Your Cybersecurity
Learning Base
Free CEH-aligned courses, live CVE threat intelligence, and in-depth security research — everything you need to learn ethical hacking and stay ahead of real threats.
Everything in one place
Learn. Track. Stay Ahead.
Free courses, live threat intelligence, and deep security research — built for people serious about cybersecurity.
Learn ethical hacking — in plain words.
Beginner-friendly cybersecurity courses covering 100% of the CEH exam, with narrated whiteboard videos, quizzes, and spaced-repetition review. No login required — start learning in seconds.
Latest CVEs
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name: 393255e7302ae5503331d45802e2eee01c6a47fe. You should upgrade the affected component.
Oct 11
A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Oct 11
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9.
Oct 11
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.
Oct 11
Latest Articles
KRITIS 2026: Germany's Critical Infrastructure Cybersecurity Requirements — Complete Guide
The definitive KRITIS 2026 guide: §8a BSIG obligations, BSI-KritisV sector thresholds, KRITIS-Dachgesetz physical resilience duties, NIS2UmsuCG overlap, audit timelines, and fine exposure up to €10M. Updated October 2026.
Active Directory Hacking: Complete Penetration Testing Guide (2026)
Complete Active Directory hacking guide: enumeration with BloodHound, Kerberoasting, Pass-the-Hash, DCSync, Golden Ticket attacks, and defence techniques.
Bug Bounty for Beginners: How to Find Your First Bug and Get Paid (2026)
Complete beginner's guide to bug bounty hunting: best platforms, how to write reports, realistic earnings, and step-by-step advice to land your first bounty.