53 POSTS
DATECATTITLETARGETCVSS
2026· 5
01-10CVEGHSA-g5ff-637f-6q2m litellm arbitrary local file read via `vertex_ai_credentials` litellm8.124-08EXPLOITPHP 8.5.9 recursive callback UAF local code executionPHP7.817-08POSTLathe - a local workbench for manual AI red teamingLathe—13-08POSTWhen Agent Context Compaction Becomes a Security BoundaryChatbot—17-01CVEGHSA-38cw-85xc-xr9x Veramo Data Store ORM SQL InjectionVeramo6.82024· 7
03-02CVECVE-2023-39297 - QTS 5.1.x, 4.5.x; QuTS hero h5.1.x, h4.5.x; QuTScloud 5.x OS Command InjectionQNAP8.803-02CVECVE-2023-39302 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x OS Command InjectionQNAP7.203-02CVECVE-2023-41281 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x OS Command InjectionQNAP7.203-02CVECVE-2023-39303 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x Improper AuthenticationQNAP5.303-02CVECVE-2023-41283 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x OS Command InjectionQNAP7.203-02CVECVE-2023-41282 - QTS 5.1.x, QuTS hero h5.1.x, QuTScloud 5.x OS Command InjectionQNAP7.206-01CVECVE-2023-39294 - QTS 5.1.x, QuTS hero h5.1.x OS Command InjectionQNAP7.22023· 7
24-12POSTRemedy Invitational Challenge WriteupRemedy—10-11CVECVE-2023-41285 - QNAP Qumagie < 2.1.4 SQL InjectionQNAP8.810-11CVECVE-2023-41284 - QNAP Qumagie < 2.1.4 SQL InjectionQNAP8.810-11CVECVE-2023-39295 - QNAP Qumagie < 2.1.3 OS command injectionQNAP8.827-04CVECVE-2023-2336 - Pimcore Path Traversal in Asset "import from server" optionPimcore6.527-04CVECVE-2023-2338 - Pimcore SQL Injection in AssetControllerPimcore8.813-04CVECVE-2023-29506 - XWIKI RXSS with authenticate endpointsXWIKI6.12022· 1
13-12CVECVE-2022-46391 - Awstats hostinfo reflected XSSAwstats6.1CONTACT
rekter0
PROFESSIONAL SLOPPER
Application security research. vulnerability disclosure, and the occasional pre-auth RCE chain.