cy//ective

Vulnerabilities in Cordaware bestinformed A write-up of CVE-2025-0422, CVE-2025-0423, CVE-2025-0424, and CVE-2025-0425

The first CVEs of 2025 are live!🚨
We discovered ~10 vulnerabilities in Cordaware bestinformed, leading to 4 CVEs. They can be chained for an unauthenticated compromise of the server and all connected clients.👾 CVE-2025-042{2..5}
cyllective.com/blog/posts/c...

#blogpost #cybersecurity #CVE #infosec

OAuth Labs: OAuth 2.0 Vulnerabilites Introducing our latest project: the OAuth Labs. A hands-on approach to OAuth 2.0 vulnerabilities

🚀 New from cyllective: 𝐎𝐀𝐮𝐭𝐡 𝐋𝐚𝐛𝐬 🔒

🔑 Master OAuth 2.0 with hands-on Docker-based labs:
- JWT signature flaws
- Open redirect risks
- Claim validation issues

💻 Devs & pentesters: sharpen your skills!
👉 cyllective.com/blog/posts/o...

#OAuth #Cybersecurity #Training #InfoSec #Security