⤷ Title: File Upload Mechanisms and Security Testing
════════════════════════
𐀪 Author: oxcsec
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:36:10 GMT
════════════════════════
⌗ Tags: #application_security #pentesting #secure_coding #secure_development #security
════════════════════════
𐀪 Author: oxcsec
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:36:10 GMT
════════════════════════
⌗ Tags: #application_security #pentesting #secure_coding #secure_development #security
Medium
File Upload Mechanisms and Security Testing
1. Introduction
⤷ Title: Anonymous (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:06:11 GMT
════════════════════════
⌗ Tags: #linux #tryhackme #cybersecurity #privilege_escalation #hacking
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:06:11 GMT
════════════════════════
⌗ Tags: #linux #tryhackme #cybersecurity #privilege_escalation #hacking
Medium
Anonymous (THM) Tryhackme Walkthrough
Description : Not the hacking group
⤷ Title: What a Penetration Test Really Costs, and Why Five Quotes for the Same Scope Can Differ by 3x
════════════════════════
𐀪 Author: Invadel
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:26:18 GMT
════════════════════════
⌗ Tags: #risk_management #cybersecurity #penetration_testing #security #compliance
════════════════════════
𐀪 Author: Invadel
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:26:18 GMT
════════════════════════
⌗ Tags: #risk_management #cybersecurity #penetration_testing #security #compliance
Medium
What a Penetration Test Really Costs, and Why Five Quotes for the Same Scope Can Differ by 3x
Market ranges for every engagement type, one firm’s published fixed prices, and how to spot a scan that is priced like a pentest
⤷ Title: Investigating Windows — TryHackMe Room
════════════════════════
𐀪 Author: Khushsingla
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:48:11 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity
════════════════════════
𐀪 Author: Khushsingla
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:48:11 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity
Medium
Investigating Windows — TryHackMe Room
Room Link — https://tryhackme.com/room/investigatingwindows
⤷ Title: Windows Powershell — TryHackMe
════════════════════════
𐀪 Author: Kamatchibalu
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:23:32 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #powershell_tryhackme #tryhackme_pre_security
════════════════════════
𐀪 Author: Kamatchibalu
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:23:32 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #powershell_tryhackme #tryhackme_pre_security
Medium
Windows Powershell — TryHackMe
Powershell Task2:
⤷ Title: Putting It All Together — Try Hack Me
════════════════════════
𐀪 Author: Chittanoori Divyashrith
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:10:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #pre_security #putting_it_all_together #tryhackme
════════════════════════
𐀪 Author: Chittanoori Divyashrith
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:10:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #pre_security #putting_it_all_together #tryhackme
Medium
Putting It All Together — Try Hack Me
Task 1 — Putting It All Together
⤷ Title: HTB - Nexus machine
════════════════════════
𐀪 Author: Stilyana Petrova
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:58:03 GMT
════════════════════════
⌗ Tags: #challenge #hackthebox_writeup #penetration_testing #ctf_writeup #hackthebox
════════════════════════
𐀪 Author: Stilyana Petrova
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:58:03 GMT
════════════════════════
⌗ Tags: #challenge #hackthebox_writeup #penetration_testing #ctf_writeup #hackthebox
Medium
Nexus — HTB machine
Easy machine
⤷ Title: Google Dorking in 2026: A Practical Guide to Advanced Google Search
════════════════════════
𐀪 Author: Gadekuldeep
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:06:21 GMT
════════════════════════
⌗ Tags: #reconnaissance #ethical_hacking #tech #cybersecurity
════════════════════════
𐀪 Author: Gadekuldeep
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:06:21 GMT
════════════════════════
⌗ Tags: #reconnaissance #ethical_hacking #tech #cybersecurity
Medium
Google Dorking in 2026: A Practical Guide to Advanced Google Search
Google is much more than a search engine for finding websites.
⤷ Title: How to Inventory and Lock Down the API Surfaces on Your Network Appliances
════════════════════════
𐀪 Author: Anthony Bahn
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:59:46 GMT
════════════════════════
⌗ Tags: #attack_surface_management #api_security #network_appliance #cybersecurity #access_control_list
════════════════════════
𐀪 Author: Anthony Bahn
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:59:46 GMT
════════════════════════
⌗ Tags: #attack_surface_management #api_security #network_appliance #cybersecurity #access_control_list
Medium
How to Inventory and Lock Down the API Surfaces on Your Network Appliances
Infrastructure ACLs only work if you know every listener an appliance exposes. Six steps to enumerate API surfaces, map their…
⤷ Title: EXPLOITING STORED XSS TO STEAL COOKIES
════════════════════════
𐀪 Author: SAINT
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:36:19 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #stored_xss #xss_vulnerability
════════════════════════
𐀪 Author: SAINT
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:36:19 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #stored_xss #xss_vulnerability
Medium
EXPLOITING STORED XSS TO STEAL COOKIES
In this lab, we are required to exploit a STORED XSS vulnerability on the comment section of the lab to exfiltrate the users cookies which…
⤷ Title: Firefox 156 Patches 73 Security Vulnerabilities
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:28:58 +0000
════════════════════════
⌗ Tags: #Technology #Firefox 156 #Mozilla Security #Sandbox Escape #Vulnerability Patch
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:28:58 +0000
════════════════════════
⌗ Tags: #Technology #Firefox 156 #Mozilla Security #Sandbox Escape #Vulnerability Patch
Information Security News
Firefox 156 Patches 73 Security Vulnerabilities
Firefox recently received one of its most substantial security packages in recent history. Within the Firefox 156 release, Mozilla decisively remediated an astonishing 73 vulnerabilities. This for…
⤷ Title: Ransomware Gangs Exploit Critical VMware vCenter Vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:00:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_59310 #ransomware #vCenter #vmware
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:00:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_59310 #ransomware #vCenter #vmware
Information Security News
Ransomware Gangs Exploit Critical VMware vCenter Vulnerability
Although a patch for the critical VMware vCenter vulnerability has existed since late July, the situation escalated into a significantly more perilous phase over the subsequent six weeks. The Cybe…
⤷ Title: Malicious Google Docs Weaponized as Interactive Installers
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:01:55 +0000
════════════════════════
⌗ Tags: #Malware #AMOS Malware #Cyber Security #Google Docs #phishing
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:01:55 +0000
════════════════════════
⌗ Tags: #Malware #AMOS Malware #Cyber Security #Google Docs #phishing
Information Security News
Malicious Google Docs Weaponized as Interactive Installers
Adversaries have ingeniously manipulated Google Docs to perform a function utterly unexpected from a cloud-based word processor: they transformed a standard document into an interactive malware in…
⤷ Title: Critical Privilege Escalation Discovered in LiteSpeed Enterprise
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:24:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cyber Security #LiteSpeed #privilege escalation #Web Hosting
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 12:24:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cyber Security #LiteSpeed #privilege escalation #Web Hosting
Information Security News
Critical Privilege Escalation Discovered in LiteSpeed Enterprise
The boundary separating an individual client account from the entire server infrastructure within LiteSpeed Web Server Enterprise has proven alarmingly fragile. Recently, cPanel issued a stark war…
⤷ Title: HP Fixes Critical HPLIP Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 15:01:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_91104 #CVE_2026_91106 #HP #HPLIP #Remote Code Execution #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 15:01:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_91104 #CVE_2026_91106 #HP #HPLIP #Remote Code Execution #Vulnerability
Daily CyberSecurity
HP Fixes Critical HPLIP Vulnerabilities
TL;DR HP released security updates fixing ten security defects in its official Linux printing suite. These flaws allow remote attackers to execute arbitrary code or trigger denial of service witho…
⤷ Title: Critical HP Advance Vulnerabilities Enable RCE (CVE-2026-89082)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:50:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_89082 #HP #HP Advance #Remote Code Execution #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:50:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_89082 #HP #HP Advance #Remote Code Execution #Vulnerability
Daily CyberSecurity
Critical HP Advance Vulnerabilities Enable RCE (CVE-2026-89082)
HP released urgent security updates on September 16, 2026, to patch critical HP Advance vulnerabilities. These software flaws allow unauthenticated attackers to execute arbitrary code or overwrite…
⤷ Title: Behind the Scenes: Two RCEs in a Single OBS Scene Collection Import
════════════════════════
𐀪 Author: RyuuKhagetsu
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:58:58 GMT
════════════════════════
⌗ Tags: #reverse_engineering #ethical_hacking #bug_bounty #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: RyuuKhagetsu
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:58:58 GMT
════════════════════════
⌗ Tags: #reverse_engineering #ethical_hacking #bug_bounty #penetration_testing #cybersecurity
Medium
Behind the Scenes: Two RCEs in a Single OBS Scene Collection Import
Two independent RCEs hiding behind one harmless OBS import.
⤷ Title: From a Payment Receipt Upload to Full Server Compromise: An Arbitrary File Upload Case Study
════════════════════════
𐀪 Author: Shyderali
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:33:38 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_security #bug_bounty #cybersecurity #application_security
════════════════════════
𐀪 Author: Shyderali
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:33:38 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_security #bug_bounty #cybersecurity #application_security
Medium
From a Payment Receipt Upload to Full Server Compromise: An Arbitrary File Upload Case Study
How a public “upload your receipt” feature became remote code execution and full server takeover, and the controls that would have stopped…
⤷ Title: How AI Quietly Took Over Vulnerability Hunting in 2025–2026
════════════════════════
𐀪 Author: Pouria Navidkia
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:01:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #anthropic_claude #vulnerability #security #google
════════════════════════
𐀪 Author: Pouria Navidkia
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 14:01:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #anthropic_claude #vulnerability #security #google
Medium
How AI Quietly Took Over Vulnerability Hunting in 2025–2026
A student’s look at the shift from manual bug hunting to AI-assisted and autonomous vulnerability discovery, and what it means for people…
⤷ Title: Fools guide to DNSSEC validator flaw
════════════════════════
𐀪 Author: KN
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 15:04:41 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #dns
════════════════════════
𐀪 Author: KN
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 15:04:41 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #dns