OffSec offsec.com

CVE-2025-27136 – LocalS3 CreateBucketConfiguration Endpoint XXE Injection

offsec.com·42w

How OffSec Certifications Help You Hire With Confidence

offsec.com·43w

CVE-2024-12029 – InvokeAI Deserialization of Untrusted Data vulnerability

offsec.com·43w

What is Phishing? Introduction to Phishing Demo (for Beginners)

offsec.com·43w

CVE-2025-27636 – Remote Code Execution in Apache Camel via Case-Sensitive Header Filtering Bypass

offsec.com·44w

CVE-2025-29306 – Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injection

offsec.com·45w

CVE-2024-39914 – Unauthenticated Command Injection in FOG Project’s export.php

offsec.com·46w

What It Really Means to “Try Harder”

offsec.com·47w

CVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usage

offsec.com·47w

CVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluence

offsec.com·48w

CVE‑2025‑49113 – Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization

offsec.com·48w

CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki via SolrSearch Macro

offsec.com·49w

OffSec’s Take on the Global Generative AI Adoption Index

offsec.com·50w

CVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom Filters

offsec.com·50w

Recompiling Your “Self”: A Cybersecurity-Inspired Guide to Resilience

offsec.com·50w

CVE-2024-46986 – Arbitrary File Write in Camaleon CMS Leading to RCE

offsec.com·51w

CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation

offsec.com·52w

CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution

offsec.com·53w

CVE-2025-29927: Next.js Middleware Authorization Bypass

offsec.com·54w

When AI Becomes the Weak Link: Rethinking Supply Chain Security

offsec.com·54w

Log in to enable infinite scrolling