May 27, 2026Reasoning-First vulnerability research: How I built an AI Agent that found multiples bugs in Open Source project hiu dang
May 19, 2026Two Access-Control Failures in SiYuan: Unauthenticated SQL Read and a Read-Only Role That Can Rewrite Server ConfigVũ Phúc Thành
May 19, 2026Drag-and-Drop Path Injection Still Allows RCE via Shell Command SubstitutionVũ Phúc Thành
May 17, 2026[CVE-2026-34612] AI-Assisted Discovery of SQL Injection Leading to RCE in Kestra v1.3.2c0wking
Oct 1, 2025Lỗ hổng XXE trong thư viện Dcm4che: Thư viện xử lý DICOM trong lĩnh vực y tếSieu Tran Quoc
May 21, 2025Threat Analysis: Investigating Suspicious Outbound Connections to cdn.jsdelivrs[.]com (Adware or Supply Chain Foothold?)Lucas