CVE-2023-39810 is a directory traversal vulnerability in Busybox cpio discovered by Pentagrid during a penetration test.

We’ve previously reported on a Nokoyawa ransomware case in which the initial access was via an Excel macro and IcedID malware. This case, which also ended in Nokoyawa Ransomware, involved the…

Here is a detailed analysis of the PyCript Burp extension. This extension for Burp Suite is particularly helpful for bug bounty hunters and pentesters who need to bypass client-side encryption and run automated scanners or tools on encrypted requests. I have…

“Presenting arguments that security can be seamlessly integrated into the SDLC process, along with examples of configured SAST tools.”

Multiple Vulnerabilities found in Techview LA-5570 Wireless Gateway Home Automation ControllerIntroductionThe Security Team at [exploitsecurity.io] uncovered multiple vulnerabilities in the Techview LA-5570 Wireless Home Automation Controller [Firmware Version…

Application security issues found by Assetnote

A new attack exploits the novel Openfire vulnerability (CVE-2023-32315) to deploy Kinsing malware and crypto miners to gain full control over the server.

Generic DTLS wrapper for UDP sessions. Contribute to SenseUnit/dtlspipe development by creating an account on GitHub.

Google Cloud Functions are improperly configured, leading to access control vulnerabilities

FairPlay comprises a set of algorithms created by Apple for digital rights management (also called DRM, digital rights management). FairPlay is currently used to manage the decryption of iOS applications during their installation on Apple devices. In fact…

Setting up the environment + Hello […]

Flash (almost) any vBIOS to (almost) any nVIDIA GPU - notfromstatefarm/nvflashk

This blog will provide you with information on the several techniques and tools used to attack Wi-Fi networks using NetHunter app. We'll talk about the various tools such as the wifite, shed light on the deauthentication attack technique, and explore the…

A conversational AI system that listens, learns, and challenges

Protected Process Dumper Tool. Contribute to tastypepperoni/PPLBlade development by creating an account on GitHub.

As a researcher I often run into situations in which I need to make a compiled binary do things that it wouldn’t normally do or change the way it works in some way. Of course, if one…