Insecure Deserialization with JSON .NET

Remote Code Execution through Insecure Deserialization Vulnerability

LINUX PRIVILEGE ESCALATION

Hijacking Relative Paths in SUID Programs

Error-Based XPath SQL Injection in OpenEMR

Data Exfiltration in OpenEMR 2018 v5.0.1

Digging into Local File Inclusion

Basic methodology to approach LFI vulnerability when Pentesting a Web Application

Vulnerable Lambda leaks AWS Account Information

Remote Code Execution in OpenNetAdmin

Exploit Analysis of OpenNetAdmin v18.1.1

$_ What_is_OpenNetAdmin?

Quick view on Basic vs Digest Authentications

Basic authentication: is an HTTP supported authentication. It relies on the…

Abusing SSRF on Selenium Grid

Basic Server-Side Request Forgery on Selenium Grid Framework

Target:_blank → Tabnapping Attack

Why should we care !! How to leverage this flaw in social engineering attacks?