July 19, 2024

Advanced Methodology for Penetration Testing Applications & APIs Behind a Firewall/WAF

Penetration testing applications and APIs behind a Web Application Firewall (WAF) requires sophisticated techniques to bypass protective measures. Here is an advanced and detailed methodology from […]
July 2, 2024

Major Security Flaws in Mailcow: Inside the XSS and Path Traversal Exploits (CVE-2024-31204 and CVE-2024-30270)

Summary Mailcow’s XSS and file overwrite vulnerabilities allow attackers to inject code, hijack sessions, and execute commands, highlighting critical security risks. Introduction This analysis thoroughly examines […]