Author : Nilanjan Chowdhury

In May 2026, Google disclosed CVE‑2026‑0073 as a Critical vulnerability in the Android System component, specifically the adbd subcomponent (part of the ADB stack). The bulletin states it could lead to remote (proximal) code execution as the shell user with…

Modern software development runs on trust.

1. Nmap Scan

TLP: CLEAR | Classification: Homelab | Date: 2026–04–01

This report details the findings from the penetration testing engagement against the VulnBank application. The assessment identified…

The Silent Hijack: Unmasking the Top LLM Vulnerabilities of 2026 and the Escalating Threat to Enterprise Security

This is a walkthrough for the Hunt Me I: Payment Collectors room, part of the Threat Hunting module and SOC Level 2 learning path. It’s…

ShinyHunters says its shinyhunte.rs domain was suspended after the Canvas LMS attacks, forcing the group to move fully to its dark web (.onion) site.

Target IP: 10.129.231.23

Welcome to this new Medium post. Today, I’ll show you an interesting approach to resolving kernel offsets dynamically. In previous BYOVD…

The CVE Program’s quarterly summary of program milestones and metrics for Q1 CY 2026.

Introduction:

Explore AWS authentication, common IAM threats, and SIEM detection options.

Enumerate and identify misconfigurations across Apache, Nginx, Node.js, and Python HTTP Server.

XSS zafiyeti nedir?

Learn the basics of NoSQL injection, attack vectors in MongoDB, and advanced exploitation and defense strategies.

This is part of my daily labs in preparation for OSCP. I am documenting everything I am learning, tools that I am using and reflections as…

As a financial services company, we were required by our regulator to conduct penetration testing. It wasn’t a nice-to-have or a proactive…

Urgent: Public PoC exploit code released for YellowKey (BitLocker bypass) and GreenPlasma (SYSTEM elevation). Windows 11 and Server 2025 are at high risk.

Critical Siemens Alert: 9.3 severity XSS flaws hit SIMATIC S7 PLCs. Attackers can hijack sessions via web interfaces. Update to V3.1.6 or follow mitigations.