AKAlireza Kalhorinkalhor.hashnode.dev·Aug 25 · 7 min readCVE-2026-17532: nonce: true => Web ShellUnauthenticated reflected XSS to 1-click RCE in Seraphinite Accelerator, a WordPress caching plugin on 50,000+ sites. The site that looked clean What would you do if I told you that just by opening y00
AKAlireza Kalhorinkalhor.hashnode.dev·Aug 22 · 17 min readTaking over a password-protected & FDE enabled OVF for fun and profitIntroduction In the world of Linux system administration, resetting a password when access to the system has been restricted for one reason or another is a common challenge. The problem becomes especi00