web security

HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat Request Smuggling

Request Smuggling

HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat

ddos August 8, 2025

Six years ago, researchers at PortSwigger first identified a fundamental flaw in the HTTP/1.1 protocol—one that enables...

Silent Scourge: Over 3,500 Websites Infected by New Covert Browser Cryptominer Covert Cryptomining

Covert Cryptomining

Silent Scourge: Over 3,500 Websites Infected by New Covert Browser Cryptominer

ddos July 23, 2025

Cybersecurity specialists at cside have uncovered a vast and covert cryptocurrency mining campaign that has compromised over...

Critical Laravel Vulnerability: 260,000+ APP_KEYs Leaked, Enabling Remote Code Execution Laravel Security

Laravel Security

Critical Laravel Vulnerability: 260,000+ APP_KEYs Leaked, Enabling Remote Code Execution

ddos July 15, 2025

Security researchers from GitGuardian and Synacktiv have uncovered a critical vulnerability in Laravel, the widely used PHP...

Stealthy WordPress Malware Uncovered: Multi-Stage RAT Injects via Header.php, Hides Traces OldGremlin AI ransomware LummaStealer Qilin, ransomware-as-a-service Human Cybersecurity Ransomware ACRStealer Interlock Ransomware OVERSTEP Rootkit Malduck WordPress Malware

OldGremlin AI ransomware LummaStealer Qilin, ransomware-as-a-service Human Cybersecurity Ransomware ACRStealer Interlock Ransomware OVERSTEP Rootkit Malduck WordPress Malware

Stealthy WordPress Malware Uncovered: Multi-Stage RAT Injects via Header.php, Hides Traces

ddos July 2, 2025

Cybercriminals have launched a new wave of attacks targeting WordPress websites—so meticulously concealed that the campaign was...

FrogPost: postMessage Security Testing Tool

Security Testing

FrogPost: postMessage Security Testing Tool

ddos July 1, 2025

FrogPost is a powerful Chrome extension for testing and analyzing the security of postMessage communications between iframes. It helps...

WordPress “Motors” Theme Critical Flaw (CVE-2025-4322, CVSS 9.8): Unauthenticated Account Takeover & Mass Exploitation Underway WordPress Theme, Account Takeover

WordPress Theme, Account Takeover

WordPress “Motors” Theme Critical Flaw (CVE-2025-4322, CVSS 9.8): Unauthenticated Account Takeover & Mass Exploitation Underway

ddos June 24, 2025

A critical vulnerability discovered in the WordPress visual theme “Motors” has enabled hackers to seize administrative privileges...

Verizon Burp Extensions: Powering AI Security Testing with Jython Tools

AI Security Testing

Verizon Burp Extensions: Powering AI Security Testing with Jython Tools

ddos June 14, 2025

This repository contains a suite of Burp Suite extensions developed in Jython, designed to enhance the capabilities...

agneyastra: Firebase Misconfiguration Detection Toolkit Firebase Security

Firebase Security

agneyastra: Firebase Misconfiguration Detection Toolkit

ddos June 10, 2025

Firebase, a versatile platform by Google, powers countless web and mobile applications with its extensive suite of...