A critical vulnerability in the device’s Lua runtime bypasses all sandboxing restrictions and allows arbitrary OS command execution as…

Welcome to the WhyWriteUps articles, where we explain every step we made and why we made it. I have been solving machines for quite a bit…

What if I told you, your computer is being used in some kind of cyber attack and you don’t even know about it? Yes, that could happen…

Scenario:

Imagine this. You walk into your favorite coffee shop, grab a latte, and sit down with your laptop. You open your email, scroll through…

The AI startup’s bold move could reshape the browser wars, but it also underscores critical vulnerabilities in enterprise AI ecosystems.

On August 1st, 2025, I joined the second expert lecture in the SMT Program, led by Mr. M. Iman Karmawijaya of LSWare Indonesia. The topic…

Before talking about XSRF token, we need to understand what is CSRF attack, here is the detailed explaination from OWASP:

Suricata is a powerful open-source IDS/IPS that is used to provide network security by monitoring and blocking threats. Suricata can be…

Introduction

Selam! Geçenlerde bir web uygulamamın bir sayfasında stored xss açığı keşfettim. Bu güvenlik açığını yamalamadan önce, nasıl…

A file that’s a pipe!?

CVE-2025–50690

Subtitle: From Initial Rejection to Full Remediation — A Security Researcher’s Journey

Despite being one of the oldest and most well-known security vulnerabilities, SQL injection (SQLi) continues to compromise applications…

Hey everyone,

A convincing phishing scam turns a fake Booking.com CAPTCHA into the perfect delivery system for HijackLoader malware.

Hi everyone, fnwn here. If you don’t know who I am, then you can learn about me from fnwn@hacking:~ $whoami.

GPT-5 may be OpenAI’s smartest AI yet, but researchers have just proven it’s far from invincible.

If you’re going to start a blog, start with something worth it. So here I am, sharing my experience with a real certification.

TASK 1 | Walking An Application