Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 15:16:52 +0000 *************** ✏️Title: Microsoft Outlook’s New Two-Click View for Encrypted Emails Protects You From Accidental Exposure *************** 📎Link: https://cybersecuritynews.com/?p=110916 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 15:50:12 +0000 *************** ✏️Title: DragonForce Ransomware Group – The Rise of a Relentless Cyber Threat in 2025 *************** 📎Link: https://cybersecuritynews.com/?p=110920 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 15:10:20 GMT *************** ✏️Title: How Does One CVE Lead to XSS, Redirect, and SSRF *************** 📎Link: https://medium.com/p/6a3507bc3b58 *************** ⚙️Tags: #bug_bounty #cybersecurity #ssrf #xss_attack #grafana *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 14:36:58 GMT *************** ✏️Title: HTTP Parameter pollution *************** 📎Link: https://medium.com/p/bad2fda0ef6f *************** ⚙️Tags: #cybersecurity #hacking #learning #bug_bounty #http_parameter_pollution *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 15:16:41 GMT *************** ✏️Title: Why an Email Leak Is Just the Tip of the Iceberg (Advanced) *************** 📎Link: https://medium.com/p/7e7654f7067b *************** ⚙️Tags: #digital_hygiene #osint #data_breach #cybersecurity #data_privacy *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 15:22:27 GMT *************** ✏️Title: OSINT Digest: What The World Missed This Week. *************** 📎Link: https://medium.com/p/49a263c94dd7 *************** ⚙️Tags: #news #intel #osint #intelligence #geopolitics *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Thu, 12 Jun 2025 14:12:12 GMT *************** ✏️Title: [TryHackMe] hacking DVWA (part 1) *************** 📎Link: https://medium.com/p/94a0d4b0b29e *************** ⚙️Tags: #linpeas #reverse_shell #ethical_hacking #dvwa #hacking_tools *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:28:01 +0200 *************** ✏️Title: CVE-2025-49181 | SICK SICK Media Server API Endpoint authorization *************** 📎Link: https://vuldb.com/?id.312389 *************** ⚙️Information: #Vendor: SICK #Product: SICK Media Server #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:29:15 +0200 *************** ✏️Title: CVE-2025-49183 | SICK Media Server REST API cleartext transmission *************** 📎Link: https://vuldb.com/?id.312390 *************** ⚙️Information: #Vendor: SICK #Product: Media Server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:30:42 +0200 *************** ✏️Title: CVE-2024-9512 | GitLab Enterprise Edition up to 17.10.7/17.11.3/18.0.1 toctou (Issue 497748) *************** 📎Link: https://vuldb.com/?id.312391 *************** ⚙️Information: #Vendor: GitLab #Product: Enterprise Edition #Type: Bug Tracking Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:31:03 +0200 *************** ✏️Title: CVE-2025-49191 | SICK Field Analytics iFrame Widget ui layer *************** 📎Link: https://vuldb.com/?id.312392 *************** ⚙️Information: #Vendor: SICK #Product: Field Analytics #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:31:24 +0200 *************** ✏️Title: CVE-2025-49187 | SICK Field Analytics Failed Login observable response discrepancy *************** 📎Link: https://vuldb.com/?id.312393 *************** ⚙️Information: #Vendor: SICK #Product: Field Analytics #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:31:47 +0200 *************** ✏️Title: CVE-2025-49185 | SICK Field Analytics Dashboard Widget Transform cross site scripting *************** 📎Link: https://vuldb.com/?id.312394 *************** ⚙️Information: #Vendor: SICK #Product: Field Analytics #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:32:01 +0200 *************** ✏️Title: CVE-2025-49189 | SICK Media Server up to 1.4 cookie httponly flag *************** 📎Link: https://vuldb.com/?id.312395 *************** ⚙️Information: #Vendor: SICK #Product: Media Server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:32:14 +0200 *************** ✏️Title: CVE-2025-49182 | SICK Media Server up to 1.4 authorization *************** 📎Link: https://vuldb.com/?id.312396 *************** ⚙️Information: #Vendor: SICK #Product: Media Server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Upgrade *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:32:27 +0200 *************** ✏️Title: CVE-2025-49184 | SICK Field Analytics Setting information disclosure *************** 📎Link: https://vuldb.com/?id.312397 *************** ⚙️Information: #Vendor: SICK #Product: Field Analytics #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:33:26 +0200 *************** ✏️Title: CVE-2025-49186 | SICK Field Analytics/Media Server cross site scripting *************** 📎Link: https://vuldb.com/?id.312398 *************** ⚙️Information: #Vendor: SICK #Product: Field Analytics/Media Server #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:33:35 +0200 *************** ✏️Title: CVE-2025-49188 | SICK Field Analytics URL Parameter get request method with sensitive query strings *************** 📎Link: https://vuldb.com/?id.312399 *************** ⚙️Information: #Vendor: SICK #Product: Field Analytics #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:33:41 +0200 *************** ✏️Title: CVE-2025-49190 | SICK Field Analytics server-side request forgery *************** 📎Link: https://vuldb.com/?id.312400 *************** ⚙️Information: #Vendor: SICK #Product: Field Analytics #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Thu, 12 Jun 2025 16:50:14 +0200 *************** ✏️Title: CVE-2025-49196 | SICK Field Analytics TLS risky encryption *************** 📎Link: https://vuldb.com/?id.312401 *************** ⚙️Information: #Vendor: SICK #Product: Field Analytics #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security