Welcome to this new Medium post. In this one we will see Process Parameter Poisoning, a process injection technique published by SensePost…

TL;DR TP-Link disclosed five vulnerabilities across its ISP-managed networking gear. The flaws hit mesh systems, routers, PON devices, and xDSL modems. The worst allow authentication bypass and co…

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is a use-after-free in the Linux kernel RDMA/rxe driver. It started as a …

By Chris Meredith (@ChristopherMeredith) Tags: Technology, Artificial Intelligence, AI Safety, Machine Learning, OpenAI

TL;DR CISA disclosed eight vulnerabilities in the Mira Hormone Monitor and its Android app. The worst, CVE-2026-68067, scores a critical CVSS 9.8. It lets a remote attacker control user accounts b…

30-Second Version: One SSRF bypass technique — a single HTTP redirect — worked against Infogram (2017), Slack (2018), Bitwarden (2020), and…

Stop Memorizing HTTP Methods: A Deep Dive into Web Security Semantics 🔐 Let’s be real: you can’t truly master Web Application Security or Bug Bounty if you treat HTTP methods like an …

Hello my dear readers!

We live in 21st century, yet our password creativity is still stuck in the stone age.

Want to hear some lo-fi beats, to relax or study to? We’ve got you covered!

Situations are provisional. Convictions, on the other hand, dictate what we decide within each situation.

One of the most important responsibilities of a backend application is protecting user data.

Bonjour was a clean machine that used a subtle information leak via mDNS (Bonjour) to provide SSH credentials, and then relied on a single…

Enterprise applications now sit at the center of finance, operations, customer experience, workforce management, and digital commerce…

Originally published on the Innostax Engineering Blog

Recently on Medium, I came across an article by Mark Hertz titled “How to install CS2 cheats & hacks for free?”. In this publication, the…

Abusing VERA's Trust: From Prompt Injection to Manager Override

Learn how to create rules in Wazuh for your environment.

🎬 The Scene: A “Harmless” Name Field

Published by Verveox Technologies

By Muhsin Ali Shah — Cybersecurity Analyst & Ethical Hacker, Nowshera, Pakistan