From Admin Panel to Root Shell: OS Command Injection in Dokploy's Backup Pipeline Using Codex Security
iaohkut
Command Palette
Search for a command to run...
Archive
62 posts published so far
One Byte Of Disagreement
Vũ Phúc Thành
One Route The Patch Forgot
Vũ Phúc Thành
mediaRoot Was Not A Wall
Vũ Phúc Thành
Deleting any file on a Coolify managed server with a single `..`
Vũ Phúc Thành
Bypassing Kestra's path-traversal guard with a single backslash
Vũ Phúc Thành
[CVE-2026-48731] AI-Assisted Discovery of Command Injection in Warp Terminal
c0wking
AI-Powered Bug Hunting in Closed-Source Software:
Anhlt91
Anatomy of a GHSA Collaboration: Fixing Filament's MFA Race Together
Vũ Phúc Thành
How I Use Claude Code to Fix Security Vulnerabilities
iaohkut
Abusing an Unauthenticated Local Server to Overwrite LLM Wiki
Tùng Nguyễn Thanh
AI-Assisted on RASP Analysis
vuph9
Reasoning-First vulnerability research: How I built an AI Agent that found multiples bugs in Open Source project
hiu dang
AI-Powered Vulnerability Hunting in WordPress Plugins/Themes
main
Firmware Emulation With an Automated Skill Set
Khoa Hoàng
From Privilege Escalation to RCE in Wiki.js
Tuannq
AI-Assisted Discovery of SQL Injection & Stored XSS in Cacti Network Monitor
iaohkut
Two Access-Control Failures in SiYuan: Unauthenticated SQL Read and a Read-Only Role That Can Rewrite Server Config
Vũ Phúc Thành
JSON-Path Traversal Injection in Kysely A Case Study Powered by ClaudeCode
Vũ Phúc Thành
Drag-and-Drop Path Injection Still Allows RCE via Shell Command Substitution
Vũ Phúc Thành
[CVE-2026-34612] AI-Assisted Discovery of SQL Injection Leading to RCE in Kestra v1.3.2
c0wking
Giới thiệu về prompt engineering
Tung Do Viet
Security Risks of "OpenClaw things"
Đức Linh Trần
Liên khúc CVE của GPLI version 10.0.17
Hoà Phan Đức
Lỗ hổng XXE trong thư viện Dcm4che: Thư viện xử lý DICOM trong lĩnh vực y tế
Sieu Tran Quoc