CyberKareemContact
Menu

Security writing

Research, engineering, and authorized labs in one collection.

Explore 27 current research and engineering articles within 140 published pieces. The collection also includes reviews, field notes, and retired Hack The Box walkthroughs.

ResearchRSS feedPublishing policy
All articles by date140 articles

Complete index

All 140 published articles.

  1. CVE case studyCVE-2026-73556: An Unguarded Regex Compile Let One Request Stall vLLM's Engine
  2. CVE case studyCVE-2026-16573: Bit Form Stored Active SVG Signature Data Without Sanitization
  3. CVE case studyCVE-2026-16613: A Cross-Site Request Could Expire WordPress Session Cookies
  4. CVE case studyCVE-2026-28145: MasterStudy Completed Orders Without Binding PayPal Payment Data
  5. CVE case studyCVE-2026-65523: An Entry ID Exposed Formidable's Private Signature Invite URL
  6. CVE case studyCVE-2026-66690: Donation Phone Data Reached GiveWP's Admin View as Stored XSS
  7. CVE case studyCVE-2026-66696: A Caller-Controlled Kadence Library Host Received Stored License Data
  8. CVE case studyCVE-2026-71493: Intermediate Symlinks Escaped Infracost's Template Boundary
  9. CVE case studyCVE-2026-71494: Untrusted Terraform Hosts Could Receive Terraform Cloud or Registry Tokens
  10. CVE case studyCVE-2026-59551: rtMedia Validated the ORDER BY Prefix but Executed the Full Value
  11. CVE case studyCVE-2026-65475: A Reverted Link Fix Reopened Stored XSS in Modula
  12. CVE case studyCVE-2026-67529: OpenProject Entry APIs Exposed Hidden Work Package Subjects
  13. CVE case studyCVE-2026-16532: Link Library's Public Submission Form Reached Raw SQL
  14. Security engineeringBuilding kameHunt: LLM-Assisted Variant Analysis for CVE Research
  15. CVE case studyCVE-2026-63007: Two Uyuni Formula Methods Skipped the Cross-Org Check
  16. CVE case studyCVE-2026-62233: A User Manager Could Mint a Super-Admin API Key
  17. CVE case studyCVE-2026-62235: Missing Flex Permissions Failed Open
  18. CVE case studyCVE-2026-62236: A Cross-Site GET Could Rotate a Grav TOTP Secret
  19. CVE case studyCVE-2026-55675: Fork PR Code Ran in a Privileged GitHub Actions Job
  20. CVE case studyCVE-2026-55890: Grav's style() Method Bypassed the Earlier Fix
  21. CVE case studyCVE-2026-59185: Missing Installation Ownership Check Allowed Cross-Tenant Access
  22. CVE case studyCVE-2026-59889: @JsonUnwrapped Replay Skipped an @JsonView Check
  23. CVE case studyCVE-2026-59979: Missing Tenant Checks in Yosemite-Crew Routes
  24. CVE case studyCVE-2026-61448: Malformed Content-Type Led to Stored XSS in Parse Server
  25. CVE case studyCVE-2026-61706: Pull Request Title Injection in Infracost Actions
  26. CVE case studyCVE-2026-61826: Bazarr's Plex OAuth API Lacked Authentication
  27. Security engineeringBuilding seg-test: A PCI DSS Segmentation Evidence Runner
  28. Hack The BoxHack The Box: CrossFit Walkthrough
  29. Hack The BoxHack The Box: CodePartTwo Walkthrough
  30. Hack The BoxHack The Box: Celestial Walkthrough
  31. Hack The BoxHack The Box: Cache Walkthrough
  32. Hack The BoxHack The Box: CTF Walkthrough
  33. Hack The BoxHack The Box: Book Walkthrough
  34. Hack The BoxHack The Box: Bolt Walkthrough
  35. Hack The BoxHack The Box: Atlas Walkthrough
  36. Hack The BoxHack The Box: Arkham Walkthrough
  37. Hack The BoxHack The Box: Sizzle Walkthrough
  38. Hack The BoxHack The Box: Search Walkthrough
  39. Hack The BoxHack The Box: Seal Walkthrough
  40. Hack The BoxHack The Box: Querier Walkthrough
  41. Hack The BoxHack The Box: PivotAPI Walkthrough
  42. Hack The BoxHack The Box: Multimaster Walkthrough
  43. Hack The BoxHack The Box: APT Walkthrough
  44. Hack The BoxHack The Box: CrossFitTwo Walkthrough
  45. Hack The BoxHack The Box: Eighteen Walkthrough
  46. Hack The BoxHack The Box: Encoding Walkthrough
  47. Hack The BoxHack The Box: Facts Walkthrough
  48. Hack The BoxHack The Box: Falafel Walkthrough
  49. Hack The BoxHack The Box: Fighter Walkthrough
  50. Hack The BoxHack The Box: Forgot Walkthrough
  51. Hack The BoxHack The Box: Ghoul Walkthrough
  52. Hack The BoxHack The Box: Hackback Walkthrough
  53. Hack The BoxHack The Box: Holiday Walkthrough
  54. Hack The BoxHack The Box: Intentions Walkthrough
  55. Hack The BoxHack The Box: JobTwo Walkthrough
  56. Hack The BoxHack The Box: Json Walkthrough
  57. Hack The BoxHack The Box: Kryptos Walkthrough
  58. Hack The BoxHack The Box: Laboratory Walkthrough
  59. Hack The BoxHack The Box: Mirage Walkthrough
  60. Hack The BoxHack The Box: MonitorsFour Walkthrough
  61. Hack The BoxHack The Box: NodeBlog Walkthrough
  62. Hack The BoxHack The Box: Object Walkthrough
  63. Hack The BoxHack The Box: Obscurity Walkthrough
  64. Hack The BoxHack The Box: Oouch Walkthrough
  65. Hack The BoxHack The Box: Ophiuchi Walkthrough
  66. Hack The BoxHack The Box: Overflow Walkthrough
  67. Hack The BoxHack The Box: Overwatch Walkthrough
  68. Hack The BoxHack The Box: Pikaboo Walkthrough
  69. Hack The BoxHack The Box: Quick Walkthrough
  70. Hack The BoxHack The Box: Ransom Walkthrough
  71. Hack The BoxHack The Box: Ready Walkthrough
  72. Hack The BoxHack The Box: RedCross Walkthrough
  73. Hack The BoxHack The Box: Retired Walkthrough
  74. Hack The BoxHack The Box: RouterSpace Walkthrough
  75. Hack The BoxHack The Box: Scanned Walkthrough
  76. Hack The BoxHack The Box: Schooled Walkthrough
  77. Hack The BoxHack The Box: Seventeen Walkthrough
  78. Hack The BoxHack The Box: Sink Walkthrough
  79. Hack The BoxHack The Box: Talkative Walkthrough
  80. Hack The BoxHack The Box: Tenet Walkthrough
  81. Hack The BoxHack The Box: Unobtainium Walkthrough
  82. Hack The BoxHack The Box: Unicode Walkthrough
  83. Hack The BoxHack The Box: TwoMillion Walkthrough
  84. Hack The BoxHack The Box: Trick Walkthrough
  85. Hack The BoxHack The Box: Travel Walkthrough
  86. Hack The BoxHack The Box: TheNotebook Walkthrough
  87. Hack The BoxHack The Box: Vault Walkthrough
  88. Hack The BoxHack The Box: Vessel Walkthrough
  89. Hack The BoxHack The Box: Wall Walkthrough
  90. Hack The BoxHack The Box: Zipper Walkthrough
  91. Security engineeringSecure Automated Purge: Building a Bootable Disk-Sanitization Utility
  92. Security notesWhat Ninety Days of Stoic Practice Changed for Me
  93. Security engineeringBitLocker Cryptographic Erase Utility: Design, Limits, and Validation
  94. Hack The BoxHack The Box: Tabby Walkthrough
  95. Hack The BoxHack The Box: Access Walkthrough
  96. Hack The BoxHack The Box: Forest Walkthrough
  97. Hack The BoxHack The Box: Cap Walkthrough
  98. Hack The BoxHack The Box: Active Walkthrough
  99. Hack The BoxHack The Box: GoodGames Walkthrough
  100. Hack The BoxHack The Box: Remote Walkthrough
  101. Hack The BoxHack The Box: BountyHunter Walkthrough
  102. Security engineeringMicrosoft Teams Classic vs. New Teams: A 2023 Security Comparison
  103. Hack The BoxHack The Box: Luanne Walkthrough
  104. Hack The BoxHack The Box: Passage Walkthrough
  105. Hack The BoxHack The Box: Doctor Walkthrough
  106. Hack The BoxHack The Box: Magic Walkthrough
  107. Hack The BoxHack The Box: OpenAdmin Walkthrough
  108. Hack The BoxHack The Box: Traverxec Walkthrough
  109. Hack The BoxHack The Box: Mango Walkthrough
  110. Hack The BoxHack The Box: Blocky Walkthrough
  111. Hack The BoxHack The Box: Popcorn Walkthrough
  112. Hack The BoxHack The Box: Mirai Walkthrough
  113. Hack The BoxHack The Box: Jarvis Walkthrough
  114. Hack The BoxHack The Box: SwagShop Walkthrough
  115. Hack The BoxHack The Box: Networked Walkthrough
  116. Hack The BoxHack The Box: FriendZone Walkthrough
  117. Hack The BoxHack The Box: Irked Walkthrough
  118. Hack The BoxHack The Box: Sunday Walkthrough
  119. Hack The BoxHack The Box: Conceal Walkthrough
  120. Hack The BoxHack The Box: Poison Walkthrough
  121. Hack The BoxHack The Box: Jerry Walkthrough
  122. Hack The BoxHack The Box: Valentine Walkthrough
  123. Hack The BoxHack The Box: Bounty Walkthrough
  124. Hack The BoxHack The Box: Node Walkthrough
  125. Hack The BoxHack The Box: Silo Walkthrough
  126. Hack The BoxHack The Box: Grandpa Walkthrough
  127. Hack The BoxHack The Box: Sense Walkthrough
  128. Hack The BoxHack The Box: Arctic Walkthrough
  129. Hack The BoxHack The Box: Cronos Walkthrough
  130. Hack The BoxHack The Box: Granny Walkthrough
  131. Hack The BoxHack The Box: Nibbles Walkthrough
  132. Hack The BoxHack The Box: Bastard Walkthrough
  133. Hack The BoxHack The Box: Bashed Walkthrough
  134. Hack The BoxHack The Box: Devel Walkthrough
  135. Hack The BoxHack The Box: Shocker Walkthrough
  136. Certification reviewOffensive Security Wireless Professional (OSWP) Certification Review
  137. Field notesWhat I Learned from Ninety Days of Personal Journaling
  138. Certification reviewECPPTv2 Certification Review
  139. Hack The BoxHack The Box: Lame Walkthrough
  140. Security engineeringInstalling Metasploit Framework on Ubuntu: 2022 Setup Notes