A criticial SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise. The post CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution appeared first on OffSec. This article has been indexed…
Category: OffSec
CVE-2025-29927: Next.js Middleware Authorization Bypass
In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header. The post CVE-2025-29927: Next.js Middleware Authorization Bypass appeared first on OffSec. This article has been indexed from OffSec Read the original…
When AI Becomes the Weak Link: Rethinking Supply Chain Security
AI is becoming a hidden entry point in supply chain attacks. Here’s why it matters and what organizations must do to stay protected. The post When AI Becomes the Weak Link: Rethinking Supply Chain Security appeared first on OffSec. This…
CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation
Read about a critical vulnerability found in the SSH implementation of Erlang/OTP arising from improper handling of SSH protocol messages. The post CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation appeared first on OffSec. This article has been indexed from OffSec Read…
CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation
Read about a critical vulnerability found in the SSH implementation of Erlang/OTP arising from improper handling of SSH protocol messages. The post CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation appeared first on OffSec. This article has been indexed from OffSec Read…
CVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Execution
Discover CVE-2024-13059, a critical vulnerability flat that affects AnythingLLM’s handling of ASCII filenames in the multer library. The post CVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Execution appeared first on OffSec. This article has been indexed from OffSec…
How OSCP Holders Can Lead Their Teams to Greater Cybersecurity Resilience
Champion OSCP training in your organization to build a unified, resilient security team. The post How OSCP Holders Can Lead Their Teams to Greater Cybersecurity Resilience appeared first on OffSec. This article has been indexed from OffSec Read the original…
CVE-2024-57727: Path Traversal Vulnerability in SimpleHelp Web Application
CVE-2024-57727 lets attackers read sensitive files via path traversal in SimpleHelp. Learn more about how attackers exploit this flaw. The post CVE-2024-57727: Path Traversal Vulnerability in SimpleHelp Web Application appeared first on OffSec. This article has been indexed from OffSec…
AI Penetration Testing: How to Secure LLM Systems
Explore how AI penetration testing enhances LLM security, addressing unique vulnerabilities and improving cyber defenses. The post AI Penetration Testing: How to Secure LLM Systems appeared first on OffSec. This article has been indexed from OffSec Read the original article:…
CVE-2024-9956: Critical WebAuthentication Vulnerability in Google Chrome on Android
Discover CVE-2024-9956, a critical Chrome flaw on Android allowing Bluetooth-based PassKey theft, and learn key mitigation strategies. The post CVE-2024-9956: Critical WebAuthentication Vulnerability in Google Chrome on Android appeared first on OffSec. This article has been indexed from OffSec Read…