https://library.paracyberbellum.io/rss en Thu, 29 Oct 2026 05:12:26 +0000 https://axeghost.offprint.app/a/3mysixmpap723-a-community-translation-can-run-attacker-chosen-code-in-an-exported-godot-game https://axeghost.offprint.app/a/3mysixmpap723-a-community-translation-can-run-attacker-chosen-code-in-an-exported-godot-game Wed, 28 Oct 2026 08:55:36 +0000 https://tantosec.com/blog/2026/10/telerik-file-read-to-rce/ https://tantosec.com/blog/2026/10/telerik-file-read-to-rce/ Wed, 28 Oct 2026 08:53:30 +0000 https://research.checkpoint.com/2026/tricks-from-the-past-deployed-via-signed-chatgpt-and-claude-binaries/ https://research.checkpoint.com/2026/tricks-from-the-past-deployed-via-signed-chatgpt-and-claude-binaries/ Wed, 28 Oct 2026 08:52:47 +0000 https://portswigger.net/research/scalable-vector-grief https://portswigger.net/research/scalable-vector-grief Wed, 28 Oct 2026 08:48:02 +0000 https://fenrisk.com/research/esc-17-glpi/ https://fenrisk.com/research/esc-17-glpi/ Wed, 28 Oct 2026 08:45:08 +0000 https://blog.ikaes.de/generating-strings-without-parentheses-in-javascript/ https://blog.ikaes.de/generating-strings-without-parentheses-in-javascript/ Wed, 28 Oct 2026 08:24:46 +0000 https://www.eshard.com/blog/side-channel-analysis-arm-cryptocell-310-aes https://www.eshard.com/blog/side-channel-analysis-arm-cryptocell-310-aes Wed, 28 Oct 2026 08:21:57 +0000 https://www.zerodayinitiative.com/blog/2026/10/20/cve-2026-35273-ssrf-to-rce-in-oracle-peoplesoft https://www.zerodayinitiative.com/blog/2026/10/20/cve-2026-35273-ssrf-to-rce-in-oracle-peoplesoft Wed, 28 Oct 2026 08:19:33 +0000 https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/ https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/ Wed, 28 Oct 2026 08:16:32 +0000 https://foxio.io/blog/choose-your-backend-three-tls-bugs-in-goahead https://foxio.io/blog/choose-your-backend-three-tls-bugs-in-goahead Wed, 28 Oct 2026 08:11:43 +0000 https://hunio.org/security/abusing-constrained-delegation-without-protocol-transition-against-spn-less-accounts/ https://hunio.org/security/abusing-constrained-delegation-without-protocol-transition-against-spn-less-accounts/ Wed, 28 Oct 2026 08:08:17 +0000 https://github.com/ilias1988/hacking-cheatsheets https://github.com/ilias1988/hacking-cheatsheets Wed, 28 Oct 2026 08:05:43 +0000 https://agentic.tracebit.com/factory/ https://agentic.tracebit.com/factory/ Tue, 27 Oct 2026 05:11:13 +0000 https://www.8ksec.io/reading-ios-sandbox-profiles/ https://www.8ksec.io/reading-ios-sandbox-profiles/ Tue, 27 Oct 2026 04:52:56 +0000 https://xclow3n.com/post/smuggling-shouldnt-exist-anymore/ https://xclow3n.com/post/smuggling-shouldnt-exist-anymore/ Tue, 27 Oct 2026 04:33:45 +0000 https://github.com/doctorwebltd/malware-iocs https://github.com/doctorwebltd/malware-iocs Tue, 27 Oct 2026 04:24:19 +0000 https://research.checkpoint.com/2026/infostealer-riding-the-ai-train/ https://research.checkpoint.com/2026/infostealer-riding-the-ai-train/ Mon, 26 Oct 2026 05:27:36 +0000 https://github.com/DataDog/pathrunner https://github.com/DataDog/pathrunner Mon, 26 Oct 2026 05:24:20 +0000 https://www.rcesecurity.com/2026/10/imperia-cms-siteactive-template-unauthenticated-ssti-rce-cve-2026-110355/ https://www.rcesecurity.com/2026/10/imperia-cms-siteactive-template-unauthenticated-ssti-rce-cve-2026-110355/ Mon, 26 Oct 2026 05:22:38 +0000 https://github.com/odomojuli/regextokens https://github.com/odomojuli/regextokens Mon, 26 Oct 2026 05:19:41 +0000 https://utkusen.substack.com/p/how-llm-based-penetration-testing https://utkusen.substack.com/p/how-llm-based-penetration-testing Mon, 26 Oct 2026 05:12:52 +0000 https://rexorvc0.com/2026/10/19/Inside-DarkVision/ https://rexorvc0.com/2026/10/19/Inside-DarkVision/ Mon, 26 Oct 2026 04:51:47 +0000 https://xplo1t-sec.github.io/posts/breaking-the-aws-mcp-python-sandbox/ https://xplo1t-sec.github.io/posts/breaking-the-aws-mcp-python-sandbox/ Mon, 26 Oct 2026 04:47:49 +0000 https://www.forensicfocus.com/articles/investigating-wmi-permanent-event-subscription-persistence/ https://www.forensicfocus.com/articles/investigating-wmi-permanent-event-subscription-persistence/ Mon, 26 Oct 2026 04:35:08 +0000 https://www.mitiga.io/blog/connectwise-breach-entra-app-abuse https://www.mitiga.io/blog/connectwise-breach-entra-app-abuse Mon, 26 Oct 2026 04:31:24 +0000 https://dfir.ch/posts/field_note_attacker_workflow/ https://dfir.ch/posts/field_note_attacker_workflow/ Mon, 26 Oct 2026 04:28:42 +0000 https://projectdiscovery.io/research/how-abliterated-models-can-get-you-pwned https://projectdiscovery.io/research/how-abliterated-models-can-get-you-pwned Mon, 26 Oct 2026 04:25:07 +0000 https://github.com/BitterSecurity/Decepticon https://github.com/BitterSecurity/Decepticon Mon, 26 Oct 2026 04:20:18 +0000 https://github.com/PeterGabaldon/WhatAboutSAM https://github.com/PeterGabaldon/WhatAboutSAM Mon, 26 Oct 2026 04:16:25 +0000 https://clearbluejar.github.io/posts/does-abliteration-skew-your-bug-hunting/ https://clearbluejar.github.io/posts/does-abliteration-skew-your-bug-hunting/ Fri, 23 Oct 2026 03:46:53 +0000 https://github.com/epersic/DLLParty/ https://github.com/epersic/DLLParty/ Fri, 23 Oct 2026 03:42:47 +0000 https://mahdi-hsz.github.io/posts/Escaping-Docker/ https://mahdi-hsz.github.io/posts/Escaping-Docker/ Fri, 23 Oct 2026 03:40:47 +0000 https://forever.security/blog/hijacking-ai-agents-via-downloads-folder https://forever.security/blog/hijacking-ai-agents-via-downloads-folder Fri, 23 Oct 2026 03:21:20 +0000 https://ipurple.team/2026/10/22/custom-extensions/ https://ipurple.team/2026/10/22/custom-extensions/ Fri, 23 Oct 2026 03:18:42 +0000 https://blackfield.ch/blog/defeating-enforced-smb-signing/ https://blackfield.ch/blog/defeating-enforced-smb-signing/ Fri, 23 Oct 2026 03:16:10 +0000 https://flatt.tech/research/posts/litellm-pypi-supply-chain-attack/ https://flatt.tech/research/posts/litellm-pypi-supply-chain-attack/ Thu, 22 Oct 2026 02:45:50 +0000 https://calif.io/php2shell/ https://calif.io/php2shell/ Thu, 22 Oct 2026 02:35:57 +0000 https://www.wiz.io/blog/litellm-compromised-steals-credentials https://www.wiz.io/blog/litellm-compromised-steals-credentials Thu, 22 Oct 2026 02:31:54 +0000 https://ellio.tech/en/blog/php2shell-what-we-observed-and-what-to-do/ https://ellio.tech/en/blog/php2shell-what-we-observed-and-what-to-do/ Thu, 22 Oct 2026 02:28:39 +0000