Your web application passed code reviews, sailed through QA, and looked clean in staging. Then someone found a SQL injection in your login…

Disclaimer: This walkthrough was performed in a controlled lab environment for educational and authorized security testing purposes only.

Introduction

Vulnerability Name/Title

If you are new to cyber security, it is important to learn about Kali Linux and how to install it on VMware. First, let’s understand what…

Author : Nilanjan Chowdhury

In May 2026, Google disclosed CVE‑2026‑0073 as a Critical vulnerability in the Android System component, specifically the adbd subcomponent (part of the ADB stack). The bulletin states it could lead to remote (proximal) code execution as the shell user with…

Modern software development runs on trust.

1. Nmap Scan

TLP: CLEAR | Classification: Homelab | Date: 2026–04–01

This report details the findings from the penetration testing engagement against the VulnBank application. The assessment identified…

The Silent Hijack: Unmasking the Top LLM Vulnerabilities of 2026 and the Escalating Threat to Enterprise Security

This is a walkthrough for the Hunt Me I: Payment Collectors room, part of the Threat Hunting module and SOC Level 2 learning path. It’s…

ShinyHunters says its shinyhunte.rs domain was suspended after the Canvas LMS attacks, forcing the group to move fully to its dark web (.onion) site.

Target IP: 10.129.231.23

Welcome to this new Medium post. Today, I’ll show you an interesting approach to resolving kernel offsets dynamically. In previous BYOVD…

The CVE Program’s quarterly summary of program milestones and metrics for Q1 CY 2026.

Introduction:

Explore AWS authentication, common IAM threats, and SIEM detection options.

Enumerate and identify misconfigurations across Apache, Nginx, Node.js, and Python HTTP Server.

XSS zafiyeti nedir?