Here’s where our security researchers analyze and share insights about the latest vulnerabilities, providing details on how they work, or how to exploit them.
Patching is never easy, but doing it imperfectly can come back to bite you. That’s…
No red flags. No alerts. Full-on compromise. The way cybercriminals are putting together various vulnerabilities…
Back in August 2019, I reported a security vulnerability in Magento affecting versions 2.3.2, 2.3.3,…
Sometimes headline-making vulnerabilities aren’t necessarily the ones causing the most burning challenges for companies. What…
The security team at Pentest-Tools.com has recently performed an in-depth analysis of the SACK Panic…
In this article, we show our approach for exploiting the RDP BlueKeep vulnerability using the…
In this article we show a new method of exploiting the critical SQL Injection vulnerability…
This article shows our analysis of a known attack (presented in February 2019) against WordPress…
Let’s understand how OGNL Injection works in Apache Struts. We’ll exemplify with two critical vulnerabilities…
This article is a deep dive into how Nmap works, to understand its internal structure,…