From a leaked .env in Gitea commit history to a Krayin CRM upload RCE, password reuse into jones, and a raw git object-model trick abusing an unsanitized path join in a root-run template-sync script to write an SSH key into /root/.ssh/authorized_keys.

How cross-device tracking and data brokers connect your activity across phones, computers, and apps — even when using different accounts. Real mechanisms used by major platforms and how to raise the cost of being tracked.

That Time I Accidentally Sent My NTLM Hash to My Own Server (And What I Learned) A casual dive into Windows authentication quirks So I was messing around i...

DOM-based XSS via an insecure postMessage handler that used eval() with no origin validation. A 48-character prefix was required before arbitrary JavaScript could be executed in the challenge context.

Chained vulnerability in SantaCloud: robots.txt disclosure → composer.json~ backup leak → hardcoded admin credentials → full account takeover → IDOR allowing access to any user's private notes and flags.

Critical Pre-Auth RCE via JWT none Algorithm + Jinja2 SSTI in Admin Profile