Sec WriteUp ~ CVE Alert

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 11:55:47 +0000 *************** ✏️Title: US to Offer $10 Million Reward for Details About RedLine Malware Developer *************** 📎Link: https://cybersecuritynews.com/?p=110114 *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 11:37:08 GMT *************** ✏️Title: CVE 2020–0787 Windows Privilege Escalation | CTF Write-ups *************** 📎Link: https://medium.com/p/89a42e554ff5 *************** ⚙️Tags: #privilege_escalation #ctf #cve_2020_0787 #writeup #metasploit *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 12:15:37 GMT *************** ✏️Title: MD2PDF -tryhackme ctf -2025 *************** 📎Link: https://medium.com/p/efc17335f97e *************** ⚙️Tags: #wkhtmltopdf #exitfil #ctf #md2pdf #cve *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-4123 exploit =============== 📎 https://sploitus.com/exploit?id=5F7ABF34-7B76-5A69-A088-6BB7A1308E7E&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-2539 exploit =============== 📎 https://sploitus.com/exploit?id=71CF9F0B-FC6C-5B26-BBF6-BDCA899E82FD&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ ABB Cylon Aspect 3.08.04 (DeploySource) Unauthenticated Remote Code Execution exploit =============== 📎 https://sploitus.com/exploit?id=ZSL-2025-5954&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2025-2945 exploit =============== 📎 https://sploitus.com/exploit?id=D7E91AE3-A2F3-5FB0-8BE6-3E77F866BFED&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Server-Side Request Forgery in Rbaskets Request Baskets exploit =============== 📎 https://sploitus.com/exploit?id=516FF58B-2BAE-596D-B1F1-7CE41A98E484&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for CVE-2024-53677 exploit =============== 📎 https://sploitus.com/exploit?id=D0613152-35C2-5717-B505-551F07B2B3DB&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Embedded Malicious Code in Tukaani Xz exploit =============== 📎 https://sploitus.com/exploit?id=B25FC383-2015-523B-A1F7-8F5D7DC56D44&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

👾New Exploit👾 =============== ✏️ Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Libbitcoin Libbitcoin Explorer exploit =============== 📎 https://sploitus.com/exploit?id=782F0276-8EEE-58C9-BAA3-A750E015EDA9&utmsource=rss&utmmedium=rss =============== ⚙️Tags: #Vulnerability #CVE #Exploit #POC =============== ♦️Join: @HackTheBoxAcademy ♦️Join: @HackTheBoxSecurity

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:26:18 +0200 *************** ✏️Title: CVE-2025-48781 | Soar Cloud System HRD Human Resource Management System up to 7.3.2025.0408 file inclusion *************** 📎Link: https://vuldb.com/?id.311356 *************** ⚙️Information: #Vendor: Soar Cloud System #Product: HRD Human Resource Management System #Type: Cloud Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:26:29 +0200 *************** ✏️Title: CVE-2025-48782 | Soar Cloud System HRD Human Resource Management System up to 7.3.2025.0408 unrestricted upload *************** 📎Link: https://vuldb.com/?id.311357 *************** ⚙️Information: #Vendor: Soar Cloud System #Product: HRD Human Resource Management System #Type: Cloud Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:26:41 +0200 *************** ✏️Title: CVE-2025-48783 | Soar Cloud System HRD Human Resource Management System up to 7.3.2025.0408 file inclusion *************** 📎Link: https://vuldb.com/?id.311358 *************** ⚙️Information: #Vendor: Soar Cloud System #Product: HRD Human Resource Management System #Type: Cloud Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:26:53 +0200 *************** ✏️Title: CVE-2025-48784 | Soar Cloud System HRD Human Resource Management System up to 7.3.2025.0408 Setting authorization *************** 📎Link: https://vuldb.com/?id.311359 *************** ⚙️Information: #Vendor: Soar Cloud System #Product: HRD Human Resource Management System #Type: Cloud Software #Risk: problematic #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:27:06 +0200 *************** ✏️Title: CVE-2025-48780 | Soar Cloud System HRD Human Resource Management System up to 7.3.2025.0408 deserialization *************** 📎Link: https://vuldb.com/?id.311360 *************** ⚙️Information: #Vendor: Soar Cloud System #Product: HRD Human Resource Management System #Type: Cloud Software #Risk: very critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Fri, 06 Jun 2025 13:27:15 +0200 *************** ✏️Title: CVE-2025-5192 | Soar Cloud System HRD Human Resource Management System up to 7.3.2025.0408 missing authentication *************** 📎Link: https://vuldb.com/?id.311361 *************** ⚙️Information: #Vendor: Soar Cloud System #Product: HRD Human Resource Management System #Type: Cloud Software #Risk: critical #Local: No #Remote: Yes #Exploit: No #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 16:00:00 +0530 *************** ✏️Title: Inside the Mind of the Adversary: Why More Security Leaders Are Selecting AEV *************** 📎Link: https://thehackernews.com/2025/06/inside-mind-of-adversary-why-more.html *************** ⚙️Tags: #NEWS #Cyber_Security #Hacker_News *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 10:30:17 GMT *************** ✏️Title: I Let ChatGPT Hack Me — Here’s What Happened *************** 📎Link: https://medium.com/p/b581ccb2782b *************** ⚙️Tags: #social_engineering #cybersecurity #ai_and_security #hacking #phishing *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

📌#WriteUp Community *************** 🗓Date: Fri, 06 Jun 2025 11:04:06 GMT *************** ✏️Title: Race Condition Rumble: How I Bought 100 Products for the Price of One ️️ *************** 📎Link: https://medium.com/p/fb73f8477249 *************** ⚙️Tags: #money #bug_bounty #cybersecurity #hacking #infosec *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security