Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 17:28:28 GMT *************** ✏️Title: Smart Contract Bugs Caused by Unexpected State Changes *************** 📎Link: https://medium.com/p/54c1ba136f21 *************** ⚙️Tags: #blockchain #bugs #smart_contracts *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 17:40:55 GMT *************** ✏️Title: Lessons from Breaking Production (So You Don’t Have to) *************** 📎Link: https://medium.com/p/a377b4c660b7 *************** ⚙️Tags: #bugs #software_engineering #programming #software_development #tech *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 17:15:20 +0000 *************** ✏️Title: CVE-2025-5151 - Defog-ai Introspect Code Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5151 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 17:15:21 +0000 *************** ✏️Title: CVE-2025-5152 - "Chanjet CRM SQL Injection Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5152 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 16:50:37 GMT *************** ✏️Title: The Most Powerful Botnet in the world : Mantis Botnet *************** 📎Link: https://medium.com/p/b651b3aa5f76 *************** ⚙️Tags: #technology #hacking #cryptocurrency #world #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 16:09:38 GMT *************** ✏️Title: Day 46: Simulating MITM Attacks Using Ettercap and MITMf on Kali Linux *************** 📎Link: https://medium.com/p/a20e4cf5457d *************** ⚙️Tags: #ethical_hacking #networking #cybersecurity #mitm #learning *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 16:57:30 GMT *************** ✏️Title: Try Hack Me: Mayhem *************** 📎Link: https://medium.com/p/0927a5953bb0 *************** ⚙️Tags: #tryhackme_writeup #mayhem #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 15:52:27 GMT *************** ✏️Title: Discovering an Open Redirect Flaw Using URL Encoding *************** 📎Link: https://medium.com/p/001b843ec9f3 *************** ⚙️Tags: #url_redirection #penetration_testing #open_redirect #cybersecurity #web_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 15:57:02 GMT *************** ✏️Title: Day 6 of my AWS Pentesting journey — Exploring Elastic Beanstalk *************** 📎Link: https://medium.com/p/adc28ea74f0d *************** ⚙️Tags: #elastic_beanstalk #aws #cybersecurity #penetration_testing #cloud_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 16:21:41 GMT *************** ✏️Title: Subnetting para Pentesters: De los cálculos con lápiz y papel al movimiento lateral en redes… *************** 📎Link: https://medium.com/p/09f257b4eab7 *************** ⚙️Tags: #red_team #subnetting #pivoting #redes #tools *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 16:31:25 GMT *************** ✏️Title: SSTI1: PicoCTF Web Exploitation Challenge Gameplay *************** 📎Link: https://medium.com/p/fcd3c61edb87 *************** ⚙️Tags: #python #web #ctf #owasp #backend *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 15:55:01 GMT *************** ✏️Title: How Fuzzing Uncovered an Exposed Magento Setup and a Live Kafka Dashboard *************** 📎Link: https://medium.com/p/fd18cc517324 *************** ⚙️Tags: #bug_bounty #penetration_testing #writeup #fuzzing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 15:14:23 GMT *************** ✏️Title: Are Certifications Killing Curiosity in Cybersecurity? *************** 📎Link: https://medium.com/p/d6576b57052a *************** ⚙️Tags: #infosec #cybersecurity #technology #security #certification *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 15:34:33 GMT *************** ✏️Title: Twitch Bait and Switch: How I Uncovered a Steam Phishing Operation *************** 📎Link: https://medium.com/p/b4c2ff68119c *************** ⚙️Tags: #cybersecurity #phishing #gaming #ethical_hacking #osint *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 15:19:35 GMT *************** ✏️Title: $500 Bounty: How One Forum DM Unleashed Stored XSS on SideFX *************** 📎Link: https://medium.com/p/546ee9cab12d *************** ⚙️Tags: #penetration_testing #technology #bug_bounty_tips #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 16:02:49 GMT *************** ✏️Title: From Zero to Adversary: An Advanced Red Teaming Road-map for Beginners *************** 📎Link: https://medium.com/p/c3d2e52a1f9f *************** ⚙️Tags: #offensive_security #ethical_hacking #cybersecurity #red_team #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 16:00:52 GMT *************** ✏️Title: TRYHACKME : Lo-Fi | Challenge Walkthrough *************** 📎Link: https://medium.com/p/b6b104ffc7b8 *************** ⚙️Tags: #tryhackme #walkthrough #hacking #ctf #challenge *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 15:33:31 GMT *************** ✏️Title: ColddBox: Easy — VulnHub Walkthrough *************** 📎Link: https://medium.com/p/095ce5255342 *************** ⚙️Tags: #privilege_escalation #vulnhub #penetration_testing #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 15:15:22 +0000 *************** ✏️Title: CVE-2025-5150 - "Docarray Web API Prototype Pollution Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5150 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-40775 exploit =============== 📎 https://sploitus.com/exploit?id=CD1C169D-296C-50DE-B418-1CC2B4905453&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity