skeleton
sec
home
research
writeups
projects
about
services
tag:
Web
2026-09-04
phpMyFAQ: session-only auth downgrade, password change without verification, and TOTP secret in data export
2026-08-28
File Browser: stale shares, share cleanup, named-pipe DoS, and TUS race