Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 10:50:20 +0200 *************** ✏️Title: CVE-2025-5301 | OnlyOffice Docs up to 8.3.1 WOPI Protocol cross site scripting *************** 📎Link: https://vuldb.com/?id.312379 *************** ⚙️Information: #Vendor: OnlyOffice #Product: Docs #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:25:56 GMT *************** ✏️Title: How I Bypassed a CAPTCHA Without Solving It *************** 📎Link: https://medium.com/p/7c5c85ee71f0 *************** ⚙️Tags: #bug_bounty_writeup #cybersecurity #bug_bounty_tips #technology #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:56:51 GMT *************** ✏️Title: Beyond Firewalls: Why Traditional Security Measures Aren’t Enough in 2025 *************** 📎Link: https://medium.com/p/5d1bd9c9589a *************** ⚙️Tags: #cyberdéfense #network_security #data_protection #infosec #firewall_protection *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:34:59 GMT *************** ✏️Title: Dipping My Fingers Back into the CTF World | CSC CTF ‘25 WriteUp *************** 📎Link: https://medium.com/p/83fa0fd1c916 *************** ⚙️Tags: #ftk_imager #ctf #cybersecurity #wsl #forensics *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:26:08 GMT *************** ✏️Title: Cracking the Code: Password Attacks & the Linux Authentication Process *************** 📎Link: https://medium.com/p/e1b4bccda34a *************** ⚙️Tags: #passwords #liunx #hacking #hackathons #hackthebox *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:21:49 +0000 *************** ✏️Title: Hackers Advertising New Blackhat Tool Nytheon AI on Popular Hacking Forums *************** 📎Link: https://cybersecuritynews.com/?p=110830 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:28:18 +0000 *************** ✏️Title: CISA Releases Guide to Protect Network Edge Devices From Hackers *************** 📎Link: https://cybersecuritynews.com/?p=110824 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 13:12:00 +0530 *************** ✏️Title: ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks *************** 📎Link: https://thehackernews.com/2025/06/connectwise-to-rotate-screenconnect.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 07:37:08 GMT *************** ✏️Title: Path Traversal Vulnerability in Lila Project on Lichess.org *************** 📎Link: https://medium.com/p/06d0143f3052 *************** ⚙️Tags: #web_security #bug_bounty #lichess #hackerone #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 07:42:49 GMT *************** ✏️Title: Master Linux Without a Laptop — Learn Using Just Your Phone *************** 📎Link: https://medium.com/p/4b414d262f53 *************** ⚙️Tags: #linux #cybersecurity #hacking #tutorial #termux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:00:04 GMT *************** ✏️Title: Recommended Hackshift360 and They Delivered Beyond Expectations *************** 📎Link: https://medium.com/p/6682e93fe7f8 *************** ⚙️Tags: #spy #hacking #hire_a_hacker #credit_repair #credit_score *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:02:36 GMT *************** ✏️Title: Upload File ➡️ Stored XSS ➡️ Admin Takeover! MinIO Misconfiguration Story *************** 📎Link: https://medium.com/p/76ec4982ef5b *************** ⚙️Tags: #minio #hacking #bug_bounty #stored_xss #misconfiguration *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 07:34:03 GMT *************** ✏️Title: Header Hijinks: How X-Forwarded-For Gave Me Internal Access *************** 📎Link: https://medium.com/p/b37769198321 *************** ⚙️Tags: #infosec #money #cybersecurity #bug_bounty #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 08:02:28 GMT *************** ✏️Title: CEH Ethical Hacking course *************** 📎Link: https://medium.com/p/ea3d66b3d693 *************** ⚙️Tags: #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 06:15:23 +0000 *************** ✏️Title: CVE-2025-35978 - UpdateNavi UpdateNaviInstallService Remote Code Execution *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-35978 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 06:15:23 +0000 *************** ✏️Title: CVE-2025-4973 - Workreap WordPress Theme Authentication Bypass Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4973 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 06:15:23 +0000 *************** ✏️Title: CVE-2025-5012 - Workreap - Freelance Marketplace WordPress Theme File Upload Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5012 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 07:28:32 GMT *************** ✏️Title: Ethical Hacking: Unlocking the Cybersecurity Potential in 2025 *************** 📎Link: https://medium.com/p/e25d524b0f85 *************** ⚙️Tags: #ethical_hacking #masters #cybersecurity #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 07:13:01 GMT *************** ✏️Title: Tools and Automated Systems for Malware Analysis *************** 📎Link: https://medium.com/p/0f1df12103da *************** ⚙️Tags: #incident_response #malware #malware_protection #cybersecurity #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 07:33:07 GMT *************** ✏️Title: Building a Secure Virtual Environment for Malware Analysis *************** 📎Link: https://medium.com/p/d02a9edb5005 *************** ⚙️Tags: #malware #malware_analysis #cybersecurity #analysis #sandbox *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security