A CVSS 10.0 unauthenticated SQL injection in Metabase, exploited as a zero-day and in CISA KEV within eight days. Well-trodden ground by now — so this is the patch diff nobody ran, the docstring the vendor compiled into the jar, and the release the advisory gets wrong (25 min)
A CVSS 10.0 unauthenticated privilege escalation in Chef Automate, recovered from two stripped Go binaries with no source. Every version-based way of checking whether you are affected is broken, so the detection rubric is the point (35 min)
A CVSS 10.0 auth bypass in the Argo CD MCP server, diffed from source to shipped container, plus the reason binding it to loopback doesn't save you (25 min)
Placeholder post — content coming soon.
An empirical study on social-engineering large language models for malware development, mapped to the jailbreak taxonomy that got named after the fact (12 min)
A walkthrough of the Insecure Output Handling Lab3 challenge from HackTheBox
A practical guide to bulk-pulling CVE records from the NVD REST API v2.0 using PowerShell — date windowing, pagination, retry logic, and local catalog merging included.
A practical walkthrough, including the jar-building hiccup nobody warns you about (15 min)"
A Field Guide to Dark Web Intelligence Collection
A Multi-Task BERT-Based Framework for Classifying Dark Web Chatter in Insider Threat Campaigns (20 min)
A comprehensive overview of the SillyTavern LLM Frontend for Power Users (12 min)