⤷ Title: Critical UAF Vulnerability Discovered in Ladybird Browser Engine (CVE-2025-47154)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:43:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #browser engine #CVE_2025_47154 #cybersecurity #Exploit #javascript #Ladybird #LibJS #use after free
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:43:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #browser engine #CVE_2025_47154 #cybersecurity #Exploit #javascript #Ladybird #LibJS #use after free
Daily CyberSecurity
Critical UAF Vulnerability Discovered in Ladybird Browser Engine (CVE-2025-47154)
A critical use-after-free (UAF) vulnerability (CVE-2025-47154) in the Ladybird browser engine's LibJS component allows for potential code execution.
⤷ Title: CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:33:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #Couchbase #CVE_2025_46619 #Cybersecurity Advisory #database security #lfi #local file inclusion #nosql #windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:33:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #Couchbase #CVE_2025_46619 #Cybersecurity Advisory #database security #lfi #local file inclusion #nosql #windows
Daily CyberSecurity
CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows
Couchbase Server for Windows hit by LFI flaw CVE-2025-46619 (CVSS 8.7). Upgrade to 7.6.4 or 7.2.7 to prevent unauthorized file access.
⤷ Title: SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:25:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_2170 #Cybersecurity Advisory #network_security #SMA1000 #SonicWall #ssrf #vulnerability patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:25:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_2170 #Cybersecurity Advisory #network_security #SMA1000 #SonicWall #ssrf #vulnerability patch
Daily CyberSecurity
SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances
SonicWall fixes CVE-2025-2170, an SSRF flaw in SMA1000 appliances. Users urged to update to platform-hotfix 12.4.3-02925 or later to stay secure.
⤷ Title: Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:20:40 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #gmail #malware #PyPI #Python #SMTP tunneling #Socket #supply chain attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:20:40 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #gmail #malware #PyPI #Python #SMTP tunneling #Socket #supply chain attack
Daily CyberSecurity
Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels
Socket discovers Python packages abusing Gmail SMTP for covert C2 tunnels, evading firewalls and exfiltrating data through trusted email infrastructure.
⤷ Title: Intrinsec Links Eye Pyramid C2 to Ransomware Networks in New Infrastructure Mapping Report
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:14:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #bulletproof hosting #Cobalt Strike #Eye Pyramid #Intrinsec #RansomHub #Ransomware C2 #Rhysida #Vice Society
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:14:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #bulletproof hosting #Cobalt Strike #Eye Pyramid #Intrinsec #RansomHub #Ransomware C2 #Rhysida #Vice Society
Daily CyberSecurity
Intrinsec Links Eye Pyramid C2 to Ransomware Networks in New Infrastructure Mapping Report
Intrinsec reveals shared infrastructure between Eye Pyramid C2 and ransomware groups like Rhysida and Vice Society in new threat intelligence report.
⤷ Title: Bitdefender Exposes Sophisticated Subscription-Based Mystery Box Scams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:10:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #credit card theft #financial fraud #mystery box scam #Online scams #social media scams #subscription fraud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:10:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #credit card theft #financial fraud #mystery box scam #Online scams #social media scams #subscription fraud
Daily CyberSecurity
Bitdefender Exposes Sophisticated Subscription-Based Mystery Box Scams
Bitdefender uncovers a large network of convincing mystery box scams on social media stealing credit card data via hidden subscriptions. Watch out!
⤷ Title: NVIDIA Fixes High-Severity Vulnerability in TensorRT-LLM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:05:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_23245 #Framework Vulnerability #HMAC Encryption #nvidia #Python Executor #TensorRT_LLM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:05:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_23245 #Framework Vulnerability #HMAC Encryption #nvidia #Python Executor #TensorRT_LLM
Daily CyberSecurity
NVIDIA Fixes High-Severity Vulnerability in TensorRT-LLM
NVIDIA patches CVE-2025-23245 in TensorRT-LLM, fixing a high-risk flaw that could allow code execution. Users urged to update to v0.18.2 immediately.
⤷ Title: SonicBoom, From Stolen Tokens to Remote Shells - SonicWall SMA (CVE-2023-44221, CVE-2024-38475)
════════════════════════
𐀪 Author: Sina Kheirkhah (@SinSinology)
════════════════════════
ⴵ Time: Thu, 01 May 2025 22:31:04 GMT
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Sina Kheirkhah (@SinSinology)
════════════════════════
ⴵ Time: Thu, 01 May 2025 22:31:04 GMT
════════════════════════
⌗ Tags: No_Tags
watchTowr Labs
SonicBoom, From Stolen Tokens to Remote Shells - SonicWall SMA (CVE-2023-44221, CVE-2024-38475)
Another day, another edge device being targeted - it’s a typical Thursday!
In today’s blog post, we’re excited to share our previously private analysis of the now exploited in-the-wild N-day vulnerabilities affecting SonicWall’s SMA100 appliance. Over the…
In today’s blog post, we’re excited to share our previously private analysis of the now exploited in-the-wild N-day vulnerabilities affecting SonicWall’s SMA100 appliance. Over the…
⤷ Title: The $2500 bug: Remote Code Execution via Supply Chain Attack
════════════════════════
𐀪 Author: Naveen kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:16:16 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hackerone #bug_bounty #bug_bounty_tips #hacking
════════════════════════
𐀪 Author: Naveen kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:16:16 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #hackerone #bug_bounty #bug_bounty_tips #hacking
Medium
💵 The $2500 bug: Remote Code Execution via Supply Chain Attack
Hey there!😇
⤷ Title: How I Earned $8947 bounty for Remote Code Execution via a Hijacked GitHub Module
════════════════════════
𐀪 Author: Naveen kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:16:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #hackerone #bug_bounty #bugbounty_writeup #hacking
════════════════════════
𐀪 Author: Naveen kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:16:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #hackerone #bug_bounty #bugbounty_writeup #hacking
Medium
How I Earned $8947 💰bounty for Remote Code Execution via a Hijacked GitHub Module
Earlier this year, I discovered a High severity Remote Code Execution (RCE) vulnerability affecting a big company (referred to as Redacted for confidentiality). Through a combination of my…
⤷ Title: Crack Windows Password [Ethical Hacking Article]
════════════════════════
𐀪 Author: Mr Horbio
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:34:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #cybersecurity #hacking #ethical_hacking
════════════════════════
𐀪 Author: Mr Horbio
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:34:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #cybersecurity #hacking #ethical_hacking
Medium
Crack Windows Password [Ethical Hacking Article]
This Article describes you to reset your windows password by using manipulation technique.
⤷ Title: The Secrets Behind Subdomain Takeovers Nobody Shares
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:33:29 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #secrets #bug_bounty #subdomain
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:33:29 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #secrets #bug_bounty #subdomain
Medium
👀The Secrets Behind Subdomain Takeovers Nobody Shares
Free Article Link
⤷ Title: $1000+ Passive Recon Strategy You’re Not Using (Yet)
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:30:08 GMT
════════════════════════
⌗ Tags: #hacking #subdomains_enumeration #subdomain #earnings #bug_bounty
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:30:08 GMT
════════════════════════
⌗ Tags: #hacking #subdomains_enumeration #subdomain #earnings #bug_bounty
Medium
$1000+ Passive Recon Strategy You’re Not Using (Yet)
Still using subfinder & sublist3r tools for finding assets while recon??
⤷ Title: API Hacking on Mercedes-Benz
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:28:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #cybersecurity #programming #hacking
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:28:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #cybersecurity #programming #hacking
Medium
API Hacking on Mercedes-Benz
How Recon and Persistence Led to a Valid XSS on Mercedes-Benz
⤷ Title: $300 Bounty: SSRF to Cloud Metadata
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:25:47 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #report #bug_bounty
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:25:47 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #report #bug_bounty
Medium
$300 Bounty: SSRF to Cloud Metadata
Phabricator SSRF Vulnerability: Unauthorized Access
⤷ Title: Google Cloud Account Takeover via URL Parsing Confusion
════════════════════════
𐀪 Author: Mohamed Benchikh
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:23:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #bug_bounty_writeup
════════════════════════
𐀪 Author: Mohamed Benchikh
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:23:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #bug_bounty_writeup
Medium
Google Cloud Account Takeover via URL Parsing Confusion
TL;DR
⤷ Title: My First Paid Bug Bounty: A Hidden Gallery & A Lesson in Misconfiguration :-)
════════════════════════
𐀪 Author: Naitik Gupta
════════════════════════
ⴵ Time: Fri, 02 May 2025 14:49:33 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity #naitikgupta
════════════════════════
𐀪 Author: Naitik Gupta
════════════════════════
ⴵ Time: Fri, 02 May 2025 14:49:33 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity #naitikgupta
Medium
🐞 My First Paid Bug Bounty: A Hidden Gallery & A Lesson in Misconfiguration :-)
👋 About Me
⤷ Title: Payloads in Plain Sight: How Open Redirect + JavaScript Led to Full Account Takeover
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Fri, 02 May 2025 10:10:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #money #infosec #bug_bounty
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Fri, 02 May 2025 10:10:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #money #infosec #bug_bounty
Medium
💣 Payloads in Plain Sight: How Open Redirect + JavaScript Led to Full Account Takeover 🔁🎯
Hey there!😁
⤷ Title: Web Security & Bug Bounty: Learn Penetration Testing — Chapter 1
════════════════════════
𐀪 Author: Riki SatyaGraha
════════════════════════
ⴵ Time: Fri, 02 May 2025 09:06:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #ethical_hacking #penetration_testing
════════════════════════
𐀪 Author: Riki SatyaGraha
════════════════════════
ⴵ Time: Fri, 02 May 2025 09:06:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #web_security #ethical_hacking #penetration_testing
⤷ Title: Persistence via Registry — How Attackers Abuse the Windows Registry
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:12:20 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_technology #cybersecurity #information_security #hacking
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:12:20 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_technology #cybersecurity #information_security #hacking
Medium
Persistence via Registry — How Attackers Abuse the Windows Registry
One of the most common methods attackers use to maintain access to compromised systems is persistence via the Windows Registry. The…
⤷ Title: ️♂️ Subdomain Enumeration Automation for Bug Bounty: Save Time, Hack Smart!
════════════════════════
𐀪 Author: Shady Farouk
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:09:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #bounty_program #hacker_news #hackerone
════════════════════════
𐀪 Author: Shady Farouk
════════════════════════
ⴵ Time: Fri, 02 May 2025 04:09:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacker #bounty_program #hacker_news #hackerone
Medium
🕵️♂️ Subdomain Enumeration Automation for Bug Bounty: Save Time, Hack Smart!
Ahoy, hacker sailors! ⚓ Whether you’re a seasoned bug bounty hunter or a script kiddie-turned-cyber-ninja, you know the thrill of…