Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 02:15:30 GMT *************** ✏️Title: CVE-2025-1086 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-1086 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 03:15:12 GMT *************** ✏️Title: CVE-2025-22402 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-22402 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 04:15:07 GMT *************** ✏️Title: CVE-2025-1072 *************** 📎Link: https://www.tenable.com/cve/CVE-2025-1072 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 06:15:29 GMT *************** ✏️Title: CVE-2024-13352 *************** 📎Link: https://www.tenable.com/cve/CVE-2024-13352 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 06:15:30 GMT *************** ✏️Title: CVE-2024-13492 *************** 📎Link: https://www.tenable.com/cve/CVE-2024-13492 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 08:55:52 GMT *************** ✏️Title: RXSS Hacking Law Enforcement *************** 📎Link: https://medium.com/p/434ad9b5c03f *************** ⚙️Tags: #bug_bounty #bug_bounty_tips #ethical_hacking #cybersecurity #pentesting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 08:15:53 GMT *************** ✏️Title: Red Team vs. Blue Team: How to Think Like an Attacker and Defender *************** 📎Link: https://medium.com/p/366d9b05bcbd *************** ⚙️Tags: #cybersecurity #security #red_team_tools #red_team #blue_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 08:52:00 +0100 *************** ✏️Title: CVE-2025-24531 | OpenSC pam_pkcs11 0.6.12 pam_sm_authenticate improper authentication (2ecba68d40) *************** 📎Link: https://vuldb.com/?id.294930 *************** ⚙️Information: #Vendor: OpenSC #Product: pam_pkcs11 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 09:18:03 +0100 *************** ✏️Title: CVE-2025-22880 | Delta Electronics CNCSoft-G2 2.0.0.5/2.1.0.4/2.1.0.10 heap-based overflow (PCSA-2025-00002) *************** 📎Link: https://vuldb.com/?id.294931 *************** ⚙️Information: #Vendor: Delta Electronics #Product: CNCSoft_G2 #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 06:15:29 +0000 *************** ✏️Title: CVE-2024-13352 - Legull WordPress Reflected Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13352 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 06:15:30 +0000 *************** ✏️Title: CVE-2024-13492 - WordPress Guten Free Options XSS Weakness *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13492 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:15:14 +0000 *************** ✏️Title: CVE-2024-13841 - Elementor Builder Shortcodes Collections Information Exposure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13841 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 07:15:15 +0000 *************** ✏️Title: CVE-2025-23085 - Node.js - HTTP/2 Server - Socket Memory Leak Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-23085 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 07:52:35 GMT *************** ✏️Title: Bug Bounty Program: Crypto Rewards for Finding Bugs in ARMswap Platform *************** 📎Link: https://medium.com/p/e863185b0b07 *************** ⚙️Tags: #bug_bounty #bug_bounty_program #bug_bounty_hunter #bug_bounty_tips #armswap *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 07:10:16 GMT *************** ✏️Title: Why Web Application VAPT is Critical for Business Security *************** 📎Link: https://medium.com/p/cb07ec5d1258 *************** ⚙️Tags: #vapt_services #web_application_security #cybersecurity #pentesting #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 07:31:29 GMT *************** ✏️Title: Exploiting CSRF in GraphQL Applications *************** 📎Link: https://medium.com/p/f262411588f7 *************** ⚙️Tags: #bug_bounty #data_breach #penetration_testing #cybersecurity #offensive_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 07:51:01 GMT *************** ✏️Title: TryHackMe Intermediate Nmap CTF WriteUp *************** 📎Link: https://medium.com/p/8ee1878ce7a0 *************** ⚙️Tags: #ssh #intermediate_nmap #tryhackme #nmap #tryhackme_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 07:51:02 GMT *************** ✏️Title: TryHackMe Intermediate Nmap CTF WriteUp Rehberi *************** 📎Link: https://medium.com/p/80a58553366a *************** ⚙️Tags: #tryhackme_rehber #tryhackme #intermediate_nmap #nmap #ssh *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 08:35:10 +0100 *************** ✏️Title: CVE-2024-13841 | daveshine Builder Shortcode Extras Plugin up to 1.0.0 on WordPress bse-elementor-template authorization *************** 📎Link: https://vuldb.com/?id.294929 *************** ⚙️Information: #Vendor: daveshine #Product: Builder Shortcode Extras Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 06:33:38 +0000 *************** ✏️Title: Splunk Unveils a New AI Based Honeypot “DECEIVE” to Log Attacker Activities *************** 📎Link: https://cybersecuritynews.com/?p=91745 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security