CVE-2025-24367 (Cacti Auth RCE), CVE-2025-9074 (Docker Desktop Escape)

SQL injection abusing PDO substitution in PHP Prepared Statement

There is no excerpt because this is a protected post.

Explore depths of Protobuf pwn: descriptors, wire types, structs

BadSuccessor attack by creating a malicious dMSA object in AD

CVE-2024-0670: Check_MK agent LPE

Exploit Kubernetes cluster & container abuse

Transform XSLT to HTML with extensions → special XML “SSTI”

There is no excerpt because this is a protected post.

Ticket Forgery & Token Abuse with a service account in Win AD