Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:39:33 +0100 *************** ✏️Title: CVE-2024-27859 | Apple visionOS Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295126 *************** ⚙️Information: #Vendor: Apple #Product: visionOS #Type: Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 19:29:20 GMT *************** ✏️Title: Include (CTF) — TryHackMe Writeup *************** 📎Link: https://medium.com/p/c36bded6d2f4 *************** ⚙️Tags: #writeup #tryhackme_writeup #tryhackme #tryhackme_walkthrough #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:39:33 +0100 *************** ✏️Title: CVE-2024-27859 | Apple macOS Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295127 *************** ⚙️Information: #Vendor: Apple #Product: macOS #Type: Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 19:04:01 GMT *************** ✏️Title: What is Ransomware? Strategies for Prevention and Defense *************** 📎Link: https://medium.com/p/5f5805c3f582 *************** ⚙️Tags: #cybersecurity #protection_from_virus #zero_trust #malware #ransomware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:39:33 +0100 *************** ✏️Title: CVE-2024-27859 | Apple iOS/iPadOS Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295128 *************** ⚙️Information: #Vendor: Apple #Product: iOS/iPadOS #Type: Smartphone Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 19:25:31 GMT *************** ✏️Title: International Operation Dismantles Phobos Ransomware Gang: Key Arrests and 8Base Takedown *************** 📎Link: https://medium.com/p/61e126bb54c9 *************** ⚙️Tags: #bug_bounty #malware #gangs #ai #money *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 19:25:36 GMT *************** ✏️Title: Major Cyberattack Cripples Newspaper Operations Nationwide *************** 📎Link: https://medium.com/p/f63c1395575c *************** ⚙️Tags: #malware #ai #dallas_lee_news #hacking #money *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:39:34 +0100 *************** ✏️Title: CVE-2025-25188 | hickory-dns Hickory DNS up to 0.24.2/0.25.0-alpha.4 data authenticity (GHSA-37wc-h8xc-5hc4) *************** 📎Link: https://vuldb.com/?id.295129 *************** ⚙️Information: #Vendor: hickory_dns #Product: Hickory DNS #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:09 +0100 *************** ✏️Title: CVE-2024-54658 | Apple watchOS Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295130 *************** ⚙️Information: #Vendor: Apple #Product: watchOS #Type: Smartwatch Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:09 +0100 *************** ✏️Title: CVE-2024-54658 | Apple Safari Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295131 *************** ⚙️Information: #Vendor: Apple #Product: Safari #Type: Web Browser #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:09 +0100 *************** ✏️Title: CVE-2024-54658 | Apple tvOS Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295132 *************** ⚙️Information: #Vendor: Apple #Product: tvOS #Type: Digital Media Player #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:10 +0100 *************** ✏️Title: CVE-2024-54658 | Apple visionOS Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295133 *************** ⚙️Information: #Vendor: Apple #Product: visionOS #Type: Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:10 +0100 *************** ✏️Title: CVE-2024-54658 | Apple macOS Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295134 *************** ⚙️Information: #Vendor: Apple #Product: macOS #Type: Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:10 +0100 *************** ✏️Title: CVE-2024-54658 | Apple iOS/iPadOS Web Contents memory corruption *************** 📎Link: https://vuldb.com/?id.295135 *************** ⚙️Information: #Vendor: Apple #Product: iOS/iPadOS #Type: Smartphone Operating System #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:11 +0100 *************** ✏️Title: CVE-2024-54954 | OneBlog 2.3.6 Template Management Page injection *************** 📎Link: https://vuldb.com/?id.295136 *************** ⚙️Information: #Product: OneBlog #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:11 +0100 *************** ✏️Title: CVE-2024-48170 | PHPGurukul Small CRM 3.0 profile.php name cross site scripting *************** 📎Link: https://vuldb.com/?id.295137 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Small CRM #Type: Customer Relationship Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:19 +0100 *************** ✏️Title: CVE-2024-57409 | cool-admin-java 1.0 Parameter List Module internet pictures cross site scripting *************** 📎Link: https://vuldb.com/?id.295138 *************** ⚙️Information: #Product: cool_admin_java #Type: Programming Language Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:30 +0100 *************** ✏️Title: CVE-2024-57407 | Timo 2.0.3 File /userPicture unrestricted upload *************** 📎Link: https://vuldb.com/?id.295139 *************** ⚙️Information: #Product: Timo #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:40:41 +0100 *************** ✏️Title: CVE-2024-57408 | cool-admin-java 1.0 File /comm/upload unrestricted upload *************** 📎Link: https://vuldb.com/?id.295140 *************** ⚙️Information: #Product: cool_admin_java #Type: Programming Language Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 10 Feb 2025 19:49:20 +0100 *************** ✏️Title: CVE-2024-42512 | OPC UA .NET Standard Stack prior 1.5.374.158 Basic128Rsa15 Security Policy improper authentication *************** 📎Link: https://vuldb.com/?id.295141 *************** ⚙️Information: #Vendor: OPC #Product: UA .NET Standard Stack #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security