September 20, 2020
In this post, you will learn about how I could find the unauthenticated file upload vulnerability in Synology and, according to Synology’s highest amount for website […]
Touhid Shaikh September 20, 2020Latest vulnerability found by Securelayer7 Team
- All
- 3CX
- 3CX Supply Chain
- Account takeover vulnerability
- Active Directory Pentest
- Analyzing Security Vulnerabilities in XWiki
- Android Penetration Testing
- android pentesting
- Android Security
- API Penetration Testing
- API Security
- AppSec vs DevSecOps
- ASP.net Umbraco Security
- Automated Penetration Testing
- Automated Scanning
- AWS Penetration Testing
- Azure Penetration Testing
- Blue team
- bootstrapped startups
- BugDazz
- ChatGPT
- cheap pentesting
- cheap pentesting for bootstrapped startups
- Cloud Penetration Testing
- Cloud Security
- Cloud Vulnerabilities
- Complete Guide
- Compliance
- Compliance Penetration Testing
- Cpanel Security
- Cybersecurity
- Cybersecurity Due Diligence
- Cybersecurity in Healthcare
- cybersecurity mistakes
- Data Security
- Deserialization
- DevSecOps
- Disclosure
- DNS Rebinding
- Events
- External Penetration Testing
- GDPR
- Google Cloud Platform
- GoPhish
- Gratis 2017
- Healthcare
- HIPPA
- HTTP Parameter Pollution
- HTTP Request Smuggling
- Insecure Direct Object Reference
- Internal Penetration Testing
- iOS Penetration Testing
- IoT penetration testing
- IoT Security
- Java Application
- Jobsatsecurelayer7
- Joomla Security
- JSON Web Token
- JSON Web Token Misconfiguration
- JWT
- Knowledge-base
- Kubernetes
- Kubernetes Security
- Latest Data Breach News
- Metasploit
- mongodb-security
- Nessus Explorer
- Network Penetration Testing
- Network Penetration Testing Tools
- Network Pentest Tools
- Network Security
- Network Security Assessment
- Network Security Best Practices
- Network Security Threats
- News
- OAuth
- OAuth Security
- OAuth2.0 Misconfiguration
- OWASP
- OWASP Top 10
- OWASP Top 10 for Large Language Models
- OWASP Top 10 Web Application Security Risks
- password recover vulnerabilties
- pen-test reports
- Penetration Test Cost
- Penetration Testing
- Penetration Testing comapnies
- Penetration Testing companies
- Penetration Testing Tools
- Phishing
- Process for Network pentesting
- Prototype Pollution
- Purple Team
- Python Application
- Ransomware Attack
- RCE
- red team
- red team vs blue team
- Remote Code Execution
- Research
- SecureLayer7 Lab
- SecureLayer7 Services
- Security Advisory
- Serialization
- Server-Side Request Forgery
- small business
- smart contract audit
- Social Engineering Attacks
- Software Security
- SQL Injection
- Telehealth
- Telehealth Services
- Tools
- top cloud security penetration testing companies
- vbulletin security
- Vulnerability
- Vulnerability Scanning
- Web Application Penetration Testing
- Web Application Security
- Web3 Penetration Testing
- Webinar
- Website Penetration Testing
- Website Security
- Windows Application Penetration Testing
- WordPress Vulnerability Àssessment
- Working with Securelayer7
Touhid Shaikh September 20, 2020December 1, 2017
Hidden MiningWebsites are increasingly using JavaScript-based cryptocurrency miners to monetize by levying the CPU power of their visitor’s PC to mine Bitcoin or other cryptocurrencies. Scenario […]
Samrat Das December 1, 2017September 4, 2015
Overview Recently, I was playing around with the Drupal CMS application code. Drupal is an open source CMS application widely used for the purpose of blog […]
Akshay Darekar September 4, 2015September 1, 2015
At SecureLayer7, we continuously try to keep our customers updated with the latest threats which could affect their infrastructure and help them secure their perimeter. More […]
SecureLayer7 Lab September 1, 2015March 9, 2015
I started my day with my regular Malware Cleanup activity when I came across an interesting backdoor web shell file on the server. The server is not specific […]
Sandeep Kamble March 9, 2015March 7, 2015
Over last 3 years, I’ve participated in the Google Reward Program and found some relatively serious vulnerability. Google OAuth Target URL, Upload X.509 Cert and Domain […]
Sandeep Kamble March 7, 2015