Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 03:06:48 GMT *************** ✏️Title: LockBit Leak: Sloppy methods and Direct Links to Russian Authorities Revealed *************** 📎Link: https://medium.com/p/b2302475747d *************** ⚙️Tags: #osint #technology #cybercrime #russia #ransomware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 03:06:58 GMT *************** ✏️Title: Youtube Channel OSINT *************** 📎Link: https://medium.com/p/2a056468e5cf *************** ⚙️Tags: #recon #reconnaissance #cyber #osint #osint_tool *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 03:07:18 GMT *************** ✏️Title: RTO vs RPO *************** 📎Link: https://medium.com/p/6a8ae409dfe8 *************** ⚙️Tags: #recovery #osint #disaster_recovery #cyber_security_awareness #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 03:07:31 GMT *************** ✏️Title: Subdomain Takeover of fr1.vpn.zomans.com — $350 Bounty *************** 📎Link: https://medium.com/p/638d959e11dc *************** ⚙️Tags: #penetration_testing #hacking #technology #cybersecurity #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 03:02:29 GMT *************** ✏️Title: Host & Network Penetration Testing: System-Host Based Attacks CTF 1 — eJPTv2 *************** 📎Link: https://medium.com/p/fb2d045ccf01 *************** ⚙️Tags: #ctf_writeup #cybersecurity #host_based_attacks #ejpt_ctf #ejptv2 *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 02:14:40 GMT *************** ✏️Title: REvil Corp (TryHackMe) — Collab w/ SendIt *************** 📎Link: https://medium.com/p/69c580ea24f3 *************** ⚙️Tags: #ctf #incident_response #tryhackme #revil_ransomware #collab *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 01:38:36 GMT *************** ✏️Title: Capturing NTL MHashes in 2025 *************** 📎Link: https://medium.com/p/59bfda584da6 *************** ⚙️Tags: #blue_team #windows #ntlm #red_team #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 24 May 2025 23:15:23 +0000 *************** ✏️Title: CVE-2025-5135 - Tmall Demo Cross-Site Scripting Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5135 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 00:15:23 +0000 *************** ✏️Title: CVE-2025-5136 - Tmall Payment Identifier Handler Insecure Randomness Remote Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5136 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sun, 25 May 2025 00:15:23 +0000 *************** ✏️Title: CVE-2025-5137 - DedeCMS Distant Code Injection Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5137 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.03 (logYumLookup.php) Hybrid Path Traversal exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5948&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 00:36:34 GMT *************** ✏️Title: Video Search Tools For OSINT Investigators *************** 📎Link: https://medium.com/p/db9492da0431 *************** ⚙️Tags: #osint #cybersecurity #hacking #videos #investigation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sun, 25 May 2025 00:09:29 GMT *************** ✏️Title: URLPreview Challenge Writeup *************** 📎Link: https://medium.com/p/8f2944b169e4 *************** ⚙️Tags: #ctf_writeup #ctf #egcert #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 23:57:49 GMT *************** ✏️Title: Think Before You Click: Understanding Mark of the Web (MOTW) & SmartScreen in Windows *************** 📎Link: https://medium.com/p/5c98d2649d5e *************** ⚙️Tags: #ethical_hacking #cyber #hacking #cybersecurity #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.03 (productRemovalUpdate.php) Remote Code Execution exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5945&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.03 (MIX->HTTPDownloadServlet) Remote Code Execution exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5940&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.03 (MIX->IPConfigServlet) Network Manipulation exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5944&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.03 (MIX->NTPServlet) Time Manipulation exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5943&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 23:32:25 GMT *************** ✏️Title: Here's How I Got My First Bounty: €1000 *************** 📎Link: https://medium.com/p/db3264adeac0 *************** ⚙️Tags: #bug_bounty #1000_euro #web_vulnerabilities #cybersecurity #xss_vulnerability *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 24 May 2025 23:19:25 GMT *************** ✏️Title: I Came, I Requested, I Enrolled EscapeTwo ESC4 Annihilation *************** 📎Link: https://medium.com/p/8541edee2b0b *************** ⚙️Tags: #active_directory #hack_the_box_writeup #red_team #vulnlab #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security