Title: CVE-2024-11185 - Arista EOS VLAN Isolation Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-11185 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:15:21 +0000 *************** ✏️Title: CVE-2024-45094 - IBM DS8900F and DS8A00 HMC Stored Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-45094 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:15:21 +0000 *************** ✏️Title: CVE-2025-2796 - Arista EOS IPsec Anti-Replay Protection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2796 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 27 May 2025 23:15:21 +0000 *************** ✏️Title: CVE-2025-2826 - Arista EOS Ingress ACL Enforcement Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2826 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 02:15:20 +0000 *************** ✏️Title: CVE-2025-25025 - IBM Security Guardium Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25025 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 02:15:20 +0000 *************** ✏️Title: CVE-2025-25026 - IBM Security Guardium Authentication Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25026 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 02:15:20 +0000 *************** ✏️Title: CVE-2025-25029 - IBM Security Guardium File Download Privilege Escalation *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-25029 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 04:51:12 GMT *************** ✏️Title: Day 5: DOM XSS in jQuery anchor href attribute sink using location.search *************** 📎Link: https://medium.com/p/afc598397e24 *************** ⚙️Tags: #web_penetration_testing #ethical_hacking_training #dom_xss #cross_site_scripting #xs *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 04:58:20 GMT *************** ✏️Title: Hacking a Smart Home: Step-by-Step Demo (Ethically!) *************** 📎Link: https://medium.com/p/0bd8986d6962 *************** ⚙️Tags: #smart_home #hacking #cybersecurity #hacking_tools #privacy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 05:00:33 GMT *************** ✏️Title: How to Bypass UAC Using RunAsInvoker *************** 📎Link: https://medium.com/p/ffe42246d283 *************** ⚙️Tags: #hacking #development #technology #software_development #programming *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 04:53:18 GMT *************** ✏️Title: Part 3: How to Become a Pentester in 2025: Programming & Scripting Foundations for pentester *************** 📎Link: https://medium.com/p/c57334e7a8fe *************** ⚙️Tags: #hacking #pentest #pentesting #cybersecurity #oscp *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 05:31:30 GMT *************** ✏️Title: .env, .sql, .log — Why These Files Should Never Be Indexed (Basic) *************** 📎Link: https://medium.com/p/49de36160cfb *************** ⚙️Tags: #osint #data_leak #cybersecurity #threat_intelligence #web_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 04:53:54 GMT *************** ✏️Title: Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard *************** 📎Link: https://medium.com/p/bdc15f3a82fe *************** ⚙️Tags: #hacking #cybersecurity #dashboard #bug_bounty #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Wed, 28 May 2025 05:02:54 GMT *************** ✏️Title: I Tried 10 Recon Tools for 7 Days — Here’s What Actually Found Bugs *************** 📎Link: https://medium.com/p/9013b4cd2396 *************** ⚙️Tags: #bug_bounty #medium_writers #recon #hacking #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:22:06 +0200 *************** ✏️Title: CVE-2025-32440 | jokob-sk NetAlertX up to 25.4.13 util.php missing authentication (GHSA-h4x5-vr54-vjrx) *************** 📎Link: https://vuldb.com/?id.310407 *************** ⚙️Information: #Vendor: jokob_sk #Product: NetAlertX #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:22:28 +0200 *************** ✏️Title: CVE-2024-45094 | IBM Hardware Management Console DS8A00/DS8900F HCM cross site scripting *************** 📎Link: https://vuldb.com/?id.310408 *************** ⚙️Information: #Vendor: IBM #Product: Hardware Management Console #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 28 May 2025 07:22:38 +0200 *************** ✏️Title: CVE-2025-25025 | IBM Security Guardium 12.0 information exposure *************** 📎Link: https://vuldb.com/?id.310409 *************** ⚙️Information: #Vendor: IBM #Product: Security Guardium #Type: Policy Management Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security