⤷ Title: Web Cache Deception: Exploiting Path Delimiters for Walkthrough (Practitioner)
════════════════════════
𐀪 Author: Rahul M S
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:10:38 GMT
════════════════════════
⌗ Tags: #portswigger #hacking #cybersecurity #bug_bounty #vapt
════════════════════════
𐀪 Author: Rahul M S
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:10:38 GMT
════════════════════════
⌗ Tags: #portswigger #hacking #cybersecurity #bug_bounty #vapt
Medium
Web Cache Deception: Exploiting Path Delimiters for Walkthrough (Practitioner)
Learn how attackers exploit discrepancies in URL path delimiter handling between origin servers and cache servers to steal sensitive user…
⤷ Title: Unauthenticated Upload, Unauthenticated Read: How I Wrote Prescriptions Into Any Patient’s Account
════════════════════════
𐀪 Author: Sarthak Chauhan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:27:56 GMT
════════════════════════
⌗ Tags: #healthcare #cybersecurity #api_security #bug_bounty #application_security
════════════════════════
𐀪 Author: Sarthak Chauhan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:27:56 GMT
════════════════════════
⌗ Tags: #healthcare #cybersecurity #api_security #bug_bounty #application_security
Medium
Unauthenticated Upload, Unauthenticated Read: How I Wrote Prescriptions Into Any Patient’s Account
A bug bounty writeup on a broken authorization flow in a healthcare mobile API - reported, fixed, and closed through a responsible…
⤷ Title: Python Web Penetration Testing — Day 3
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:20:47 GMT
════════════════════════
⌗ Tags: #bug_bounty #programming #technology #hacking #cybersecurity
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:20:47 GMT
════════════════════════
⌗ Tags: #bug_bounty #programming #technology #hacking #cybersecurity
Medium
Python Web Penetration Testing — Day 3
Web Crawling with Scrapy — Mapping the Application Like a Digital Cartographer
⤷ Title: Web Cache Deception: Exploiting Path Mapping for Walkthrough (Apprentice)
════════════════════════
𐀪 Author: Rahul M S
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:10:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #vapt #bug_bounty_writeup #portswigger #hacking
════════════════════════
𐀪 Author: Rahul M S
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:10:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #vapt #bug_bounty_writeup #portswigger #hacking
Medium
Web Cache Deception: Exploiting Path Mapping for Walkthrough (Apprentice)
Learn how attackers exploit discrepancies between origin servers and cache servers to steal sensitive user data like API keys using Web…
⤷ Title: The 8 Beginner Guide(s) for New Hackers
════════════════════════
𐀪 Author: Antonius W1sdom
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:07:17 GMT
════════════════════════
⌗ Tags: #life_hacking #hacking #hacker
════════════════════════
𐀪 Author: Antonius W1sdom
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:07:17 GMT
════════════════════════
⌗ Tags: #life_hacking #hacking #hacker
Medium
The 8 Beginner Guide(s) for New Hackers
written by : w1sdom (Antonius)
⤷ Title: Looking Glass — TryHackMe WriteUp with Flags
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:37:02 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #ctf_writeup #ctf #tryhackme
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:37:02 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #ctf_writeup #ctf #tryhackme
Medium
Looking Glass — TryHackMe WriteUp with Flags
Looking Glass — TryHackMe WriteUp with Flags Date: 17/07/2026 Room Link: https://tryhackme.com/room/lookingglass My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This lab chains a …
⤷ Title: CVE-2026-10123: Fourth Stack Overflow in a Week Confirms Widespread Firmware Failure in TRENDnet…
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:01:04 GMT
════════════════════════
⌗ Tags: #stackoverflow #cwe_119 #ethical_hacking #cwe_121 #cve_2026_10123
════════════════════════
𐀪 Author: CyberPodcast
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:01:04 GMT
════════════════════════
⌗ Tags: #stackoverflow #cwe_119 #ethical_hacking #cwe_121 #cve_2026_10123
Medium
CVE-2026-10123: Fourth Stack Overflow in a Week Confirms Widespread Firmware Failure in TRENDnet Router
A fourth stack-based buffer overflow disclosed in this same week-long wave targets the domain filtering feature of the TRENDnet TEW-432BRP…
⤷ Title: Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 20:27:51 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 20:27:51 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 19:34:57 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 19:34:57 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 18:48:31 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 18:48:31 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:59:43 +0000
════════════════════════
⌗ Tags: #Security #CI/CD #Cybersecurity #Fig #Fig Security #SecOps
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:59:43 +0000
════════════════════════
⌗ Tags: #Security #CI/CD #Cybersecurity #Fig #Fig Security #SecOps
Hackread
Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as infrastructure evolves. daily.
⤷ Title: Magnet Forensics Sues Over Stolen iPhone Zero-Day
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:15:30 +0000
════════════════════════
⌗ Tags: #Apple #Information Security #cybersecurity #iOS Exploits #iPhone Zero_Day #Magnet Forensics
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:15:30 +0000
════════════════════════
⌗ Tags: #Apple #Information Security #cybersecurity #iOS Exploits #iPhone Zero_Day #Magnet Forensics
Information Security News
Magnet Forensics Sues Over Stolen iPhone Zero-Day
The smartphone hacking market typically operates in absolute secrecy. However, a recent lawsuit has exposed the inner workings of a major firm. The Canadian firm Magnet Forensics recently sued a f…
⤷ Title: TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:57:42 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Elastic Security Labs #Infostealer #MaaS #TELEPUZ #Vidar #WebInject
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:57:42 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Elastic Security Labs #Infostealer #MaaS #TELEPUZ #Vidar #WebInject
Daily CyberSecurity
TELEPUZ Malware Spreads Through ClickFix and VIDAR Attacks
At a glance Malware family TELEPUZ Threat actor Unnamed; suspected solo developer or small team running a MaaS Target / victims Windows users reached through compromised web pages Delivery vector …
⤷ Title: ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:16:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASUS #ASUSWRT #Driver Vulnerability #router security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:16:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASUS #ASUSWRT #Driver Vulnerability #router security
Daily CyberSecurity
ASUS Patches Router and PC Software Flaws, Including a CVSS 9.5 Command Execution Bug
TL;DR ASUS has published five security advisories covering seven vulnerabilities. They span router firmware, MyASUS driver components, Aura Wallpaper, and GameSDK. The most severe, CVE-2026-13385 …
⤷ Title: Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:20:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42980 #LPE #Microsoft #Patch Tuesday #proof_of_concept #Windows Kernel #Windows Privilege Escalation #WMI vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:20:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42980 #LPE #Microsoft #Patch Tuesday #proof_of_concept #Windows Kernel #Windows Privilege Escalation #WMI vulnerability
Daily CyberSecurity
Public PoC Released for CVE-2026-42980 Windows Privilege Escalation Flaw
TL;DR A public proof-of-concept now targets CVE-2026-42980, a Windows privilege escalation flaw in the NT kernel. The bug lets a local, low-privileged user reach SYSTEM. Microsoft patched it in th…
⤷ Title: Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:15:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Fineract #Core Banking #sql injection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:15:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Fineract #Core Banking #sql injection
Daily CyberSecurity
Three SQL Injection Flaws Patched in Apache Fineract Core Banking Platform
TL;DR Apache has patched three SQL injection flaws in Fineract, the open-source core banking platform. The Apache Fineract SQL injection bugs, CVE-2026-57821, CVE-2026-56287, and CVE-2026-35152, a…
⤷ Title: Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic Web Client #mail forwarding bypass #SNMP command injection #ssrf #XSS #ZCS #Zimbra #Zimbra 10.1.20 #Zimbra vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 13:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Classic Web Client #mail forwarding bypass #SNMP command injection #ssrf #XSS #ZCS #Zimbra #Zimbra 10.1.20 #Zimbra vulnerabilities
Daily CyberSecurity
Zimbra 10.1.20 Patches an SNMP Command Injection Flaw and Multiple XSS Bugs
TL;DR Zimbra released Collaboration Suite 10.1.20 on July 20, 2026. The update fixes several Zimbra vulnerabilities, including a critical SNMP command injection flaw and multiple XSS bugs. Zimbra …
⤷ Title: CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:45:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_50522 #CVE_2026_58644 #Deserialization #DEVCORE #exploited in the wild #Microsoft #proof_of_concept #Remote Code Execution #Sharepoint #SharePoint RCE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:45:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_50522 #CVE_2026_58644 #Deserialization #DEVCORE #exploited in the wild #Microsoft #proof_of_concept #Remote Code Execution #Sharepoint #SharePoint RCE
Daily CyberSecurity
CVE-2026-50522 SharePoint RCE Flaw Exploited in the Wild With Public PoC Exploit
TL;DR CVE-2026-50522 is a critical SharePoint RCE flaw rated CVSS 9.8. Researchers report active exploitation attempts, and a public proof-of-concept exploit is now available. Microsoft patched th…
⤷ Title: CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:25:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache OpenMeetings #Arbitrary File Read #Path Traversal
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 12:25:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache OpenMeetings #Arbitrary File Read #Path Traversal
Daily CyberSecurity
CVE-2026-49488: Arbitrary File Read Flaw in Apache OpenMeetings Exposes Server Credentials
TL;DR Apache has patched a critical OpenMeetings vulnerability tracked as CVE-2026-49488. The path traversal flaw grants arbitrary file read to any user with moderator rights in a room. Version 9.…
⤷ Title: The File Is Lying to You: 10 Steganography Methods That Hide Secrets in Plain Sight
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:31:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #ethical_hacking #blog #cybersecurity
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 14:31:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #ethical_hacking #blog #cybersecurity
Medium
The File Is Lying to You: 10 Steganography Methods That Hide Secrets in Plain Sight
A normal photograph can contain a confidential document.
⤷ Title: How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #java #spring_boot
════════════════════════
𐀪 Author: Najee Shaheen
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 15:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #java #spring_boot
Medium
How Your Spring Boot API Leaks Data (And Why Adding an Auth Check Isn’t the Fix)
BOLA/IDOR is the #1 API vulnerability on OWASP’s list. Most backend developers ship it constantly without knowing its name.