Archives
- 16 Sep How Patchstack Is Devaluing Vulnerability Research
- 06 Sep The Security Bugs I Look for First When Reviewing a Codebase
- 20 Aug CVE-2026-16612: FiboSearch Autocomplete Exposed Password-Protected Products
- 24 Jul CVE-2026-15231: TaxoPress AI Preview Leaked Private Post-Derived Output
- 20 Jul CVE-2026-15248: Meta Box Contributor+ Arbitrary Attachment Deletion
- 09 Jul Cloud, Virtualization, and Cloud Security Fundamentals
- 19 Jun CVE-2026-11571: When an Email CSV Attachment Stayed Public in Everest Forms
- 15 Jun CVE-2026-11855: Forged Stripe Webhook Metadata to Admin-Context XSS in Simple Membership
- 13 Jun CVE-2026-14224: Easy Appointments Subscriber+ IDOR Enables Cross-User Notification Redirection
- 25 Oct Write-up: Cyber Kill Chain (TryHackMe) — biusa_mrdarkroot
- 20 Oct Lxd Priv Esc Writeup
- 17 Oct Write-up:Hacking with powershell (TryHackMe)
- 16 Oct Write-up: Whats Your Name? (TryHackMe)
- 16 Oct Security Principles: CIA, DAD, Security Models, and Zero Trust
- 29 Jul Write-up: Net Sec Challenge — Network Security (TryHackMe)