Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 07:46:08 GMT *************** ✏️Title: MITRE ATT&CK-Based Detection Engineering: Focus on Persistence *************** 📎Link: https://medium.com/p/07279d1617b6 *************** ⚙️Tags: #mitre #hacking #detection #mitre_attack #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 05:55:19 GMT *************** ✏️Title: Authentication part-4 : Username enumeration via subtly different responses *************** 📎Link: https://medium.com/p/2222f6e8f360 *************** ⚙️Tags: #portswigger #penetration_testing #writeup #credential_enumeration #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 07:46:50 GMT *************** ✏️Title: Firewall and IDS/IPS Evasion — Easy Lab Nmap *************** 📎Link: https://medium.com/p/22ffffa3cac2 *************** ⚙️Tags: #nmap #htb_academy #htb_writeup #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 05:41:33 GMT *************** ✏️Title: Why Hackers Tend to Stay Ahead of Cybersecurity Defenders and Their Victims *************** 📎Link: https://medium.com/p/8e1a05ec558d *************** ⚙️Tags: #artificial_intelligence #innovation #cybersecurity #hacker #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 06:38:00 GMT *************** ✏️Title: OverTheWire(Bandit) Labs *************** 📎Link: https://medium.com/p/ff3f42d7ddf8 *************** ⚙️Tags: #bandit #cybersecurity #linux_commands #overthewire #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 05:33:07 GMT *************** ✏️Title: TryHackMe Mac Hunt Walk Through *************** 📎Link: https://medium.com/p/5fb5002f4dae *************** ⚙️Tags: #macos #tryhackme #tryhackme_walkthrough #dfir *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 05:33:02 GMT *************** ✏️Title: Antivirus Says You’re Clean? Cool Story, Bro — Let’s Ask Sysmon *************** 📎Link: https://medium.com/p/650830df997a *************** ⚙️Tags: #cyber_security_awareness #sysmon #threat_intelligence #cybersecurity #malware *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 05:40:57 GMT *************** ✏️Title: How Lightweight Infostealers Breach Your Endpoints in Seconds *************** 📎Link: https://medium.com/p/6c6c38b543e0 *************** ⚙️Tags: #malware #infostealer #data #cyberattack #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Mon, 09 Jun 2025 05:42:42 GMT *************** ✏️Title: FBI and CISA Release Joint Advisory on LummaC2 Malware Amid Global Takedown Operation *************** 📎Link: https://medium.com/p/03a017cd9063 *************** ⚙️Tags: #cyberattack #cybersecurity #infostealer #malware #fbi *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 07:15:22 +0000 *************** ✏️Title: CVE-2025-5865 - RT-Thread Parameter Handler Memory Corruption Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5865 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 07:15:22 +0000 *************** ✏️Title: CVE-2025-5866 - RT-Thread Array Index Validation Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5866 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 07:15:23 +0000 *************** ✏️Title: CVE-2025-5893 - Honding Technology Smart Parking Management System Sensitive Information Exposure *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5893 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 09:24:00 +0200 *************** ✏️Title: CVE-2025-5898 | GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb utilities/pspp-convert.c parse_variables_option out-of-bounds write (Bug 67071) *************** 📎Link: https://vuldb.com/?id.311670 *************** ⚙️Information: #Vendor: GNU #Product: PSPP #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 09:24:03 +0200 *************** ✏️Title: CVE-2025-5899 | GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb utilities/pspp-convert.c parse_variables_option free of memory not on the heap (Bug 67072) *************** 📎Link: https://vuldb.com/?id.311671 *************** ⚙️Information: #Vendor: GNU #Product: PSPP #Risk: critical #Local: Yes #Remote: No #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 09:39:45 +0200 *************** ✏️Title: CVE-2025-5893 | Honding Smart Parking Management System up to 1.4 exposure of sensitive system information to an unauthorized control sphere *************** 📎Link: https://vuldb.com/?id.311672 *************** ⚙️Information: #Vendor: Honding #Product: Smart Parking Management System #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 09:47:36 +0200 *************** ✏️Title: CVE-2025-5900 | Tenda AC9 15.03.02.13 cross-site request forgery *************** 📎Link: https://vuldb.com/?id.311673 *************** ⚙️Information: #Vendor: Tenda #Product: AC9 #Type: Router Operating System #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:03:57 +0200 *************** ✏️Title: CVE-2025-5901 | TOTOLINK T10 4.1.8cu.5207 POST Request /cgi-bin/cstecgi.cgi UploadCustomModule File buffer overflow *************** 📎Link: https://vuldb.com/?id.311674 *************** ⚙️Information: #Vendor: TOTOLINK #Product: T10 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:03:58 +0200 *************** ✏️Title: CVE-2025-5902 | TOTOLINK T10 4.1.8cu.5207 POST Request /cgi-bin/cstecgi.cgi setUpgradeFW slaveIpList buffer overflow *************** 📎Link: https://vuldb.com/?id.311675 *************** ⚙️Information: #Vendor: TOTOLINK #Product: T10 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:04:00 +0200 *************** ✏️Title: CVE-2025-5903 | TOTOLINK T10 4.1.8cu.5207 POST Request /cgi-bin/cstecgi.cgi setWiFiAclRules desc buffer overflow *************** 📎Link: https://vuldb.com/?id.311676 *************** ⚙️Information: #Vendor: TOTOLINK #Product: T10 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Mon, 09 Jun 2025 10:04:03 +0200 *************** ✏️Title: CVE-2025-5904 | TOTOLINK T10 4.1.8cu.5207 POST Request /cgi-bin/cstecgi.cgi setWiFiMeshName device_name buffer overflow *************** 📎Link: https://vuldb.com/?id.311677 *************** ⚙️Information: #Vendor: TOTOLINK #Product: T10 #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security