Security research, CVE disclosures, vulnerability writeups, and AI engineering.https://w4nn4d13.in/en-usWed, 04 Nov 2026 07:25:10 GMThttps://w4nn4d13.in/posts/the-forgetten-acess/https://w4nn4d13.in/posts/the-forgetten-acess/One advisory. Five stages. Countless rabbit holes. 💀 From OSINT to AI steganography, reverse engineering, cryptography, and GitHub forensics. The Forgotten Access — where finding one clue only unlocks another problem. 😭 And some of you thought it was just a simple CTF. 💀Thu, 22 Oct 2026 00:00:00 GMTSecurity Researchctfosintgithubgithub-releasesai-securityw4nn4d13https://w4nn4d13.in/posts/CVE-2026-19412/https://w4nn4d13.in/posts/CVE-2026-19412/High-severity hardcoded credentials vulnerability in the CP Plus CP-XR-DE21-S Router allows an attacker with local network access to obtain shared HTTP Digest authentication credentials and gain unauthorized administrative access.Fri, 28 Aug 2026 00:00:00 GMTSecurity Researchcvehardcoded-credentialsroutercp-plusauthenticationiot-securitynetwork-securityw4nn4d13https://w4nn4d13.in/posts/AI-as-an-Attack-Surface/https://w4nn4d13.in/posts/AI-as-an-Attack-Surface/A security-focused analysis of how AI agents, tool integrations, prompts, memory, and delegated permissions can create new attack paths across modern applications.Tue, 25 Aug 2026 00:00:00 GMTAI Securityai-securityai-agentsprompt-injectionllmapplication-securityw4nn4d13https://w4nn4d13.in/posts/otp-rate-limit-bypass-via-email-case-normalization/https://w4nn4d13.in/posts/otp-rate-limit-bypass-via-email-case-normalization/How inconsistent email normalization between the rate limiter and delivery logic allows unlimited OTP requests — a classic normalization-mismatch bug.Wed, 29 Jul 2026 00:00:00 GMTWeb Application Securityrate-limitingotpauthenticationweb-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-59924/https://w4nn4d13.in/posts/cve-2026-59924/Path traversal in mistune's Include directive allows reading arbitrary files outside the intended markdown directory. Affects all versions up to 3.1.4, fixed in 3.3.0.Fri, 10 Jul 2026 00:00:00 GMTSecurity Researchcvepath-traversalpythonapplication-securityw4nn4d13https://w4nn4d13.in/posts/active-directory-attack-path-analysis/https://w4nn4d13.in/posts/active-directory-attack-path-analysis/A methodical walkthrough of an AD attack chain — from unauthenticated recon to full domain compromise via AS-REP roasting, DCSync, and pass-the-hash.Wed, 01 Jul 2026 00:00:00 GMTSecurity Researchactive-directorypenetration-testingkerberoswindowsdcsyncw4nn4d13https://w4nn4d13.in/posts/cve-2026-32138/https://w4nn4d13.in/posts/cve-2026-32138/High-severity Firebase and Web3Forms API credential exposure in Nexulean Website through publicly accessible client-side resources. Fixed in v2.0.0.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcveapi-key-exposurefirebaseweb-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-41037/https://w4nn4d13.in/posts/cve-2026-41037/High-severity missing rate limiting on the Quantum Networks Router login endpoint allows unlimited brute-force and credential stuffing attacks against administrative accounts.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcvebrute-forcerate-limitingrouter-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-41039/https://w4nn4d13.in/posts/cve-2026-41039/Information disclosure vulnerability in Quantum Networks Router due to missing authentication on sensitive internal endpoints, allowing unauthenticated access to internal API paths, scripts, and configuration resources.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcveinformation-disclosurebroken-access-controlrouter-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-41575/https://w4nn4d13.in/posts/cve-2026-41575/Moderate-severity DOM-based cross-site scripting in IP Reputation Checker where insufficient sanitization of user-controlled input before DOM insertion allows arbitrary script execution in the victim's browser.Sat, 13 Jun 2026 00:00:00 GMTWeb Application Securitycvexssdom-xssweb-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-41900/https://w4nn4d13.in/posts/cve-2026-41900/High-severity sandbox escape in OpenLearnX's Python execution environment allows crafted payloads to break out of the restricted runtime and execute arbitrary commands on the host.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcvercesandbox-escapepythonweb-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-29905/https://w4nn4d13.in/posts/cve-2026-29905/Persistent Denial of Service in Kirby CMS via malformed image upload. An authenticated Editor can crash the application into an unrecoverable state by exploiting unchecked getimagesize() return values.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcvedosphpcms-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-42290/https://w4nn4d13.in/posts/cve-2026-42290/High-severity OS command injection in protobufjs-cli's pbts tool. User-supplied file paths are string-interpolated into a shell command and executed via child_process.exec(), enabling arbitrary command execution via crafted filenames.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcvecommand-injectionnodejssupply-chainjavascriptw4nn4d13https://w4nn4d13.in/posts/cve-2026-45152/https://w4nn4d13.in/posts/cve-2026-45152/High-severity OS command injection in uniget CLI where the check field from JSON metadata is passed directly to /bin/bash -c without validation, enabling arbitrary command execution via crafted metadata files.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcvecommand-injectiongosupply-chainw4nn4d13https://w4nn4d13.in/posts/cve-2026-55061/https://w4nn4d13.in/posts/cve-2026-55061/Unsafe EDITOR environment variable parsing in uniget CLI v0.27.3 via strings.Split() allows unintended argument injection and command execution.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcveargument-injectiongocli-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-48098/https://w4nn4d13.in/posts/cve-2026-48098/High-severity vulnerability in NexTOR IP Changer where sudo combined with shell-based execution could allow privileged command execution in permissive sudo configurations.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcveprivilege-escalationlinuxsudow4nn4d13https://w4nn4d13.in/posts/cve-2026-48097/https://w4nn4d13.in/posts/cve-2026-48097/High-severity PATH injection vulnerability in NexTOR IP Changer where unsafe executable resolution through the PATH environment variable could allow arbitrary command execution.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcvepath-injectioncommand-executionlinuxw4nn4d13https://w4nn4d13.in/posts/cve-2026-55062/https://w4nn4d13.in/posts/cve-2026-55062/Path traversal vulnerability in uniget CLI v0.27.3 allows local users to access and modify arbitrary files via directory escape sequences in hook filenames.Sat, 13 Jun 2026 00:00:00 GMTSecurity Researchcvepath-traversalgocli-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-44720/https://w4nn4d13.in/posts/cve-2026-44720/Moderate-severity JWT authentication bypass in OpenLearnX where insufficient signature verification could allow attackers to supply forged tokens and bypass identity validation.Sat, 13 Jun 2026 00:00:00 GMTWeb Application Securitycvejwtauthentication-bypassweb-securityw4nn4d13https://w4nn4d13.in/posts/cve-2026-9506/https://w4nn4d13.in/posts/cve-2026-9506/Unauthenticated LFI in Bagisto allows arbitrary file read via path traversal without authentication. Disclosed via CERT-In and assigned CVE-2026-9506.Sat, 13 Jun 2026 00:00:00 GMTWeb Application Securitycvelfipath-traversalphpweb-securityw4nn4d13