Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 07:44:56 +0100 *************** ✏️Title: CVE-2025-23189 | SAP NetWeaver and ABAP Platform 740/2008_1_700/2008_1_710 RFC Enabled Function Module authorization *************** 📎Link: https://vuldb.com/?id.295197 *************** ⚙️Information: #Vendor: SAP #Product: NetWeaver and ABAP Platform #Type: Solution Stack Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 07:45:03 +0100 *************** ✏️Title: CVE-2025-25241 | SAP Fiori Apps Reference Library GBX01HR5 605 My Overtime Requests view/ authorization *************** 📎Link: https://vuldb.com/?id.295198 *************** ⚙️Information: #Vendor: SAP #Product: Fiori Apps Reference Library #Type: Software Library #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 07:45:11 +0100 *************** ✏️Title: CVE-2025-24875 | SAP Commerce COM_CLOUD 2211/HY_COM 2205 Setting cross-site request forgery *************** 📎Link: https://vuldb.com/?id.295199 *************** ⚙️Information: #Vendor: SAP #Product: Commerce #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 07:45:24 +0100 *************** ✏️Title: CVE-2025-24867 | SAP BusinessObjects Platform BI Launchpad unprotected cross site scripting *************** 📎Link: https://vuldb.com/?id.295200 *************** ⚙️Information: #Vendor: SAP #Product: BusinessObjects Platform #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Patch *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 07:49:05 +0100 *************** ✏️Title: CVE-2024-55447 | Paxton Net2 MSSQL Single User Mode access control *************** 📎Link: https://vuldb.com/?id.295201 *************** ⚙️Information: #Vendor: Paxton #Product: Net2 #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for Incorrect Authorization in Microsoft exploit =============== 📎 https://sploitus.com/exploit?id=6A2F1EDD-75A6-5DE3-9BEA-033930FD8BDA&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon FLXeon 9.3.4 wsConnect.js WebSocket Command Spawning exploit =============== 📎 https://sploitus.com/exploit?id=PACKETSTORM:189078&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon FLXeon 9.3.4 (wsConnect.js) WebSocket Command Spawning PoC exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5913&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon FLXeon 9.3.4 (runtimeSetup.sh) Hidden Backdoor Account exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5914&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon FLXeon 9.3.4 runtimeSetup.sh Hidden Backdoor Account exploit =============== 📎 https://sploitus.com/exploit?id=PACKETSTORM:189079&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:09:37 GMT *************** ✏️Title: CSRF in Instagram *************** 📎Link: https://medium.com/p/461cbba286a *************** ⚙️Tags: #bug_bounty_writeup #facebook_bug_bounty #information_security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:13:56 GMT *************** ✏️Title: Mastering Nmap: The Full Toolkit *************** 📎Link: https://medium.com/p/8231c918e144 *************** ⚙️Tags: #firewall_evasion #nmap_command #nmap *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:20:05 GMT *************** ✏️Title: Threat Hunting Techniques and Generative AI: A Practical Approach *************** 📎Link: https://medium.com/p/797a86ada4fd *************** ⚙️Tags: #information_technology #cybersecurity #bug_bounty #threat_hunting #ai *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:23:55 GMT *************** ✏️Title: Creating a Code Obfuscation Program For C *************** 📎Link: https://medium.com/p/d10d604178d4 *************** ⚙️Tags: #hacking #c #python #code_obfuscation *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:25:15 GMT *************** ✏️Title: Finding subdomains that are hidden in the cloud. *************** 📎Link: https://medium.com/p/ec54412802bf *************** ⚙️Tags: #bug_bounty #hacking #penetration_testing #cybersecurity #cloud *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Tue, 11 Feb 2025 06:26:05 GMT *************** ✏️Title: Best Cyber Security Certifications for Beginners In 2025 *************** 📎Link: https://medium.com/p/b183672c737e *************** ⚙️Tags: #cybersecurity_training #cybersecurity #cybersecurity_course #ethical_hacking #cyber_security_services *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 05:15:12 +0000 *************** ✏️Title: CVE-2024-12599 - Elementor Absolute Addons for WordPress Stored Cross-Site Scripting *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-12599 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 05:15:13 +0000 *************** ✏️Title: CVE-2025-1173 - "1000 Projects Bookstore Management System SQL Injection" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1173 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 05:15:13 +0000 *************** ✏️Title: CVE-2025-1174 - "1000 Projects Bookstore Management System Cross-Site Scripting Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1174 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Tue, 11 Feb 2025 05:15:14 +0000 *************** ✏️Title: CVE-2025-1211 - Hackney SSRF Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1211 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security