Deleting any file on a Coolify managed server with a single `..`
Vũ Phúc Thành
Command Palette
Search for a command to run...
Archive
58 posts published so far
Bypassing Kestra's path-traversal guard with a single backslash
Vũ Phúc Thành
[CVE-2026-48731] AI-Assisted Discovery of Command Injection in Warp Terminal
c0wking
AI-Powered Bug Hunting in Closed-Source Software:
Anhlt91
Anatomy of a GHSA Collaboration: Fixing Filament's MFA Race Together
Vũ Phúc Thành
How I Use Claude Code to Fix Security Vulnerabilities
iaohkut
Abusing an Unauthenticated Local Server to Overwrite LLM Wiki
Tùng Nguyễn Thanh
AI-Assisted on RASP Analysis
vuph9
Reasoning-First vulnerability research: How I built an AI Agent that found multiples bugs in Open Source project
hiu dang
AI-Powered Vulnerability Hunting in WordPress Plugins/Themes
main
Firmware Emulation With an Automated Skill Set
Khoa Hoàng
From Privilege Escalation to RCE in Wiki.js
Tuannq
AI-Assisted Discovery of SQL Injection & Stored XSS in Cacti Network Monitor
iaohkut
Two Access-Control Failures in SiYuan: Unauthenticated SQL Read and a Read-Only Role That Can Rewrite Server Config
Vũ Phúc Thành
JSON-Path Traversal Injection in Kysely A Case Study Powered by ClaudeCode
Vũ Phúc Thành
Drag-and-Drop Path Injection Still Allows RCE via Shell Command Substitution
Vũ Phúc Thành
[CVE-2026-34612] AI-Assisted Discovery of SQL Injection Leading to RCE in Kestra v1.3.2
c0wking
Giới thiệu về prompt engineering
Tung Do Viet
Security Risks of "OpenClaw things"
Đức Linh Trần
Liên khúc CVE của GPLI version 10.0.17
Hoà Phan Đức
Lỗ hổng XXE trong thư viện Dcm4che: Thư viện xử lý DICOM trong lĩnh vực y tế
Sieu Tran Quoc
[ZVE-2025-3566] Stored XSS to RCE in Manage Engine OpManager
Tuannq
Two RCE Design Flaws in ManageEngine Exchange Reporter Plus 5721
NgocKhanh
Abusing Content Delivery Networks (CDNs): Phishing, Malware, and Evasion
Lucas
Threat Analysis: Investigating Suspicious Outbound Connections to cdn.jsdelivrs[.]com (Adware or Supply Chain Foothold?)
Lucas