CyberKareemLinkedIn Contact
Menu

Security writing

Research, engineering, and authorized labs in one collection.

163 published pieces, including 50 current research and engineering write-ups, plus reviews, field notes, and retired Hack The Box walkthroughs.

ResearchRSS feedPublishing policy
All articles by date163 articles

Complete index

All 163 published articles.

  1. CVE case studyCVE-2026-78865: Missing Authorization in django-crm User Transfer Grants Superoperator Rights
  2. CVE case studyCVE-2026-78866: Insecure Direct Object Reference in django-crm Original Email Views Exposes Other Departments' Mail
  3. CVE case studyCVE-2026-78867: Stored Cross-Site Scripting in django-crm Chat Messages
  4. CVE case studyCVE-2026-78868: Unauthenticated Stored XSS in django-crm IMAP Email Subject Headers
  5. CVE case studyCVE-2026-78869: Incorrect Access Control in Shinobi Lets a Group Admin Cross Into Another Group
  6. CVE case studyCVE-2026-78871: Missing Authorization on the Shinobi PTZ Camera-Control Route
  7. CVE case studyCVE-2026-78878: Default Superuser Credential in Shinobi Enables Remote Code Execution
  8. CVE case studyCVE-2026-78879: Authenticated SSRF in Shinobi FFprobe Endpoint
  9. CVE case studyCVE-2026-85271: Stored CSS Injection in Open edX Email Digests via an Unsanitized Thread Title
  10. CVE case studyCVE-2026-84754: Unauthenticated Broken Access Control in WPFunnels
  11. CVE case studyCVE-2026-77522: Authenticated Full-Read SSRF in the MaxKB Web-Document Import Crawler
  12. CVE case studyCVE-2026-81194: Subscriber+ Cross-Instructor Order-Data IDOR in MasterStudy LMS
  13. CVE case studyCVE-2026-81195: Unauthenticated Student-Enrollment Disclosure in MasterStudy LMS
  14. CVE case studyCVE-2026-82182: Admin+ SQL Injection in WPvivid Backup via the Upload Cleaner
  15. CVE case studyCVE-2026-82186: Admin+ SQL Injection in WPLP Cookie Consent via the offset Parameter
  16. CVE case studyCVE-2026-70649: Stored XSS in Chamilo LMS Social-Group Discussions via Unsanitized v-html
  17. CVE case studyCVE-2026-18776: Unauthenticated Account Takeover in TrueBooker via AJAX Actions
  18. CVE case studyCVE-2026-28002: Subscriber SQL Injection in the Booktics Plugin
  19. CVE case studyCVE-2026-28185: Broken Authentication in the Log in with Google Plugin
  20. CVE case studyCVE-2026-66591: Contributor Cross-Site Scripting in Media Library Assistant
  21. CVE case studyCVE-2026-73347: Unauthenticated Privilege Escalation in the TrueBooker Booking Plugin
  22. CVE case studyCVE-2026-75798: Unauthenticated AI Query Execution in AI Engine
  23. CVE case studyCVE-2026-76793: Unauthenticated Account Takeover in Firebase Authentication
  24. CVE case studyCVE-2026-73556: An Unguarded Regex Compile Let One Request Stall vLLM's Engine
  25. CVE case studyCVE-2026-16573: Bit Form Stored Active SVG Signature Data Without Sanitization
  26. CVE case studyCVE-2026-16613: A Cross-Site Request Could Expire WordPress Session Cookies
  27. CVE case studyCVE-2026-28145: MasterStudy Completed Orders Without Binding PayPal Payment Data
  28. CVE case studyCVE-2026-65523: An Entry ID Exposed Formidable's Private Signature Invite URL
  29. CVE case studyCVE-2026-66690: Donation Phone Data Reached GiveWP's Admin View as Stored XSS
  30. CVE case studyCVE-2026-66696: A Caller-Controlled Kadence Library Host Received Stored License Data
  31. CVE case studyCVE-2026-71493: Intermediate Symlinks Escaped Infracost's Template Boundary
  32. CVE case studyCVE-2026-71494: Untrusted Terraform Hosts Could Receive Terraform Cloud or Registry Tokens
  33. CVE case studyCVE-2026-59551: rtMedia Validated the ORDER BY Prefix but Executed the Full Value
  34. CVE case studyCVE-2026-65475: A Reverted Link Fix Reopened Stored XSS in Modula
  35. CVE case studyCVE-2026-67529: OpenProject Entry APIs Exposed Hidden Work Package Subjects
  36. CVE case studyCVE-2026-16532: Link Library's Public Submission Form Reached Raw SQL
  37. Security engineeringBuilding kameHunt: LLM-Assisted Variant Analysis for CVE Research
  38. CVE case studyCVE-2026-63007: Two Uyuni Formula Methods Skipped the Cross-Org Check
  39. CVE case studyCVE-2026-62233: A User Manager Could Mint a Super-Admin API Key
  40. CVE case studyCVE-2026-62235: Missing Flex Permissions Failed Open
  41. CVE case studyCVE-2026-62236: A Cross-Site GET Could Rotate a Grav TOTP Secret
  42. CVE case studyCVE-2026-55675: Fork PR Code Ran in a Privileged GitHub Actions Job
  43. CVE case studyCVE-2026-55890: Grav's style() Method Bypassed the Earlier Fix
  44. CVE case studyCVE-2026-59185: Missing Installation Ownership Check Allowed Cross-Tenant Access
  45. CVE case studyCVE-2026-59889: @JsonUnwrapped Replay Skipped an @JsonView Check
  46. CVE case studyCVE-2026-59979: Missing Tenant Checks in Yosemite-Crew Routes
  47. CVE case studyCVE-2026-61448: Malformed Content-Type Led to Stored XSS in Parse Server
  48. CVE case studyCVE-2026-61706: Pull Request Title Injection in Infracost Actions
  49. CVE case studyCVE-2026-61826: Bazarr's Plex OAuth API Lacked Authentication
  50. Security engineeringBuilding seg-test: A PCI DSS Segmentation Evidence Runner
  51. Hack The BoxHack The Box: CrossFit Walkthrough
  52. Hack The BoxHack The Box: CodePartTwo Walkthrough
  53. Hack The BoxHack The Box: Celestial Walkthrough
  54. Hack The BoxHack The Box: Cache Walkthrough
  55. Hack The BoxHack The Box: CTF Walkthrough
  56. Hack The BoxHack The Box: Book Walkthrough
  57. Hack The BoxHack The Box: Bolt Walkthrough
  58. Hack The BoxHack The Box: Atlas Walkthrough
  59. Hack The BoxHack The Box: Arkham Walkthrough
  60. Hack The BoxHack The Box: Sizzle Walkthrough
  61. Hack The BoxHack The Box: Search Walkthrough
  62. Hack The BoxHack The Box: Seal Walkthrough
  63. Hack The BoxHack The Box: Querier Walkthrough
  64. Hack The BoxHack The Box: PivotAPI Walkthrough
  65. Hack The BoxHack The Box: Multimaster Walkthrough
  66. Hack The BoxHack The Box: APT Walkthrough
  67. Hack The BoxHack The Box: CrossFitTwo Walkthrough
  68. Hack The BoxHack The Box: Eighteen Walkthrough
  69. Hack The BoxHack The Box: Encoding Walkthrough
  70. Hack The BoxHack The Box: Facts Walkthrough
  71. Hack The BoxHack The Box: Falafel Walkthrough
  72. Hack The BoxHack The Box: Fighter Walkthrough
  73. Hack The BoxHack The Box: Forgot Walkthrough
  74. Hack The BoxHack The Box: Ghoul Walkthrough
  75. Hack The BoxHack The Box: Hackback Walkthrough
  76. Hack The BoxHack The Box: Holiday Walkthrough
  77. Hack The BoxHack The Box: Intentions Walkthrough
  78. Hack The BoxHack The Box: JobTwo Walkthrough
  79. Hack The BoxHack The Box: Json Walkthrough
  80. Hack The BoxHack The Box: Kryptos Walkthrough
  81. Hack The BoxHack The Box: Laboratory Walkthrough
  82. Hack The BoxHack The Box: Mirage Walkthrough
  83. Hack The BoxHack The Box: MonitorsFour Walkthrough
  84. Hack The BoxHack The Box: NodeBlog Walkthrough
  85. Hack The BoxHack The Box: Object Walkthrough
  86. Hack The BoxHack The Box: Obscurity Walkthrough
  87. Hack The BoxHack The Box: Oouch Walkthrough
  88. Hack The BoxHack The Box: Ophiuchi Walkthrough
  89. Hack The BoxHack The Box: Overflow Walkthrough
  90. Hack The BoxHack The Box: Overwatch Walkthrough
  91. Hack The BoxHack The Box: Pikaboo Walkthrough
  92. Hack The BoxHack The Box: Quick Walkthrough
  93. Hack The BoxHack The Box: Ransom Walkthrough
  94. Hack The BoxHack The Box: Ready Walkthrough
  95. Hack The BoxHack The Box: RedCross Walkthrough
  96. Hack The BoxHack The Box: Retired Walkthrough
  97. Hack The BoxHack The Box: RouterSpace Walkthrough
  98. Hack The BoxHack The Box: Scanned Walkthrough
  99. Hack The BoxHack The Box: Schooled Walkthrough
  100. Hack The BoxHack The Box: Seventeen Walkthrough
  101. Hack The BoxHack The Box: Sink Walkthrough
  102. Hack The BoxHack The Box: Talkative Walkthrough
  103. Hack The BoxHack The Box: Tenet Walkthrough
  104. Hack The BoxHack The Box: Unobtainium Walkthrough
  105. Hack The BoxHack The Box: Unicode Walkthrough
  106. Hack The BoxHack The Box: TwoMillion Walkthrough
  107. Hack The BoxHack The Box: Trick Walkthrough
  108. Hack The BoxHack The Box: Travel Walkthrough
  109. Hack The BoxHack The Box: TheNotebook Walkthrough
  110. Hack The BoxHack The Box: Vault Walkthrough
  111. Hack The BoxHack The Box: Vessel Walkthrough
  112. Hack The BoxHack The Box: Wall Walkthrough
  113. Hack The BoxHack The Box: Zipper Walkthrough
  114. Security engineeringSecure Automated Purge: Building a Bootable Disk-Sanitization Utility
  115. Security notesWhat Ninety Days of Stoic Practice Changed for Me
  116. Security engineeringBitLocker Cryptographic Erase Utility: Design, Limits, and Validation
  117. Hack The BoxHack The Box: Tabby Walkthrough
  118. Hack The BoxHack The Box: Access Walkthrough
  119. Hack The BoxHack The Box: Forest Walkthrough
  120. Hack The BoxHack The Box: Cap Walkthrough
  121. Hack The BoxHack The Box: Active Walkthrough
  122. Hack The BoxHack The Box: GoodGames Walkthrough
  123. Hack The BoxHack The Box: Remote Walkthrough
  124. Hack The BoxHack The Box: BountyHunter Walkthrough
  125. Security engineeringMicrosoft Teams Classic vs. New Teams: A 2023 Security Comparison
  126. Hack The BoxHack The Box: Luanne Walkthrough
  127. Hack The BoxHack The Box: Passage Walkthrough
  128. Hack The BoxHack The Box: Doctor Walkthrough
  129. Hack The BoxHack The Box: Magic Walkthrough
  130. Hack The BoxHack The Box: OpenAdmin Walkthrough
  131. Hack The BoxHack The Box: Traverxec Walkthrough
  132. Hack The BoxHack The Box: Mango Walkthrough
  133. Hack The BoxHack The Box: Blocky Walkthrough
  134. Hack The BoxHack The Box: Popcorn Walkthrough
  135. Hack The BoxHack The Box: Mirai Walkthrough
  136. Hack The BoxHack The Box: Jarvis Walkthrough
  137. Hack The BoxHack The Box: SwagShop Walkthrough
  138. Hack The BoxHack The Box: Networked Walkthrough
  139. Hack The BoxHack The Box: FriendZone Walkthrough
  140. Hack The BoxHack The Box: Irked Walkthrough
  141. Hack The BoxHack The Box: Sunday Walkthrough
  142. Hack The BoxHack The Box: Conceal Walkthrough
  143. Hack The BoxHack The Box: Poison Walkthrough
  144. Hack The BoxHack The Box: Jerry Walkthrough
  145. Hack The BoxHack The Box: Valentine Walkthrough
  146. Hack The BoxHack The Box: Bounty Walkthrough
  147. Hack The BoxHack The Box: Node Walkthrough
  148. Hack The BoxHack The Box: Silo Walkthrough
  149. Hack The BoxHack The Box: Grandpa Walkthrough
  150. Hack The BoxHack The Box: Sense Walkthrough
  151. Hack The BoxHack The Box: Arctic Walkthrough
  152. Hack The BoxHack The Box: Cronos Walkthrough
  153. Hack The BoxHack The Box: Granny Walkthrough
  154. Hack The BoxHack The Box: Nibbles Walkthrough
  155. Hack The BoxHack The Box: Bastard Walkthrough
  156. Hack The BoxHack The Box: Bashed Walkthrough
  157. Hack The BoxHack The Box: Devel Walkthrough
  158. Hack The BoxHack The Box: Shocker Walkthrough
  159. Certification reviewOffensive Security Wireless Professional (OSWP) Certification Review
  160. Field notesWhat I Learned from Ninety Days of Personal Journaling
  161. Certification reviewECPPTv2 Certification Review
  162. Hack The BoxHack The Box: Lame Walkthrough
  163. Security engineeringInstalling Metasploit Framework on Ubuntu: 2022 Setup Notes