Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 16:35:44 +0100 *************** ✏️Title: CVE-2024-13850 | ramon-fincken Simple Add Pages or Posts Plugin up to 2.0.0 on WordPress cross site scripting *************** 📎Link: https://vuldb.com/?id.295042 *************** ⚙️Information: #Vendor: ramon_fincken #Product: Simple Add Pages or Posts Plugin #Type: WordPress Plugin #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 15:51:51 GMT *************** ✏️Title: Evolusi hacking dari masa ke masa *************** 📎Link: https://medium.com/p/3514fe79093d *************** ⚙️Tags: #hacking *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 15:53:00 GMT *************** ✏️Title: Understanding DDoS Attacks: SYN Flood & DNS Reflection: *************** 📎Link: https://medium.com/p/638eeb6fb4c5 *************** ⚙️Tags: #ddos_attack #software_development #hacking #cybersecurity #security *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 15:55:32 GMT *************** ✏️Title: PGLab — Clipper Walktrought *************** 📎Link: https://medium.com/p/d39a30f0fe08 *************** ⚙️Tags: #oscp_preparation #cybersecurity #hacking #walkthrough #oscp *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 15:19:34 GMT *************** ✏️Title: TryHackMe | Linux Forensics | WriteUp *************** 📎Link: https://medium.com/p/2c44a42e96d2 *************** ⚙️Tags: #tryhackme #cybersecurity #tryhackme_walkthrough #tryhackme_writeup #linux *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 14:49:51 GMT *************** ✏️Title: Account Verification OTP Bypass in Microsoft Security Response Centre *************** 📎Link: https://medium.com/p/21855731a6f5 *************** ⚙️Tags: #bug_bounty_writeup #security #bug_bounty #microsoft #msrc *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 14:09:13 GMT *************** ✏️Title: Account Takeover via Email Change: Exploiting Weak Verification to Access Support Accounts *************** 📎Link: https://medium.com/p/a3bb8d59e753 *************** ⚙️Tags: #account_takeover #cybersecurity #bug_bounty #bug_bounty_tips #bug_bounty_writeup *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 14:31:10 GMT *************** ✏️Title: Trump will play tougher, yet Russia will grow stronger *************** 📎Link: https://medium.com/p/d8978a85200d *************** ⚙️Tags: #osint #politics #intelligence #science *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 14:30:27 GMT *************** ✏️Title: Finally, I Found the Best WAF for My Websites! *************** 📎Link: https://medium.com/p/f91829f7788e *************** ⚙️Tags: #web_app_development #infosec #open_source_software #cybersecurity *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 14:31:38 GMT *************** ✏️Title: Comprehensive Guide to Hacking and Accessing an Android Device Using Metasploit *************** 📎Link: https://medium.com/p/5b2d5df8ca5e *************** ⚙️Tags: #ethical_hacking #mobile_hacking #androidhacking #hacking #metasploit *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 12:15:39 +0000 *************** ✏️Title: CVE-2025-1116 - Dreamvention Live AJAX Search SQL Injection Vulnerability on OpenCart *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1116 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 13:15:06 +0000 *************** ✏️Title: CVE-2024-13850 - "WordPress Simple Add Pages/Posts Stored XSS Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2024-13850 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 13:15:07 +0000 *************** ✏️Title: CVE-2025-1117 - "CoinRemitter OpenCart SQL Injection Vulnerability" *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1117 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 13:09:51 GMT *************** ✏️Title: How I Found My First Bug $$$ *************** 📎Link: https://medium.com/p/c976920cbbe3 *************** ⚙️Tags: #xss_attack #penetration_testing #ethical_hacking #cybersecurity #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 13:24:46 GMT *************** ✏️Title: AI-Powered Malware Detection: How Gemini Is Changing the Game *************** 📎Link: https://medium.com/p/c73150778921 *************** ⚙️Tags: #gemini #cyber_security_courses #quantum_computing #malware #data_science *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Sat, 08 Feb 2025 10:15:20 +0000 *************** ✏️Title: CVE-2025-1115 - RT-Thread Local Information Disclosure Vulnerability *************** 📎Link: https://cvefeed.io/vuln/detail/CVE-2025-1115 *************** ⚙️Tags: #Vulnerability #CVE #Exploit #POC *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 12:33:36 GMT *************** ✏️Title: [Pentest Exercise] Recon Technique Pt.8 Extracting Hidden URLs & API Endpoints *************** 📎Link: https://medium.com/p/e6c552e4bfe9 *************** ⚙️Tags: #discovery #reconnaissance #attack_surface_management #pentesting #red_teaming *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 12:07:20 GMT *************** ✏️Title: $500 Bounty: Unlocking Premium Job Features with a Simple API Trick! *************** 📎Link: https://medium.com/p/1c59814ad8f4 *************** ⚙️Tags: #cybersecurity #penetration_testing #api #infosec #bug_bounty *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 11:55:11 GMT *************** ✏️Title: Mach-O file format for red team professionals *************** 📎Link: https://medium.com/p/fb89ea6c311e *************** ⚙️Tags: #cybersecurity #file_format #offensive_security #macos #red_team *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Sat, 08 Feb 2025 11:51:21 GMT *************** ✏️Title: WannaCry Analysis Report: A Comprehensive Study *************** 📎Link: https://medium.com/p/bab63f01096c *************** ⚙️Tags: #wannacry #malware #malware_analysis *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security