A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers - utkusen/baitroute

#ThePatchReport #ZeroDayInitiative #0day
Welcome to the January 2025 edition of the Patch Report - our brief look into the latest security updates from Microsoft, Adobe, and beyond. It's a small release from Adobe, but it's the largest patch Tuesday in Microsoft's…

A publicly accessible database belonging to DeepSeek allowed full control over database operations, including the ability to access internal data. The exposure includes over a million lines of log streams with highly sensitive information.

Safari 1day RCE Exploit. Contribute to wh1te4ever/WebKit-Bug-256172 development by creating an account on GitHub.

An advanced and deep introduction about Linux kernel mode rookits, how to detect, what are hooks and how it works.

Executive Summary Why We Care about Sandbox Emulation As a discipline, information security involves a vast web of entry vectors, mitigations, and counter-mitigations. Among these, one of the most impactful points of conflict between attackers and defenders…

A project that demonstrates embedding shellcode payloads into image files (like PNGs) using Python and extracting them using C/C++. Payloads can be retrieved directly from the file on disk or from ...

Welcome back, my aspiring cyberwarriors! Over the years, Microsoft Windows operating system, the world's most widely used OS, has been riddled with security vulnerabilities. As the years have gone by and Microsoft has become more security conscience, the…

Two sources in the zero-day industry say Operation Zero's prices for exploits against the popular messaging app Telegram will depend on different factors.