Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:10:16 +0000 *************** ✏️Title: New Botnet Hijacks 9,000 ASUS Routers & Enables SSH Access by Injecting Public Key *************** 📎Link: https://cybersecuritynews.com/?p=108893 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 11:29:00 +0530 *************** ✏️Title: Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations *************** 📎Link: https://thehackernews.com/2025/05/chinese-apt41-exploits-google-calendar.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 05:15:20 +0000 *************** ✏️Title: CVE-2025-3755 - Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules Index Validation Bypass *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-3755 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 05:15:21 +0000 *************** ✏️Title: CVE-2025-4583 - Smash Balloon Social Photo Feed – Easy Social Feeds Plugin Stored Cross-Site Scripting (XSS) *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-4583 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 05:15:21 +0000 *************** ✏️Title: CVE-2025-5273 - Mcp-Markdownify-Server File Access Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5273 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 05:15:21 +0000 *************** ✏️Title: CVE-2025-5276 - MCP Markdownify Server SSRF *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5276 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:38:06 GMT *************** ✏️Title: AI-Powered SQLMap: Smarter SQL Injection Testing Guide *************** 📎Link: https://medium.com/p/5c5f59b99b4e *************** ⚙️Tags: #programming #cybersecurity #openexploit #software_engineering #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:36:23 GMT *************** ✏️Title: This One Hacker Trick Got Me Access to an Admin Dashboard ️ *************** 📎Link: https://medium.com/p/d9f0b6d633a0 *************** ⚙️Tags: #cybersecurity #ai #hacking #programming #technology *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:36:58 GMT *************** ✏️Title: HTTP Host Header Attack? *************** 📎Link: https://medium.com/p/2949e597437f *************** ⚙️Tags: #bug_bounty #students #money #cybersecurity #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:50:54 GMT *************** ✏️Title: https://www.prakse.lv/enterprise/profile/16930/como-hablo-con-un-ejecutivo-de-volaris *************** 📎Link: https://medium.com/p/8f3beff35ff5 *************** ⚙️Tags: #cve *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 05:59:59 GMT *************** ✏️Title: Github Hacking NCSA mooc *************** 📎Link: https://medium.com/p/54b07b9dadd4 *************** ⚙️Tags: #mooc #pentesting #github #ncsa #supervalentine *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 05:57:24 GMT *************** ✏️Title: My AndroGoat Journey: Deep Dive into Insecure Data Storage *************** 📎Link: https://medium.com/p/2887c1a524a8 *************** ⚙️Tags: #cybersecurity #training #android #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:16:32 GMT *************** ✏️Title: Introducing cr3di: A Lightweight CLI Tool for Secure Credential Management on Kali Linux *************** 📎Link: https://medium.com/p/64cf41a46e97 *************** ⚙️Tags: #cybersecurity #kali_linux_tools #penetration_testing #github #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:38:20 GMT *************** ✏️Title: Logic Flaw: Deleting HackerOne Team Reports Without Access Rights *************** 📎Link: https://medium.com/p/1c4755a23af8 *************** ⚙️Tags: #technology #bug_bounty_tips #bug_bounty #penetration_testing #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:46:45 GMT *************** ✏️Title: Belajar Cyber Security dari Nol: Roadmap 5 Tahun yang Gampang Dipahami Siapa Saja *************** 📎Link: https://medium.com/p/214b8fe85b8e *************** ⚙️Tags: #training #cybersecurity #blue_team #roadmaps #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:52:31 GMT *************** ✏️Title: TryHackMe | Windows Memory & Processes | WriteUp *************** 📎Link: https://medium.com/p/130d6391b01c *************** ⚙️Tags: #tryhackme_writeup #cybersecurity #tryhackme #tryhackme_walkthrough #cyber_security_awareness *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 03:20:52 +0000 *************** ✏️Title: ChoiceJacking Attack Let Hackers Compromise Android & iOS Devices via Malicious Charger *************** 📎Link: https://cybersecuritynews.com/?p=108804 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 06:14:13 +0000 *************** ✏️Title: Microsoft OneDrive File Picker Vulnerability Exposes Users’ Entire Cloud Storage to Websites *************** 📎Link: https://cybersecuritynews.com/?p=108879 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 11:04:00 +0530 *************** ✏️Title: Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin *************** 📎Link: https://thehackernews.com/2025/05/over-100000-wordpress-sites-at-risk.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 05:10:50 GMT *************** ✏️Title: CVE-2025–4687 ( Pre-Account takeover through invite on Teletonika RMS website ) *************** 📎Link: https://medium.com/p/972335378829 *************** ⚙️Tags: #cybersecurity #cve #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security