php 14
- Exploiting a PHP Object Injection in Profile Builder Pro in the era of AI
- Vtenext 25.02 vulnerability research
- Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions in Prevent Direct Access Wordpress Plugin (CVE-2025-3861)
- Authenticated Static Code Injections in OpenCart (CVE-2023-47444)
- WAF bypass and vulnerability chain exploiting parser differentials
- HackTheBox - Blunder
- HackTheBox - AdmirerToo
- HackTheBox - Armageddon
- Bypassing addslashes() using format string to get SQL Injection
- HackTheBox - Knife
- HackTheBox - Tenet
- HackTheBox - Traceback
- HackTheBox - OpenAdmin
- HackTheBox - Writeup