Blog Archive

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Logster

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Juggalo Central

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Treasure Trove

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Pay Attention

November 10, 2022

Vulnerability Insights

Fetch the Flag CTF 2022 writeup: Moongoose

November 10, 2022

Application Security

Fetch the Flag CTF 2022 writeup: File Explorer

November 9, 2022

Application Security

Fetch the Flag CTF 2022 writeup: Containers are ACE

November 9, 2022

Vulnerability Insights

Breaking down the ’critical’ OpenSSL vulnerability

November 4, 2022

Vulnerability Insights

Update: OpenSSL high severity vulnerabilities

November 3, 2022

Vulnerability Insights

New OpenSSL critical vulnerability: What you need to know

October 31, 2022

Vulnerability Insights

Understanding DNS attacks: Identifying and patching vulnerabilities

October 26, 2022

Vulnerability Insights

Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text

October 18, 2022

Vulnerability Insights

Phony PyPi package imitates known developer

October 5, 2022

Vulnerability Insights

Command injection vulnerability in Snyk CLI released prior to September 1, 2022 (older than v1.996.0)

October 3, 2022

Vulnerability Insights

Avoiding SMTP Injection: A Whitebox primer

September 15, 2022

Vulnerability Insights

Rediscovering argument injection when using VCS tools — git and mercurial

August 23, 2022

Vulnerability Insights

Ruby gem installations can expose you to lockfile injection attacks

August 17, 2022

Vulnerability Insights

Snyk finds PyPi malware that steals Discord and Roblox credential and payment info

August 16, 2022

Vulnerability Insights

Controlling your server with a reverse shell attack

August 10, 2022

Vulnerability Insights

Buffer overflow attacks in C++: A hands-on guide

July 28, 2022

Vulnerability Insights

Exploring CVE-2022-33980: the Apache Commons configuration RCE vulnerability

July 8, 2022