Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 11:06:50 +0100 *************** ✏️Title: CVE-2025-1229 | olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6 ?page=1&logfile=eee&match= path os command injection (IBJT1K) *************** 📎Link: https://vuldb.com/?id.295219 *************** ⚙️Information: #Vendor: olajowon #Product: Loggrove #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 11:16:43 +0100 *************** ✏️Title: CVE-2025-26408 | Wattsense Bridge JTAG Interface on-chip debug and test interface with improper access control *************** 📎Link: https://vuldb.com/?id.295220 *************** ⚙️Information: #Vendor: Wattsense #Product: Bridge #Risk: critical #Local: Partially #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 11:16:47 +0100 *************** ✏️Title: CVE-2025-0525 | Octopus Deploy Octopus Server information exposure *************** 📎Link: https://vuldb.com/?id.295221 *************** ⚙️Information: #Vendor: Octopus Deploy #Product: Octopus Server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 11:52:20 +0100 *************** ✏️Title: CVE-2024-45386 | Siemens SIMATIC PCS neo Session Token session expiration (ssa-342348) *************** 📎Link: https://vuldb.com/?id.295222 *************** ⚙️Information: #Vendor: Siemens #Product: SIMATIC PCS neo/SIMOCODE ES/SIRIUS Safety ES/SIRIUS Soft Starter ES/TIA Administrator #Type: SCADA Software #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 11:52:39 +0100 *************** ✏️Title: CVE-2024-54015 | Siemens SIPROTEC 5 up to 9.89 default credentials (ssa-767615) *************** 📎Link: https://vuldb.com/?id.295223 *************** ⚙️Information: #Vendor: Siemens #Product: SIPROTEC 5 #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 10:26:53 GMT *************** ✏️Title: Dark OSINT: Rebranding don’t work *************** 📎Link: https://medium.com/p/83ef1a49bb0f *************** ⚙️Tags: #darkweb #osint #tor *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 10:11:10 GMT *************** ✏️Title: Lab: Web shell upload via extension blacklist bypass *************** 📎Link: https://medium.com/p/a95cca67e607 *************** ⚙️Tags: #infosec #cybersecurity #portswigger_lab #portswigger #web_security_academy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 10:11:15 GMT *************** ✏️Title: Lab: Web shell upload via obfuscated file extension *************** 📎Link: https://medium.com/p/b3f8381ef44f *************** ⚙️Tags: #cybersecurity #portswigger #portswigger_lab #infosec #web_security_academy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 10:11:16 GMT *************** ✏️Title: Lab: Remote code execution via polyglot web shell upload *************** 📎Link: https://medium.com/p/f12736b1062e *************** ⚙️Tags: #portswigger_lab #cybersecurity #infosec #portswigger #web_security_academy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for Incorrect Authorization in Microsoft exploit =============== 📎 https://sploitus.com/exploit?id=16CD160A-392D-53AB-88DC-3294F0E59F0D&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 09:15:09 +0000 *************** ✏️Title: CVE-2025-0589 - Octopus Deploy Active Directory Information Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0589 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 09:15:09 +0000 *************** ✏️Title: CVE-2025-1182 - "GNU Binutils ld Remote Memory Corruption Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1182 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:15:09 +0000 *************** ✏️Title: CVE-2025-0525 - Octopus Server Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-0525 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:15:09 +0000 *************** ✏️Title: CVE-2025-26408 - Wattsense Bridge JTAG Interface Over-Access Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-26408 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:15:09 +0000 *************** ✏️Title: CVE-2025-26409 - Wattsense Bridge Unauthenticated Bootloader Access *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-26409 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:15:09 +0000 *************** ✏️Title: CVE-2025-26410 - Wattsense Bridge Hard-Coded Credentials Disclosure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-26410 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 10:15:09 +0000 *************** ✏️Title: CVE-2025-26411 - Wattsense Bridge Remote Code Execution Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-26411 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 08:42:41 +0000 *************** ✏️Title: FinStealer Malware Attacking Leading Indian Bank’s Mobile Users To Steal Login Credentials *************** 📎Link: https://cybersecuritynews.com/?p=92138 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 09:46:06 +0000 *************** ✏️Title: USB Army Knife – A Powerful Red Team Tool for Penetration Testers *************** 📎Link: https://cybersecuritynews.com/?p=92139 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 15:25:00 +0530 *************** ✏️Title: Threat Actors Exploit ClickFix to Deploy NetSupport RAT in Latest Cyber Attacks *************** 📎Link: https://thehackernews.com/2025/02/threat-actors-exploit-clickfix-to.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security