#Vulnerabilities

The PHP security incident is now (almost) old news. The timeline looks something like this: In late August, Wiz Research discovered two serious remote code execution vulnerabilities in PHP called PHP2Shell.…

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

Hey everyone! I’m relatively new to vulnerability research and interested in finding vulnerabilities in open-source frameworks and libraries (like Spring Security, LangChain, etc.).…

Prompt injection vulnerabilities are some of the coolest bugs to hunt for right now. 😎 Extracting someone’s email from a Reddit comment, leaking OTPs through an email reply, taking actions on a victim’s behalf without ever touching a proxy interceptor…

WordPress announced security release version 7.1.4 to fix 22 vulnerabilities with some that have been sitting in core since version 4.7.

WordPress announced security release version 7.1.4 to fix 22 vulnerabilities with some that have been sitting in core since version 4.7.

The PHP security incident is now (almost) old news. The timeline looks something like this: In late August, Wiz Research discovered two serious remote code execution vulnerabilities in PHP called PHP2Shell.…