Critical pre-auth XSS β RCE (XSS2Shell / CVE-2026-64638) on National University of Singapore.
Public PoCs didnβt work reliably here, so I built and documented a full working chain.
Details: https://t.co/T4mWuKWYsF
#bugbounty#XSS#RCE#WordPress#CVE
You will find a 0-day.
You will find a 0-day.
You will find a 0-day.
You will find a 0-day.
You will find a 0-day.
You will find a 0-day.
You will find a 0-day.
You will find a 0-day.
You will find a 0-day.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
You will find a Critical vulnerability.
π¨ New Writeup Alert! π¨
"Unauthenticated Disclosure of A/B Test Data in Convert Pro β How Two Forgotten AJAX Endpointsβ¦" by Shikhali Jamalzade is now live on IW!
Check it out here: https://t.co/Zwn0dgdHoY
#cybersecurity#technology#bugbountywriteup#wordpress#bugbounty
π¨ New Writeup Alert! π¨
"How an Unpatched N-Day Let Any Anonymous Visitor Rewrite WooCommerce Prices in ND Booking" by Shikhali Jamalzade is now live on IW!
Check it out here: https://t.co/Ags8t26bRB
#cybersecurity#technology#bugbountywriteup#bugbounty#wordpress
@AudrasJb Hi @AudrasJb β sent a responsible disclosure report to [email protected] on July 20 (CSRF issue, GDPR Data Request Form) with no reply after 9 days. Reaching out here in case it's more visible. Happy to resend details β thanks!
As a vulnerability researcher, if you are not humbled every day by the output of these AI models, if you are not constantly learning from them and rethinking the way you work, then you are simply not paying attention to what is happening to our field.
π¨ New Writeup Alert! π¨
"How I Found a Cross-Student IDOR in Academy LMS That Leaked Correct Quiz Answers" by Shikhali Jamalzade is now live on IW!
Check it out here: https://t.co/1UFnItbvGI
#technology#wordpress#bugbounty#walkthrough#cybersecurity
π¨ New Writeup Alert! π¨
"TryHackMe β Linux Agency | Complete Write-Up & Walkthrough" by Shikhali Jamalzade is now live on IW!
Check it out here: https://t.co/K3J0SVN3lM
#linux#ctfwriteup#privilegeescalation#tryhackme