Tag: Research
-
WordPress Skitter Slideshow SSRF 0-Day Vulnerability (CVE-2022-1751)
As the Security For Everyone team, we regularly look for vulnerabilities in software we have chosen to find 0-days. One of them was Wordpress Skitter Slideshow Plugin. Read to learn about the steps we took to find vulnerabilities on this one.
-
eWAPTXv2 Certification and Course Review
In this article, we will share our experiences with eWAPTXv2 certification program and eWAPTXv2 course as well as help you in your decision making process.
-
OpenEMR 0-day Stored XSS Vulnerability (CVE-2022-24643)
As the Security For Everyone team, we regularly look for vulnerabilities in software we have chosen to find 0-days. One of them was OpenEMR. Read to learn about the steps we took to find Stored XSS vulnerability on this one.
-
OpenEMR 0-day Incorrect Access Control Vulnerability (CVE-2022-25041)
As the Security For Everyone team, we regularly look for vulnerabilities in software we have chosen to find 0-days. One of them was OpenEMR. Read to learn about the steps we took to find Incorrect Access Control vulnerability on this one.
-
The Most Common Mobile Application Vulnerabilities
Our mobile application penetration testing expert conducted a study on the Google Play market, selecting about 100 mobile applications at random and statically analyzing them.
-
OpenEMR 0-day IDOR Vulnerability (CVE-2022-25471)
As the Security For Everyone team, we regularly look for vulnerabilities in software we have chosen to find 0-days. One of them was OpenEMR. Read to learn about the steps we took to find IDOR vulnerability on this one.
-
openSIS Student Information System 0-day Vulnerability (CVE-2021-41691)
As the Security For Everyone team, we regularly look for vulnerabilities in software we have chosen to find 0-days. One of them was openSIS. Read to learn about the steps we took to find vulnerabilities on this one.
-
Log4Shell: Log4j 0-day Remote Code Execution Vulnerability (CVE-2021-44228 & CVE-2021-45046)
In this article, we’ll discuss the log4shell vulnerability and how you can protect yourself from it.
-
Google Chrome Vulnerability Worth for $6K: Use After Free (CVE-2021-30573)
As the S4E team, we found the use after free vulnerability that we detected in the latest version of Google Chrome. Although we focus on customer feedback on our products in the early stage of our startup, we conduct various vulnerability studies and challenging bounty programs whenever we can.
-
Is the Cloud Safe Enough for Your Data?
The rapid advancements in technologies are also paving new pathways for startups and small to mid-sized businesses.
-
How Can a WordPress Site Be Hacked?
WordPress is a popular CMS (Content Management System) tool used in creating websites. Its flexibility and ease of use have allowed WordPress a higher market share of�65%�over other CMS and has�42.4%�of all websites developed with WordPress.
-
What Is The Main Goal Of Penetration Testing?
Penetration testing, also commonly referred to as the pentest, is usually carried out to test your system�s security from a hacker�s perspective.