HTB Writeup – WingData

Posted on 2026-02-15

WingFTP RCE (CVE-2025-47812), Python tarfile overflow (CVE-2025-4517)

HTB Writeup – Pterodactyl

Posted on 2026-02-09

Php lfi2rce (CVE-2025-49132), udisks fs privesc (CVE-2025-601[8|9])

Posted on 2026-02-01

IDOR, AWS bucket enumeration, sudo FACTS privesc

Posted on 2026-01-19

Wifi pivot game: capture deauthed hankshakes & Eaphammer theft

Posted on 2026-01-11

Chrome extension JavaScript injection & Python .pyc poisoning

Posted on 2025-12-07

CVE-2025-24367 (Cacti Auth RCE), CVE-2025-9074 (Docker Desktop Escape)

Posted on 2025-11-30

SQL injection abusing PDO substitution in PHP Prepared Statement

Posted on 2025-11-24

pgAdmin CVE-2025-2945, Docker, PWM, ESC7 → ESC16 → ESC6

Posted on 2025-11-02

Exploit Kubernetes cluster & container abuse

Posted on 2025-10-26

Transform XSLT to HTML with extensions → special XML “SSTI”