CVE-2026-17532: nonce: true => Web ShellUnauthenticated reflected XSS to 1-click RCE in Seraphinite Accelerator, a WordPress caching plugin on 50,000+ sites. The site that looked clean What would you do if I told you that just by opening yAug 25 · 7 min readkalhor.hashnode.dev
Taking over a password-protected & FDE enabled OVF for fun and profitIntroduction In the world of Linux system administration, resetting a password when access to the system has been restricted for one reason or another is a common challenge. The problem becomes especiAug 22 · 17 min readkalhor.hashnode.dev