Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 07:27:24 GMT *************** ✏️Title: Network Penetration Testing &Tools to Exploit *************** 📎Link: https://medium.com/p/50d38ff3dc48 *************** ⚙️Tags: #cybersecurity #networking #ethical_hacking #cyber_security_training #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 06:56:18 GMT *************** ✏️Title: Think Red, Act Blue: The Mindset Shift That Makes You a Cybersecurity Superhero *************** 📎Link: https://medium.com/p/afbcb7dd52d1 *************** ⚙️Tags: #blue_team #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 08:17:34 +0200 *************** ✏️Title: CVE-2025-49128 | FasterXML jackson-core up to 2.12.x JsonLocation._appendSourceDesc information exposure (GHSA-wf8f-6423-gfxg / EUVD-2025-17366) *************** 📎Link: https://vuldb.com/?id.311585 *************** ⚙️Information: #Vendor: FasterXML #Product: jackson_core #Type: Programming Language Software #Risk: problematic #Local: Yes #Remote: No #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 08:26:07 +0200 *************** ✏️Title: CVE-2024-9994 | Essential Addons for Elementor Plugin up to 6.1.12 on WordPress Pricing Table Widget eael_pricing_item_tooltip_content cross site scripting *************** 📎Link: https://vuldb.com/?id.311586 *************** ⚙️Information: #Product: Essential Addons for Elementor Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 08:27:01 +0200 *************** ✏️Title: CVE-2024-9993 | Essential Addons for Elementor Plugin up to 6.1.12 on WordPress Event Calendar Widget eael_event_details_text cross site scripting *************** 📎Link: https://vuldb.com/?id.311587 *************** ⚙️Information: #Product: Essential Addons for Elementor Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 08:27:19 +0200 *************** ✏️Title: CVE-2025-5303 | LTL Freight Quotes Plugin up to 1.0.11/2.1.10/2.2.6 on WordPress expiry_date cross site scripting *************** 📎Link: https://vuldb.com/?id.311588 *************** ⚙️Information: #Product: LTL Freight Quotes Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 08:32:26 +0200 *************** ✏️Title: CVE-2025-5528 | Social Sharing Plugin Plugin up to 3.3.75 on WordPress heateor_mastodon_share cross site scripting *************** 📎Link: https://vuldb.com/?id.311589 *************** ⚙️Information: #Product: Social Sharing Plugin Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 08:32:32 +0200 *************** ✏️Title: CVE-2025-5568 | WpEvently Plugin up to 4.4.2 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.311590 *************** ⚙️Information: #Product: WpEvently Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 06:32:49 GMT *************** ✏️Title: How I Found a Critical Vulnerability on a GOV.MY Web App — And Reported It Responsibly *************** 📎Link: https://medium.com/p/e48f27296a01 *************** ⚙️Tags: #csrf_attack #hacking_for_defense #bug_bounty #penetration_testing #ethical_hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 07 Jun 2025 05:15:24 +0000 *************** ✏️Title: CVE-2025-5814 - WordPress Profiler Data Modification Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-5814 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 16:18:59 GMT *************** ✏️Title: Day 14: CSRF *************** 📎Link: https://medium.com/p/1d8f3ae7ebaa *************** ⚙️Tags: #penetration_testing #csrf #study_journal #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 05:23:27 GMT *************** ✏️Title: ️ Broken Access Control — The Silent Gatekeeper Flaw (OWASP Top 10) *************** 📎Link: https://medium.com/p/9f5c1b2a7a92 *************** ⚙️Tags: #owasp_top_10 #penetration_testing #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 06:14:43 GMT *************** ✏️Title: Breach in the Cloud Writeup — PwnedLabs *************** 📎Link: https://medium.com/p/aa85b0f53462 *************** ⚙️Tags: #penetration_testing #writeup #red_team #blue_team #aws *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 05:45:45 +0000 *************** ✏️Title: New Rust Based InfoStealer Extracts Sensitive Data from Chromium-based Browsers *************** 📎Link: https://cybersecuritynews.com/?p=110153 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 05:47:10 GMT *************** ✏️Title: OIDC: Integrate Kubernetes authentication with Azure AD via OIDC (Part IV) *************** 📎Link: https://medium.com/p/69815768cf62 *************** ⚙️Tags: #aws #oidc #kubernetes #authentication #azure *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 05:47:31 GMT *************** ✏️Title: How to Set Up a VPN with Tailscale: Overcoming CGNAT Challenges *************** 📎Link: https://medium.com/p/0e9c0088ef79 *************** ⚙️Tags: #wireguard #cgnat #vpn_setup #network_security #vpn *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 05:48:01 GMT *************** ✏️Title: How I Captured a Password with One Command *************** 📎Link: https://medium.com/p/12d7818a667d *************** ⚙️Tags: #programming #devops #web_development #cybersecurity #development *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 05:49:23 GMT *************** ✏️Title: From Classic SOC to Autonomous SOC: The Future of Cyber Defense *************** 📎Link: https://medium.com/p/1ada150e86ca *************** ⚙️Tags: #threat_detection #automation #cloud_security #cybersecurity #security_operation_center *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 05:49:53 GMT *************** ✏️Title: 21 Secret Linux Commands Hackers and Sysadmins Don’t Want You to Know About *************** 📎Link: https://medium.com/p/b02fa72cc057 *************** ⚙️Tags: #cybersecurity #info_sec_writeups #technology #linux #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 07 Jun 2025 05:47:43 GMT *************** ✏️Title: $7,500 Bug: Exposing Any HackerOne User’s Email via Private Program Invite *************** 📎Link: https://medium.com/p/de6fd6b3b6c8 *************** ⚙️Tags: #bug_bounty #technology #hacking #tips_and_tricks #penetration_testing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security