Research
CVE-2026-4378 — Stored XSS — shaggy
In an e-commerce platform widely used in Türkiye, the adi parameter on the profile update endpoint allows stored XSS. The payload is rendered both in the …
Frigate NVR — Remote Code Execution — shaggy
The full story of how a camera recommendation turned into a container root shell. Three dead-end paths before the working chain.
This writeup doesn’t …