Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:03:40 GMT *************** ✏️Title: Bash Automation Scripts for DevOps: Essential Tools for Modern Infrastructure Management *************** 📎Link: https://medium.com/p/a677a08392bd *************** ⚙️Tags: #devops #bash #deployment #infrastructure #linux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:04:55 GMT *************** ✏️Title: Broken Object Level Authorization (BOLA): Complete Guide — Part 1 *************** 📎Link: https://medium.com/p/2960dbcd480a *************** ⚙️Tags: #cybersecurity #owasp #infosec #api_security #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:08:43 GMT *************** ✏️Title: Broken Object Level Authorization (BOLA): Complete Guide — Part 2 *************** 📎Link: https://medium.com/p/2c271bdc1a4d *************** ⚙️Tags: #ai #owasp #bug_bounty #infosec #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:02:15 GMT *************** ✏️Title: Bypassing Authentication: A Critical Flaw in Basecamp’s *************** 📎Link: https://medium.com/p/849d9fadf39f *************** ⚙️Tags: #bug_bounty #bug_bounty_tips #penetration_testing #technology #tips_and_tricks *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 05:57:59 GMT *************** ✏️Title: Erie Insurance Systems Hit by Cyberattack, Millions Affected *************** 📎Link: https://medium.com/p/2ac18dc026ba *************** ⚙️Tags: #malware #erie_insurance #hacking #breach #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 05:27:49 GMT *************** ✏️Title: Wireless Penetration Testing with Aircrack-ng *************** 📎Link: https://medium.com/p/114e1f1c397f *************** ⚙️Tags: #cybersecurity #viral #wifi #pentesting #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 05:05:16 GMT *************** ✏️Title: Threat Hunting AsyncRAT C2 Servers Using OSINT *************** 📎Link: https://medium.com/p/6b1cd1706d2b *************** ⚙️Tags: #threat_intelligence #osint #information_security #cybersecurity #threat_hunting *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 05:05:37 GMT *************** ✏️Title: Understanding Network Traffic and OSI Layers 3 & 4: A Practical Overview *************** 📎Link: https://medium.com/p/8cece2efa421 *************** ⚙️Tags: #osi_model #infosec #networking #cybersecurity #network_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 05:59:31 GMT *************** ✏️Title: The Flag API Key — 247CTF solution writeup *************** 📎Link: https://medium.com/p/aa3764baadcb *************** ⚙️Tags: #ethical_hacking #ctf #web_security #sql_injection *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 06:04:21 GMT *************** ✏️Title: How I hacked Karnataka NIC portal with a simple SQL injection *************** 📎Link: https://medium.com/p/073f064ad99e *************** ⚙️Tags: #bug_bounty #ethical_hacking #blind_sql_injection #web_security #sql_injection *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 11:11:00 +0530 *************** ✏️Title: Over 80,000 Microsoft Entra ID Accounts Targeted Using Open-Source TeamFiltration Tool *************** 📎Link: https://thehackernews.com/2025/06/over-80000-microsoft-entra-id-accounts.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 06:55:46 +0200 *************** ✏️Title: CVE-2025-30085 | rsjoomla RSform Pro Component up to 3.3.14 on Joomla Submission Export code injection *************** 📎Link: https://vuldb.com/?id.312333 *************** ⚙️Information: #Vendor: rsjoomla #Product: RSform Pro Component #Type: Joomla Component #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 06:56:13 +0200 *************** ✏️Title: CVE-2025-32466 | rsjoomla RSMediaGallery Component up to 2.1.7 on Joomla Dashboard sql injection *************** 📎Link: https://vuldb.com/?id.312334 *************** ⚙️Information: #Vendor: rsjoomla #Product: RSMediaGallery Component #Type: Joomla Component #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 06:56:32 +0200 *************** ✏️Title: CVE-2022-4976 | ETJ Archive::Unzip::Burst up to 0.09 on Perl InfoZip Library vulnerable third-party component *************** 📎Link: https://vuldb.com/?id.312335 *************** ⚙️Information: #Vendor: ETJ #Product: Archive::Unzip::Burst #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 06:56:49 +0200 *************** ✏️Title: CVE-2025-32465 | rsjoomla RSTickets Component 1.9.12-3.3.0 on Joomla cross site scripting *************** 📎Link: https://vuldb.com/?id.312336 *************** ⚙️Information: #Vendor: rsjoomla #Product: RSTickets Component #Type: Joomla Component #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:04:01 +0200 *************** ✏️Title: CVE-2025-5479 | Sony XAV-AX8500 Bluetooth AVCTP Protocol heap-based overflow *************** 📎Link: https://vuldb.com/?id.312337 *************** ⚙️Information: #Vendor: Sony #Product: XAV_AX8500 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:04:23 +0200 *************** ✏️Title: CVE-2025-5478 | Sony XAV-AX8500 Bluetooth SDP Protocol integer overflow *************** 📎Link: https://vuldb.com/?id.312338 *************** ⚙️Information: #Vendor: Sony #Product: XAV_AX8500 #Risk: very critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:04:41 +0200 *************** ✏️Title: CVE-2025-5477 | Sony XAV-AX8500 Bluetooth L2CAP Protocol heap-based overflow *************** 📎Link: https://vuldb.com/?id.312339 *************** ⚙️Information: #Vendor: Sony #Product: XAV_AX8500 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:04:59 +0200 *************** ✏️Title: CVE-2025-5475 | Sony XAV-AX8500 Bluetooth Packet integer overflow *************** 📎Link: https://vuldb.com/?id.312340 *************** ⚙️Information: #Vendor: Sony #Product: XAV_AX8500 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 07:05:21 +0200 *************** ✏️Title: CVE-2025-5830 | Autel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister heap-based overflow *************** 📎Link: https://vuldb.com/?id.312341 *************** ⚙️Information: #Vendor: Autel #Product: MaxiCharger AC Wallbox Commercial #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security