People
CVE-2025-27136 – LocalS3 CreateBucketConfiguration Endpoint XXE Injection
Discover how CVE-2025-27136, a critical XXE vulnerability in LocalS3’s CreateBucketConfiguration endpoint, can be exploited to access sensitive files. Learn how the flaw works and how to mitigate it.
PeopleCVE-2025-29306 – Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injectionoffsec.com
PeopleCVE-2025-29891 – Apache Camel Exploit via CAmelExecCommandArgs Header Injectionoffsec.com
PeopleCVE-2025-32433: Vulnerability in Erlang/OTP SSH Implementationoffsec.com
PeopleCVE-2025-29927: Next.js Middleware Authorization Bypassoffsec.com
PeopleCVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Executionoffsec.com
PeopleCVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom Filtersoffsec.com
EventsEndpoint Security ReimaginedBrightTALK
BlogsI'm Doing a Little Consulting — overreactedoverreacted.io
ResourcesIceberg Optionsduckdb.org
ResourcesIceberg Optionsduckdb.org
ResourcesDutch Railway Datasetsduckdb.org
ResourcesDuckLakeduckdb.org
ResourcesDuckLakeduckdb.org
BlogsDefense in Depth for MCP Serverssupabase.com
BlogsSupabase Security Retro: 2025supabase.com
ResourcesAvro Extensionduckdb.org
ResourcesAvro Extensionduckdb.org
ResourcesAvro Extensionduckdb.org
ResourcesAvro Extensionduckdb.org