$ ls -la ~/blog

blog

RSS

// 233 writeups · 99 vulns · 9 articles · mostrando 341

--quick
--type
rceWordPress Theme Editor RCEWordPressRCE09-10-2026 rceUnsafe YAML DeserializationYAMLdeserializationRCE09-10-2026 miscPass-the-TicketKerberosPass-the-Ticket09-10-2026 miscPass-the-HashWindowsNTLMlateral-movement09-10-2026 miscMS16-075 SMB Reflection Privilege Escalation (CVE-2016-3225)WindowsSMBprivilege-escalation09-10-2026 miscKerberoastingActive-DirectoryKerberoscredential-access09-10-2026 webJWT Secret Disclosure and Token ForgerywebJWTsecret-disclosure09-10-2026 miscIPMI RAKP Hash DisclosureIPMIcredential-disclosurepassword-cracking09-10-2026 miscIPMI Cipher Zero Authentication BypassIPMIauthentication-bypass09-10-2026 miscInsecure Pickle DeserializationPythonPickledeserialization09-10-2026 webHTTP Parameter PollutionwebHPPinput-validation09-10-2026 miscGroup Policy Object AbuseActive-DirectoryGPO-Abuse09-10-2026 rceGit History Secret ExposureGitsecret-disclosuresource-code09-10-2026 miscDLL Search Order HijackingWindowsDLL-Search-Order-Hijacking09-10-2026 miscDefault CredentialsDefault-Credentials09-10-2026 webCookie TamperingwebCookie-Tampering09-10-2026 rceApache Log PoisoningApachelog-poisoningRCE09-10-2026 miscAlwaysInstallElevated Privilege EscalationWindowsAlwaysInstallElevated09-10-2026 miscWritable Privileged Executable Filelinuxprivilege-escalationpermissions08-10-2026 rcewpDiscuz Unauthenticated File Upload (CVE-2020-24186)WordPresswpDiscuzunrestricted-file-upload08-10-2026 privescWindows Token Impersonation Privescwindowsprivilege-escalationtokens08-10-2026 miscWeak Passwords and Password Guessingauthenticationpasswords08-10-2026 webWeak JWT SecretwebJWTHMAC08-10-2026 webUnrestricted File Upload RCEwebfile-uploadRCE08-10-2026 miscUnauthenticated Memcached ExposurenetworkMemcachedinformation-disclosure08-10-2026 miscUnauthenticated Docker Registry Exposurecontainersdocker-registryinformation-disclosure08-10-2026 miscTOCTOU Race ConditionLinuxrace-conditionTOCTOU08-10-2026 privescSUID Binary Abuselinuxprivilege-escalationSUID08-10-2026 privescSudo-Allowed Program Abuselinuxsudoprivilege-escalation08-10-2026 webRemote File InclusionwebPHPRFI08-10-2026 webqdPM Authenticated Remote Code Execution (CVE-2020-7246)webqdPMunrestricted-file-upload08-10-2026 miscPython pydoc Arbitrary File Read (CVE-2021-3426)Pythonpydocarbitrary-file-read08-10-2026 privescPython Library HijackingLinuxPythonprivesc08-10-2026 miscPrivileged Hash Oraclecryptographyoracleprivilege-escalation08-10-2026 webOS Command InjectionwebRCE08-10-2026 webNginx Alias TraversalwebNginxpath-traversal08-10-2026 miscMetadata Exposureinformation-disclosuremetadata08-10-2026 webMass AssignmentwebAPIauthorization08-10-2026 miscIncomplete Redactioninformation-disclosuredocumentsPDF08-10-2026 webHotelDruid RCE (CVE-2022-22909)webHotelDruidRCE08-10-2026