of course, the victim should be logged in in te the browserProof 0f C0ncept"https://www.paypal.com/cgi-bin/webscr?address1=sectesting&address2=sec...

CVE-2020-9484: Apache Tomcat Session deserialization code execution vulnerability PoCCc @cyber_advisingDemo Test version : Apache Tomcat 7.0.61An atta...

Ransomware Builder Babuk Insecure PermissionsRansomware Builder Babuk malware suffers from an insecure permissions vulnerability.Discovery / credits:...

Apache Hadoop Yan RPC unauthorized RCEThere was an unauthorized access vulnerability in Hadoop yarn ResourceManager. Vuln ProductApache Hadoop Ya...

This log4j (CVE-2021-44228) vulnerability is extremely bad. It only took 5 minutes. Millions of applications and platforms use Log4j for logging, and...