Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:00:44 +0200 *************** ✏️Title: CVE-2025-3611 | Mattermost up to 9.11.12/10.5.3/10.7.0 System Console authorization *************** 📎Link: https://vuldb.com/?id.310700 *************** ⚙️Information: #Product: Mattermost #Type: Groupware Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:00:51 +0200 *************** ✏️Title: CVE-2024-7096 | WSO2 Open Banking IAM SOAP Admin Services authorization *************** 📎Link: https://vuldb.com/?id.310701 *************** ⚙️Information: #Vendor: WSO2 #Product: Open Banking IAM/Open Banking AM/API Manager/Enterprise Mobility Manager/Identity Server/Identity Server as Key Manager/Open Banking KM #Type: Banking Software #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:01:14 +0200 *************** ✏️Title: CVE-2024-7097 | WSO2 Open Banking AM SOAP Admin Services resource consumption *************** 📎Link: https://vuldb.com/?id.310702 *************** ⚙️Information: #Vendor: WSO2 #Product: Open Banking AM/Open Banking KM/Identity Server as Key Manager/API Manager/Identity Server/Open Banking IAM/Enterprise Mobility Manager #Type: Banking Software #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:01:33 +0200 *************** ✏️Title: CVE-2024-23589 | HCL Glovius Cloud 240520 weak hash (KB0121015) *************** 📎Link: https://vuldb.com/?id.310703 *************** ⚙️Information: #Vendor: HCL #Product: Glovius Cloud #Type: Cloud Software #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 18:01:49 +0200 *************** ✏️Title: CVE-2025-3230 | Mattermost up to 9.11.12/10.5.3/10.6.2/10.7.0 Access Token incorrect implementation of authentication algorithm *************** 📎Link: https://vuldb.com/?id.310704 *************** ⚙️Information: #Product: Mattermost #Type: Groupware Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:15:20 +0000 *************** ✏️Title: CVE-2025-1484 - Adobe Asset Suite Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1484 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:15:22 +0000 *************** ✏️Title: CVE-2025-2500 - Oracle Asset Suite SOAP Authentication Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-2500 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 13:15:22 +0000 *************** ✏️Title: CVE-2025-40909 - "Perl threads Directory Handle Race Condition Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-40909 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:15:22 +0000 *************** ✏️Title: CVE-2025-48331 - Vanquish WooCommerce Orders & Customers Exporter Sensitive Data Exposure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-48331 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 30 May 2025 14:15:23 +0000 *************** ✏️Title: CVE-2025-4598 - Systemd-coredump SUID Process Core Dump File Access Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4598 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 15:29:14 GMT *************** ✏️Title: The NPM Token That Stayed Alive for Two Years *************** 📎Link: https://medium.com/p/379d8d7be068 *************** ⚙️Tags: #hackerone_report #bug_bounty #npm_token #dockerhub #exposed_credential *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 15:21:47 GMT *************** ✏️Title: How I Took Over Any User Account with One Parameter Change *************** 📎Link: https://medium.com/p/09692dcc20f1 *************** ⚙️Tags: #idor_vulnerability #idor_bugbounty #bug_bounty_tips #bug_bounty_reports #bug_bounty_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 15:00:46 GMT *************** ✏️Title: The Billion-Dollar Heist: The Carbanak Cyber Attack *************** 📎Link: https://medium.com/p/e790f417b321 *************** ⚙️Tags: #carbanak #cybersecurity #heist #banks #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 14:49:10 GMT *************** ✏️Title: Breaking Into Cybersecurity: My 5-Year Plan to Master the Field *************** 📎Link: https://medium.com/p/5e48f0a7d6d9 *************** ⚙️Tags: #roadmaps #cybersecurity #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 15:18:24 GMT *************** ✏️Title: S3 Bucket Brute Force by Pwned Labs — Walkthrough *************** 📎Link: https://medium.com/p/8e7c42e69e94 *************** ⚙️Tags: #s3 #cloud_security #penetration_testing #aws #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 14:44:54 GMT *************** ✏️Title: How To Hire A Professional Hacker *************** 📎Link: https://medium.com/p/7064d7dc3c52 *************** ⚙️Tags: #hacker #hacking #hire_a_hacker #hire_a_hacker_online *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 14:53:18 GMT *************** ✏️Title: How to Hire a Hacker to Catch a Cheating Spouse *************** 📎Link: https://medium.com/p/2b6bc69fecc0 *************** ⚙️Tags: #hacking #hire_a_hacker #hacker #catch_cheating_spouse #hire_a_hacker_online *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 14:51:02 GMT *************** ✏️Title: Roadmap Menuju Dunia Cybersecurity *************** 📎Link: https://medium.com/p/66f926a58554 *************** ⚙️Tags: #cybersecurity #red_team #blue_team #roadmaps *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 14:51:43 GMT *************** ✏️Title: VXRL.ai *************** 📎Link: https://medium.com/p/bfc30569390d *************** ⚙️Tags: #ai #ai_chat_bot #ai_cybersecurity #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 30 May 2025 14:57:37 GMT *************** ✏️Title: Investigating the Po1s0n1vy Group: A Complete BOTSv1 scenario 1 Walkthrough Using Splunk *************** 📎Link: https://medium.com/p/6e3bcbd9a748 *************** ⚙️Tags: #ctf #splunk #blue_team #soc #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security