Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 15:37:00 +0530 *************** ✏️Title: Protecting Your Software Supply Chain: Assessing the Risks Before Deployment *************** 📎Link: https://thehackernews.com/2025/02/protecting-your-software-supply-chain.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 10:00:01 GMT *************** ✏️Title: How Often Should Your Business Conduct Penetration Testing? *************** 📎Link: https://medium.com/p/186fb3d6909a *************** ⚙️Tags: #information_security #pentesting #cybersecurity #penetration_testing #vulnerability_assessment *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 09:48:19 GMT *************** ✏️Title: TryHackMe: Alfred *************** 📎Link: https://medium.com/p/65c96b2dbc95 *************** ⚙️Tags: #ethical_hacking #tryhackme #tryhackme_writeup #tryhackme_walkthrough #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 10:15:13 GMT *************** ✏️Title: You Got Mail | TryHackMe | A Pentest Stryle Report *************** 📎Link: https://medium.com/p/ace4500de325 *************** ⚙️Tags: #ctf #tech #tryhackme *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 09:53:22 GMT *************** ✏️Title: Dynamic Malware Analysis *************** 📎Link: https://medium.com/p/25011c91bfc6 *************** ⚙️Tags: #malware #incident_response #malware_lab #malware_analysis #cybersecurity_awareness *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:35:59 +0100 *************** ✏️Title: CVE-2025-0589 | Octopus Deploy Octopus Server up to 2024.3.13070/2024.4.7064 API Endpoints improper authentication *************** 📎Link: https://vuldb.com/?id.295212 *************** ⚙️Information: #Vendor: Octopus Deploy #Product: Octopus Server #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:53:10 +0100 *************** ✏️Title: CVE-2025-26411 | Wattsense Bridge prior 6.1.0 Plugin Manager unrestricted upload *************** 📎Link: https://vuldb.com/?id.295213 *************** ⚙️Information: #Vendor: Wattsense #Product: Bridge #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:53:21 +0100 *************** ✏️Title: CVE-2025-26410 | Wattsense Bridge up to 6.4.0 hard-coded credentials *************** 📎Link: https://vuldb.com/?id.295214 *************** ⚙️Information: #Vendor: Wattsense #Product: Bridge #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:53:31 +0100 *************** ✏️Title: CVE-2025-26409 | Wattsense Bridge up to 6.4.0 missing protection mechanism for alternate hardware interface *************** 📎Link: https://vuldb.com/?id.295215 *************** ⚙️Information: #Vendor: Wattsense #Product: Bridge #Risk: critical #Local: Partially #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:59:12 +0100 *************** ✏️Title: CVE-2025-1226 | ywoa up to 2024.07.03 /oa/setup/setup.jsp improper authorization (IBI7PG) *************** 📎Link: https://vuldb.com/?id.295216 *************** ⚙️Information: #Product: ywoa #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 11:01:06 +0100 *************** ✏️Title: CVE-2025-1227 | ywoa up to 2024.07.03 AddressDao.xml selectList sql injection (IBI7XH) *************** 📎Link: https://vuldb.com/?id.295217 *************** ⚙️Information: #Product: ywoa #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 09:26:21 GMT *************** ✏️Title: Bug Bounty Hunting: Web Vulnerability (Server-side request forgery) *************** 📎Link: https://medium.com/p/7fb15230a807 *************** ⚙️Tags: #bug_bounty_program #bug_bounty_tips #bug_bounty #bug_bounty_hunter #ssrf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 09:06:59 GMT *************** ✏️Title: New Laptop Hacking Method: A Growing Threat to Online Security In recent years, the rise of… *************** 📎Link: https://medium.com/p/541b321accda *************** ⚙️Tags: #technology #hacking #cybersecurity #tech #computers *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 09:36:11 GMT *************** ✏️Title: Bluetooth DOS attack — A hacker’s perspective . *************** 📎Link: https://medium.com/p/3d0d505aa041 *************** ⚙️Tags: #bluetooth_attack #penetration_testing #cybersecurity #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 08:18:28 GMT *************** ✏️Title: Cyber threats are constantly evolving, making it essential for organizations to proactively test… *************** 📎Link: https://medium.com/p/2e9320d50c97 *************** ⚙️Tags: #penetration_testing #keploy #testing #test *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 09:07:34 +0100 *************** ✏️Title: CVE-2025-1225 | ywoa up to 2024.07.03 WXCallBack Interface XMLParse.java extract xml external entity reference (IBI81R) *************** 📎Link: https://vuldb.com/?id.295211 *************** ⚙️Information: #Product: ywoa #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 10 Feb 2025 20:14:07 GMT *************** ✏️Title: Securing AI/ML Models and Understanding Ethical AI Risks *************** 📎Link: https://medium.com/p/4c0d34dfa70d *************** ⚙️Tags: #ethical_hacking #machine_learning #cybersecurity #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 07:37:27 GMT *************** ✏️Title: Certified Ethical Hacker V12: A Comprehensive Guide to Ethical Hacking *************** 📎Link: https://medium.com/p/fb9d7388b95d *************** ⚙️Tags: #ethical_hacking_training #ceh_certification #ethical_hacking #ceh_training *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 07:37:48 GMT *************** ✏️Title: Hire a Hacker to Recover an Account *************** 📎Link: https://medium.com/p/e81132860ead *************** ⚙️Tags: #account_recovery #hire_a_hacker #recovery_service #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 07:15:29 +0000 *************** ✏️Title: CVE-2025-0180 - WordPress Foodbakery Plugin Privilege Escalation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0180 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security