Soosyze CMS 2.0 – Brute Force Login

# Exploit Title: Soosyze CMS 2.0 – Brute Force Login # Google Dork: N/A # Date: 2025-08-13 # Exploit Author: Beatriz Fresno Naumova (beafn28) # Vendor Homepage: https://soosyze.com/ # Software Link: https://github.com/soosyze/soosyze # Version: 2.0 (tested) # Tested on: macOS Sonoma 14.x (Apple Silicon M1), /bin/bash 3.2 & Homebrew bash 5.2, curl 8.x, BSD sed …

Read More

Microsoft Windows 10.0.19045 – NTLMv2 Hash Disclosure

# Exploit Title: Microsoft Windows 10.0.19045 – NTLMv2 Hash Disclosure # Date: 13/08/2025 # Exploit Author: Ruben Enkaoua # Author link: https://x.com/RubenLabs, https://github.com/rubenformation # Original Blog: https://cymulate.com/blog/zero-click-one-ntlm-microsoft-security-patch-bypass-cve-2025-50154/ # Vendor Homepage: https://microsoft.com # Software Link: https://www.microsoft.com/en-us/software-download # Version: All versions prior to patch tuesday august 2025 # Tested on: Windows 10.0.19045 # CVE : CVE-2025-50154 #…

Read More

What Do Kids Actually Think About AI?

If you try to get AI to do all your work, it’s definitely detrimental, because then you lose your skills to write and read. It can make students more lazy. But that’s your loss, if you’re using it to cheat on your work. I feel like nowadays AI gets portrayed in a very bad light,…

Read More

Strange new shapes may rewrite the laws of physics

How can the behavior of elementary particles and the structure of the entire universe be described using the same mathematical concepts? This question is at the heart of recent work by the mathematicians Claudia Fevola from Inria Saclay and Anna-Laura Sattelberger from the Max Planck Institute for Mathematics in the Sciences, recently published in the…

Read More

Keeping an Eye on MFA-Bombing Attacks

I recently woke up (as one does each day, hopefully) and saw a few Microsoft MFA prompts had pinged me overnight.  Since I had just awakened, I just deleted them, then two minutes later clued in – this means that one of my passwords was compromised, and I had no idea which site the compromised…

Read More

PHPMyAdmin 3.0 – Bruteforce Login Bypass

“”” Exploit-Title: PHPMyAdmin 3.0 – Bruteforce Login Bypass Author: Nikola Markovic (badgerinc23@gmail.com) Date: 2023 Google-Dork: intext: phpMyAdmin Vendor: https://www.phpmyadmin.net/ Version: >3.0 & 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 Tested on: win/linux/unix Python-Version: 3.0 CVE : CVE-2015-6830 “”” import urllib.request import urllib.parse import urllib import threading import http.cookiejar import re import sys def CheckLogin(target): …

Read More