
AzureAD-Attack-Defense
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…

AI-agent skills for distributed-systems testing


Open source templates you can use to bootstrap your security programs

You didn't think I'd go and leave the blue team out, right?

CVE-2026-1434 - Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a...

Advisory detailing a reflected XSS vulnerability in PuneethReddyHC Event Management System v1.0, including impact analysis, reproduction steps, and…

CVE-2026-22849 - Saleor lacks proper HTML sanitization in rich text fields


Detailed disclosure of CVE-2025-47423: Local File Inclusion in Personal Weather Station Dashboard 12_lts. Includes PoC, vulnerable code analysis, and…