writeups

Jul 20, 2026

• htb
• medium
• mcp
• mcp-jam
• cve-2026-23744
• api
• rce
• port-forwarding
• chisel
• jupyter
• process-enumeration
• token-leak
• flask
• api-key-leak
• ssh-keys

Jul 20, 2026

• medium
• htb
• subdomains
• langflow
• cve-2025-3248
• rce
• openapi
• api
• env-leak
• mcp
• port-forwarding
• jwt
• kubernetes
• kubelet
• rbac

Jul 13, 2026

• easy
• htb
• freepbx
• cve-2025-57819
• sqli
• cron
• rce
• writable-config
• incron

Jul 13, 2026

• htb
• easy
• subdomains
• gitea
• env-leak
• credentials-reuse
• krayin
• cve-2026-38526
• file-upload
• systemd-timers
• git
• path-traversal

Jul 13, 2026

• in-progress
• hard
• htb
• subdomains
• nginx-ui
• cve-2026-27944
• backup
• decryption
• sqlite
• bcrypt
• cve-2026-3888
• toctou
• race-condition