41554 blogs · [ { "id": "01a087cd-5be3-73c1-86e7-59afabf137d7", "title": "HAProxy HTTP/3 -> HTTP/1 Desync: Cross-Protocol Smuggling via a Standalone QUIC FIN (CVE-2026-33555)", "url": "https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html", "published_at": "2026-04-14T00:14:54+00:00" }, { "id": "01a087cd-5be3-73c1-86e7-59afacafc01e", "title": "The Forgotten Bug: How a Node.js Core Design Flaw Enables HTTP Request Splitting", "url": "https://r3verii.github.io/cve/2026/02/27/nodejs-toctou.html", "published_at": "2026-02-27T00:14:54+00:00" }, { "id": "01a087cd-5be3-73c1-86e7-59afad30bc28", "title": "Zero‑Click ATO via Unbound Password‑Reset Token in one of the world’s largest gambling platforms", "url": "https://r3verii.github.io/bugbounty/2025/10/18/zero-click-ato-gambling-platform.html", "published_at": "2025-10-18T00:14:54+00:00" }, { "id": "01a087cd-5be3-73c1-86e7-59afad34fb50", "title": "CSRF → XSS → Admin Takeover in listmonk (CVE-2025-58430)", "url": "https://r3verii.github.io/cve/2025/09/08/listmonk-cve-xss.html", "published_at": "2025-09-08T00:14:54+00:00" }, { "id": "01a087cd-5be3-73c1-86e7-59afae10d39a", "title": "From “Low-Impact” RXSS to Credential Stealer: A JS-in-JS Walkthrough", "url": "https://r3verii.github.io/bugbounty/2025/08/25/rxss-credential-stealer.html", "published_at": "2025-08-25T00:14:54+00:00" }, { "id": "01a087cd-5be3-73c1-86e7-59afae97e907", "title": "3 Ways In: Exploiting WordPress Plugins via File Upload and Deserialization", "url": "https://r3verii.github.io/cve/2025/04/08/expoiting-wordpress.html", "published_at": "2025-04-08T08:14:54+00:00" }, { "id": "01a087cd-5be3-73c1-86e7-59afaebcb531", "title": "UTCTF 2024 Writeups", "url": "https://r3verii.github.io/ctf/2024/04/01/utctf-writeup.html", "published_at": "2024-04-01T08:14:54+00:00" }, { "id": "01a087cd-5be3-73c1-86e7-59afaf30dd62", "title": "Znuny OTRS CVEs : CVE-2024-32491, CVE-2024-32492, CVE-2024-32493", "url": "https://r3verii.github.io/cve/2024/03/20/znuny-cves.html", "published_at": "2024-03-20T08:14:54+00:00" }, { "id": "01a087cd-5be3-73c1-86e7-59afb0217f12", "title": "CodeInTheDarkCTF 2023 writeups", "url": "https://r3verii.github.io/ctf/2023/10/08/eXSStravaganza.html", "published_at": "2023-10-08T00:00:00+00:00" } ] posts Claim your blog

Blog · corpus.blog/blogs/r3verii.github.io/posts