Contents
- Home
- Vuln Research
- CVE Analysis
- CVE-2026-52810: Gogs Git HTTP Authorisation Bypass via Service Parameter Confusion
- CVE-2026-52798: Gogs Notebook Stored XSS via Post-Sanitisation Markdown Conversion
- CVE-2026-47267: Gogs Webhook SSRF via Redirect Bypass with Response Exfiltration
- CVE-2026-45308: libarchive ZIP Writer Heap Out-of-Bounds Write
- CVE-2026-11851: ASUS Router bwdpi SQL Injection Patch Bypass
- CVE-2026-18100: MetForm Stored XSS via the mf_form_id Widget Setting
- CVE-2026-11780: Quiz and Survey Master Stored XSS via question_title
- CVE-2026-18501: UsersWP Badge Widget Stored XSS via Variable Substitution
- CVE-2026-15156: Essential Addons for Elementor Global Reading Progress Stored XSS
- CVE-2026-15155: Essential Addons for Elementor Email Header Injection to Account Takeover
- CVE-2026-9145: Contact Form Entries Arbitrary File Copy to File Read
- CVE-2026-55793: Craft CMS Stored XSS to Account Takeover
- CVE-2026-55790: Craft CMS DOM XSS via GitHub Issue Title
- HedgeDoc 2 Stored XSS via Slideshow Reveal Background Iframe
- CVE-2026-53943: Ghost CMS Unauthenticated Cache-Poisoning XSS to Account Takeover
- CVE-2026-9829: Photo Gallery Compact Album Second-Order Blind SQL Injection
- CVE-2026-4610: ProfileGrid Stored XSS via Private Messages
- CVE-2026-4609: ProfileGrid Arbitrary Group Joining
- CVE-2026-4608: ProfileGrid rid SQL Injection
- CVE-2026-6127: Elementor REST API Stored XSS
- CVE-2026-3612: Wavlink Command Injection
- CVE-2024-4040: CrushFTP Template Injection
- CVE-2025-31344: giflib Heap-based Buffer Overflow
- CVE-2025-24813: Tomcat DefaultServlet Partial PUT
- CVE-2025-54376: Hoverfly WebSocket Auth Bypass
- Research Projects
- CVE Analysis
- Bug Bounty
- CTF Writeups
- Monthly Challenges
- YesWeHack
- Intigriti
- CryptoCat
- 2026
- LACTF
- 2025
- NahamCon (Winter)
- PwnSec
- Rev
- K17
- DefCamp
- Pwn
- Imaginary (iCTF)
- HackTheAgent
- WHY
- N0PS
- NahamCon
- Tsuku
- CTF@CIT
- 2024
- Intigriti
- Warmup
- Game
- Rev
- Web
- Misc
- Pwn
- Crypto
- Mobile
- OSINT
- Forensics
- CSAW
- CyberSpace
- UIU
- Wani
- Akasec
- Web
- HTB Cyber Apocalypse
- Intigriti
- 2023
- Intigriti
- Gamepwn
- Misc
- OSINT
- Pwn
- Web
- Imaginary (iCTF)
- HTB Cyber Apocalypse
- Sekai
- Amateurs
- NahamCon
- Angstrom
- Pwn
- Intigriti
- 2022
- Imaginary (iCTF)
- Crypto
- Pwn
- SEETF
- HTB Cyber Apocalypse
- Pwn
- Angstrom
- NahamCon
- Pico
- Space Heroes
- Pwn
- Web
- Intigriti
- Dice
- Imaginary (iCTF)
- 2021
- Pico
- Crusaders of Rust (COR)
- Crypto
- Pwn
- HTB Cyber Santa
- K3rn3l
- Crypto
- HTB x Synack RedTeamFive
- KillerQueen
- HacktivityCon
- CSAW
- HackyHolidays
- Crypto
- Forensics
- Pwn
- Web
- HTB Cyber Apocalypse
- Angstrom
- Monthly Challenges