Archive

15 posts published so far

Sep 20, 2025
CVE-2025-57204: Stored XSS in Stocky POS with Inventory Management & HRM (ui-lib) 5.0
Sergio Medeiros
Sep 20, 2025
CVE-2025-57205: Stored XSS in iNiLabs School Express 6.2 (SMS Express)
Sergio Medeiros
Sep 20, 2025
CVE-2025-57203: Stored XSS in MagicAI 9.1 (AI Chat) Enables Arbitrary JavaScript Execution
Sergio Medeiros

Nov 10, 2024

My Journey to Passing the CAPenX Certification: A Guide for Aspiring Expert-Level AppSec Pentesters

Sergio Medeiros

Jun 12, 2024

CVE-2024-37629: Simple XSS Payload Exploits 0day Vulnerability in 10,000 Web Apps

Sergio Medeiros

May 21, 2024

CVE-2024-34240: Latest Stored XSS 0day Vulnerability Unveiled

Sergio Medeiros

May 17, 2024

CVE-2024-34241: A Step-by-Step Discovery Guide

Sergio Medeiros

May 8, 2024

Review of the Certified AppSec Pentester Certification: Tips for Passing on Your First Attempt

Sergio Medeiros

May 4, 2024

Finding a Basic RCE Vulnerability on a Prominent News Channel

Sergio Medeiros

Apr 22, 2024

Uncovering an SSRF Vulnerability in PDFMyURL Affecting Numerous Users

Sergio Medeiros

May 31, 2023

Hunting and Finding CVE-2023-31045

Sergio Medeiros

May 31, 2023

Pass the eWPTXv2 Exam on Your First Attempt in 2023!

Sergio Medeiros

Dec 13, 2022

Pass The eWPT Exam in 2023 Using Free Resources on Your First Attempt!

Sergio Medeiros

Mar 15, 2022

Pass the eCPPTv2 Exam on Your First Attempt in 2022

Sergio Medeiros

Mar 15, 2022

Pizza Hut DevOps Hate Me. Yet Love Me? - A Bug Bounty Story

Sergio Medeiros

Command Palette

CVE-2025-57204: Stored XSS in Stocky POS with Inventory Management & HRM (ui-lib) 5.0

CVE-2025-57205: Stored XSS in iNiLabs School Express 6.2 (SMS Express)

CVE-2025-57203: Stored XSS in MagicAI 9.1 (AI Chat) Enables Arbitrary JavaScript Execution

My Journey to Passing the CAPenX Certification: A Guide for Aspiring Expert-Level AppSec Pentesters

CVE-2024-37629: Simple XSS Payload Exploits 0day Vulnerability in 10,000 Web Apps

CVE-2024-34240: Latest Stored XSS 0day Vulnerability Unveiled

CVE-2024-34241: A Step-by-Step Discovery Guide

Review of the Certified AppSec Pentester Certification: Tips for Passing on Your First Attempt

Finding a Basic RCE Vulnerability on a Prominent News Channel

Uncovering an SSRF Vulnerability in PDFMyURL Affecting Numerous Users

Hunting and Finding CVE-2023-31045

Pass the eWPTXv2 Exam on Your First Attempt in 2023!

Pass The eWPT Exam in 2023 Using Free Resources on Your First Attempt!

Pass the eCPPTv2 Exam on Your First Attempt in 2022

Pizza Hut DevOps Hate Me. Yet Love Me? - A Bug Bounty Story