Learn about CVE-2024-36465, a critical SQL injection vulnerability in Zabbix API that can be exploited by low-privilege users.

Explore the dangers of Outlaw Linux malware, a persistent coinminer that combines automated execution with manual oversight.

Uncover the threat posed by the TookPS downloader, a malware strain exploiting popular software and fraudulent websites.

Learn about CVE-2025-23391, a critical vulnerability in Rancher that allows Restricted Administrators to compromise accounts.

Learn how DPRK IT workers are expanding their reach beyond the United States, posing serious cybersecurity threats worldwide.

Explore CVE-2025-30354 & CVE-2025-30210 and their implications for the Bruno API client. Discover the risks of Safe-Mode bypass vulnerabilities

Learn about QR code phishing and how attackers are using QR codes to steal credentials through sophisticated scams.

Learn about the Qilin ransomware attack that compromised an MSP and affected numerous customers through a phishing campaign.

1. Preface

Hi dear learner, welcome to Reversing ELF! This room is for beginner Reverse Engineering CTF players.

Introduction:

It was in early 2025 that I initiated my own blog, OpenExploit.in, with one simple aim: to make cybersecurity easy to learn and available…

QR codes are everywhere — from menus to logins. But behind that quick scan? A hacker’s playground

YARA is a powerful tool used by cybersecurity professionals to detect and classify malware. It helps in identifying malicious files…

Imagine waking up to find out that someone had silently sneaked into your cloud environment, accessed your private container images, and…

Rakan Adnan (kimmy) | 3 April 2025

Hey, tech enthusiasts! Today, we’re tackling a critical and often overlooked aspect of AI security: Supply Chain Vulnerabilities in Large Language Models (LLMs). While we’ve all heard about supply…

Hey there, Today, we’re diving into an important and often overlooked aspect of AI and Large Language Models (LLMs) security — Model Denial of Service (DoS). While most people associate DoS attacks…

Learn the basics to prepare for performing forensics on macOS.

Learn about the Verizon Call Filter app vulnerability that exposed call history logs of customers and raised privacy concerns.

Learn about CVE-2025-31720, a security vulnerability in Jenkins that allows unauthorized access to agent configurations.