RTSP Known as Real time Streaming Protocol, It’s based on http protocol, and commonly used for streaming media content. This protocol doesn’t directly deal with streaming content but it uses RTP (Real-time Transport Protocol). It uses some basic security mechanism coming from HTTP to perform communication between two entities. Because…

What is colab? Answer will be more meaningful if you ask what is google colab , colab is the short form for Colaboratory , its a product from google , colab’s main motive was to create a environment where many developer can collaborate in a single project , mainly it…

In April 9 2021 , I created an cli based python3 application named git-cve, git-cve can search for Exploit/poc for defined CVE-ID . …

It will be an short article , 6.378 billion people in this planet use smart phone , to call someone or receive call , to browse facebook/social media , to do many smart thing. In the function of calling android always takes + as 0 , Example : Suppose a…

Github allows you to share your standalone code on gist.github.com , and it has a function that allows you to share your code on website or other platform using <script>. …

In October 4th Apache disclosed a vulnerability introduced on Apache HTTP Server 2.4.49 marked as CVE-2021–41773.At the same time Apache released a patch for this vulnerability with its new version 2.4.50 . This vulnerability allows an attacker to bypass path traversal protection using encoding . Bypass looks something like this. …

Similar APIs designed to upload files from authenticated users did not properly sanitize their destination input, allowing directory traversal attacks which could eventually allow an authenticated attacker to execute code on the controller. So Directory traversal Actually allowing an unauthenticated attacker to execute code or store code on controller. So…

In march 10 , F5 released and advisory about the Unauthenticated rce on icontrol . On their report they described that any unauthenticated users can execute arbitrary system commands, create or delete files, or disable services. Vulnerable/affected versions are: F5 BIG-IQ 6.0.0–6.1.0 F5 BIG-IQ 7.0.0–7.0.0.1 F5 BIG-IQ 7.1.0–7.1.0.2 F5 BIG-IP…

Most of Our Country ISP/Big_org_network use mikrotik for their network system management , most of time these isp/organization network do not update their isp , and thats the issue here . Most of the mikrotik can be hacked on bangladesh by using 2018’s exploit . This proves we are mostly…