>_
HieuPenguinnn
Security Lab & CTF
Home CVE Archive Write-up About
> Home
> CVE Archive
> Write-up
> About
> command_palette::search
ESC to exit
➜ ~/research $
> Type a CVE identifier, CTF competition, or vuln class to query index...
↑↓ navigate ↵ select
RESEARCH_INDEX_READY
HieuPenguinnn

HieuPenguinnn

CVE & CTF writeups by HieuPenguinnn

49
Posts
294
CVE
39
CTF

> CATEGORIES_TREE

tree --dir
├── CVE (294) │ ├── Broken Access Control (6) │ ├── Information Disclosure (2) │ ├── IDOR (2) │ ├── Webhook Forgery (2) │ ├── SQL Injection (1) │ ├── Payment Bypass (1) │ ├── Stored XSS (1) │ ├── Price Tampering (1) │ └── Account Takeover (1)
└── CTF (39) ├── GPNCTF 2026 (8) ├── PTITCTF Quals 2026 (7) ├── TJCTF 2026 (6) ├── SunshineCTF 2026 (5) ├── PTITCTF Finals 2026 (3) ├── UMassCTF 2026 (3) ├── UTCTF 2026 (3) ├── OmniCTF 2026 (2) └── SekaiCTF 2026 (2)

> FEATURED_LOGS

random(5)
# I Don't Want to be an Engineer # CVE-2026-54826 - SupportCandy Attachment IDOR via Thread Endpoint # OmniCTF2026-web/Ganzir # CVE-2026-54840 - Newsletters Unauthenticated Subscriber Management Account Takeover # CVE-2026-57341 - Colissimo Officiel Unauthenticated Shipping Rate Tampering
~/research/tags

> Classified Tags

31 TAGS REGISTERED
# CVE 294 # CTF 39 # Web 39 # WordPress 10 # PTITCTF 10 # GPNCTF 8 # Broken Access Control 7 # TJCTF 6 # SunshineCTF 5 # SQL Injection 4 # Path Traversal 4 # RCE 3 # UMassCTF 3 # UTCTF 3 # Webhook Forgery 2 # Information Disclosure 2 # IDOR 2 # OmniCTF 2 # PostgreSQL 2 # Local File Read 2 # SekaiCTF 2 # Account Takeover 1 # Price Tampering 1 # Stored XSS 1 # Payment Bypass 1 # LFI 1 # Privilege Escalation 1 # SSTI 1 # SSRF 1 # GraphQL 1 # JWT 1
RESEARCHER_SPECS
HieuPenguinnn

HieuPenguinnn

CVE & CTF writeups by HieuPenguinnn

49
Posts
294
CVE
39
CTF

> CATEGORIES_TREE

tree --dir
├── CVE (294) │ ├── Broken Access Control (6) │ ├── Information Disclosure (2) │ ├── IDOR (2) │ ├── Webhook Forgery (2) │ ├── SQL Injection (1) │ ├── Payment Bypass (1) │ ├── Stored XSS (1) │ ├── Price Tampering (1) │ └── Account Takeover (1)
└── CTF (39) ├── GPNCTF 2026 (8) ├── PTITCTF Quals 2026 (7) ├── TJCTF 2026 (6) ├── SunshineCTF 2026 (5) ├── PTITCTF Finals 2026 (3) ├── UMassCTF 2026 (3) ├── UTCTF 2026 (3) ├── OmniCTF 2026 (2) └── SekaiCTF 2026 (2)

> FEATURED_LOGS

random(5)
# SekaiCTF2026-web/migurimental # PTIT Portfolio Renderer # SekaiCTF2026-web_<_w+ # Machine Love # CVE-2026-59557 - Events Made Easy Arbitrary Person Record Modification Without Login
294 CVE Published
/
39 CTF Writeups
/
49 Total Research Logs
© 2026 HieuPenguinnn | Powered by Astro & Tailwind CSS | Theme by santisify
> Home > CVE Archive > Write-up > About > Archives > Tags