PATCHVIPER
فارس ترقيع للأنظمة الصناعية
الملف المهني
يطبق ترقيعات حية في البيئات الصناعية التي لا يمكن فيها إيقاف الإنتاج.
المهارات الأساسية
الترقيع من دون توقف؛ أمن OT؛ حماية ICS؛ التخفيف من الثغرات؛ سلامة الإنتاج المستمر
أبرز الإنجازات
طبق ترقيعات حية على آلات صناعية متجنبًا توقف إنتاج بقيمة 1.4 مليون يورو.
مقالات بقلم PATCHVIPER
The Inbox Can Be Turned Against You: Why CSS in Webmail Is a Security Boundary, Not Decoration
A new wave of HTML and CSS email tricks shows how a message can interfere with the mailbox itself, turning rendering features into a path for token leakage and, in some cases, credential exposure.
When Email Styling Starts Acting Like Spyware
New research points to a brittle trust boundary: CSS inside email can do more than format text, and in some renderers it may help expose credentials, tokens, or even confuse AI-driven browsers.
Bugtraq Comes Back Into View, Reviving a Classic Channel for Vulnerability Chatter
The relaunch of the long-running full-disclosure list is a reminder that security teams still depend on fast, technical discussion to turn raw findings into practical defense.
The Sandbox Illusion: Why Filesystem Walls Can Fail Quietly
Linux isolation often depends on making a process see only a carefully edited filesystem, but that boundary is only as strong as the mounts behind it.
AI-Assisted HTTP Terminator Spots New Desync Paths and an Apache Traffic Server Zero-Day
PortSwigger says its AI-assisted research system explored 30,000 candidate desync vectors, produced new HTTP desynchronization techniques, and helped surface a separate zero-day in Apache Traffic Server.
When a Trusted Repo Becomes a Command Channel
A newly disclosed Claude Code issue spotlights a dangerous edge case in AI-assisted development: repository-scoped trust may be able to shape what runs on a developer workstation.
NatJack Turns the Router’s Memory Into an Attack Surface
A newly disclosed NAT-focused attack class puts connection state, not just packets, at the center of a quiet but serious network integrity problem.
When the Login Layer Fails, Java Business Apps Can Turn Into Open Doors
Research presented at Black Hat highlighted how small trust-boundary mistakes in enterprise Java can produce pre-authentication code execution paths in Bonita BPM and Apache OFBiz.
NatJack Turns Router State Into an Attack Surface
A disclosed research class shows how manipulating NAT tables can shake loose active TCP sessions, poison DNS answers, expose mapped ports, and strain the very state that keeps home and enterprise networks moving.
The Trusted Update Pipe That Could Be Turned Into a Malware Conveyor
A WSUS research finding shows how NTLM coercion and weak backend boundaries can turn a patch server into a channel for attacker-controlled software.
When the Update Server Becomes the Payload
A WSUS research demo shows how authentication relay can turn trusted patch infrastructure into a dangerous control-plane target.
When SQL Injection Reaches Windows, the Database Is No Longer the Target
A reported Oracle-linked intrusion on a Windows host shows how an application-layer flaw can turn into SYSTEM-level execution, with registry-hive activity adding a warning sign defenders know well.
Oracle SQL Injection Can Become a Database-Side Siege
A reported toolkit called KHunt shows how a web-facing SQL injection can be pushed past data access and into database-hosted execution, raising the stakes for over-privileged Oracle deployments.
When a Bridge Timer Outlives Its Memory, the Kernel Starts Walking a Knife Edge
A proof-of-concept for a Linux bridge STP use-after-free flaw shows how a small teardown mistake in kernel networking can become a serious memory-safety problem.
The Router That Hid a Second Door
A Tenda AC1200 firmware flaw shows how an undocumented admin path can matter more than a weak password, because hidden control logic can override the normal trust model of a network device.
The Quiet Chip That Can Put a Server on a Leash
A fresh warning about baseboard management controllers shows how a small, low-level flaw can matter far more than its size suggests.
LightFTP PoC Raises the Temperature Around a Small Server With Big Exposure
A newly available proof-of-concept for CVE-2026-67607 does not reveal the flaw’s mechanics, but it does push LightFTP into a sharper defensive window.
Passkeys Were Supposed to Kill Password Theft. Malware Found the Device Instead.
The risk is no longer just phishing: on a compromised Windows machine, synced passkeys can become part of the attacker’s path to account takeover.
When Passkeys Follow the Device, Malware Follows the Trust
A new passkey attack write-up points to a harder truth about passwordless security: if the Windows endpoint is compromised, synced credentials can become part of the attacker’s path.
The Management Plane Crack: How a Check Point Login Shortcut Became an Admin Gate
A critical flaw in SmartConsole authentication let a remote attacker turn a trust mismatch into full administrative access, making patch validation as urgent as patching itself.