Don’t be fooled into thinking that cyber threats are only a problem for large organizations. The truth is that cybercriminals are increasingly targeting smaller businesses, and they’re getting smarter every day.
Join our FREE webinar “Navigating the SM…
I recently found a boolean-based blind SQLi and since I’m new to the bug bounty scene – I don’t understand what impact I can extract from it.
There is a website like example.com/tarif?tableId=136&dbsource=gkcp&nf=undefined. The vul…
A vulnerability, which was classified as problematic, was found in PHP Server Monitor 3.2.0. This affects an unknown part of the file /phpservermon-3.2.0/vendor/phpmailer/phpmailer/test_script/index.php. The manipulation leads to cross site scripting.
…
A vulnerability, which was classified as critical, has been found in Dolibarr ERP CMS 9.0.1. Affected by this issue is some unknown functionality of the file /dolibarr/commande/list.php. The manipulation of the argument viewstatut leads to sql injectio…
A vulnerability classified as critical was found in Dolibarr ERP CMS 9.0.1. Affected by this vulnerability is an unknown functionality of the file /dolibarr/admin/dict.php. The manipulation of the argument sortorder/sortfield leads to sql injection.
T…
Introduction
The infamous Colonial pipeline ransomware attack (2021) and SolarWinds supply chain attack (2020) were more than data leaks; they were seismic shifts in cybersecurity. These attacks exposed a critical challenge for Chie…
Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.
Assigned the CVE identifier CVE-2024-5274, the vulnerability relates to a type confusion bug in th…
I noticed that whenever someone tries to send XSS data, Cloudflare blocks it.
So I tested it and concluded the pattern.
I want to implement a Regex that detects any XSS pattern and block it.
Note: I already made sure that my client side e…
Malicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware that’s associated with a known backdoor called RustDoor.
The software supply chain attack, tra…
Cybersecurity researchers have discovered that the malware known as BLOODALCHEMY used in attacks targeting government organizations in Southern and Southeastern Asia is in fact an updated version of Deed RAT, which is believed to be…
