**disclaimer: please take permission before testing any website and do not perform actions without understanding its impact ;)

Large Language Models (LLMs) generate responses based on complex probability calculations, but without proper safeguards, these outputs…

Hi geeks, it4chis3c (Twitter) came-up with the write-up on Improper Rate Limiting Vulnerability found on one of the target’s internal login…

ASUS routers have a critical vulnerability (CVE-2025-2492) allowing unauthorized access. Update firmware and strengthen security now.

Assalamwalaikum wr wb, Greetings ! 🙏 It’s me again guys,….. 😁

I’m excited to share a recent finding during a web application penetration test. The application was fully API-based, and during my…

Hi Everyone,

QNAP has patched a critical improper authentication flaw (CVE-2025-52856) in its QVR firmware with a CVSS score of 9.3, allowing remote attackers to bypass security.

API Güvenliğinde Envanter Yönetiminin Kritik Rolü

GitLab patched a critical runner hijacking flaw (CVE-2025-11702) allowing authenticated users to compromise CI/CD pipelines, plus three unauthenticated DoS vulnerabilities.

Elastic patched a Critical EoP flaw (CVE-2025-37736) in ECE (v3.8.3/4.0.3) where the readonly user can create admin users and inject new API keys by bypassing authorization checks.

Dell patched a Critical (CVSS 9.1) flaw (CVE-2025-46608) in Dell Data Lakehouse that allows a high-privileged remote attacker to escalate privileges and gain unauthorized administrative control. Update to v1.6.0.0.

Hello Hackers 👋

Security teams are on high alert as Fortinet confirms that a critical vulnerability in its FortiClient EMS (Endpoint Management Server) is currently being leveraged by attackers in active campaign…

In this journey, I will share my experience with a valid report I submitted. This will be a series until I discover new vulnerabilities. 😊…

By Thamotharan Vajramani