Introduction

The Lantronix EDS-MS is an "IoT gateway for mission critical medical devices and equipment connectivity". It is affected by multiple vulnerabilities.

Leverage a flaw in Cognito's API to enumerate accounts in User Pools.

cve-2023-49070/51467 disclose authentication flaws leading to remote code execution (RCE) within Apache OFBiz. Learn how to attack and defend Apache OFBiz

MobSF Remote code execution (via CVE-2024-21633). Contribute to 0x33c0unt/CVE-2024-21633 development by creating an account on GitHub.

Phishing attacks are rapidly increasing against Microsoft 365 tenants. Why? Microsoft is used by many company’s and users, so targetting...

Update: The results are in! Check out the final top ten here or scroll down to view all nominations Over the last year, numerous security researchers have shared their discoveries with the community t

Presentation front page

How I pwned half of America’s fast food chains, simultaneously. Also checkout Eva’s blogpost of this event.
With an upbeat pling my console alerted me that my noscript had finished running, to be precise it was searching for exposed Firebase credentials on…

Explore how to detect and prevent log leaks in open-source projects such as Shopizer, Killbill, and Teammates, using a Piiano Flows scanner.

Overview CVE-2023-263060 was exploited in the wild in Adobe ColdFusion product, a commercial application server for rapid web application development. The vulnerability affects both the 2018 and...

How to detect Adversary-in-the-Middle attacks in Office365 logon pages using hidden canaries.

secator - the pentester's swiss knife. Contribute to freelabz/secator development by creating an account on GitHub.

Introduction

A conversational AI system that listens, learns, and challenges

I recently read the Unlimited Results: Breaking Firmware Encryption of ESP32-V3 paper. This paper is about breaking the firmware encryption feature of the ESP32 SoC using a Side-Channel attack. This was an interesting read, and soon, I wanted to try to reproduce…