**Summary:**

Incorrect calculation of Buffer Size in rist module for VLC leading to Stack Overflow with SEH chain overwrite.

The modules/access/rist module has an incorrect calculation of buffer...

We live in a dynamic economy that is constantly developing new ways to generate revenue. An area that fascinates me are the bug bounty programs such as Atlassian on BugCrowd. Generating tangible rewards from these programs is not an easy undertaking. After…

BountyCon2020BountyCon is an invitation-only application security conference arranged by Facebook annually in Singapore for the BugBounty Community of Asia-Pacific region. For more information about i

SSRF exploitation. There is such a thing as SSRF. There’s lots of information about it, but here is my quick summary.🔍

When looking for security vulnerabilities on a web application - either for bug hunting or a penetration test project -, I always check 2…

Assalam u Alikum, it’s been a while I haven’t contributed to this wonderful community so I am back with a new write up about WebSocket…

Some time ago, we found an XSS in Google Cloud with the help of the Acunetix vulnerability scanner. Recently we found another XSS vulnerability. Here is how it happened.

My Facebook personal account is blocked for up to a month because violating Facebook community standards for over-shitposting, LMAO.

Introduction :

This is a full disclosure of recent backdoor integrated into DVR/NVR devices built on top of HiSilicon SoC with Xiaongmai firmware. Described vulnerability...

A high-severity Cross-Site Request Forgery (CSRF) vulnerability, tracked as CVE-2020–8417, exists in a popular WordPress plugin called Code Snippets, rendering over 200,000 websites vulnerable to site takeover. In this Blog-post, we will cover what caused…

Developers have figured out how to root the Snapdragon models of the Samsung Galaxy S9 and Galaxy Note 9 thanks to an exploit, but there's a catch.

Check Point Research Vulnerability Repository

List of resources related to LD_PRELOAD, a mechanism for changing application behavior at run-time - gaul/awesome-ld-preload

How I revealed parts of the VoIP protocol with Wireshark, radare2 and Frida.

Microsoft published an interesting report that investigates web shell attacks, the IT giant says it detects 77,000 active web shells daily.