Introduction I’ve been doing some Linux kernel exploit development/study and vulnerability research off and on since last Fall and a few months ago I had some downtime on vacation to sit and challenge myself to write my first data-only exploit for a real…

Manager of third-party sources of Semgrep rules 🗂 - GitHub - iosifache/semgrep-rules-manager: Manager of third-party sources of Semgrep rules 🗂

TL;DR Recommendations

Citrix has published a security bulletin warning users of three new vulnerabilities affecting NetScaler ADC and NetScaler Gateway.

By the end , you’ll have a solid understanding of what ports and protocols are, how they work, and why they’re so vital in the field hacking.

By Oleg Zaytsev, Nati Tal (Guardio Labs)

The second Sysdig Threat Report is packed with findings and analysis of some of the hottest cybersecurity topics this year.

Pentests.nl has discovered a vulnerability in Check Point Gaia Portal which could be exploited to execute code on the underlying system.

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets - Legit-Labs/legitify

A detailed walkthrough of the process and hurdles faced in leveraging Evilginx3 to conduct a successful phishing campaign on a AD FS protected domain.

By Mark Brand, Project Zero In mid-2022, Project Zero was provided with access to pre-production hardware implementing the ARM MTE specifi...

Unpack the remote code execution vulnerability impacting the Microsoft Message Queueing service — CVE-2023-21554, a.k.a. QueueJumper.

🚨August 9, 2023 Update: This appears to be a slow, on-going attack. Since our initial report, two more packages have been identified as part of this campaign: ng-zulutrade-ssr and binarium-crm. We will provide periodic updates as we identify further publications…

Ripio unveils UXD on LaChain for Latin America. With LaCoin (LAC) as native, we're diving deep into security audits of the stable coin!

details about directory traversal on Xbox One. Contribute to yunuscadirci/XboxOneDirectoryTraversal development by creating an account on GitHub.

Password Managers as Ethical Hacking Tools

Between March, 2023 and May, 2023 we reported multiple security vulnerabilities to points.com, the backend provider for a large portion of airline and hotel rewards programs...