CVE-2024-23897 – Jenkins Arbitrary File Read Vulnerability
Vendor Description:- Jenkins is a self-contained, open source automation server which can be used to automate all sorts of tasks related to building, testing, and
Cups-browsed daemon exploitation – CVE-2024-47176
Vendor Description:- CUPS is a standards-based, open-source printing system used by Apple’s Mac OS® and other UNIX®-likeoperating systems, especially also Linux. CUPS uses the Internet
CVE-2024-38856: Critical RCE Vulnerability in Apache OFBiz
Vulnerable Version Apache OFBiz<=18.12.14 Fixed Version Apache OFBiz 18.12.16 Base Score 9.8 Critical Vendor Description Apache OFBiz is an open-source ERP framework. It supports a
PHP Insecure Deserialization vulnerabilities
In this blog, we will discuss PHP insecure deserialization vulnerabilities and their prevention. The deserialization vulnerability in PHP is also known as PHP Object Injection.
Node JS deserialization exploitation
In this blog, we briefly explore Node JS deserialization Exploitation. The process typically involves crafting a malicious payload that, when deserialized by the application, triggers
Insecure Deserialization foundations
In the world of web applications, data exchange is paramount. Often, complex objects containing user information or application state need to be transmitted and stored
Insecure deserialization exploitation in Java
In our Blog, we have discussed the foundations of insecure deserialization. Now in this Blog, we’ll take a glance at multiple insecure deserialization exploitation in
Install and configure Nginx Proxy Manager Like a Pro
NGINX Proxy Manager The Nginx Proxy Manager offers a convenient tool for managing proxy hosting. The proxymanager makes it relatively easy to forward traffic to
iOS Pentesting Lab Setup with Palera1n
Dear Awesome Hackers, Let’s deep dive into the iOS pentesting lab setup with Palera1n Let’s deep dive into the iOS pentesting lab setup with Palera1n
WebSockets Pentesting -Everything You Need To Know About
In this blog, I will be covering the deep internals of WebSocket communication and WebSockets pentesting essentials for every hacker. WebSockets are a bi-directional, full