Nothing here yet.
Nothing here yet.
Sep 7, 2024 · 4 min read · Privilege escalation vulnerabilities pose a serious threat in many applications, allowing unauthorized users to gain access to higher-level permissions. One such vulnerability is "Unauthorized Privilege Escalation via Role Manipulation." This issue a...
Join discussion
Sep 1, 2024 · 5 min read · Weak JWT HMAC secrets are like leaving your front door key under the mat—easy for attackers to find and exploit. In today’s applications, JWTs are everywhere, handling everything from logging in users to securing API calls. But when those tokens are ...
Join discussion
Aug 15, 2024 · 2 min read · Account takeover (ATO) vulnerabilities occur when an attacker gains unauthorized access to a user's account. One common vector for ATO vulnerabilities is through the password reset functionality. In this article, we will explore how vulnerabilities c...
Join discussion
Mar 19, 2024 · 2 min read · Excessive Agency is the 8th of the OWASP Top Ten LLM vulnerabilities. Every LLM-based system has a degree of agency granted by its developer. According to OWASP, Excessive Agency is the vulnerability that enables damaging actions to be performed in r...
Join discussion
Jul 7, 2022 · 7 min read · Jangow is a box on Vulnhub that is centered on enumeration. Enumeration is a very important step in penetration testing. Enumeration is a process in pentesting where you establish an active connection with the victim and try to discover as many attac...
Join discussion