HADESS
Cyber Security Magic
grafana attack surface

Grafana Attack Surface

Grafana 7.5.1, a popular open-source analytics and monitoring platform, contains two critical vulnerabilities that can be exploited by attackers. The first vulnerability is a server-side request forgery (SSRF) found in the function `sendWebRequestSync` within the `pkg/services/notification/webhook.go` file. The second vulnerability is a directory traversal issue identified in the function `DownloadFile` within `pkg/cmd/grafana-cli/services/api_client.go`. These vulnerabilities have…

Read Full News
Peppermint Security Issues

Peppermint Security Issues (Ebook)

Peppermint, a widely adopted software in the realm of web development and content management, offers users an intuitive interface and a broad range of features. However, as with any complex system, it is susceptible to security vulnerabilities that can jeopardize the confidentiality, integrity, and availability of data and systems. This comprehensive article aims to shed…

Read Full News
Aapache Sling XSS: CVE-2022-46769

Apache Sling XSS in Modern Application: CVE-2023-23397 (Ebook)

Apache Sling is an open-source web framework based on the Java Content Repository (JCR) technology. It is designed to enable developers to create content-centric applications and provide a RESTful framework for building web applications on top of the Java platform. However, like any software, Apache Sling is not immune to vulnerabilities, and one such vulnerability…

Read Full News
Appsmith in The Wild

Appsmith in The Wild (Ebook)

Appsmith is a popular low-code development platform that allows users to build and deploy custom applications. As with any software system, security risks are a significant concern that must be addressed to ensure the confidentiality, integrity, and availability of data and resources. This abstract presents a deep analysis of the security risks associated with Appsmith…

Read Full News
Emotional Intelligence

Emotional Intelligence (Ebook)

Harnessing OSINT Methods to Uncover the Emotions and Moods of Individuals. The field of Open Source Intelligence (OSINT) has witnessed remarkable advancements in recent years, leveraging technology to extract valuable insights from publicly available information. One fascinating application within the realm of OSINT is the use of various methods to identify and decipher the moods…

Read Full News
TACFAM DB-120WL PWN

TACFAM DB-120WL PWN (Ebook)

This executive summary provides an overview of a critical code execution vulnerability discovered in the TACFAM DB-120WL networking device. The vulnerability allows remote attackers to execute arbitrary code on the device, potentially compromising the entire network. The analysis covers various aspects of the vulnerability, including technical details, exploitation process, and potential impact. The following key…

Read Full News
OWASP Top 10 for Large Language Model Applications

OWASP Top 10 for Large Language Model Applications (EBook)

Welcome to this comprehensive article discussing the OWASP Top 10 vulnerabilities specifically focused on Large Language Model (LLM) applications. As the field of natural language processing and machine learning continues to advance, LLMs have become increasingly powerful and prevalent in various domains, including chatbots, language translation, content generation, and more. However, with great power comes…

Read Full News

Behind A Crypto Scam Case

FOREWARD Scams and fraudulent activities have been prevalent throughout human history, and with the advent of the internet and digital technologies, these scams have taken on new forms and have become even more sophisticated. To combat these scams, it’s important to use a variety of techniques and tools to uncover the individuals and organizations behind…

Read Full News