Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 11:57:10 GMT *************** ✏️Title: Utilizing LOAD_FILE() in SQL Injection *************** 📎Link: https://medium.com/p/66c3e2a2a82a *************** ⚙️Tags: #sql_injection #bug_hunting #bug_bounty_writeup #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 11:56:57 GMT *************** ✏️Title: 5 Tahun Menuju Karier Profesional Cyber Security *************** 📎Link: https://medium.com/p/28dc859cda69 *************** ⚙️Tags: #cybersecurity #malware #hacker *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 12:04:31 GMT *************** ✏️Title: Dokumentasi Analisis Malware Lewat lalu lintas jaringan: Study Case (Koi Stealer) *************** 📎Link: https://medium.com/p/9696fab25957 *************** ⚙️Tags: #stealer #malware #wireshark #koi #analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 12:19:16 GMT *************** ✏️Title: How a Wireshark Novice Tracked Malware Through a PCAP *************** 📎Link: https://medium.com/p/bec948d52c3c *************** ⚙️Tags: #wireshark #pcap_analysis #malware #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 12:00:00 +0000 *************** ✏️Title: Endpoint Security Reimagined EDR vs XDR Comparison *************** 📎Link: https://cybersecuritynews.com/?p=108035 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass exploit =============== 📎 https://sploitus.com/exploit?id=EDB-ID:52308&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Campcodes Online Hospital Management System 1.0 - SQL Injection exploit =============== 📎 https://sploitus.com/exploit?id=EDB-ID:52312&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 10:49:06 GMT *************** ✏️Title: From alert(1) to Real-world Impact: Hunting XSS Where Others Don’t Look *************** 📎Link: https://medium.com/p/27f70dbe9778 *************** ⚙️Tags: #osint #cybersecurity #bug_bounty #web_security #xss_attack *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 10:59:43 GMT *************** ✏️Title: Business Financial Analysis tools for OSINT investigators *************** 📎Link: https://medium.com/p/6d99354fd7b1 *************** ⚙️Tags: #osint_investigation #cybersecurity #analysis #osint #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 11:09:39 GMT *************** ✏️Title: 5-Year Cybersecurity Roadmap: A Guide for Aspiring Engineers *************** 📎Link: https://medium.com/p/4573a9d8edac *************** ⚙️Tags: #cyber_security_awareness #ethical_hacking #cybersecurity #roadmaps #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 10:08:31 GMT *************** ✏️Title: TryHackMe: Cheese CTF *************** 📎Link: https://medium.com/p/f8018e5b1954 *************** ⚙️Tags: #ctf_writeup #cybersecurity #machine *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 09:58:45 GMT *************** ✏️Title: Malware Analysis: Investigation of Koi Stealer Activities in Internal Networks *************** 📎Link: https://medium.com/p/ced427ac6ace *************** ⚙️Tags: #malware #cybersecurity #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 11:30:32 GMT *************** ✏️Title: Laporan Analisis 2024–09–04-traffic-analysis-exercise-alerts *************** 📎Link: https://medium.com/p/abe1777e6b02 *************** ⚙️Tags: #wireshark #malware #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 01 Jun 2025 11:00:00 +0000 *************** ✏️Title: Achieving Continuous Compliance in Dynamic Threat Environments *************** 📎Link: https://cybersecuritynews.com/?p=108027 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:13 +0200 *************** ✏️Title: CVE-2025-5420 | juzaweb CMS up to 3.4.2 Profile Page upload Upload cross site scripting *************** 📎Link: https://vuldb.com/?id.310753 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:15 +0200 *************** ✏️Title: CVE-2025-5421 | juzaweb CMS up to 3.4.2 Plugin Editor Page /admin-cp/plugin/editor access control *************** 📎Link: https://vuldb.com/?id.310754 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:17 +0200 *************** ✏️Title: CVE-2025-5422 | juzaweb CMS up to 3.4.2 Email Logs Page /admin-cp/logs/email access control *************** 📎Link: https://vuldb.com/?id.310755 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:18 +0200 *************** ✏️Title: CVE-2025-5423 | juzaweb CMS up to 3.4.2 General Setting Page general access control *************** 📎Link: https://vuldb.com/?id.310756 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:19 +0200 *************** ✏️Title: CVE-2025-5424 | juzaweb CMS up to 3.4.2 Media Page /admin-cp/media access control *************** 📎Link: https://vuldb.com/?id.310757 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 01 Jun 2025 12:53:21 +0200 *************** ✏️Title: CVE-2025-5425 | juzaweb CMS up to 3.4.2 Theme Editor Page default access control *************** 📎Link: https://vuldb.com/?id.310758 *************** ⚙️Information: #Vendor: juzaweb #Product: CMS #Type: Content Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security