Kanboard CVE-2026-33058 Writeup
Walkthrough of the discovery of an authenticated SQL injection in Kanboard version <= 1.2.50 tracked as CVE-2026-33058
Posts
Flying Whales in a Pot of Honey
What I’ve been up to in the last few weeks
CVE-2025-6004 tl;dr
A tl;dr about account lockout bypass (CVE-2025-6004) in Hashicorp Vault
Go Report [a vulnerability] Card
While publishing oauth-labs I stumbled upon a vulnerability in goreportcard
ghmlwr: Malware on GitHub (retired)
New pet project ghmlwr
Atlassian Research and Work
Atlassian Research and a short status update
RFC5322, your XSS companion
Why RFC5322 email validation might lead to XSS vulnerabilities
Parcel Tracking, I can haz PII plz?
This is a short one about a not-so-fun parcel tracking service that I came across after completing the check-out of my cat food order for my furry overlords
Uncooperative Businesses
A short personal opinon piece about uncooperative businesses.
AirTies Air4930 - Feature...?
A not-so-fun little feature of AirTies Air 4930.