πNew WriteupβοΈ
βββββββββββββββ
πDate: Mon, 23 Oct 2023 16:00:05 GMT
βββββββββββββββ
βοΈTitle: HTB-Nibbles Writeup (OSCP prep)
βββββββββββββββ
πLink: https://medium.com/p/d5701a4cc1af
βββββββββββββββ
Tags: #hackthebox_writeup #weak_passwords #misconfiguration #linux #vulnerability
βββββββββββββββ
πDate: Mon, 23 Oct 2023 16:00:05 GMT
βββββββββββββββ
βοΈTitle: HTB-Nibbles Writeup (OSCP prep)
βββββββββββββββ
πLink: https://medium.com/p/d5701a4cc1af
βββββββββββββββ
Tags: #hackthebox_writeup #weak_passwords #misconfiguration #linux #vulnerability
Medium
HTB-Nibbles Writeup (OSCP prep)
Introduction
β€· Title: Fix Weak Password Policies in Laravel: A Comprehensive Guide
ββββββββββββββββββββββββ
πͺ Author: Pentest_Testing_Corp
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 07 Jan 2025 05:41:40 GMT
ββββββββββββββββββββββββ
β Tags: #penetration_testing #laravel #cybersecurity #vulnerability #weak_passwords
ββββββββββββββββββββββββ
πͺ Author: Pentest_Testing_Corp
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 07 Jan 2025 05:41:40 GMT
ββββββββββββββββββββββββ
β Tags: #penetration_testing #laravel #cybersecurity #vulnerability #weak_passwords
Medium
Fix Weak Password Policies in Laravel: A Comprehensive Guide
In todayβs digital landscape, weak password policies are a significant threat to application security. Laravel, being a robust PHPβ¦
β€· Title: Siemens Industrial Edge: Critical Authentication Flaw (CVE-2024-54092)
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 08 Apr 2025 14:24:31 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #authentication #CVE_2024_54092 #cybersecurity #identity federation #IIoT #industrial control systems #Industrial Edge #security advisory #Siemens #weak authentication
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 08 Apr 2025 14:24:31 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability #authentication #CVE_2024_54092 #cybersecurity #identity federation #IIoT #industrial control systems #Industrial Edge #security advisory #Siemens #weak authentication
Daily CyberSecurity
Siemens Industrial Edge: Critical Authentication Flaw (CVE-2024-54092)
Siemens security advisories detail a critical authentication vulnerability (CVE-2024-54092) in Industrial Edge Devices, allowing for potential impersonation
β€· Title: From SQL Injection to Weak Passwords : A Deep Dive into a Tamil Nadu Government Security Flaw
ββββββββββββββββββββββββ
πͺ Author: B4LOGI
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 27 Apr 2025 09:40:01 GMT
ββββββββββββββββββββββββ
β Tags: #authentication_bypass #sql_injection #cybersecurity #weak_passwords
ββββββββββββββββββββββββ
πͺ Author: B4LOGI
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 27 Apr 2025 09:40:01 GMT
ββββββββββββββββββββββββ
β Tags: #authentication_bypass #sql_injection #cybersecurity #weak_passwords
Medium
From SQL Injection to Weak Passwords π: A Deep Dive into a Tamil Nadu Government Security Flaw π¨
One morning, coffee in hand β, I began testing a new target from the Tamil Nadu Government and spotted signs of SQL injection. I ranβ¦
β€· Title: Weak Password Policy in Symfony: Risks, Code Fixes & Free Vulnerability Check
ββββββββββββββββββββββββ
πͺ Author: Pentest_Testing_Corp
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 22 May 2025 07:58:41 GMT
ββββββββββββββββββββββββ
β Tags: #symfony #vulnerability #weak_passwords #penetration_testing #cybersecurity
ββββββββββββββββββββββββ
πͺ Author: Pentest_Testing_Corp
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 22 May 2025 07:58:41 GMT
ββββββββββββββββββββββββ
β Tags: #symfony #vulnerability #weak_passwords #penetration_testing #cybersecurity
Medium
Weak Password Policy in Symfony: Risks, Code Fixes & Free Vulnerability Check
Passwords are the first line of defense against unauthorized accessβββyet too many Symfony applications still allow weak or insecureβ¦
β€· Title: Paradox.ai Data Breach: β123456β Password & Nexus Stealer Expose Fortune 500 Clients
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 19 Jul 2025 01:53:59 +0000
ββββββββββββββββββββββββ
β Tags: #Data Leak #Atlassian #cybersecurity #data breach #McDonald's #McHire #Nexus Stealer #Okta #Paradox.ai #supply chain attack #Weak Password
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 19 Jul 2025 01:53:59 +0000
ββββββββββββββββββββββββ
β Tags: #Data Leak #Atlassian #cybersecurity #data breach #McDonald's #McHire #Nexus Stealer #Okta #Paradox.ai #supply chain attack #Weak Password
Penetration Testing Tools
Paradox.ai Data Breach: "123456" Password & Nexus Stealer Expose Fortune 500 Clients
A trivial "123456" password and Nexus Stealer malware on a Paradox.ai employee's device exposed data, potentially impacting Fortune 500 clients like Lockheed Martin.
β€· Title: Cyber Security Vulnerability Scanning: Identifying Weak Points
ββββββββββββββββββββββββ
πͺ Author: Cyber Security Research
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 06 Aug 2025 23:48:51 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #risk_assessment #vulnerability_scanning #network_security #weak_points
ββββββββββββββββββββββββ
πͺ Author: Cyber Security Research
ββββββββββββββββββββββββ
β΄΅ Time: Wed, 06 Aug 2025 23:48:51 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #risk_assessment #vulnerability_scanning #network_security #weak_points
Medium
Cyber Security Vulnerability Scanning: Identifying Weak Points
In the dynamic realm of digital operations, ensuring robust cyber security stands as a paramount concern for organizations across allβ¦
β€· Title: Your Password Is βPassword123β? Bold of You to Assume You Still Have Privacy
ββββββββββββββββββββββββ
πͺ Author: Naturinda Patra
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 28 Oct 2025 19:21:15 GMT
ββββββββββββββββββββββββ
β Tags: #cyberattack #cybersecurity #weak_passwords #password_security #passwords
ββββββββββββββββββββββββ
πͺ Author: Naturinda Patra
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 28 Oct 2025 19:21:15 GMT
ββββββββββββββββββββββββ
β Tags: #cyberattack #cybersecurity #weak_passwords #password_security #passwords
Medium
Your Password Is βPassword123β? Bold of You to Assume You Still Have Privacy
Letβs be honest if your password is still βpassword123β, youβre basically sending hackers a handwritten invitation to your digital lifeβ¦
β€· Title: JWT Authentication Bypass via Weak Signing Key
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 27 Nov 2025 11:25:36 GMT
ββββββββββββββββββββββββ
β Tags: #json_web_token #bug_bounty #jwt_brute_force_attack #weak_jwt_secret #jwt_authentication_bypass
ββββββββββββββββββββββββ
πͺ Author: Bash Overflow
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 27 Nov 2025 11:25:36 GMT
ββββββββββββββββββββββββ
β Tags: #json_web_token #bug_bounty #jwt_brute_force_attack #weak_jwt_secret #jwt_authentication_bypass
Medium
JWT Authentication Bypass via Weak Signing Key
How a Single Weak JWT Secret Can Hand Over the Keys to Any Account.
β€· Title: South Korea Arrests 4 for Hacking 120,000 IP Cameras to Mass-Produce Illegal Videos
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 02 Dec 2025 04:20:40 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #cybercrime #cybersecurity #Digital Sex Crime #IP Camera Hack #Sextortion #South Korea #Weak Passwords
ββββββββββββββββββββββββ
πͺ Author: ddos
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 02 Dec 2025 04:20:40 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #cybercrime #cybersecurity #Digital Sex Crime #IP Camera Hack #Sextortion #South Korea #Weak Passwords
Penetration Testing Tools
South Korea Arrests 4 for Hacking 120,000 IP Cameras to Mass-Produce Illegal Videos
Police in South Korea have detained four individuals in connection with the hacking of more than 120,000 IP
β€· Title: Core Banking System Flaw: Apache Fineract IDOR Risks Authorization Bypass & Customer Data Access
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 12 Dec 2025 03:28:14 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Apache Fineract #Authorization Bypass #Core Banking #CVE_2025_58137 #Financial services #IDOR #Weak Password Policy
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 12 Dec 2025 03:28:14 +0000
ββββββββββββββββββββββββ
β Tags: #Vulnerability Report #Apache Fineract #Authorization Bypass #Core Banking #CVE_2025_58137 #Financial services #IDOR #Weak Password Policy
Daily CyberSecurity
Core Banking System Flaw: Apache Fineract IDOR Risks Authorization Bypass & Customer Data Access
A flaw in Apache Fineract risks Authorization Bypass via IDOR (CVE-2025-58137) in its self-service API, potentially exposing customer data. Also fixed: Weak Password Policy and Unmasked Server Keys. Update to v1.13.0.
β€· Title: Strong Passwords vs Weak Passwords: The Small Habit That Prevents Big Breaches
ββββββββββββββββββββββββ
πͺ Author: Rela Lumbini
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 28 Feb 2026 09:45:55 GMT
ββββββββββββββββββββββββ
β Tags: #digital_security #strong_password #weak_passwords #infosec_write_ups #infosec
ββββββββββββββββββββββββ
πͺ Author: Rela Lumbini
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 28 Feb 2026 09:45:55 GMT
ββββββββββββββββββββββββ
β Tags: #digital_security #strong_password #weak_passwords #infosec_write_ups #infosec
Medium
Strong Passwords vs Weak Passwords: The Small Habit That Prevents Big Breaches
In cybersecurity discussions, we often hear about malware, ransomware, zero-day vulnerabilities, and advanced attacks.