Most people enter bug bounty hunting believing in accidents.

How a Simple GraphQL ID Change Allowed Deletion of Other Users’ Data on HackerOne

Here’s Exactly How

Bypassing server side filtration to get a reflected XSS

Entity authentication, often simply referred to as authentication, is the process of verifying the identity of a user, system, or device…

10 + crucial tools for post-exploitation

A simple case of WebSocket message manipulation

Learn how YARA rules can be used to detect anomalies.

Continue your Advent of Cyber journey and learn about container security.

Lab Overview

19 malicious VS Code extensions bypassed detection by hiding a Rust trojan in tampered node_modules and a fake banner.png using steganography. The attack uses cmstp.exe (LOLBIN) for execution.

In late 2025, I used GitHound to uncover a high severity security issue involving leaked Snowflake tokens and sensitive information on a…

In my OSCP learning journey, I got hands-on experience with the most common misconfiguration that happens amongst developers related to…

ECB mode is simple but dangerously predictable: identical plaintext blocks always yield identical ciphertext. When exposed through an…

Hello, fellow nerds!

Summary

NVIDIA patched High-severity (CVSS 8.8) deserialization flaws in Merlin's NVTabular and Transformers4Rec on Linux. Exploitation risks RCE, DoS, and data tampering in AI recommendation pipelines.

0patch found an unpatched flaw in Windows RasMan that allows any user to crash the service on demand. This unprivileged crash is the necessary step to exploit the CVE-2025-59230 LPE flaw. Micropatch is available.

A critical RCE flaw (CVSS 9.1) in pgAdmin bypasses security via a UTF-8 BOM parsing mismatch. It allows attackers to execute root commands during a database restore operation. Update immediately.

NANOREMOTE, a new Windows backdoor, leverages the Google Drive API for covert C2 and data exfiltration using OAuth 2.0 tokens. The malware shares a hard-coded AES key with the FINALDRAFT family, linking it to seasoned espionage actors.

SHADOW-VOID-042 impersonated Trend Micro via fake security advisories to breach defense, energy, and chemical firms. Tactics align with Void Rabisu (ROMCOM), using HR lures and targeted exploits.