πNew WriteupβοΈ
βββββββββββββββ
πDate: Wed, 22 Mar 2023 13:10:35 GMT
βββββββββββββββ
βοΈTitle: Explaining Cross-Site Scripting (XSS) in Simple Terms
βββββββββββββββ
πLink: https://medium.com/p/9243329f7ed5
βββββββββββββββ
Tags: #xss_attack #xss_vulnerability #cross_site_scripting #php_security #php_xss_vulnerability
βββββββββββββββ
πDate: Wed, 22 Mar 2023 13:10:35 GMT
βββββββββββββββ
βοΈTitle: Explaining Cross-Site Scripting (XSS) in Simple Terms
βββββββββββββββ
πLink: https://medium.com/p/9243329f7ed5
βββββββββββββββ
Tags: #xss_attack #xss_vulnerability #cross_site_scripting #php_security #php_xss_vulnerability
Medium
Explaining Cross-Site Scripting (XSS) in Simple Terms
Cross-site scripting (XSS) is a type of security vulnerability that can allow attackers to inject malicious code into a web page viewed byβ¦
πNew WriteupβοΈ
βββββββββββββββ
πDate: Wed, 22 Mar 2023 13:08:08 GMT
βββββββββββββββ
βοΈTitle: Explaining SQL Injection in Simple Terms
βββββββββββββββ
πLink: https://medium.com/p/a0fec8fb1f52
βββββββββββββββ
Tags: #sql_injection #php_security #php_sql_injection #sql_injection_attack #sql_injection_examples
βββββββββββββββ
πDate: Wed, 22 Mar 2023 13:08:08 GMT
βββββββββββββββ
βοΈTitle: Explaining SQL Injection in Simple Terms
βββββββββββββββ
πLink: https://medium.com/p/a0fec8fb1f52
βββββββββββββββ
Tags: #sql_injection #php_security #php_sql_injection #sql_injection_attack #sql_injection_examples
Medium
Explaining SQL Injection in Simple Terms
SQL injection is a type of cyber attack that exploits vulnerabilities in software systems that use SQL databases. In simple terms, itβ¦
πNew WriteupβοΈ
βββββββββββββββ
πDate: Thu, 24 Aug 2023 14:12:00 GMT
βββββββββββββββ
βοΈTitle: Fortifying Your PHP Applications: Preventing SQL Injection
βββββββββββββββ
πLink: https://medium.com/p/7e857e4de741
βββββββββββββββ
Tags: #php #php_security #best_practices #cybersecurity #sql_injection
βββββββββββββββ
πDate: Thu, 24 Aug 2023 14:12:00 GMT
βββββββββββββββ
βοΈTitle: Fortifying Your PHP Applications: Preventing SQL Injection
βββββββββββββββ
πLink: https://medium.com/p/7e857e4de741
βββββββββββββββ
Tags: #php #php_security #best_practices #cybersecurity #sql_injection
Medium
Fortifying Your PHP Applications: Preventing SQL Injection
Safeguarding Your PHP Codebase from Malicious SQL Injection Attacks
β€· Title: PHP Security Tricks to Protect Your Applications
ββββββββββββββββββββββββ
πͺ Author: Shuaeb Mohammad
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 14 Feb 2025 07:51:02 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #security #application_security #php #php_security
ββββββββββββββββββββββββ
πͺ Author: Shuaeb Mohammad
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 14 Feb 2025 07:51:02 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #security #application_security #php #php_security
Medium
PHP Security Tricks to Protect Your Applications
In todayβs digital landscape, where cyber threats are evolving at an alarming rate, securing your PHP applications is no longer optional ββ¦
β€· Title: When PHPβs readfile() Goes Rogue: Exploiting LFI and SSRF in a SaaS Environment
ββββββββββββββββββββββββ
πͺ Author: Avihay Eldad
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 15 Jun 2025 14:00:09 GMT
ββββββββββββββββββββββββ
β Tags: #php_security #ssrf #cloud_security #penetration_testing #lfi
ββββββββββββββββββββββββ
πͺ Author: Avihay Eldad
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 15 Jun 2025 14:00:09 GMT
ββββββββββββββββββββββββ
β Tags: #php_security #ssrf #cloud_security #penetration_testing #lfi
Medium
When PHPβs readfile() Goes Rogue: Exploiting LFI and SSRF in a SaaS Environment
By Avihay Eldad & Sagi Dinar
β€· Title: PHP for PentestingβββDay 2
ββββββββββββββββββββββββ
πͺ Author: Bazil Brohi
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 12 Nov 2025 18:54:10 GMT
ββββββββββββββββββββββββ
β Tags: #php_security #web_app_pentesting #php #pentesting #cybersecurity
ββββββββββββββββββββββββ
πͺ Author: Bazil Brohi
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 12 Nov 2025 18:54:10 GMT
ββββββββββββββββββββββββ
β Tags: #php_security #web_app_pentesting #php #pentesting #cybersecurity
Medium
PHP for PentestingβββDay 2
In this Day 2 of PHP for Pentesters, we would learn how to create Polyglot Files and How to Defend against them, How to<html>
<head>β¦
<head>β¦
β€· Title: CVE Hunting via Github Dorking
ββββββββββββββββββββββββ
πͺ Author: Abhirup Konwar
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 13 Jan 2026 13:55:42 GMT
ββββββββββββββββββββββββ
β Tags: #cve #ethical_hacking #php_security #secure_code_review #programming
ββββββββββββββββββββββββ
πͺ Author: Abhirup Konwar
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 13 Jan 2026 13:55:42 GMT
ββββββββββββββββββββββββ
β Tags: #cve #ethical_hacking #php_security #secure_code_review #programming
Medium
CVE Hunting via Github Dorking
Finding 0 days in PHP Open Source Code
β€· Title: Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 19 Jan 2026 00:27:13 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2025_14894 #File Upload Vulnerability #Laravel #Livewire Filemanager #PHP Security #Remote Code Execution #Unpatched Vulnerability #Web Security
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 19 Jan 2026 00:27:13 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVE_2025_14894 #File Upload Vulnerability #Laravel #Livewire Filemanager #PHP Security #Remote Code Execution #Unpatched Vulnerability #Web Security
Daily CyberSecurity
Unpatched RCE: Livewire Filemanager Upload Flaw (CVE-2025-14894) Exposes Laravel Apps
A critical new security flaw has been unearthed in Livewire Filemanager, a popular tool used within the Laravel PHP framework, potentially leaving web applications wide open to unauthenticated remβ¦
β€· Title: CVE-2026-34838 (CVSS 10): Critical RCE Flaw Uncovered in GroupOffice CRM
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 06 Apr 2026 14:03:22 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CRM Security #CVE_2026_34838 #GroupOffice #Guzzle #infosec #Insecure Deserialization #PHP Security #POP Chain #rce #Vulnerability Research #Web Shell
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 06 Apr 2026 14:03:22 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CRM Security #CVE_2026_34838 #GroupOffice #Guzzle #infosec #Insecure Deserialization #PHP Security #POP Chain #rce #Vulnerability Research #Web Shell
Daily CyberSecurity
CVE-2026-34838 (CVSS 10): Critical RCE Flaw Uncovered in GroupOffice CRM
CVE-2026-34838: A critical 10.0 flaw in GroupOffice allows authenticated users to trigger RCE via insecure deserialization. Update to v26.0.12 immediately!
β€· Title: Laravel Passport Patches Machine-to-Human Authentication Bypass
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 13 Apr 2026 08:36:26 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #API security #Authentication Bypass #CVE_2026_39976 #infosec #Laravel #OAuth2 #passport #PHP Security #TokenGuard #web development
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 13 Apr 2026 08:36:26 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #API security #Authentication Bypass #CVE_2026_39976 #infosec #Laravel #OAuth2 #passport #PHP Security #TokenGuard #web development
Daily CyberSecurity
Laravel Passport Patches Machine-to-Human Authentication Bypass
Laravel Passport is widely recognized as an OAuth2 server and API authentication package that is both simple and enjoyable for developers to implement. However, a newly disclosed security flaw hasβ¦
β€· Title: Supply Chain Sabotage: The Critical RCE Flaws Lurking in PHP Composer
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 14 Apr 2026 10:39:23 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Composer #CVE_2026_40176 #CVE_2026_40261 #cybersecurity #patch management #Perforce #PHP Security #remote command injection #Supply Chain Security #Vulnerability
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 14 Apr 2026 10:39:23 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Composer #CVE_2026_40176 #CVE_2026_40261 #cybersecurity #patch management #Perforce #PHP Security #remote command injection #Supply Chain Security #Vulnerability
Daily CyberSecurity
Supply Chain Sabotage: The Critical RCE Flaws Lurking in PHP Composer
Critical Remote Command Injection flaws in PHP Composer's Perforce integration (CVE-2026-40176 & CVE-2026-40261) could lead to full system compromise. Patch now.
β€· Title: CVE-2026-38526: Critical CVSS 10 Vulnerability Discovered in Krayin CRM
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Apr 2026 12:35:02 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CRM Vulnerability #CVE_2026_38526 #CVSS 10 #infosec #Krayin CRM #Laravel Security #PHP Security #rce #Remote Code Execution #TinyMCE #Web Security
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 16 Apr 2026 12:35:02 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CRM Vulnerability #CVE_2026_38526 #CVSS 10 #infosec #Krayin CRM #Laravel Security #PHP Security #rce #Remote Code Execution #TinyMCE #Web Security
Daily CyberSecurity
CVE-2026-38526: Critical CVSS 10 Vulnerability Discovered in Krayin CRM
Krayin CRM faces a critical CVSS 10 RCE flaw in its TinyMCE upload endpoint. Authenticated users can seize server control. Patch version 2.2.x immediately!
β€· Title: Froxlorβs CVSS 10 Flaw Turns Config Files into Persistent Backdoors
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 17 Apr 2026 12:30:22 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVSS 10 #cybersecurity #Froxlor #infosec #Open Source Security #Path Traversal #PHP Security #rce #Server Management #vulnerability management #Web Shell
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 17 Apr 2026 12:30:22 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #CVSS 10 #cybersecurity #Froxlor #infosec #Open Source Security #Path Traversal #PHP Security #rce #Server Management #vulnerability management #Web Shell
Daily CyberSecurity
Froxlorβs CVSS 10 Flaw Turns Config Files into Persistent Backdoors
Froxlor faces two critical flaws, including a CVSS 10. Learn how path traversal and config injection allow persistent RCE. Patch your server management today!