Welcome to Zero Security, a site dedicated to Cyber Security, Ethical Hacking, Red Teaming and Penetration Testing stuff.
Latest Blog Posts
-
Building a Home Cyber Range with Ludus on a Mini PC
5 November 2026Every red teamer, detection engineer and malware analyst eventually hits the same wall: you need somewhere safe and realistic to practise. Somewhere you can build a full Active Directory estate, detonate tooling, break things, and roll it all back without...
-
Nemotron 3.5 Bolt vs Qwen3.6-35B: Testing a 2-bit 74B Model as My Vision QA Judge
1 November 2026NVIDIA released Nemotron 3.5 Bolt on 15 October: a 74-billion-parameter vision model squeezed to 2 bits so it fits in about 24 GB, with benchmark scores that beat Qwen3.6-35B-A3B, the model that does vision work in my lab. The next...
-
Kicking the Dead 3D Workhorse Back to Life: A Halloween Resurrection of My Ender 3 V2
31 October 2026For a couple of years my Creality Ender 3 V2 sat in the corner like an old workhorse that had quietly died. It still worked, technically. But printing meant walking an SD card across the room and hoping for the...
Hacking Write-ups
Check out the write-ups for details on hacking into various different computer systems…
Latest exploits
- 2026-10-22 [remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
- 2026-10-21 [webapps] pizzafy-1.0 - SQLi
- 2026-10-21 [remote] South River Technologies Titan MFT Server 26.0.0 - code execution
- 2026-10-21 [remote] Synametrics Syncrify 6.2 - command execution
- 2026-10-21 [webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover
Source: Exploit Database
Known exploited vulnerabilities
- 2026-11-06 CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
- 2026-11-04 CVE-2024-27834: Apple Multiple Products Improper Authentication Vulnerability
- 2026-11-03 CVE-2026-119977: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
- 2026-10-30 CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
- 2026-10-30 CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Source: CISA KEV catalog
Updated 7 November 2026, 11:47 UTC
This site is a customized version of The Hacker theme. Thank you to the contributors to that open sourced theme for providing a well made github pages theme template.