Write-Ups | Chocapikk's Cybersecurity Blog 🛡️💻

2025

Vembu BDRSuite: Unauth XSS, Weird Endpoints and Silent Patches (≤ 7.5.0.1)

15 Apr 2025

Two Stored XSS in MagnusBilling: From CTF Curiosity to CVEs

21 Mar 2025

How I Got Hacked: A Warning about Malicious PoCs

7 Feb 2025

2024

Wikimedia/svgtranslate 2.0.1 Remote Code Execution

23 May 2024

Exploring Mocodo Vulnerabilities: A Compilation of CVEs from 2024

9 May 2024

Exploring AVideo Vulnerabilities: A Deep Dive into CVE-2024-31819

9 Apr 2024

Exploring DerbyNet Vulnerabilities: A Compilation of CVEs from 2024

3 Apr 2024

2023

CVE-2023-50917

18 Dec 2023

n00bzCTF 2023 - MyPin

11 Jun 2023

n00bzCTF 2023 - EZrev

11 Jun 2023

n00bzCTF 2023 - Conditions

11 Jun 2023

tjCTF 2023 - Gish

28 May 2023

TamuCTF 2023 - Logical

30 Apr 2023

TamuCTF 2023 - Gamer Redux

30 Apr 2023

TamuCTF 2023 - Connect

30 Apr 2023

FCSC 2023 - Zéro Pointé

30 Apr 2023

FCSC 2023 - UID

30 Apr 2023

FCSC 2023 - Lapin Blanc

30 Apr 2023

FCSC 2023 - ENISA Flag Store 1/2

30 Apr 2023

CAF 2023 - Babyrev

18 Apr 2023

CAF 2023 - Tower of Encryption

18 Apr 2023

CAF 2023 - IT Administrator Credentials

18 Apr 2023

CAF 2023 - I Warn You

18 Apr 2023

CAF 2023 - Baby Hacker Big Brother

17 Apr 2023

Oteria Cyber Cup 2022

3 Apr 2023