Tag feed

#vulnerability-research

9 posts0 followers

Explore Hashnode

Alternatives

Trending tags this week

ASaviral srivastavaaviraxroot.hashnode.devMar 29 · 10 min read

I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.

XGBoost is one of the most important libraries in machine learning. 26,000+ GitHub stars. Used by banks for fraud detection, insurance companies for risk modeling, tech companies for ranking systems,

0

ASaviral srivastavaaviraxroot.hashnode.devMar 16 · 13 min read

I Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.

I was two hours into auditing AnythingLLM when I stopped scrolling and stared at my screen for a good ten seconds. Not because the code was complex. Because it was the opposite. javascript getTableSch

0

Aaivr-blogaivr.hashnode.devJan 14 · 7 min read

AwesomeBot meets Prompt Injection

Intro AwesomeBot is an awesome AI Chatbot! It was vibe coded from scratch to have a ton of awesome features without much security in mind so various attacks and offensive methods can be demonstrated. This series of blog posts serves as a way to under...

0

Aaivr-blogaivr.hashnode.devJan 2 · 3 min read

NanoMQ Rule Engine Remote Buffer Overflow

Summary A stack-based buffer overflow vulnerability exists in NanoMQ version 0.24.6, allowing remote attackers to cause a Denial of Service (DoS) and potentially achieve Remote Code Execution (RCE). The vulnerability requires admin privileges, but us...

0

JJebitoksharonjebitok.comApr 20, 2025 · 9 min read

Vulnerability Research: Exploit Vulnerabilities (TryHackMe)

This article will cover the Exploit Vulnerabilities write-up under the Jr Penetration Tester on THM. Introduction In this room, we are going to be going over some means of identifying vulnerabilities and coupling our research skills to learn how thes...

0

JJebitoksharonjebitok.comApr 20, 2025 · 2 min read

Vulnerability Research: Vulnerability Capstone (TryHackMe)

This article will cover the Vulnerability Capstone write-up under the Jr Penetration Tester on THM. Introduction Summarise the skills learnt in this module by completing this capstone room for the "Vulnerability Research" module. Ackme Support Inco...

0

JJebitoksharonjebitok.comApr 20, 2025 · 11 min read

Vulnerability Research: Vulnerabilities 101 (TryHackMe)

This article will cover the Vulnerabilities 101 write-up under the Jr Penetration Tester on THM. Introduction Cybersecurity is big business in the modern-day world. The hacks that we hear about in newspapers are from exploiting vulnerabilities. In th...

0

HHmadhmadsec.hashnode.devNov 12, 2024 · 3 min read

THM - Introductory Researching

Please note that you can find a searchable version of these notes and the answers to all the tasks on my GitBook page here. As your experience level increases, you will find that the things you're researching scale in their difficulty accordingly; h...

0

PĐPhùng Đức Thắngflowiri.hashnode.devApr 28, 2022 · 6 min read

CVE-2021-41766: Insecure Deserialization on Apache Karaf

From the perspective of its exploitation method, this CVE is neither particularly interesting nor worth much attention. However, during my research on this CVE, I faced considerable difficulties reproducing and analyzing the flaw. As of the time of w...

0

#vulnerability-research

Search Hashnode

#vulnerability-research

Explore Hashnode

Trending tags this week

I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.

I Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.

AwesomeBot meets Prompt Injection

NanoMQ Rule Engine Remote Buffer Overflow

Vulnerability Research: Exploit Vulnerabilities (TryHackMe)

Vulnerability Research: Vulnerability Capstone (TryHackMe)

Vulnerability Research: Vulnerabilities 101 (TryHackMe)

THM - Introductory Researching

CVE-2021-41766: Insecure Deserialization on Apache Karaf