↓ Skip to main content

Application Security

2026

Oct 31

Hackers took 300 GB from the AfD's provider in two visits Byte

Oct 29

CVE-2026-109618 - PHP RCE CVEs leaked before the patch was out Vulnerability

Oct 22

CVE-2026-110264 - Unauthenticated GitLab RCE via a crafted .org file Vulnerability

Oct 15

CVE-2026-107181 - Telegram Desktop one-click account takeover Vulnerability

Sep 15

Apache Log4j2 Java Deserialization Filter Bypass Vulnerability

Aug 15

Testing Claude Mythos Preview For Code Security Byte

May 22

CVE-2026-9082 - Drupal core SQL injection on PostgreSQL sites Vulnerability

2025

Dec 12

CVE-2025-55182 - React2Shell RCE in React Server Components Vulnerability

Dec 12

Lyra Rebane builds multi-step clickjacking from SVG filters Byte

Nov 10

Hacking the World Poker Tour: Inside ClubWPT Gold's Back Office Byte

Jul 12

Leaked Secrets in Hidden Commits Byte

Jul 12

Fun with Gzip Bombs and Email Clients Byte

Apr 18

OWASP ASVS v5 nears release Byte

Feb 24

CVE-2025-27364 - RCE in MITRE Caldera Vulnerability

Jan 5

Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel Byte

2024

Nov 24

CVE-2024-5910 - Palo Alto Expedition admin password reset Vulnerability

Jun 16

CVE-2024-4577 - PHP CGI Argument Injection Vulnerability Vulnerability

Jun 2

CVE-2024-2961 - glibc iconv overflow turns PHP file reads into RCE Vulnerability

Jun 2

Redirect API calls from HTTP to HTTPS Byte

2023

Dec 6

CVE-2022-1471 - Remote code execution in SnakeYAML Vulnerability

Nov 9

CVE-2023-46747 - F5 BIG-IP Configuration utility unauthenticated RCE Vulnerability

Nov 9

CVE-2023-32530 - Trend Micro Apex Central SQL injection via certificates Vulnerability

Nov 9

Detecting and annoying Burp users Byte

Feb 17

Cypher injection in Neo4j, from LOAD CSV to AWS credentials Byte

2022

Dec 23

Comprehensive Rust, Google's four-day Rust course from Android Byte