CTF
2026.09.29 > SunshineCTF 2026
CookieCorp
A cookie jar overflow evicts the Inspector's role cookie and grants chief access.
Read Writeup CTF_ENTRY
~/research/archives
> Research Archives
49 CHRONOLOGICAL ENTRIES CTF
2026.09.29 > SunshineCTF 2026
Groundhog Day
Gopher SSRF reaches an internal PDF renderer and reads the flag through file URLs.
Read Writeup CTF_ENTRY
CTF
2026.09.29 > SunshineCTF 2026
Planetary Probe
Blind PostgreSQL SQL injection reaches command execution through COPY TO PROGRAM.
Read Writeup CTF_ENTRY
CTF
2026.09.29 > SunshineCTF 2026
Used Goods of Tomorrow
GraphQL introspection exposes an unauthenticated vendor key and an internal 100% discount.
Read Writeup CTF_ENTRY
CTF
2026.09.29 > SunshineCTF 2026
You Are Kidding Me
JWT key selection via a path-traversal kid reads a static file and forges an editor token.
Read Writeup CTF_ENTRY
CTF
2026.09.25 > PTITCTF Finals 2026
g3ren9's exam
A filtered path traversal bypass turns a local file inclusion bug into a flag read.
Read Writeup CTF_ENTRY
CTF
2026.09.25 > PTITCTF Finals 2026
I Don't Want to be an Engineer
Spring Expression Language injection exposes environment variables and the flag.
Read Writeup CTF_ENTRY
CTF
2026.09.25 > PTITCTF Finals 2026
MEGALOVANIA
PostgreSQL SQL injection bypasses a keyword filter and reads the flag with pg_read_file.
Read Writeup CTF_ENTRY
2026.08.27 CVE-2026-78259
WPLegalPages API Secret Disclosure and Account Disconnect via Unauthenticated REST API
Unauthenticated WPLegalPages <= 3.6.4 REST endpoints disclose API secrets and allow attackers to disconnect the connected account.
Read Advisory SECREPORT
CTF
2026.08.27 > PTITCTF Quals 2026
Approve Please, Genie!
CSS injection and browser side-channel exfiltration leak the flag from the approval bot.
Read Writeup CTF_ENTRY
CTF
2026.08.27 > PTITCTF Quals 2026
Brain Rot
Vite CVE-2025-30208 bypasses the dev server allow list and exposes arbitrary files through /@fs/.
Read Writeup CTF_ENTRY
CTF
2026.08.27 > PTITCTF Quals 2026
Độ Mixi
DOM Clobbering bypasses the sanitizer and enables file-name disclosure followed by flag read.
Read Writeup CTF_ENTRY
CTF
2026.08.27 > PTITCTF Quals 2026
LEMON MELON COOKIE
Client-side privilege escalation and SQL injection lead to the administrator account and flag.
Read Writeup CTF_ENTRY
CTF
2026.08.27 > PTITCTF Quals 2026
Machine Love
Double URL encoding bypasses an absolute-path filter and enables local file read.
Read Writeup CTF_ENTRY
CTF
2026.08.27 > PTITCTF Quals 2026
Palworld Mod
Path traversal in the mod build flow writes a Python codec payload and reaches server-side code execution.
Read Writeup CTF_ENTRY
CTF
2026.08.27 > PTITCTF Quals 2026
PTIT Portfolio Renderer
Jinja2 SSTI bypasses a blacklist, reaches RCE, and reads the challenge flag.
Read Writeup CTF_ENTRY
2026.07.30 CVE-2026-59557
Events Made Easy Arbitrary Person Record Modification Without Login
Broken access control in Events Made Easy <= 3.0.67 lets unauthenticated attackers modify arbitrary person records through the public personal-information AJAX endpoint.
Read Advisory SECREPORT
2026.07.28 CVE-2026-61948
Unauthenticated SQL Injection in Mini Cart Coupon REST Endpoint
Unauthenticated SQL injection in WPDM Premium Packages <= 6.2.0 exposes the public Mini Cart coupon REST endpoint to blind time-based database extraction.
Read Advisory SECREPORT
2026.07.27 CVE-2026-57408
Peach Payments Gateway Payment Status Forgery via Unauthenticated Webhook
Unauthenticated webhook forgery in Peach Payments Gateway <= 4.0.2 lets attackers mark pending WooCommerce orders as paid by submitting a forged successful payment result.
Read Advisory SECREPORT
2026.07.26 CVE-2026-57365
Stored XSS in reCAPTCHA for Asgaros Forum via Site Key
Stored XSS in reCAPTCHA for Asgaros Forum <= 1.1.0 lets a low-privilege Subscriber inject JavaScript through the reCAPTCHA site key rendered in the forum editor.
Read Advisory SECREPORT
2026.07.20 CVE-2026-57341
Colissimo Officiel Unauthenticated Shipping Rate Tampering
Broken authentication in Colissimo Officiel <= 2.9.0 exposes shipping-rate import/export actions to unauthenticated visitors via the shared admin-ajax dispatcher.
Read Advisory SECREPORT
2026.07.19 Read Writeup CTF_ENTRY
2026.07.19 Read Writeup CTF_ENTRY
2026.06.29 Read Writeup CTF_ENTRY
2026.06.29 Read Writeup CTF_ENTRY
2026.06.22 CVE-2026-54826
SupportCandy Attachment IDOR via Thread Endpoint
IDOR in SupportCandy <= 3.4.6 lets a low-privilege user reassign and download another user's private ticket attachments via the thread-creation endpoint.
Read Advisory SECREPORT
2026.06.21 CVE-2026-54840
Newsletters Unauthenticated Subscriber Management Account Takeover
Broken access control in Newsletters <= 4.13 lets an unauthenticated attacker take over any subscriber's management account via a predictable md5(id) token.
Read Advisory SECREPORT
2026.06.18 CVE-2026-54804
Melhor Envio Subscriber API Token Disclosure and Overwrite
Broken authentication in Melhor Envio <= 2.16.3 lets a low-privilege Subscriber read and overwrite the store's Melhor Envio API tokens.
Read Advisory SECREPORT
2026.06.10 CVE-2026-42743
Masteriyo LMS Lemon Squeezy Webhook Forgery
Broken authentication in Masteriyo LMS 2.1.8 allows unauthenticated attackers to forge Lemon Squeezy webhooks and mark pending orders as paid.
Read Advisory SECREPORT
2026.05.30 Read Writeup CTF_ENTRY
2026.05.30 > GPNCTF 2026
GPNCTF2026-Fancy Food Notifications
CTF writeup - Fancy Food Notifications (GPNCTF 2026)
Read Writeup CTF_ENTRY
2026.05.30 Read Writeup CTF_ENTRY
2026.05.30 Read Writeup CTF_ENTRY
2026.05.30 Read Writeup CTF_ENTRY
2026.05.30 Read Writeup CTF_ENTRY
2026.05.30 Read Writeup CTF_ENTRY
2026.05.30 > GPNCTF 2026
GPNCTF2026-Simple food notifications
CTF writeup - Simple food notifications (GPNCTF 2026)
Read Writeup CTF_ENTRY
2026.05.17 Read Writeup CTF_ENTRY
2026.05.17 Read Writeup CTF_ENTRY
2026.05.17 Read Writeup CTF_ENTRY
2026.05.17 Read Writeup CTF_ENTRY
2026.05.17 > TJCTF 2026
TJCTF2026-web/Vibed Intranet Part 1&2
CTF writeup - web/Vibed Intranet Part 1&2 (TJCTF 2026)
Read Writeup CTF_ENTRY
2026.05.17 Read Writeup CTF_ENTRY
2026.04.12 Read Writeup CTF_ENTRY
2026.04.12 Read Writeup CTF_ENTRY
2026.04.12 Read Writeup CTF_ENTRY
2026.03.07 Read Writeup CTF_ENTRY
2026.03.07 Read Writeup CTF_ENTRY
2026.03.07 Read Writeup CTF_ENTRY