Home

Welcome to my security research blog. Below are my writeups:

• About Me
• OSWE Exam Experience
• Elabftw Authenticated SQL Injection (CVE-2025-25206)
• Kanboard Password Reset Poisoning via Host Header Injection (CVE-2025-52560)
• Kanboard Username Enumeration and Bruteforce Bypass (CVE-2025-52576)
• Kanboard Admin Remote Code Execution via Unsafe Deserialization (CVE-2025-55010)
• Kanboard Path Traversal in Task File Upload API (CVE-2025-55011)