HieuPenguinnn Blog
Home CVE Write-up About
Home
CVE
Write-up
About
Type a keyword to search posts
HieuPenguinnn

HieuPenguinnn

CVE & CTF writeups by HieuPenguinnn

41
Posts
10
CVE
31
CTF

Categories

├── CVE (10) │ ├── Broken Access Control (6) │ ├── Information Disclosure (2) │ ├── IDOR (2) │ ├── Webhook Forgery (2) │ ├── SQL Injection (1) │ ├── Payment Bypass (1) │ ├── Stored XSS (1) │ ├── Price Tampering (1) │ └── Account Takeover (1) └── CTF (31) ├── GPNCTF 2026 (8) ├── PTITCTF Quals 2026 (7) ├── TJCTF 2026 (6) ├── UMassCTF 2026 (3) ├── UTCTF 2026 (3) ├── OmniCTF 2026 (2) └── SekaiCTF 2026 (2)

Random Picks

CVE-2026-61948 - Unauthenticated SQL Injection in Mini Cart Coupon REST Endpoint CVE-2026-78259 - WPLegalPages API Secret Disclosure and Account Disconnect via Unauthenticated REST API GPNCTF2026-recipeloader GPNCTF2026-Fancy Food Notifications UMassCTF2026-Brick by Brick

Tag: GPNCTF (8 posts)

GPNCTF2026-cookoff
GPNCTF 2026

GPNCTF2026-cookoff

CTF writeup - cookoff (GPNCTF 2026)

Read
CTF Web GPNCTF
GPNCTF2026-Fancy Food Notifications
GPNCTF 2026

GPNCTF2026-Fancy Food Notifications

CTF writeup - Fancy Food Notifications (GPNCTF 2026)

Read
CTF Web GPNCTF
GPNCTF2026-Pharry
GPNCTF 2026

GPNCTF2026-Pharry

CTF writeup - Pharry (GPNCTF 2026)

Read
CTF Web GPNCTF
GPNCTF2026-recipeloader
GPNCTF 2026

GPNCTF2026-recipeloader

CTF writeup - recipeloader (GPNCTF 2026)

Read
CTF Web GPNCTF
GPNCTF2026-restaurant-builder
GPNCTF 2026

GPNCTF2026-restaurant-builder

CTF writeup - restaurant-builder (GPNCTF 2026)

Read
CTF Web GPNCTF
GPNCTF2026-SecretPickle
GPNCTF 2026

GPNCTF2026-SecretPickle

CTF writeup - SecretPickle (GPNCTF 2026)

Read
CTF Web GPNCTF
GPNCTF2026-Secure Secretpickle
GPNCTF 2026

GPNCTF2026-Secure Secretpickle

CTF writeup - Secure Secretpickle (GPNCTF 2026)

Read
CTF Web GPNCTF
GPNCTF2026-Simple food notifications
GPNCTF 2026

GPNCTF2026-Simple food notifications

CTF writeup - Simple food notifications (GPNCTF 2026)

Read
CTF Web GPNCTF
HieuPenguinnn

HieuPenguinnn

CVE & CTF writeups by HieuPenguinnn

41
Posts
10
CVE
31
CTF

Categories

├── CVE (10) │ ├── Broken Access Control (6) │ ├── Information Disclosure (2) │ ├── IDOR (2) │ ├── Webhook Forgery (2) │ ├── SQL Injection (1) │ ├── Payment Bypass (1) │ ├── Stored XSS (1) │ ├── Price Tampering (1) │ └── Account Takeover (1) └── CTF (31) ├── GPNCTF 2026 (8) ├── PTITCTF Quals 2026 (7) ├── TJCTF 2026 (6) ├── UMassCTF 2026 (3) ├── UTCTF 2026 (3) ├── OmniCTF 2026 (2) └── SekaiCTF 2026 (2)

Random Picks

CVE-2026-57408 - Peach Payments Gateway Payment Status Forgery via Unauthenticated Webhook Approve Please, Genie! PTIT Portfolio Renderer CVE-2026-54804 - Melhor Envio Subscriber API Token Disclosure and Overwrite CVE-2026-54826 - SupportCandy Attachment IDOR via Thread Endpoint
10 CVE 31 CTF writeups 41 posts
© 2026 HieuPenguinnn | Powered by Astro & Tailwind | Theme by santisify
Home CVE Write-up About