CVE-2025-58434 on Arbaaz breaks stuff | Incident Response, Threat Modeling, offensive security, CTF writeups, Security Projects, Certifications, Log analysis, SIEM

CVE-2025-58434 on Arbaaz breaks stuff | Incident Response, Threat Modeling, offensive security, CTF writeups, Security Projects, Certifications, Log analysis, SIEM https://arbaazjamadar.com/tags/cve-2025-58434/Recent content in CVE-2025-58434 on Arbaaz breaks stuff | Incident Response, Threat Modeling, offensive security, CTF writeups, Security Projects, Certifications, Log analysis, SIEM Hugo -- gohugo.io enreachout@arbaazjamadar.com (Arbaaz Jamadar) reachout@arbaazjamadar.com (Arbaaz Jamadar)©2025 arbaazjamadar.comSat, 11 Apr 2026 00:00:00 +0000 HackTheBox: Silentium https://arbaazjamadar.com/htb/hackthebox-silentium/ Sat, 11 Apr 2026 00:00:00 +0000 reachout@arbaazjamadar.com (Arbaaz Jamadar) https://arbaazjamadar.com/htb/hackthebox-silentium/ Unauathorized account takeover, leading to RCE in FLOWISEAI, reused passwords, insecure password storage. Arbitrary write using symlinks and PUT operation.SecuritySecurity WriteupCloud SecurityHTB writeupHTB silentium writeupsilentium WriteupMisconfigurationssecurity writeupHTBsilentiumlinuxdockergitsymlinksservice abuseprivilege escalationgogsflowaipassword resetLateral PivotingHTBHackTheBoxHackTheBox: silentiumHTB: silentiumInformation GatheringInitial EnumerationsubdomainPrivilege EscalationnginxPrivilege AbuseCVE-2025-59528CVE-2025-58434CVE-2025-64111Box WriteupsCloud SecurityNetwork SecurityWeb SecurityBrowsed SecurityAPI Security