Tag: writeup

All the articles with the tag "writeup".

• Mass Assignment: Admin Privilege Escalation via Signup

  kOaDT

  15 Jan, 2026

  Exploiting a mass assignment vulnerability in OopsSec Store's signup endpoint to create an account with administrator privileges.

• React2Shell: Exploiting CVE-2025-55182 in React Server Components

  kOaDT

  12 Jan, 2026

  A technical analysis of CVE-2025-55182, demonstrating how React Server Components deserialization leads to remote code execution.

• SQL Injection: From Dropdown to Database Dump

  kOaDT

  10 Jan, 2026

  How a simple order status filter can be exploited to extract every user's credentials from the database.