🚨August 9, 2023 Update: This appears to be a slow, on-going attack. Since our initial report, two more packages have been identified as part of this campaign: ng-zulutrade-ssr and binarium-crm. We will provide periodic updates as we identify further publications…

Ripio unveils UXD on LaChain for Latin America. With LaCoin (LAC) as native, we're diving deep into security audits of the stable coin!

details about directory traversal on Xbox One. Contribute to yunuscadirci/XboxOneDirectoryTraversal development by creating an account on GitHub.

Password Managers as Ethical Hacking Tools

Between March, 2023 and May, 2023 we reported multiple security vulnerabilities to points.com, the backend provider for a large portion of airline and hotel rewards programs...

Posted by emizzle6250 - 1 vote and 2 comments

Build decentralized private communication/payment systems in Kotlin. - kryptokrona/kryptokrona-kotlin-sdk

It will be possible to better understand the Javanoscript structures in memory while executing code in browsers or in any other program that makes use of the most famous JS interpreters, such as Firefox, Google Chrome, Internet Explorer and Safari

Burp HTTP history browser (BHHB) - A tool to view HTTP history exported from Burp Suite Community Edition - adityatelange/bhhb

Gain the reverse engineering proficiency needed to find new (undiscovered) 'living off the land' programs in Windows as they exist right now. Plus, how this one went under the radar for over a decade!

Information about this release:


Worpress version: 6.2.2
Number of installed plugins (Clean and Vulnerable) : 142
Number of vulnerabilities: 179
adminuser: onhexgroup
adminpass: jidCy(SbEz!25qyjT...

We were successfully able to initiate a BusKill lockscreen trigger using a 3D-printed BusKill (DIY USB kill cord) prototype

Discover how a vulnerability in VS Code’s secure token storage enables high-risk ‘Token Stealing’ attacks, exposing third-party application tokens and organizational security.

We found two main misconfigurations in Kubernetes clusters belonging to more than 350 organizations openly accessible and largely unprotected.

Phishing attacks: Examples of unsafe web resources are social engineering sites and sites that host malware or unwanted software. Come see what's possible.