These are the top 10 vulnerabilities that I look for when I pentest a Web Application. I will be dumping all that I have learned about these vulnerabilities and their fixes in this and subsequent posts. Here's the list of all those vulnerabilities, s...
Sophos vừa qua đã công bố và kêu gọi người dùng thực hiện vá khẩn cấp năm lỗ hổng bảo mật độc lập trong sản phẩm Sophos Firewall, trong đó có hại lỗ hổng nghiêm trọng cho phép những kẻ tấn công có thể thực thi mã từ xa mà không cần xác thực (RCE). Th...
Sophos recently announced and urged users to urgently patch five independent security vulnerabilities in the Sophos Firewall product, including two critical vulnerabilities that allow attackers to execute remote code without authentication (RCE). The...
Overview Recently, a highly critical vulnerability was reported by Fortinet with the identifier: CVE‑2025‑25257. A public proof of concept (PoC) has been released online, posing significant risks to Fortinet products. This vulnerability allows hacker...
Insecure Direct Object References (IDOR) vulnerabilities are among the most common web vulnerabilities and can significantly impact the vulnerable web application. IDOR vulnerabilities occur when a web application exposes a direct reference to an obj...
After seeing a few ways to exploit Verb Tampering vulnerabilities, let’s see how we can protect ourselves against these types of attacks by preventing Verb Tampering. Insecure configurations and insecure coding are what usually introduce Verb Tamperi...
I finished the Vulnerabilities 101 room on TryHackMe today, and it was an excellent introduction to what vulnerabilities are in cybersecurity. What Are Vulnerabilities?Vulnerability is a flaw in the system that may be used by attackers. This room i...
This article will cover the Vulnerabilities 101 write-up under the Jr Penetration Tester on THM. Introduction Cybersecurity is big business in the modern-day world. The hacks that we hear about in newspapers are from exploiting vulnerabilities. In th...
07/04/2025 The cyber threat landscape has undergone a dramatic transformation in recent years. What was once dominated by opportunistic attackers and simple malware campaigns has now evolved into a battlefield defined by nationstate operations, finan...
Summary Cyble's Security Update Advisory provides a synopsis of the latest vulnerability patches released by various vendors. This advisory discusses multiple vulnerabilities disclosed in Jenkins. Based on naming standards followed by Common Vulnerab...
