Meta Box versions before 5.13.1 allow authenticated Contributor-level users and above to delete attachments belonging to other users because object and attachment authorization checks are missing.
Beginner-friendly notes on virtualization, hypervisors, VMs, containers, cloud computing models, shared responsibility, cloud monitoring, and common cloud security mistakes.
Technical analysis of CVE-2026-11571, an unauthenticated sensitive information exposure vulnerability in Everest Forms caused by residual public CSV artifacts.
Technical analysis of CVE-2026-11855, an unauthenticated stored cross-site scripting vulnerability in the Simple Membership WordPress plugin.
Public-safe summary of CVE-2026-14224, a Subscriber+ IDOR in Easy Appointments that can allow cross-user appointment metadata modification and notification-recipient redirection.
Xin chào Jekyll 👋 Bài viết này tổng hợp toàn bộ nội dung từ phòng TryHackMe: Cyber Kill Chain, bao gồm giải thích chi tiết 7 giai đoạn của mô hình Lockheed Martin Cyber Kill Chain, cùng các ví dụ ...
“Write-up: LXD Privilege Escalation — Theory, Risks & Defenses (Safe)” date: 2025-10-20 14:00:00 +0700 categories: [Security, Writeup] tags: [lxd, privilege-escalation, hardening, linux, def...
Hello Jekyll This write-up summarizes the PowerShell room exercises and solutions. Author: biusa_mrdarkroot We explore PowerShell basics, Windows enumeration using PowerShell, and scripting chall...
Hello Jekyll This is my write-up — biusa_mrdarkroot — for the “Whats Your Name?” challenge on TryHackMe. The write-up documents client-side exploitation (stored XSS), session hijacking, and sensit...
A practical summary of core security principles, including the CIA and DAD triads, Bell-LaPadula, Biba, Clark-Wilson, defence in depth, and Zero Trust.