offsec.com · People

People listings from offsec.com on TechiSeek. 77 public listings.

• When AI Becomes the Weak Link: Rethinking Supply Chain Security (offsec.com)
  AI is becoming a hidden entry point in supply chain attacks. Here’s why it matters and what organizations must do to stay protected.
• CVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Execution (offsec.com)
  Discover CVE-2024-13059, a critical vulnerability flat that affects AnythingLLM's handling of ASCII filenames in the multer library.
• CVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementation (offsec.com)
  Read about a critical vulnerability found in the SSH implementation of Erlang/OTP arising from improper handling of SSH protocol messages.
• CVE-2025-29927: Next.js Middleware Authorization Bypass (offsec.com)
  In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header.
• CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation (offsec.com)
  Read about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting UR…
• CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution (offsec.com)
  A critical SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromi…
• CVE-2024-46986 – Arbitrary File Write in Camaleon CMS Leading to RCE (offsec.com)
  A vulnerability was discovered in Camaleon CMS authenticating attackers to write files on the file system which enabled them to execut remo…
• Recompiling Your “Self”: A Cybersecurity-Inspired Guide to Resilience (offsec.com)
  A recap of our mental health OffSec LIVE session, with tips on ensuring intentional change, self-awareness, and digital resilience in cyber…
• CVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom Filters (offsec.com)
  A critical remote code execution (RCE) vulnerability in the D-Tale data visualization tool was identified which allowed attackers to execut…
• CVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluence (offsec.com)
  Critical RCE vulnerability (CVE-2024-21683) in Atlassian Confluence Data Center and Server (v5.2–8.9.0) allows authenticated users to execu…
• What It Really Means to "Try Harder" (offsec.com)
  Discover how OffSec’s “Try Harder” mantra evolved into a mindset, and how it helps learners build grit, creativity, and real-world problem-…
• CVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usage (offsec.com)
  CVE-2025-3248 is a critical RCE vulnerability in Langflow that allows unauthenticated attackers to execute arbitrary Python code via unsani…
• CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki via SolrSearch Macro (offsec.com)
  An RCE vulnerability in XWiki was found allowing unauthenticated attackers to execute arbitrary Groovy code remotely without authentication…
• OffSec's Take on the Global Generative AI Adoption Index (offsec.com)
  Discover OffSec's take on the latest Global Generative AI Adoption Index report released by AWS.
• CVE-2024-39914 – Unauthenticated Command Injection in FOG Project's export.php (offsec.com)
  Discover details about CVE-2024-39914, a critical unauthenticated command injection vulnerability in FOG Project ≤ 1.5.10.34. Learn how att…
• CVE-2025-29306 – Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injection (offsec.com)
  Discover details about CVE-2025-29306, a critical RCE vulnerability in FoxCMS 1.2.5. Learn how unsafe use of PHP's unserialize() function e…
• CVE-2025-27636 – Remote Code Execution in Apache Camel via Case-Sensitive Header Filtering Bypass (offsec.com)
  Discover the critical Apache Camel vulnerability (CVE-2025-27636) that allows remote code execution via case-sensitive HTTP header manipula…
• What is Phishing? Introduction to Phishing Demo (for Beginners) (offsec.com)
  Learn how phishing attacks work and how to spot them. Watch OffSec’s animated video to protect yourself from scams, spoofed sites, and soci…
• CVE-2024-12029 – InvokeAI Deserialization of Untrusted Data vulnerability (offsec.com)
  CVE-2024-12029: A critical deserialization vulnerability in InvokeAI's /api/v2/models/install endpoint allows remote code execution via mal…
• How OffSec Certifications Help You Hire With Confidence (offsec.com)
  Hire cyber talent with confidence: OffSec certifications prove candidates can perform under pressure, not just talk the talk.
• Get Noticed: 5 Cybersecurity Job Hunt Tips (offsec.com)
  Want to get hired in cybersecurity? Discover five proven tips to boost your visibility, showcase your skills, and connect with top employer…
• CVE-2025-27136 – LocalS3 CreateBucketConfiguration Endpoint XXE Injection (offsec.com)
  Discover how CVE-2025-27136, a critical XXE vulnerability in LocalS3’s CreateBucketConfiguration endpoint, can be exploited to access sensi…
• Talent Finder: The Smarter Way to Hire and Get Hired (offsec.com)
  Talent Finder connects certified cybersecurity professionals with companies that value proven skill. It’s a smarter way to hire and get hir…
• CVE-2025-30208 – Vite Arbitrary File Read via @fs Path Traversal Bypass (offsec.com)
  Discover CVE-2025-30208, a critical arbitrary file read vulnerability in the Vite development server. Learn how remote attackers exploit @f…
• CVE-2025-29891 – Apache Camel Exploit via CAmelExecCommandArgs Header Injection (offsec.com)
  Discover how CVE-2025-29891 impacts Apache Camel via CAmelExecCommandArgs header injection. Learn how attackers exploit this misconfigurati…
• 9 OSCP Study Tips to Help You Succeed (offsec.com)
  We’ve gathered some of the best OSCP study tips from the community and compiled them into one place to help prepare you for your upcoming e…
• 5 Signs You’re Ready for a Career in Cybersecurity (offsec.com)
  Are you ready for a career in cybersecurity? Discover five clear signs you’re ready to thrive, with advice on how to get started.
• Best Cybersecurity Certifications for Beginners (offsec.com)
  Discover the best entry-level cybersecurity certifications in 2025. Compare costs, career paths, and earning potential for security certifi…
• Red Team Exercise (offsec.com)
  Learn how red team exercises simulate real cyberattacks to test defenses. Discover benefits, implementation steps, and how to strengthen yo…
• What Is Ethical Hacking? (offsec.com)
  Learn what ethical hacking is, how it differs from malicious hacking, and why it's crucial for cybersecurity. Explore tools, certifications…
• Red Teaming vs Pentesting | Key Differences (offsec.com)
  Discover the differences between red teaming and penetration testing. Learn when to use each approach and how they strengthen your security…
• How to Prevent Prompt Injection (offsec.com)
  Discover 5 strategies to prevent prompt injection in LLMs. Protect your AI systems against malicious inputs with expert security strategies…
• The Complete Guide to Preparing for Your First OffSec Certification (offsec.com)
  Prepare for your first OffSec certification with our comprehensive guide. Learn exam structure, costs, technical requirements, and proven s…
• From Failure to 100: How Akas Earned His OSCP+ (offsec.com)
  From failure to perfection—Akas Wisnu Aji’s OSCP+ journey shows that resilience pays off.
• Recent Vulnerabilities in Redis Server’s Lua Scripting Engine (offsec.com)
  Discover multiple Redis CVEs, including the critical CVE-2025-49844 — a 13-year-old use-after-free vulnerability in the Lua parser that can…
• OSCP vs. OSWE: Which Certification Fits Your Career Goals? (offsec.com)
  OSCP vs OSWE: find out which OffSec certification suits you best! Build pen testing expertise or master advanced web exploit development.
• Save 20% on OffSec Learn One (offsec.com)
  Get 20% off Learn One with labs, exams, and certifications. Act fast! Discount will be gone in a flash.
• Unauthenticated Remote Code Execution Vulnerability in WSUS Service (offsec.com)
  CVE-2025-59287 exposes a critical WSUS deserialization flaw enabling unauthenticated remote code execution via unsafe AuthorizationCookie h…
• Why Enterprises Are Moving from Generic Cyber Training to Cyber Ranges (offsec.com)
  Transform enterprise cyber training with realistic cyber ranges. Move beyond generic courses to hands-on attack simulations in production-l…
• CVE-2025-55182 – React Server Components RCE via Flight Payload Deserialization (offsec.com)
  React Server Components promise less client-side JavaScript, but that convenience can hide serious risk. Learn how CVE-2025-55182 (CVSS 10.…
• How to Gain Experience in Cybersecurity: 8 Steps (offsec.com)
  Learn how to build cybersecurity experience through hands-on labs, CTF competitions, certifications, and portfolio projects. Start your jou…
• How Will AI Affect Cybersecurity? (offsec.com)
  Learn how AI transforms cybersecurity through enhanced threat detection, new attack methods, model vulnerabilities, and the evolving skills…
• Blue Team vs Red Team: Should Defenders Learn Offensive Skills? (offsec.com)
  Discover why blue team defenders benefit from red team skills. Learn how offensive knowledge improves detection, incident response, and car…
• 6 Benefits of a Fully Certified Cybersecurity Team (offsec.com)
  Discover 6 key benefits of a fully certified cybersecurity team, from faster onboarding to confident hiring. Learn how unified training dri…
• Closing Out 2025 with Gratitude (and Momentum) (offsec.com)
  As 2025 comes to a close, we want to pause and say thank you for making this year one of our most meaningful yet. Here's a recap of 2025!
• Offensive Security in the Age of AI: Red Teaming LLM (offsec.com)
  LLMs change how red teams test applications. Explore OffSec’s LLM Red Teaming Learning Path and build practical AI testing skills.
• How OffSec Maps Cybersecurity Training to Industry Frameworks (offsec.com)
  How MITRE ATT&CK, D3FEND, and NICE/NIST frameworks help connect hands-on cybersecurity training to real-world work.
• CVE-2026-24061 – GNU InetUtils telnetd Authentication Bypass Vulnerability (offsec.com)
  CVE-2026-24061 enables unauthenticated attackers to exploit GNU telnetd and gain immediate root shells over the network.
• How Attackers Target AI Systems (offsec.com)
  Learn the four primary goals attackers pursue when targeting AI systems: data exfiltration, model manipulation, trust erosion, and lateral…
• Defending Against AI-Powered Cyber Attacks: Why Your Blue Team Needs New Skills (offsec.com)
  AI-powered cyber attacks are outpacing traditional defenses. Learn the four key threat categories and the new skills blue teams need to def…