Overview
This report details the discovery and exploitation of a XSS vulnerability identified in the Vulnerability Disclosure Program (VDP) of a target website.
Reconnaissance
The reconnaissance phase began with the enumeration of subdomains to identify fresh…

1. A Brief Overview of Crawling and Its Role
Crawling refers to the automated process of navigating through web pages to extract targeted data. This data can include product details, prices, denoscriptions, images, user reviews, and even hidden API endpoints.…

‼️Note: This is a psychology essay, not a technical manual. It uses the language and metaphors of computing to explore the inner depths of human personality, making complex inner processes easier to grasp through familiar technical imagery.
We often describe…

زمان:‌
یکشنبه ۹ نوامبرحدود ۹:۳۰ شب بوقت تهران/ ۷ شب اروپا

موضوعات کلی:
* استفاده از AI/LLM در پروسته تولید و ارزیابی امنیتی کد
* (عدم) ثبت و گزارش رسمی آسیب پذیری ها در محصولات و نرم افزارها ایرانی

منابع:
گزارش و ثبت آسیب پذیری و ثبت شناسه CVE : آhtt…

The Open Web Application Security Project (OWASP) has unveiled the 2025 edition of its flagship OWASP Top 10 2025, marking the eighth installment and introducing significant updates to address evolving software security threats.

In the world of statistics and analysis, there’s a phenomenon that may not be widely known by name, but we deal with it almost every day in our lives: Survivorship Bias. It means we only see those who “survived”, succeeded, were visible—but those who failed…

In today’s Ai000 research presentation, we’re breaking down one of the wildest vulnerabilities discovered recently — a flaw related to WinRAR that can indirectly mess with Office 2024’s startup behavior.

This vulnerability shows how a simple file-handling…

CVE-2025-55182 is a critical vulnerability in React, Next.js, and other frameworks that requires immediate action