Information Security

Vulnerability Management

Cve

Explore recommended reads, summarized by AI

Vulnerability Research and Disclosure

Writing about discovering, analyzing, and disclosing security vulnerabilities in software systems.

CVE Analysis and Patching

Security Research and Discovery

Popular this week

Anmol K Sachan

PHP2Shell: CVE-2026-109618 Pre-Auth RCE, I Tested It Locally and Here’s How It Works

Nidhi kathayat

How to Find a Target for Your First CVE | Nidhi Kathayat

PRiTi.EX

TryHackMe PHP2Shell — Complete Walkthrough

WhitGuidance

[CVE-2026–123158] sshole : How Two Unrelated ‘’ Strings Broke OpenSSH on musl

WhitGuidance

CVE-2026–64638 (XSS2Shell): From a WordPress Login-Page XSS to Remote Code Execution

Selected by Medium

Iuliia Volkova

CVE: How Two Engineers Got Tired of the Chaos and Gave Vulnerabilities a Common Name

Latest stories

Mammd Hamidli

PHP2Shell TryHackMe — Complete Walkthrough

WhitGuidance

[CVE-2026–110186] Langflow : How a Default-On Auto-Login Opens the Door to Unauthenticated RCE

In

MeetCyber

by

cybrNK

CVE-2026–42980: How a Small Integer Underflow Can Lead to Windows SYSTEM Access!!

Adityagurav

How I Found CVE-2026–106031 — Unauthenticated Coupon Code Disclosure in Spin Wheel (Ultimate Spin…

Arittroskr

How I Found My First CVE: Broken Access Control in a WooCommerce plugin <= 1.3.14

See more stories

Who to follow

Popular this week

Anmol K Sachan

PHP2Shell: CVE-2026-109618 Pre-Auth RCE, I Tested It Locally and Here’s How It Works

Nidhi kathayat

How to Find a Target for Your First CVE | Nidhi Kathayat

PRiTi.EX

TryHackMe PHP2Shell — Complete Walkthrough

WhitGuidance

[CVE-2026–123158] sshole : How Two Unrelated ‘’ Strings Broke OpenSSH on musl

WhitGuidance

CVE-2026–64638 (XSS2Shell): From a WordPress Login-Page XSS to Remote Code Execution

Selected by Medium

Iuliia Volkova

CVE: How Two Engineers Got Tired of the Chaos and Gave Vulnerabilities a Common Name

Latest stories

Mammd Hamidli

PHP2Shell TryHackMe — Complete Walkthrough

WhitGuidance

[CVE-2026–110186] Langflow : How a Default-On Auto-Login Opens the Door to Unauthenticated RCE

In

MeetCyber

by

cybrNK

CVE-2026–42980: How a Small Integer Underflow Can Lead to Windows SYSTEM Access!!

Adityagurav

How I Found CVE-2026–106031 — Unauthenticated Coupon Code Disclosure in Spin Wheel (Ultimate Spin…

Arittroskr

How I Found My First CVE: Broken Access Control in a WooCommerce plugin <= 1.3.14

See more stories

Who to follow