CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.
Active React2Shell exploitation uses malicious NGINX configurations to hijack web traffic, targeting Baota panels, Asian TLDs ...
A threat actor is compromising NGINX servers in a campaign that hijacks user traffic and reroutes it through the attacker's ...
A new threat actor called Amaranth Dragon, linked to APT41 state-sponsored Chinese operations, exploited the CVE-2025-8088 ...
Active attacks exploit Metro4Shell (CVE-2025-11953) in React Native CLI to execute commands and deploy Rust malware.
Agentic AI tools like OpenClaw promise powerful automation, but a single email was enough to hijack my dangerously obedient ...
├── scanner.py # Entry point (CLI) ├── core/ │ ├── scanner.py # CloudflareScanner class │ ├── oast.py # OAST client & server │ ├── poc_generator.py # Auto POC generation │ └── llm_analyzer.py # AI ...
Abstract: Large Language Models (LLMs) have demonstrated remarkable capabilities in code-related tasks, raising concerns about their potential for automated exploit generation (AEG). This paper ...
Every time a building collapses in Nairobi, the sequence is grimly familiar. There is outrage, official visits to the rubble, pledges of investigations and suspensions announced with urgency. Then, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results