Tag feed

#exploit

81 posts13 followers

Explore Hashnode

Alternatives

Trending tags this week

Mmehveteromehvetero.comJul 24 · 8 min read

How One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui

A technical breakdown of the Aftermath Finance perpetuals exploit (April 29, 2026). How a negative fee value bypassed validation, inflated collateral, and allowed an attacker to drain $1.14M USDC in 3

0

NĐNguyễn Đăng Hưngbluecyber.hashnode.devJul 22 · 36 min read

Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine

0. Overview This report details a targeted cyber-espionage campaign conducted by the Russia-aligned threat actor group APT SHADOW-EARTH-066 (also tracked by CERT-UA as UAC-0226), delivering an updated

0

TGTej Gokanitejgokani.hashnode.devJul 2 · 6 min read

Ring 0: The Line Most Software Never Crosses

The privilege you don't think about Most of the software on your computer operates under a quiet agreement: it gets to touch its own corner of memory, read its own files, and nothing else. The operati

0

C|chainbox | Calibraintmichaelbrownblog2.hashnode.devMay 13 · 4 min read

The $292M Kelp DAO Exploit: How North Korea Drained DeFi's Biggest Bridge in 2026

April 18, 2026, started like any other Saturday in crypto until it didn't. At 17:35 UTC, an attacker quietly drained 116,500 rsETH from Kelp DAO's cross-chain bridge. By the time protocols started fre

0

JJebitoksharonjebitok.comMay 6 · 19 min read

Spring AI: CVE-2026-22738 (TryHackMe)

Introduction Spring AI 1.0 shipped in May 2025 as the first stable release of the Java framework designed to simplify the development of LLM-powered applications. By wrapping OpenAI, Ollama, and other

0

TTiamattiamat-ai.hashnode.devMar 9 · 6 min read

VMware ESXi Ransomware: Chinese APT Exploiting 2-Year-Old Kernel Escape Vulnerabilities

TL;DR Chinese-linked APT groups are actively exploiting 2-year-old VMware ESXi kernel escape vulnerabilities (CVE-2024-20835, CVE-2024-20837) to move from compromised VPN appliances directly into hypervisor control. Once on the hypervisor, they contr...

0

Aaivr-blogaivr.hashnode.devJan 26 · 21 min read

Finding 0days with AI

For decades, many bug hunters and security pros have used manual testing, static analysis, and fuzzing to find vulnerabilities. Enter the age of AI. Many are skeptical, but when I look around I see mo

0

CACharlie Averyxoravery.hashnode.devJan 21 · 5 min read

Analyzing Malware utilizing OverlayFS Exploit

The code leverages known vulnerabilities in the OverlayFS filesystem driver, likely CVE-2021-3493 or CVE-2023-0386, to gain root-level access. The exploit allows an unprivileged local user to execute arbitrary code with the highest privileges, leadin...

0

AAAyomide Ayanwolablog.covenlabs.spaceJan 15 · 6 min read

React2Shell (CVE-2025-55182) Exploitation on AWS EC2 - A Real-World Incident Report

Executive Summary On one of our AWS EC2 servers running a Next.js development environment, we discovered an active exploitation of the React2Shell vulnerability (CVE-2025-55182 / CVE-2025-66478). The attacker successfully installed cryptocurrency min...

0

Aaivr-blogaivr.hashnode.devJan 14 · 7 min read

AwesomeBot meets Prompt Injection

Intro AwesomeBot is an awesome AI Chatbot! It was vibe coded from scratch to have a ton of awesome features without much security in mind so various attacks and offensive methods can be demonstrated. This series of blog posts serves as a way to under...

0

#exploit

Search Hashnode

#exploit

Explore Hashnode

Trending tags this week

How One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui

Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukraine

Ring 0: The Line Most Software Never Crosses

The $292M Kelp DAO Exploit: How North Korea Drained DeFi's Biggest Bridge in 2026

Spring AI: CVE-2026-22738 (TryHackMe)

VMware ESXi Ransomware: Chinese APT Exploiting 2-Year-Old Kernel Escape Vulnerabilities

Finding 0days with AI

Analyzing Malware utilizing OverlayFS Exploit

React2Shell (CVE-2025-55182) Exploitation on AWS EC2 - A Real-World Incident Report

AwesomeBot meets Prompt Injection