2h ago · 9 min read · Overview During a recent pentest of an iOS health application (let's call it MedVault), I came across something interesting. The app was using custom URL schemes for deep linking but had no Universal
Lletstg.com commented
2h ago · 8 min read · This post covers the full analysis workflow — how email works, types of phishing, collecting artifacts, analyzing them with tools, and taking defensive action. How Email Works Before analyzing phishi
Join discussion20m ago · 2 min read · GHSA-HWR4-MQ23-WCV5: Cache Key Collision and Authorization Bypass in Mercure Hub Vulnerability ID: GHSA-HWR4-MQ23-WCV5 CVSS Score: 7.1 Published: 2026-04-08 The Mercure Hub's TopicSelectorStore is vulnerable to a cache key collision due to improper...
Join discussion41m ago · 3 min read · As we navigate the year 2026, the global economy stands at a crossroads marked by profound challenges and opportunities. The landscape is shaped by a confluence of geopolitical tensions and economic shifts that are redefining traditional paradigms. T...
Join discussion
50m ago · 2 min read · GHSA-4GGG-H7PH-26QR: Authenticated Server-Side Request Forgery in n8n-mcp Multi-Tenant Mode Vulnerability ID: GHSA-4GGG-H7PH-26QR CVSS Score: 8.8 Published: 2026-04-08 A high-severity Server-Side Request Forgery (SSRF) vulnerability exists in the n...
Join discussion2h ago · 2 min read · GHSA-5gfj-64gh-mgmw: Path Traversal in AGiXT Essential Abilities Extension Vulnerability ID: GHSA-5GFJ-64GH-MGMW CVSS Score: 8.8 Published: 2026-04-08 A path traversal vulnerability exists in the safe_join() function of the essential_abilities exte...
Join discussion4h ago · 4 min read · Cybersecurity is currently facing a "wild west" moment. As organizations rush to integrate artificial intelligence into every layer of their tech stack, they often leave the back door wide open. In fa
Join discussion
4h ago · 2 min read · GHSA-5478-66C3-RHXR: Algorithmic Complexity Denial of Service in @chenglou/pretext Vulnerability ID: GHSA-5478-66C3-RHXR CVSS Score: 8.7 Published: 2026-04-08 The @chenglou/pretext package contains a high-severity algorithmic complexity vulnerabili...
Join discussion5h ago · 2 min read · GHSA-2679-6MX9-H9XC: Unauthenticated Remote Code Execution in marimo Terminal WebSocket Vulnerability ID: GHSA-2679-6MX9-H9XC CVSS Score: 9.5 Published: 2026-04-08 An authentication bypass vulnerability in the marimo interactive Python notebook env...
Join discussion
