rce 18
- When investigating novel 0-days leads to the discovery of novel 0-days
- Exploiting a PHP Object Injection in Profile Builder Pro in the era of AI
- Vtenext 25.02 vulnerability research
- Authenticated Static Code Injections in OpenCart (CVE-2023-47444)
- Finding SSTI in an EJS app using existing exploits and undocumented features
- HackTheBox - Armageddon
- HackTheBox - Postman
- Exploit Arbitrary Deserialization through Blind SQL Injection
- Exploit Zip Slip vulnerability in python tarfile
- Pickle Insecure Deserialization
- HackTheBox - Knife
- HackTheBox - Ophiuchi
- HackTheBox - Tenet
- HackTheBox - ScriptKiddie
- HackTheBox - Ready
- HackTheBox - Tabby
- HackTheBox - Obscurity
- HackTheBox - Traverxec