A real finding from an authorized penetration test against my own production app — and what it taught me about the difference between a…

Log Forensics: Unmasking SQL Injections, Path Traversals, and RCE Artifacts in Web Infrastructure

Exploiting SSRF vulnerability, bypassing hostname filters, and leaking source code using PHP wrappers to capture the flag.

“Sometimes bug bounty isn’t about finding the biggest vulnerability. Sometimes it’s about finding the application everyone else missed.”

TL;DR SolarWinds fixed three critical SolarWinds Serv-U vulnerabilities on July 21, 2026. They allow privilege escalation and remote code execution on the file transfer server. SolarWinds rates ea…

TL;DR Qualys found a snap-confine privilege escalation flaw, tracked as CVE-2026-8933. It lets any local user reach full root on default Ubuntu Desktop systems. Ubuntu shipped fixes on the July 21…

TL;DR CISA added four flaws to its KEV catalog on July 21, 2026. The list covers critical WordPress and Langflow bugs plus an older DD-WRT router flaw. CISA lists only bugs with confirmed active e…

How wireless frames, monitor mode, handshakes, encryption, and password auditing fit together beneath the network name on your screen.

This list will cover all the picoCTF or Cylab Challenge ( Easy , Medium & Hard )

Welcome to this new Medium post, today we are looking at a process injection variant named Kernel Callback Table process injection.

Cybersecurity is constantly evolving, and continuous learning is essential to staying ahead of emerging threats. I’m starting my writing…

If you’re starting out in cybersecurity, this is the single most important concept to understand before anything else. Every certification…

This is not entirely an article to prepare you for OSCP, but i’ll add some informations that will save you from the exam, this is an direct…

The dust had barely settled on Microsoft’s massive July 2026 Patch Tuesday when a new nightmare emerged for system administrators. Amidst…

This guide provides an end-to-end overview of Network Pivoting, Lateral Movement, common technical troubleshooting scenarios, and defensive…

Giriş

Threat Intelligence plays a critical role in modern cybersecurity by helping organizations anticipate, detect, and respond to cyber…

Hi folks this blog tells how i learned to find a graphql vulnerability i didn’t find one but still i learned to hunt the graphql endpoint.

By Nikhil Mistry— Information Security Engineer