Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 08:08:41 GMT *************** ✏️Title: Complete Beginner-Web Hacking Fundamentals-OWASP Top 10–2021-TryHackMe *************** 📎Link: https://medium.com/p/01bfae1aed0d *************** ⚙️Tags: #tryhackme #cyber_security_risks #complete_beginner #web_vulnerabilities #owasp_top_10 *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:49:08 +0100 *************** ✏️Title: CVE-2025-0180 | Chimpstudio WP Foodbakery Plugin up to 4.7 on WordPress privileges management *************** 📎Link: https://vuldb.com/?id.295205 *************** ⚙️Information: #Vendor: Chimpstudio #Product: WP Foodbakery Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:49:16 +0100 *************** ✏️Title: CVE-2025-0181 | Chimpstudio WP Foodbakery Plugin up to 4.7 on WordPress authentication bypass *************** 📎Link: https://vuldb.com/?id.295206 *************** ⚙️Information: #Vendor: Chimpstudio #Product: WP Foodbakery Plugin #Type: WordPress Plugin #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:50:45 +0100 *************** ✏️Title: CVE-2024-52611 | SolarWinds Orion Platform up to 2024.4.1 information exposure *************** 📎Link: https://vuldb.com/?id.295202 *************** ⚙️Information: #Vendor: SolarWinds #Product: Orion Platform #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:51:08 +0100 *************** ✏️Title: CVE-2024-52612 | SolarWinds Orion Platform up to 2024.4.1 cross site scripting *************** 📎Link: https://vuldb.com/?id.295203 *************** ⚙️Information: #Vendor: SolarWinds #Product: Orion Platform #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:51:31 +0100 *************** ✏️Title: CVE-2024-45718 | SolarWinds Kiwi Syslog NG up to 1.3 Configuration File cleartext storage *************** 📎Link: https://vuldb.com/?id.295204 *************** ⚙️Information: #Vendor: SolarWinds #Product: Kiwi Syslog NG #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:51:48 +0100 *************** ✏️Title: CVE-2024-28989 | SolarWinds Web Help Desk up to 12.8.4 hard-coded key *************** 📎Link: https://vuldb.com/?id.295207 *************** ⚙️Information: #Vendor: SolarWinds #Product: Web Help Desk #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:52:07 +0100 *************** ✏️Title: CVE-2024-52606 | SolarWinds Orion Platform up to 2024.4.1 server-side request forgery *************** 📎Link: https://vuldb.com/?id.295208 *************** ⚙️Information: #Vendor: SolarWinds #Product: Orion Platform #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:56:41 +0100 *************** ✏️Title: CVE-2024-13643 | MVPThemes Zox News Plugin up to 3.17.0 on WordPress backup_options authorization *************** 📎Link: https://vuldb.com/?id.295209 *************** ⚙️Information: #Vendor: MVPThemes #Product: Zox News Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 08:59:38 +0100 *************** ✏️Title: CVE-2025-1224 | ywoa up to 2024.07.03 UserMapper.xml listNameBySql sql injection (IBI731) *************** 📎Link: https://vuldb.com/?id.295210 *************** ⚙️Information: #Product: ywoa #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 07:16:08 GMT *************** ✏️Title: HackTheBox Spookifier Writeup | SSTI Exploit Explained *************** 📎Link: https://medium.com/p/0019801bb0bd *************** ⚙️Tags: #hackthebox #cybersecurity #hackthebox_writeup #hacking #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 07:16:32 GMT *************** ✏️Title: Exploiting UART to Gain Shell Access on a Security Camera *************** 📎Link: https://medium.com/p/05592eac627a *************** ⚙️Tags: #hardware #cybersecurity #uart #hardware_hacking #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 07:22:59 GMT *************** ✏️Title: How VAPT Enhances Mobile App Security: A Guide for Business Owners *************** 📎Link: https://medium.com/p/bf9189362555 *************** ⚙️Tags: #information_security #penetration_testing #vapt_services #pentesting #mobile_app_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:53:20 GMT *************** ✏️Title: 10 Best Site for Learning Ethical Hacking *************** 📎Link: https://medium.com/p/5ed0f49ea408 *************** ⚙️Tags: #ethical_hacking #hacking_tools #learning_website #cybersecurity #learning *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 07:06:39 GMT *************** ✏️Title: Ethical Hacking: The Art of Securing the Digital World *************** 📎Link: https://medium.com/p/43cbf8c956a7 *************** ⚙️Tags: #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 12:33:00 +0530 *************** ✏️Title: 8Base Ransomware Data Leak Sites Seized in International Law Enforcement Operation *************** 📎Link: https://thehackernews.com/2025/02/8base-ransomware-data-leak-sites-seized.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:49:28 GMT *************** ✏️Title: Linux Privilege Escalation, some ideas from tryhackme machines — part 1 *************** 📎Link: https://medium.com/p/e98c551eb47b *************** ⚙️Tags: #tryhackme #bugbounty_writeup #hacking #cybersecurity #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 07:07:28 GMT *************** ✏️Title: Agent Sudo - TryHackMe Writeup *************** 📎Link: https://medium.com/p/3b50e7378f2d *************** ⚙️Tags: #penetration_testing #privilege_escalation #ctf_walkthrough #ctf_writeup #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:36:30 GMT *************** ✏️Title: Ransomware vs Malware: What’s the Difference? *************** 📎Link: https://medium.com/p/99687e5d7749 *************** ⚙️Tags: #cyberattack #cybercrime #ransomeware #malware #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 07:32:27 +0100 *************** ✏️Title: CVE-2025-1145 | NetVision Information ISOinsight prior 2.9.0.241231/3.0.0.241231 cross site scripting *************** 📎Link: https://vuldb.com/?id.295176 *************** ⚙️Information: #Vendor: NetVision Information #Product: ISOinsight #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security