In virtually every company, developers rely on open-source libraries and third-party code to expedite their development efforts. While this approach…
Intention: JumpCloud(link), a cloud directory service, shares many similarities with Active Directory and offers efficient capabilities. In this post, we…
A few months ago, while on a private engagement, i stumbled upon limited access to a Github organisation account. Github…
Sensitive secrets being exposed accidentally / hardcoded as part of scripts/code is always a major concern / blind spot for…
It was found in sahi web editor interface, we can set up password to protect from unauthenticated users to misuse…
Sahi Pro web interface is vulnerable to a Stored XSS . Exploiting this bug needs a prior knowledge of the…
Sahi pro is a application automation tool which is quite popular among automation testers . (https://sahipro.com/ ) Being a former…
This is one of the low risk bug which was found in Sahi Pro. Reports web interface allows a user…
An issue was discovered in Tyto Sahi Pro ( <= 8.x ) A parameter in the web reports module is…
Its been a considerable amount of time since my last OSCE review blog post. ( it does deserve few weeks…