HTB Writeup – DevArea

Posted on 2026-03-30

Java CXF SOAF XXE (CVE-2022-46364) to Hoverfly auth RCE (CVE-2025-54123)

HTB Writeup – VariaType

Posted on 2026-03-15

Fonttools to file write, FontForge to RCE, setuptools to path traversal

Posted on 2026-02-15

WingFTP RCE (CVE-2025-47812), Python tarfile overflow (CVE-2025-4517)

Posted on 2026-02-01

IDOR, AWS bucket enumeration, sudo FACTS privesc

Posted on 2026-01-11

Chrome extension JavaScript injection & Python .pyc poisoning

Posted on 2025-11-02

Exploit Kubernetes cluster & container abuse

Posted on 2025-10-26

Transform XSLT to HTML with extensions → special XML “SSTI”

Posted on 2025-09-29

XSS pivot to pyAescrypt brute forcing

Posted on 2025-09-21

Exploit IKE IPSec via UDP discovery & the SUDO binex privesc

Posted on 2025-08-24

A journey for bug hunting in Linux binary fuzzing