Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:52:10 GMT *************** ✏️Title: How my first bug got accepted in VDP program after two rejections *************** 📎Link: https://medium.com/p/ce3890af6793 *************** ⚙️Tags: #bug_bounty #cybersecurity #technology #bug_bounty_writeup #bug_bounty_tips *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:40:20 GMT *************** ✏️Title: ️‍♂️ How Profiler.me Became a Game-Changer in My OSINT Investigations *************** 📎Link: https://medium.com/p/17cde8bfbf75 *************** ⚙️Tags: #osint_investigation #cybersecurity #open_source_intelligence #osint #threat_intelligence *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:15:41 GMT *************** ✏️Title: Public Code, Private Keys: How I Was Rewarded $$$ for Uncovering PII Leaks (Part I) *************** 📎Link: https://medium.com/p/344b237d237a *************** ⚙️Tags: #bug_bounty_writeup #infosec #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:47:25 GMT *************** ✏️Title: 84Million Passwords Exposed: Why Cybersecurity Can’t Be Optional Anymore *************** 📎Link: https://medium.com/p/675222495523 *************** ⚙️Tags: #ethical_hacking #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:08:00 GMT *************** ✏️Title: Certificates For Cyber Security In The Red Team *************** 📎Link: https://medium.com/p/c6de152fc135 *************** ⚙️Tags: #certification #roadmaps #cybersecurity #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:48:19 GMT *************** ✏️Title: AWS Lambda - Data Exfiltration . Attack and Defense . TryHackMe Walkthrough *************** 📎Link: https://medium.com/p/d91e7b831966 *************** ⚙️Tags: #cloud_computing #tryhackme #aws #cybersecurity #tryhackme_walkthrough *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:22:46 GMT *************** ✏️Title: Analysis of Auto Color Malware Targets Linux OS *************** 📎Link: https://medium.com/p/6b5c3883d6ae *************** ⚙️Tags: #soc #linux_malware #malware #malware_analysis #reverse_engineering *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 29 May 2025 07:32:32 GMT *************** ✏️Title: How to Detect and Clean WordPress Malware Redirect *************** 📎Link: https://medium.com/p/e16b82714d89 *************** ⚙️Tags: #wordpress #malware_removal #malware #web_development *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:07:18 +0200 *************** ✏️Title: CVE-2025-27703 | Absolute Security Secure Access up to 13.53 management console permission *************** 📎Link: https://vuldb.com/?id.310479 *************** ⚙️Information: #Vendor: Absolute Security #Product: Secure Access #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:17:29 +0200 *************** ✏️Title: CVE-2025-27702 | Absolute Security Secure Access up to 13.53 Management Console permission *************** 📎Link: https://vuldb.com/?id.310480 *************** ⚙️Information: #Vendor: Absolute Security #Product: Secure Access #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:17:44 +0200 *************** ✏️Title: CVE-2025-5273 | mcp-markdownify-server file access (SNYK-JS-MCPMARKDOWNIFYSERVER-10249193) *************** 📎Link: https://vuldb.com/?id.310481 *************** ⚙️Information: #Product: mcp_markdownify_server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:17:57 +0200 *************** ✏️Title: CVE-2025-27706 | Absolute Security Secure Access up to 13.53 Management Console cross site scripting *************** 📎Link: https://vuldb.com/?id.310482 *************** ⚙️Information: #Vendor: Absolute Security #Product: Secure Access #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:18:15 +0200 *************** ✏️Title: CVE-2025-5276 | mcp-markdownify-server Markdownify.get server-side request forgery (SNYK-JS-MCPMARKDOWNIFYSERVER-10249387) *************** 📎Link: https://vuldb.com/?id.310483 *************** ⚙️Information: #Product: mcp_markdownify_server #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:18:56 +0200 *************** ✏️Title: CVE-2025-3755 | Mitsubishi Electric MELSEC iQ-F FX5U-32MT improper validation of specified index, position, or offset in input *************** 📎Link: https://vuldb.com/?id.310484 *************** ⚙️Information: #Vendor: Mitsubishi Electric #Product: MELSEC iQ_F FX5U_32MT/MELSEC iQ_F FX5U_32MR/MELSEC iQ_F FX5U_64MT/MELSEC iQ_F FX5U_64MR/MELSEC iQ_F FX5U_80MT/MELSEC iQ_F FX5U_80MR/MELSEC iQ_F FX5UC_32MT/D/MELSEC iQ_F FX5UC_64MT/MELSEC iQ_F FX5UC_96MT/DS_TS/DSS_TS/MELSEC iQ_F FX5UC_32MR/MELSEC iQ_F FX5UJ_24MT/MELSEC iQ_F FX5UJ_24MR/MELSEC iQ_F FX5UJ_40MT/MELSEC iQ_F FX5UJ_40MR/MELSEC iQ_F FX5UJ_60MT/MELSEC iQ_F FX5UJ_60MR/ES_A/MELSEC iQ_F FX5S_30MT/MELSEC iQ_F FX5S_30MR/MELSEC iQ_F FX5S_40MT/MELSEC iQ_F FX5S_40MR/MELSEC iQ_F FX5S_60MT/MELSEC iQ_F FX5S_60MR/MELSEC iQ_F FX5S_80MT/MELSEC iQ_F FX5S_80MR #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:33:26 +0200 *************** ✏️Title: CVE-2025-31054 | Bloggie Plugin up to 2.0.8 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.310485 *************** ⚙️Information: #Product: Bloggie Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:33:35 +0200 *************** ✏️Title: CVE-2025-5122 | Map Block Leaflet Plugin up to 3.2.1 on WordPress Parameter url cross site scripting *************** 📎Link: https://vuldb.com/?id.310486 *************** ⚙️Information: #Product: Map Block Leaflet Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:33:48 +0200 *************** ✏️Title: CVE-2025-5286 | Bold Page Builder Plugin up to 5.3.6 on WordPress additional_settings cross site scripting *************** 📎Link: https://vuldb.com/?id.310487 *************** ⚙️Information: #Product: Bold Page Builder Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:33:56 +0200 *************** ✏️Title: CVE-2025-4670 | Easy Digital Downloads Plugin up to 3.3.8.1 on WordPress Shortcode edd_receipt cross site scripting *************** 📎Link: https://vuldb.com/?id.310488 *************** ⚙️Information: #Product: Easy Digital Downloads Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:34:51 +0200 *************** ✏️Title: CVE-2025-48068 | next up to 15.1.6 Next.js Dev Server missing origin validation in websockets *************** 📎Link: https://vuldb.com/?id.310489 *************** ⚙️Information: #Product: next #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 29 May 2025 09:35:19 +0200 *************** ✏️Title: CVE-2025-47933 | argocd Argo CD Repository Page cross site scripting *************** 📎Link: https://vuldb.com/?id.310490 *************** ⚙️Information: #Product: argocd #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security