emma@emma-plan.org

The Art of 403 Bypass: From Understanding to Exploitation

by

Press enter or click to view image in full size N0aziXss Feb 3, 2026 https://medium.com/@N0aziXss/the-art-of-403-bypass-from-understanding-to-exploitation-8903118a074d Subtitle: A Systematic Methodology for Identifying and Circumventing Access Control Barriers in Web Applications Byline: By N0aziXss | Security Researcher | HackerOne & BugCrowd Validated Introduction: Deep Dive into HTTP 403🔐 What is Error 403? 403 Forbidden — The server … Read more

From Default IIS Page to Critical SQL Injection

by

Ahmad Mugh33ra Dec 9, 2025 https://mugh33ra.medium.com/from-default-iis-page-to-critical-sql-injection-d0e9950c66fc Why “boring” infrastructure often hides the most dangerous secrets Sometimes the most dangerous vulnerabilities hide in plain sight, waiting for someone who refuses to give up. Assalam-O-Alikum My name is Ahmad Mugheera an Indivisual Security Researcher, Ethical Hacker and bug bounty hunter from Pakistan. Let’s Start The Setup: Another … Read more

A Journey of Limited Path Traversal To RCE With $40,000 Bounty!

by

HX007 Jan 16, 2025 Link: https://medium.com/@HX007/a-journey-of-limited-path-traversal-to-rce-with-40-000-bounty-fc63c89576ea My Name is Abdullah Nawaf, Full Time Bug Bounty Hunter, Working actively in BugCrowd with a Top 50 Rank, Rank 11 for P1 Bugs With 226 P1 , Hunting For P1, and P2 Bugs. In this write-up, I will detail how I& Orwa Atyat successfully escalated a limited path traversal into an RCE, earning us a $40,000 bounty. #Description: While conducting reconnaissance and port scanning … Read more

Discovering Negative-Days with LLM Workflows | Spaceraccoon

by

Feb 7, 2026 Link: https://spaceraccoon.dev/discovering-negative-days-llm-workflows/ Time-to-Exploit is Negative  By now, you’ve probably read Anthropic’s zero-days blogpost where an “out-of-the-box” Claude Opus 4.6 workflow was used to find 500 vulnerabilities in open-source projects. While I think this is a logical application of LLMs (see my keynote at the recent Association for the Advancement of Artificial Intelligence workshop on Artificial Intelligence … Read more

Negative-Days with Vulnerability Spoiler Alert: Three Months Later (LLM) | Spaceraccoon

by

May 24, 2026 Link: https://spaceraccoon.dev/negative-days-vulnerability-spoiler-alert/ When I published Discovering Negative-Days with LLM Workflows three months ago, I got a lot of great feedback and interest. Since then, the waves have only gotten stronger in the vulnerability research world with plenty of critical disclosures in major open-source projects. Some of these were caught by my demo of Vulnerability … Read more

MiniPlasma: Windows privilege escalation zero-day affects fully patched systems | ThreatLocker

by

Andrea Pomaranski, Special Projects IT Engineer May 19, 2026 Link: https://www.threatlocker.com/blog/miniplasma-windows-privilege-escalation-zero-day-affects-fully-patched-systems MiniPlasma zero-day: What it is, how it works, and how to protect your environment A Windows vulnerability from 2020 is back, and it works on fully patched systems. MiniPlasma is the latest in a series of Windows zero-day exploits publicly released by a security … Read more

Road to Exim RCE – Abusing Unsafe Memory Allocator in the Most Popular MTA (CVE-2017-16943, CVE-2017-16944) | DEVCORE

by

Meh, 2017-12-11 Link: https://devco.re/blog/2017/12/11/Exim-RCE-advisory-CVE-2017-16943-en/ On 23 November, 2017, we reported two vulnerabilities to Exim. These bugs exist in the SMTP daemon and attackers do not need to be authenticated, including CVE-2017-16943 for a use-after-free (UAF) vulnerability, which leads to Remote Code Execution (RCE); and CVE-2017-16944 for a Denial-of-Service (DoS) vulnerability. About Exim Exim is a … Read more

Scraps of Notes on Exploiting Exim Vulnerabilities (CVE-2018-6789, CVE-2019-15846) | Synacktiv 

by

Written by Mehdi Talbi, Paul Fariello – 08/10/2019 Link: https://www.synacktiv.com/en/publications/scraps-of-notes-on-exploiting-exim-vulnerabilities In this post we have seen the fundamentals of Exim that are required to successfully exploit a heap overflow. Then, we have shown how we could use them for two different vulnerabilities. Moreover, the techniques used to exploit CVE-2018-6789 may apply to exploit the freshly disclosed heap-based overflow … Read more

From theory to practice: analysis and PoC development for CVE-2020-28018 (Use-After-Free in Exim) | Adepts of 0xCC

by

May 14, 2021 Adepts of 0xCC Link: https://adepts.of0x.cc/exim-cve-2020-28018/ Introduction Qualys recently released an advisory named “21Nails” with 21 vulnerabilities discovered in Exim, some leading to LPE and RCE. This post will analyze one of those vulnerabilities with CVE ID: CVE-2020-28018. The vulnerability is a Use-After-Free (UAF) vulnerability on tls-openssl.c, that leads to Remote Code Execution. This vulnerability … Read more