Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 17:49:59 GMT *************** ✏️Title: Abusing Compute Instance IAM Misconfigurations to Gain Privileges in GCP *************** 📎Link: https://medium.com/p/c0371280f21d *************** ⚙️Tags: #cloud #infosec #hacking #google #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 17:27:50 GMT *************** ✏️Title: Game Over: The Pro Gamer vs. The Hacker *************** 📎Link: https://medium.com/p/bf1194d6942a *************** ⚙️Tags: #technology #hacker #software_development #gaming #software_engineering *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 18:14:45 GMT *************** ✏️Title: Are You Cyberpunk Enough Now to Unplug from the Mainstream? *************** 📎Link: https://medium.com/p/524984b918bc *************** ⚙️Tags: #mainstream #hacker_culture #unplug #hacker #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 17:22:20 GMT *************** ✏️Title: HTB — LinkVortex *************** 📎Link: https://medium.com/p/84fd0c9a1e67 *************** ⚙️Tags: #symlink #ffuf #htb #cybersecurity #ctf *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 07 Feb 2025 18:02:14 GMT *************** ✏️Title: PicoCTF Writeup — vault-door-4 *************** 📎Link: https://medium.com/p/522592ddc9c4 *************** ⚙️Tags: #hacking_challenge #picoctf #reverse_engineering #cybersecurity #ctf_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:44:39 +0100 *************** ✏️Title: CVE-2025-1117 | CoinRemitter 0.0.1/0.0.2 on OpenCart coin sql injection *************** 📎Link: https://vuldb.com/?id.295023 *************** ⚙️Information: #Product: CoinRemitter #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 18:07:37 +0100 *************** ✏️Title: CVE-2024-7425 | WP All Import WP All Export Pro Plugin up to 1.9.1 on WordPress code injection *************** 📎Link: https://vuldb.com/?id.295024 *************** ⚙️Information: #Vendor: WP All Import #Product: WP All Export Pro Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 16:15:39 +0000 *************** ✏️Title: CVE-2024-7419 - "WordPress WP ALL Export Pro Remote Code Execution" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-7419 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:15:11 +0100 *************** ✏️Title: CVE-2024-7419 | WP All Import WP All Export Pro Plugin up to 1.9.1 on WordPress export code injection *************** 📎Link: https://vuldb.com/?id.295004 *************** ⚙️Information: #Vendor: WP All Import #Product: WP All Export Pro Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:16:12 +0100 *************** ✏️Title: CVE-2024-57248 | Gleamtech FileVista 9.2.0.0 HTTP Request path traversal *************** 📎Link: https://vuldb.com/?id.295005 *************** ⚙️Information: #Vendor: Gleamtech #Product: FileVista #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:16:13 +0100 *************** ✏️Title: CVE-2024-35106 | Nextu Fleta AX1500 WIFI6 1.0.3 HTTP POST Request /boafrm/formIpQoS denial of service *************** 📎Link: https://vuldb.com/?id.295006 *************** ⚙️Information: #Vendor: Nextu Fleta #Product: AX1500 WIFI6 #Type: Wireless LAN Software #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:16:26 +0100 *************** ✏️Title: CVE-2024-52881 | AudioCodes One Voice Operations Center up to 8.4.581 hard-coded key *************** 📎Link: https://vuldb.com/?id.295007 *************** ⚙️Information: #Vendor: AudioCodes #Product: One Voice Operations Center #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:17:11 +0100 *************** ✏️Title: CVE-2024-48091 | Tally Prime Edit Log 2.1 TextShaping.dll uncontrolled search path *************** 📎Link: https://vuldb.com/?id.295008 *************** ⚙️Information: #Vendor: Tally #Product: Prime Edit Log #Risk: critical #Local: Yes #Remote: No #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:17:23 +0100 *************** ✏️Title: CVE-2024-57249 | Gleamtech FileVista 9.2.0.0 improper authorization *************** 📎Link: https://vuldb.com/?id.295009 *************** ⚙️Information: #Vendor: Gleamtech #Product: FileVista #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:17:32 +0100 *************** ✏️Title: CVE-2024-9664 | Soflyy WP All Import Pro Plugin up to 4.9.7 on WordPress deserialization *************** 📎Link: https://vuldb.com/?id.295010 *************** ⚙️Information: #Vendor: Soflyy #Product: WP All Import Pro Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:18:16 +0100 *************** ✏️Title: CVE-2024-52884 | AudioCodes Mediant Session Border Controller prior 7.40A.501.841 Configuration Export inadequate encryption *************** 📎Link: https://vuldb.com/?id.295011 *************** ⚙️Information: #Vendor: AudioCodes #Product: Mediant Session Border Controller #Risk: problematic #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:18:21 +0100 *************** ✏️Title: CVE-2024-9661 | Soflyy WP All Import Pro Plugin up to 4.9.7 on WordPress delete_and_edit cross-site request forgery *************** 📎Link: https://vuldb.com/?id.295012 *************** ⚙️Information: #Vendor: Soflyy #Product: WP All Import Pro Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:20:11 +0100 *************** ✏️Title: CVE-2024-52882 | AudioCodes One Voice Operations Center up to 8.4.581 Devices API cross site scripting *************** 📎Link: https://vuldb.com/?id.295013 *************** ⚙️Information: #Vendor: AudioCodes #Product: One Voice Operations Center #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:20:26 +0100 *************** ✏️Title: CVE-2024-10383 | GitLab VSCode Fork prior 1.89.1-1.0.0-dev-20241118094343 cross site scripting (Issue 500785) *************** 📎Link: https://vuldb.com/?id.295014 *************** ⚙️Information: #Vendor: GitLab #Product: VSCode Fork #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 07 Feb 2025 17:20:36 +0100 *************** ✏️Title: CVE-2024-52883 | AudioCodes One Voice Operations Center up to 8.4.581 path traversal *************** 📎Link: https://vuldb.com/?id.295015 *************** ⚙️Information: #Vendor: AudioCodes #Product: One Voice Operations Center #Risk: critical #Local: No #Remote: Partially #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security