Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 09:15:43 GMT *************** ✏️Title: TryHackMe — KaffeeSec — SoMeSINT writeup *************** 📎Link: https://medium.com/p/618cc6f41e33 *************** ⚙️Tags: #socmint #tryhackme_writeup #osint_investigation #tryhackme #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 09:53:45 GMT *************** ✏️Title: LA CTF 2025 *************** 📎Link: https://medium.com/p/8a63c7474b6d *************** ⚙️Tags: #ethical_hacking #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:17:01 GMT *************** ✏️Title: Opacity — TryHackMe Walkthrough *************** 📎Link: https://medium.com/p/717053a7fc8a *************** ⚙️Tags: #tryhackme_walkthrough #ethical_hacking #pentesting #tryhackme_writeup #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:25:14 GMT *************** ✏️Title: The Legal Side of Ethical Hacking: What Every Hacker Should Know *************** 📎Link: https://medium.com/p/160bcdf2adeb *************** ⚙️Tags: #ethical_hacking_training #training_in_toronto #ethical_hacking_course #ethical_hacking #ceh_classes_in_toronto *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 10:33:47 GMT *************** ✏️Title: How to Get Started in Bug Bounty as a Beginner *************** 📎Link: https://medium.com/p/48bca31622ec *************** ⚙️Tags: #cybersecurity #bug_bounty #ethical_hacking #web_security #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 08:51:44 +0000 *************** ✏️Title: SAML Bypass Authentication on GitHub Enterprise Servers To Login as Other User Account *************** 📎Link: https://cybersecuritynews.com/?p=91957 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 08:12:40 GMT *************** ✏️Title: Setting up Frida Server on Windows to grab a Tinder Auth Token on an Infinix X678B *************** 📎Link: https://medium.com/p/046f97dba391 *************** ⚙️Tags: #tinder #penetration_testing #api #frida *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 08:07:56 GMT *************** ✏️Title: Bug Bounty Hunting: A Step-by-Step Guide for Beginners *************** 📎Link: https://medium.com/p/05505b12769d *************** ⚙️Tags: #bug_bounty #cyber #bug_bounty_tips #cybersecurity #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 08:36:17 GMT *************** ✏️Title: Complete Beginner-Network Exploitation Basics-Network Services 2-TryHackMe *************** 📎Link: https://medium.com/p/6d50bf5ce3fd *************** ⚙️Tags: #tryhackme #network_exploitation #part_2 #complete_beginner #basics *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 08:45:12 +0100 *************** ✏️Title: CVE-2025-1155 | Webkul QloApps 1.6.1 Your Location Search /stores cross site scripting *************** 📎Link: https://vuldb.com/?id.295059 *************** ⚙️Information: #Vendor: Webkul #Product: QloApps #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 08:47:05 +0100 *************** ✏️Title: CVE-2025-1156 | Pix Software Vivaz 6.0.10 /servlet?act=login usuario sql injection *************** 📎Link: https://vuldb.com/?id.295060 *************** ⚙️Information: #Vendor: Pix Software #Product: Vivaz #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 08:58:03 +0100 *************** ✏️Title: CVE-2025-1157 | Allims lab.online up to 20250201 model_recuperar_senha.php recuperacao sql injection *************** 📎Link: https://vuldb.com/?id.295061 *************** ⚙️Information: #Vendor: Allims #Product: lab.online #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:00:03 +0100 *************** ✏️Title: CVE-2025-1158 | ESAFENET CDG 5.6.3.154.205_20250114 addPolicyToSafetyGroup.jsp safetyGroupId sql injection *************** 📎Link: https://vuldb.com/?id.295062 *************** ⚙️Information: #Vendor: ESAFENET #Product: CDG #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:07:01 +0100 *************** ✏️Title: CVE-2025-1159 | CampCodes School Management Software 1.0 /academic-calendar cross site scripting *************** 📎Link: https://vuldb.com/?id.295063 *************** ⚙️Information: #Vendor: CampCodes #Product: School Management Software #Type: Customer Relationship Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:09:20 +0100 *************** ✏️Title: CVE-2025-1160 | SourceCodester Employee Management System 1.0 index.php username/password default credentials *************** 📎Link: https://vuldb.com/?id.295064 *************** ⚙️Information: #Vendor: SourceCodester #Product: Employee Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:11:07 +0100 *************** ✏️Title: CVE-2025-1162 | code-projects Job Recruitment 1.0 load\_user-profile.php userhash sql injection *************** 📎Link: https://vuldb.com/?id.295065 *************** ⚙️Information: #Vendor: code_projects #Product: Job Recruitment #Type: Project Management Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:13:45 +0100 *************** ✏️Title: CVE-2025-1163 | code-projects Vehicle Parking Management System 1.0 Authentication login username stack-based overflow *************** 📎Link: https://vuldb.com/?id.295066 *************** ⚙️Information: #Vendor: code_projects #Product: Vehicle Parking Management System #Type: Project Management Software #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:15:48 +0100 *************** ✏️Title: CVE-2025-1164 | code-projects Police FIR Record Management System 1.0 stack-based overflow *************** 📎Link: https://vuldb.com/?id.295067 *************** ⚙️Information: #Vendor: code_projects #Product: Police FIR Record Management System #Type: Project Management Software #Risk: problematic #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:19:58 +0100 *************** ✏️Title: CVE-2025-1165 | Lumsoft ERP 8 /Api/FileUploadApi.ashx DoUpload/DoWebUpload file unrestricted upload *************** 📎Link: https://vuldb.com/?id.295068 *************** ⚙️Information: #Vendor: Lumsoft #Product: ERP #Type: Enterprise Resource Planning Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 09:25:21 +0100 *************** ✏️Title: CVE-2025-1166 | SourceCodester Food Menu Manager 1.0 endpoint/update.php unrestricted upload *************** 📎Link: https://vuldb.com/?id.295069 *************** ⚙️Information: #Vendor: SourceCodester #Product: Food Menu Manager #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security