Category: OffSec

Cybersecurity is one of the most exciting and impactful fields in technology. It offers the chance to solve complex problems, protect critical systems, and make a real difference in how the world stays connected and secure. Every day brings new…

Read more →

We’ve gathered some of the best OSCP study tips from the community and compiled them into one place to help prepare you for your upcoming exam! The post 9 OSCP Study Tips to Help You Succeed appeared first on OffSec.…

Read more →

Discover how CVE-2025-29891 impacts Apache Camel via CAmelExecCommandArgs header injection. Learn how attackers exploit this misconfiguration for remote code execution and how to secure your systems. The post CVE-2025-29891 – Apache Camel Exploit via CAmelExecCommandArgs Header Injection appeared first on…

Read more →

Talent Finder connects certified cybersecurity professionals with companies that value proven skill. It’s a smarter way to hire and get hired. The post Talent Finder: The Smarter Way to Hire and Get Hired appeared first on OffSec. This article has…

Read more →

If you’ve already set your heart on your chosen career path, you might understand that getting noticed by the right employer isn’t always straightforward.  When we speak with OffSec learners, many will say that getting the first job is the…

Read more →

Discover CVE-2025-30208, a critical arbitrary file read vulnerability in the Vite development server. Learn how remote attackers exploit @fs URL handling to access sensitive files. The post CVE-2025-30208 – Vite Arbitrary File Read via @fs Path Traversal Bypass appeared first…

Read more →

Discover how CVE-2025-27136, a critical XXE vulnerability in LocalS3’s CreateBucketConfiguration endpoint, can be exploited to access sensitive files. Learn how the flaw works and how to mitigate it. The post CVE-2025-27136 – LocalS3 CreateBucketConfiguration Endpoint XXE Injection appeared first on…

Read more →

Hire cyber talent with confidence: OffSec certifications prove candidates can perform under pressure, not just talk the talk. The post How OffSec Certifications Help You Hire With Confidence appeared first on OffSec. This article has been indexed from OffSec Read…

Read more →

CVE-2024-12029: A critical deserialization vulnerability in InvokeAI’s /api/v2/models/install endpoint allows remote code execution via malicious model files. Exploit risk for AI art servers. The post CVE-2024-12029 – InvokeAI Deserialization of Untrusted Data vulnerability appeared first on OffSec. This article has…

Read more →

Learn how phishing attacks work and how to spot them. Watch OffSec’s animated video to protect yourself from scams, spoofed sites, and social engineering. The post What is Phishing? Introduction to Phishing Demo (for Beginners) appeared first on OffSec. This…

Read more →

Discover the critical Apache Camel vulnerability (CVE-2025-27636) that allows remote code execution via case-sensitive HTTP header manipulation in the exec component. Learn how attackers exploit this flaw and how to mitigate it. The post CVE-2025-27636 – Remote Code Execution in…

Read more →

Discover details about CVE-2024-39914, a critical unauthenticated command injection vulnerability in FOG Project ≤ 1.5.10.34. Learn how attackers can exploit export.php to execute system commands or deploy persistent webshells. The post CVE-2024-39914 – Unauthenticated Command Injection in FOG Project’s export.php…

Read more →

Discover how OffSec’s “Try Harder” mantra evolved into a mindset, and how it helps learners build grit, creativity, and real-world problem-solving skills. The post What It Really Means to “Try Harder” appeared first on OffSec. This article has been indexed…

Read more →

Discover how OffSec’s “Try Harder” mantra evolved into a mindset, and how it helps learners build grit, creativity, and real-world problem-solving skills. The post What It Really Means to “Try Harder” appeared first on OffSec. This article has been indexed…

Read more →

CVE-2025-3248 is a critical RCE vulnerability in Langflow that allows unauthenticated attackers to execute arbitrary Python code via unsanitized input to exec(). Learn how it works and how to protect your system. The post CVE-2025-3248 – Unauthenticated Remote Code Execution…

Read more →

A critical RCE vulnerability (CVSS 9.9) in Roundcube Webmail (

Read more →

Critical RCE vulnerability (CVE-2024-21683) in Atlassian Confluence Data Center and Server (v5.2–8.9.0) allows authenticated users to execute arbitrary code via malicious code macros. The post CVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluence appeared first on…

Read more →

An RCE vulnerability in XWiki was found allowing unauthenticated attackers to execute arbitrary Groovy code remotely without authentication or prior access. The post CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki via SolrSearch Macro appeared first on OffSec. This article…

Read more →

A critical remote code execution (RCE) vulnerability in the D-Tale data visualization tool was identified which allowed attackers to execute arbitrary system exams, abusing an exposed API endpoint. The post CVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom…

Read more →

Discover OffSec’s take on the latest Global Generative AI Adoption Index report released by AWS. The post OffSec’s Take on the Global Generative AI Adoption Index appeared first on OffSec. This article has been indexed from OffSec Read the original…

Read more →