Flare unmasks PamDOORa: a $1,600 Linux backdoor that hijacks the PAM stack to harvest credentials and manipulate authentication logs to evade detection.

Most intrusion alerts start with failures.

Exploring vulnerable SSH configurations safely inside a local pentest environment

In the last article, we examined how nginx modules, a tool designed to serve web traffic, can be exploited by an attacker who has gained a…

Introduction

Difficulty: Easy

How to Navigate Home Directories, Read Hidden Files, and Manage Credentials Like a Linux Pro.

  TL;DR A serious libssh2 vulnerability now puts SSH clients at risk. Researchers track it as CVE-2026-55200, with a CVSS 4.0 score of 9.2. A remote attacker can corrupt memory and run code o…

TL;DR Researchers publicly disclosed a libssh2 vulnerability tracked as CVE-2026-58050. The flaw lets a malicious SSH server corrupt the heap of a connecting client. Proof-of-concept exploit code …

A public proof-of-concept (PoC) exploit has been released for CVE-2026–55200, a critical vulnerability in the widely used libssh2 library…