HTB Writeup – Soulmate

Posted on 2025-09-07

CrushFTP auth bypass (CVE-2025-31161) and Erlang shell manipulation

HTB Writeup – Guardian

Posted on 2025-09-01

Classic XSS pivot & module/config/library hijacking

Posted on 2025-08-25

Next.js auth bypass (CVE-2025-29927) & Hashicorp Terraform abusing

Posted on 2025-08-17

CVE-2024-28397: Js2py sandbox escape

Posted on 2025-08-11

CVE-2024-47533: Cobbler XML-RPC flaw to steal root files

Posted on 2025-08-03

XWiki RCE (CVE 2025‑24893) & NetDATA Path Hijacking (CVE-2024-32019)

Posted on 2025-07-27

Exploit PHP ssh2 extension & Linux ELF self-signed signature

Posted on 2025-07-20

NATS exploit + ESC10 for Schannel Certificate Mapping

Posted on 2025-07-13

RCE for Roundcube (CVE‑2025‑49113) & below Privesc (CVE-2025-27591)

Posted on 2025-07-08

A recovery of deleted objected in Active Directory