HieuPenguinnn Blog

Home CVE Write-up About

Type a keyword to search posts

HieuPenguinnn

CVE & CTF writeups by HieuPenguinnn

41

Posts

10

CVE

31

CTF

Categories

├── CVE (10) │ ├── Broken Access Control (6) │ ├── Information Disclosure (2) │ ├── IDOR (2) │ ├── Webhook Forgery (2) │ ├── SQL Injection (1) │ ├── Payment Bypass (1) │ ├── Stored XSS (1) │ ├── Price Tampering (1) │ └── Account Takeover (1) └── CTF (31) ├── GPNCTF 2026 (8) ├── PTITCTF Quals 2026 (7) ├── TJCTF 2026 (6) ├── UMassCTF 2026 (3) ├── UTCTF 2026 (3) ├── OmniCTF 2026 (2) └── SekaiCTF 2026 (2)

Random Picks

CVE-2026-54840 - Newsletters Unauthenticated Subscriber Management Account Takeover CVE-2026-78259 - WPLegalPages API Secret Disclosure and Account Disconnect via Unauthenticated REST API Approve Please, Genie! GPNCTF2026-recipeloader UTCTF2026-Crab Mentality

Tag: SSTI (1 posts)

PTITCTF Quals 2026

PTIT Portfolio Renderer

Jinja2 SSTI bypasses a blacklist, reaches RCE, and reads the challenge flag.

CTF Web SSTI RCE PTITCTF

HieuPenguinnn

CVE & CTF writeups by HieuPenguinnn

41

Posts

10

CVE

31

CTF

Categories

├── CVE (10) │ ├── Broken Access Control (6) │ ├── Information Disclosure (2) │ ├── IDOR (2) │ ├── Webhook Forgery (2) │ ├── SQL Injection (1) │ ├── Payment Bypass (1) │ ├── Stored XSS (1) │ ├── Price Tampering (1) │ └── Account Takeover (1) └── CTF (31) ├── GPNCTF 2026 (8) ├── PTITCTF Quals 2026 (7) ├── TJCTF 2026 (6) ├── UMassCTF 2026 (3) ├── UTCTF 2026 (3) ├── OmniCTF 2026 (2) └── SekaiCTF 2026 (2)

Random Picks

CVE-2026-59557 - Events Made Easy Arbitrary Person Record Modification Without Login Machine Love GPNCTF2026-Pharry CVE-2026-78259 - WPLegalPages API Secret Disclosure and Account Disconnect via Unauthenticated REST API UTCTF2026-Break the Bank

10 CVE 31 CTF writeups 41 posts

© 2026 HieuPenguinnn | Powered by Astro & Tailwind | Theme by santisify

Home CVE Write-up About