An attacker’s perspective on CVE-2026–109618 and CVE-2026–109619, explained in simple language.

Probe for Brotli error -17 and read the distro changelog: php2shell patches land as 8.3.6–0ubuntu0.24.04.13, and Bun’s newest tag is…

A whistleblowing channel exists for exactly one reason: so a reporter can say what happened without fear of being identified. So what…

A missing origin check in Storybook’s preview transport allowed a malicious website to send crafted messages to a running Storybook…

Detection engineering is both a role and an activity. It’s the discipline of building and maintaining the logic that identifies malicious or risky behavior within your organization. It’s where security analysis meets software engineering, turning raw logs…

If there’s one vulnerability class I have truly fallen in love with as a bug bounty hunter, it’s Information Disclosure. You don’t need…

What was fixed, how to check your exposure, what to do first, and how to hear about the next one early. Status as of October 22, 2026.

What PHP2Shell (and other bugs) have taught us about automated CVE analysis, unreliable public PoCs, and the continuing importance of…

An Easy-rated Linux CTF covering Local File Inclusion, PHP command execution, MySQL enumeration, Linux privilege escalation, and a return…

Author: Ratbully Platform: bWAPP (Broken Web Application) Lab/Module: Broken Auth: Forgotten Function Category: Broken Authentication /…

A detailed, practical method to test rate limits properly — and the tricks that actually bypass them

I ran Snyk, Semgrep, Drogonsec and Claude Code on 39 planted bugs. The answer was more interesting than yes or no

On October 21, 2026, two software bugs took over my entire feed. Security researchers are calling the pair PHP2Shell, and they carry a…

Two bugs in the language behind most of the web, explained in plain language and in a comic strip.

Welcome to this new Medium post, today we are going to explore a shellcode execution technique that abuses SetupIterateCabinet(a Cabinet…

CTF Name : Pickle Rick Plateform : TryHackMe Author : ZODiAK

Crack the Hash: A Beginner’s Guide to Hashing and Password Cracking

From a hidden stego passphrase to root, via SQL injection and an abandoned screen session.

Esse artigo é um write-up do desafio pwn108 da TryHackMe. Esse desafio faz parte da sala PWN101 de exploração de binários. O link da sala é…