fuzzbench

FuzzBench: Fuzzer Benchmarking As a Service FuzzBench is a free service that evaluates fuzzers on a wide variety of real-world benchmarks, at Google scale. The goal of FuzzBench is to make it painless to rigorously evaluate fuzzing research and make fuzzing research easier for the community to...

bytecode-viewer

Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...

pythoncode-tutorials

Python Code Tutorials This is a repository of all the tutorials of The Python Code website. List of Tutorials Ethical Hacking Scapy Getting Started With Scapy: Python Network Manipulation Tool Building an ARP Spoofer. code Detecting ARP Spoof attacks. code How to Make a DHCP Listener using Scapy ...

redteamguides.github.io

Red Team Guides RedTeamGuides is a platform that provides red team tutorial and guidance along with cheatsheets. It is aimed at helping security professionals and enthusiasts to learn about red teaming and penetration testing techniques. The platform provides a wide range of resources, including...

org.apache.camel.karaf:camel-jetty-common (>=4.18.1, <=4.18.4), org.apache.camel.springboot:camel-jetty-starter (>=4.15.0, <=4.18.4) +4 more potentially affected by CVE-2026-85313 via org.apache.camel:camel-jetty-common (>=4.15.0, <=4.18.4)

org.apache.camel:camel-jetty-common MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.15.0, =5.2-m1, =5.2-m1, =0.5.5, =0.5.6 Source cves: CVE-2026-85313 Source advisory: MEND:CVE-2026-85313...

awesome-hacking

Awesome Hacking -Un Proyecto Asombroso Una lista curada de Awesome Hacking. Inspirada por awesome-machine-learning Si deseas contribuir a esta lista por favor, hazlo, ¡envíame un pull request! Para una lista de libros gratuitos de hacking disponibles para descargar, ve aquí Tabla de Contenidos...

CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

DEBIAN-CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

UBUNTU-CVE-2026-101003

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

EUVD-2026-88089

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003 Cesanta Mongoose MQTT Broker main.c fn stack-based overflow

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

lab-keamanan-siber

Lab Keamanan Siber Web Security Testing Lab 🚀 Cara Menja...

com.kerb4j:kerb4j-server-tomcat (>=0.0.6, <=0.1.0), org.apache.tomcat:tomcat-catalina-ha (8.5.27) +5 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.27)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.kerb4j:kerb4j-server-tomcat =0.0.6, =0.1.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.27...

org.apache.camel.kafkaconnector:camel-mina-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.karaf:camel-mina (>=4.7.0, <=4.14.5) +6 more potentially affected by CVE-2026-40473 via org.apache.camel:camel-mina (>=3.0.0, <=4.14.5)

org.apache.camel:camel-mina MAVEN version =3.0.0, =0.1.0, =4.7.0, =3.0.0, =4.0.0, =4.0.0, =4.0.0, =4.3.2 Source cves: CVE-2026-40473 Source advisory: MEND:CVE-2026-40473...

A Survey of Web Application Security Tutorials

Developers rely on online tutorials to learn web application security, but tutorial quality varies. We reviewed 132 free security tutorials to examine topic coverage, authorship, and technical depth. Our analysis shows that most tutorials come from vendors and emphasize high-level explanations ov...

This Week in Spring - March 10th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring. As I write this, I am preparing for a trip to Rust, Germany, for one of the best Java conferences in Europe: JavaLand, along with its new companion event, DevLand. It should be fun. Will you be around? If so, say hi. We have ...

org.apache.cxf.fediz:fediz-tomcat8 (1.4.5), org.apache.tomcat:tomcat-catalina (8.5.34) +7 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.34)

org.apache.tomcat:tomcat-coyote MAVEN version 8.5.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 1.4.5 - org.apache.tomcat:tomcat-catalina 8.5.34 -...

What Are Brands Telling You about Smishing? A Cross-Industry Evaluation of Customer Guidance

Phishing attacks through text, also known as smishing, are a prevalent type of social engineering tactic in which attackers impersonate brands to deceive victims into providing personal information and/or money. While smishing awareness and cyber education are a key method by which organizations...

Fantasy Hub is spyware for rent—complete with fake app kits and support

Researchers at Zimperium identified Fantasy Hub, a new Android spyware developed and sold as a subscription on Russian-language cybercrime forums. Malware-as-a-Service MaaS means cybercriminals rent out to malware to other criminals, complete with the infrastructure necessary to harvest and abuse...

Fake CAPTCHA sites now have tutorial videos to help victims install malware

Early on in 2025, I described how criminals used fake CAPTCHA sites and a clipboard hijacker to provide instructions for website visitors that would effectively infect their own machines with an information stealer known as the Lumma Stealer. ClickFix is the name researchers have since given to...