Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 10:37:05 +0000 *************** ✏️Title: Woodpecker: A Red Teaming Tool To Find Vulnerabilities in AI, Kubernetes, & APIs *************** 📎Link: https://cybersecuritynews.com/?p=108970 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-24071 exploit =============== 📎 https://sploitus.com/exploit?id=CCFBF877-8AA9-560D-9750-F44638CB6EAA&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Cross-site Scripting in Roundcube Webmail exploit =============== 📎 https://sploitus.com/exploit?id=BD2D3C2C-AE72-579E-B839-BF1812752630&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Out-of-bounds Write in Ivanti Connect Secure exploit =============== 📎 https://sploitus.com/exploit?id=324A1A5C-13F3-5629-BE8F-91D3D124F81A&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Forced Browsing in Fortra Goanywhere Managed File Transfer exploit =============== 📎 https://sploitus.com/exploit?id=4F608487-4D8C-5610-8067-B64B3DB7C0A7&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-4664 exploit =============== 📎 https://sploitus.com/exploit?id=76AC4671-636C-5607-BD1B-6739C3456BAD&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-0868 exploit =============== 📎 https://sploitus.com/exploit?id=F5A60335-C395-5739-B34D-C7C7209A6F0C&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 09:03:22 GMT *************** ✏️Title: GitHub Recon: The Underrated Technique to Discover High-Impact Leaks in Bug Bounty *************** 📎Link: https://medium.com/p/c4069894389a *************** ⚙️Tags: #cybersecurity #technology #bug_bounty #programming #github *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:44:22 +0200 *************** ✏️Title: CVE-2025-5327 | chshcms mccms 2.7 Gf.php index pic server-side request forgery *************** 📎Link: https://vuldb.com/?id.310497 *************** ⚙️Information: #Vendor: chshcms #Product: mccms #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 10:44:23 +0200 *************** ✏️Title: CVE-2025-5328 | chshcms mccms 2.7 Backups.php restore_del dirs path traversal *************** 📎Link: https://vuldb.com/?id.310498 *************** ⚙️Information: #Vendor: chshcms #Product: mccms #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:00:00 +0000 *************** ✏️Title: Countermeasures Against State-Sponsored APT Operations Worldwide *************** 📎Link: https://cybersecuritynews.com/?p=106452 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:01:08 +0000 *************** ✏️Title: Advanced Detection Strategies for APT Campaigns in 2025 Networks *************** 📎Link: https://cybersecuritynews.com/?p=106387 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 08:40:04 +0000 *************** ✏️Title: New Spear-Phishing Attack Targeting Financial Executives by Deploying NetBird Malware *************** 📎Link: https://cybersecuritynews.com/?p=108953 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 09:00:00 +0000 *************** ✏️Title: APT Exploitation of Supply Chain Vulnerabilities in Enterprises *************** 📎Link: https://cybersecuritynews.com/?p=106489 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 09:35:56 +0000 *************** ✏️Title: New Research Uncovers Critical Patterns in TCP SYN Segments to Capture Malicious Activity *************** 📎Link: https://cybersecuritynews.com/?p=108989 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-24203 exploit =============== 📎 https://sploitus.com/exploit?id=ABD1DA4D-76B2-5063-B996-8C7A0C01F206&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ remote Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass =============== 📎 https://www.exploit-db.com/exploits/52308 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ remote Automic Agent 24.3.0 HF4 - Privilege Escalation =============== 📎 https://www.exploit-db.com/exploits/52309 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ remote Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure =============== 📎 https://www.exploit-db.com/exploits/52310 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ remote SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal =============== 📎 https://www.exploit-db.com/exploits/52311 =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity