Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. The attacker ...
Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx.
CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization ...
VulnForge is an offensive security tool that combines traditional vulnerability scanning with AI-powered analysis, exploit validation, and automatic exploit generation. It performs reconnaissance, ...
The threat actors employ JavaScript within HTML attachments and hijacked websites to generate fake error notifications. These alerts prompt users to copy a PowerShell ...
In today's fast-paced digital world, tools that enhance productivity and streamline tasks are highly sought after. One such tool that has been gaining attention is Evon Executor. If you’re someone who ...
Abstract: Capture-the-flag (CTF) competitions have become highly successful in security education, and heap corruption is considered one of the most difficult and rewarding challenges due to its ...
Abstract: In this article, a rich attack vector library is constructed. The attack vector generation method based on operator expression is adopted, and the attack vector is modeled based on the ...