Archive

Privacy is dead: For multiple months, any O2 customer has had their location exposed to call initiators without their knowledge.

CVE-2025-37752 is an Array-Out-Of-Bounds vulnerability in the Linux network packet scheduler, specifically in the SFQ queuing discipline. An invalid SFQ limit and a series of interactions between SFQ and the TBF Qdisc can lead to a 0x0000 being written approximately 256KB out-of-bounds at a misaligned offset. If properly exploited, this can enable privilege escalation.

How a simple file path bypass gave attackers shell access to GitLab servers

What could've been the largest data breach in the world - an attack chain on Google services to leak the email address of any YouTube channel

Subdomain enumeration is a fundamental and very important part of any offensive reconnaissance, discovering points of entry, exposed assets and/or information that will aid in further compromise of the target’s infrastructure.

In this post I will briefly describe the journey I went through while implementing defendnot. Even though this is most likely not what you expected to see here, but rather than going into full technical details on how everything works, I will describe what rabbitholes I went through and how painful everything was due to my ✨special✨ environment.

FreeDrain is a modern, scalable phishing operation exploiting weaknesses in free publishing platforms to steal cryptocurrency on a global scale.

In this excerpt of a Trend Vulnerability Research Service vulnerability report, Nikolai Skliarenko and Yazhi Wang of the Trend™ Research Team detail a recently patched code execution vulnerability in the Apple macOS operating system. This bug was originally discovered by Hossein Lotfi of the Trend™&

Despite shutting down, Inferno Drainer has returned with a sophisticated phishing campaign abusing Discord and targeting crypto users

In this post, we explore how to bypass AMSI’s scanning logic by hijacking the RPC layer it depends on — specifically the NdrClientCall3…

Gui Rambo writes about his coding and reverse engineering adventures.

Technical Explanation of NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File

TL;DR — I built an automation that cloned and scanned tens of thousands of public GitHub repos for leaked secrets. For each repository I…

Phishers abused Google Sites and DKIM replay to send valid-signed emails, bypassing filters and stealing credentials.

Bug bounty hunting is full of surprises, and sometimes, the easiest vulnerabilities can pay the most. This is the story of how I stumbled…

Summary A vulnerability in PHP’s extract() function allows attackers to trigger a double-free in version 5.x or a user-after-free in versions 7.x, 8.x, which in turn allows arbitrary code execution (native code). Credit An independent security researcher, LCFR, working with SSD Secure Disclosure. Vendor Response The vendor (Zend) has addressed the issue: https://github.com/php/php-src/security/advisories/GHSA-4pwq-3fv3-gm94. Zend have … SSD Advisory – extract() double-free(5.X)/use-after-free(7.X/8.X) Read More »

Introduction

Here you can read all about my research and techniques I’ve gathered over time!

Have you ever come across an endpoint that you instinctively knew was vulnerable, but you couldn’t quite understand what was happening on…

Hey, I’m Mahmoud Mosbah, a cyber security specialist at Isec.

Did you know that Gmail allows the use of the form HTML tag? This feature presents a potential security risk, especially when attempting…

“The real game isn’t always in what you learn — it’s in what others forget to mention.” 😎

اللَّهُمَّ انْفَعْنِي بِمَا عَلَّمْتَنِي، وَعَلِّمْنِي مَا يَنْفَعُنِي، وَزِدْنِي عِلْمًا

Details of our SuperNote Nomad research which led to the disclosure of a 0-click RCE vulnerability

Discover how critical vulnerabilities in browser-based crypto wallets allowed attackers to drain funds without user interaction.

The SVG file format can harbor malicious HTML, scripts, and malware

CVE-2025-3248 is a critical code injection vulnerability affecting Langflow, a popular tool used for building out agentic AI workflows. This vulnerability is easily exploitable and enables unauthenticated remote attackers to fully compromise Langflow servers. The issue is patched in Langflow 1.3.0.

Introduction During a garage cleaning, we found a DVB receiver and thought it would be a great target for vulnerability research.

Principal Security Engineer Tao Sauvage discovered two SAP flaws on a client project, resulting in a CVE and a custom tool.