There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it.
A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.
https://t.co/kue7kd0XEX
Excited to announce a new open-source tool I've been working on: pecert (https://t.co/JuqKaOB1E8)!
pecert is a simple and efficient Python tool to extract digital certificate information from PE (Portable Executable) files like .exe and .dll.
HTML Injection That Paid $3K
Main issue: most websites only rely on SameSite cookies for CSRF protection.
No XSS? No problem.
HTML Injection + <form> can still trigger sensitive actions.
Hope this helps!
Honorable mention to my bug bounty partner @fariqfgi 🙌
Kemarin Sabtu saya diundang oleh salah satu top PTN untuk melakukan FGD dengan fokus pengembangan materi akademik Cyber Security yang lebih dekat dengan industri. Acaranya menyenangkan, kampusnya keren, dosennya progresif. Semoga Fresh Graduate dari kampus ini memiliki bekal kuat untuk industri Cyber Security di Indonesia 🫶🏻
I'll be speaking at Black Hat MEA 2024.
Feel free to come up and say hi if you meet me there. I'm going to be around briefing room 3 at day-1 and strolling around at day 2 and 3.
P.S. I bring some sticker for your gadget 💻