All posts in Uncategorized

■■■■■ Insecure Deserialization: CVE-2025-55182 – React Server Components Prototype Chain Vulnerability. https://github.com/ejpir/CVE-2025-55182-poc

■■■■□ Botnets on wheels: the mass hacking of dashcams. Researchers have discovered how to connect to someone else’s dashcam in a matter of seconds, and weaponize it for future attacks. Hackers can Hijack Your DashCams in Seconds and Weaponize them for Future Attacks. Botnets on wheels: the mass hacking of dashcams Hackers can Hijack Your…

■□□□□ Reverse of CTF: Fortinet competition in UAE, where participants (as Blue-Team) needs to flag hacks and compete with other teams. Registration necessary for attendance. https://events.fortinet.com/FlagTheHack-UAE

■□□□□ Unofficial IETF draft calls for grant of five nonillion IPv6 addresses to ham radio operators. www.theregister.com/2025/12/02/ham_radio_ipv6_ietf_draft/

■□□□□ Hackers Allegedly Claim Breach of Mercedes-Benz USA Legal and Customer Data. Hackers Allegedly Claim Breach of Mercedes-Benz USA Legal and Customer Data

■■■□□ Iran Exploits Cyber Domain to Aid Kinetic Strikes The country deploys “cyber-enabled kinetic targeting” prior to — and following — real-world missile attacks against ships and land-based targets. https://www.darkreading.com/threat-intelligence/iran-exploits-cyber-domain-kinetic-strikes

■□□□□ OSINT on Dubai AirShow 2025 crash of Indian fighter jet (LCA Tejas). Pilot likely suffered from A-LOC or G-LOC from the stunt. Pilot’s physiological conditioning as in health / age, sleep deprivation and similar could have played a role. This could have resulted in the misdirected nose of aircraft for a moment resulting in…

■■■■□ Attacking LINE Cryptography [Forensics]. https://think.501.team/research/Attacking+LINE+Cryptography+for+Fun+and+..+Forensics

🟥CVE-2024-21413: PoC Exploit Released for Critical Outlook 0-Click Remote Code Execution Vulnerability. https://github.com/mmathivanan17/CVE-2024-21413 PoC Exploit Released for Critical Outlook 0-Click Remote Code Execution Vulnerability

■■■■□ Shai Hulud v2 Exploits GitHub Actions Workflows as Attack Vector to Steal Secrets. Shai Hulud v2 Exploits GitHub Actions Workflows as Attack Vector to Steal Secrets