Python SSTI and Django Cache poisoning with Pickle Deserialization

There is no excerpt because this is a protected post.

There is no excerpt because this is a protected post.

Next.js auth bypass (CVE-2025-29927) & Hashicorp Terraform abusing

A journey for bug hunting in Linux binary fuzzing

CVE-2024-28397: Js2py sandbox escape

There is no excerpt because this is a protected post.

XWiki RCE (CVE 2025‑24893) & NetDATA Path Hijacking (CVE-2024-32019)

Exploit PHP ssh2 extension & Linux ELF self-signed signature

NATS exploit + ESC10 for Schannel Certificate Mapping