Post

PentesterLab
@pentesterlab.com

๐—ฅ๐—ฒ๐˜€๐—ฒ๐—ฎ๐—ฟ๐—ฐ๐—ต ๐—ช๐—ผ๐—ฟ๐˜๐—ต ๐—ฅ๐—ฒ๐—ฎ๐—ฑ๐—ถ๐—ป๐—ด - ๐—ช๐—ฒ๐—ฒ๐—ธ ๐Ÿณ, ๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฒ Parser Differential, TypeScript and AI ๐Ÿ‘‡

PentesterLab
@pentesterlab.com

โจ ๐—•๐—ฟ๐—ฒ๐—ฎ๐—ธ๐—ถ๐—ป๐—ด ๐——๐—ผ๐˜„๐—ป ๐—–๐—ฉ๐—˜-๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฒ-๐Ÿฎ๐Ÿฑ๐Ÿฌ๐Ÿฐ๐Ÿต: ๐—›๐—ผ๐˜„ ๐—ง๐˜†๐—ฝ๐—ฒ๐—ฆ๐—ฐ๐—ฟ๐—ถ๐—ฝ๐˜ ๐—ง๐˜†๐—ฝ๐—ฒ๐˜€ ๐—™๐—ฎ๐—ถ๐—น๐—ฒ๐—ฑ ๐—ป๐Ÿด๐—ป'๐˜€ ๐—ฆ๐—ฒ๐—ฐ๐˜‚๐—ฟ๐—ถ๐˜๐˜† A great explanation of the recent vulnerabilities impacting n8n. If you are working in security on TypeScript projects, it's a must read. hetmehta.com/posts/n8n-ty....

hetmehta.comBreaking Down CVE-2026-25049: How TypeScript Types Failed n8n's Security | hetmehta.comDeep technical analysis of CVE-2026-25049: How type confusion bypassed n8n's security patch and why TypeScript types aren't runtime security boundaries
PentesterLab
@pentesterlab.com

โš’๏ธ ๐—œ๐—ป๐˜๐—ฟ๐—ผ๐—ฑ๐˜‚๐—ฐ๐—ถ๐—ป๐—ด ๐—”๐˜‚๐—ด๐˜‚๐˜€๐˜๐˜‚๐˜€: ๐—ข๐—ฝ๐—ฒ๐—ป ๐—ฆ๐—ผ๐˜‚๐—ฟ๐—ฐ๐—ฒ ๐—Ÿ๐—Ÿ๐—  ๐—ฃ๐—ฟ๐—ผ๐—บ๐—ฝ๐˜ ๐—œ๐—ป๐—ท๐—ฒ๐—ฐ๐˜๐—ถ๐—ผ๐—ป ๐—ง๐—ผ๐—ผ๐—น Praetorian is back with another tool (one of their 12 Caesars): Augustus... Make sure you check it out! www.praetorian.com/blog/introdu....

praetorian.comIntroducing Augustus: Open Source LLM Prompt Injection ToolExplore LLM fingerprinting and its role in exposing vulnerable Ollama servers online to unauthorized access risks.

0 reposts0 likes

PentesterLab
@pentesterlab.com

๐Ÿคบ ๐—ช๐—ต๐—ฒ๐—ป ๐—ง๐˜„๐—ผ ๐—ฃ๐—ฎ๐—ฟ๐˜€๐—ฒ๐—ฟ๐˜€ ๐——๐—ถ๐˜€๐—ฎ๐—ด๐—ฟ๐—ฒ๐—ฒ: ๐—˜๐˜…๐—ฝ๐—น๐—ผ๐—ถ๐˜๐—ถ๐—ป๐—ด ๐—ค๐˜‚๐—ฒ๐—ฟ๐˜† ๐—ฆ๐˜๐—ฟ๐—ถ๐—ป๐—ด ๐——๐—ถ๐—ณ๐—ณ๐—ฒ๐—ฟ๐—ฒ๐—ป๐˜๐—ถ๐—ฎ๐—น๐˜€ ๐—ณ๐—ผ๐—ฟ ๐—ซ๐—ฆ๐—ฆ If you enjoy parser differential issues, you are going to love this exploit. Don't think "It's a CTF challenge" or "It's just an XSS", read between the lines to find the real gold. blog.voorivex.team/when-two-par....

blog.voorivex.teamblog.voorivex.team
PentesterLab
@pentesterlab.com

๐Ÿค– ๐—ฅ๐—–๐—˜ ๐—ถ๐—ป ๐—š๐—ผ๐—ผ๐—ด๐—น๐—ฒ'๐˜€ ๐—”๐—œ ๐—ฐ๐—ผ๐—ฑ๐—ฒ ๐—ฒ๐—ฑ๐—ถ๐˜๐—ผ๐—ฟ ๐—”๐—ป๐˜๐—ถ๐—ด๐—ฟ๐—ฎ๐˜ƒ๐—ถ๐˜๐˜† - $๐Ÿญ๐Ÿฌ๐Ÿฌ๐Ÿฌ๐Ÿฌ ๐—•๐—ผ๐˜‚๐—ป๐˜๐˜† A detailed blog post on hacking Antigravity with a lot of interesting details on its inner workings. www.hacktron.ai/blog/hacking....

hacktron.aiRCE in Google's AI code editor Antigravity - $10000 BountyHacktron AI Research Team discovered a critical RCE in Googleโ€™s Antigravity IDE that lets attackers take over your system just by opening a malicious website.
PentesterLab
@pentesterlab.com

๐Ÿš› ๐—ง๐—ฟ๐—ฎ๐—ถ๐—น๐—ถ๐—ป๐—ด ๐——๐—ฎ๐—ป๐—ด๐—ฒ๐—ฟ: ๐—ฒ๐˜…๐—ฝ๐—น๐—ผ๐—ฟ๐—ถ๐—ป๐—ด ๐—›๐—ง๐—ง๐—ฃ ๐—ง๐—ฟ๐—ฎ๐—ถ๐—น๐—ฒ๐—ฟ ๐—ฝ๐—ฎ๐—ฟ๐˜€๐—ถ๐—ป๐—ด ๐—ฑ๐—ถ๐˜€๐—ฐ๐—ฟ๐—ฒ๐—ฝ๐—ฎ๐—ป๐—ฐ๐—ถ๐—ฒ๐˜€ Probably one of the lesser-known features of HTTP... Trailers. This post provides details on the feature and explains how they can be leveraged to find security issues. www.sebsrt.xyz/blog/trailin....

sebsrt.xyzTrailing Danger: exploring HTTP Trailer parsing discrepanciesTrailing Danger: exploring HTTP Trailer parsing discrepancies