TE.CL HTTP Request Smuggling to bypass 403, chained with SSRF to scan internal network and discover hidden file server containing the flag

Exploiting CVE-2025-55182 (React2Shell) — a critical insecure deserialization flaw in the React Server Components Flight protocol leading to unauthenticated RCE

WordPress arbitrary options update leading to admin takeover and RCE

Reverse engineering a dungeon crawler game plugin to extract flag from state machine table

Critical RCE in Next.js 16.0.6 via React Server Components Flight payload deserialization

JavaScript Type Coercion exploit to bypass palindrome validation with minimal payload

Server-Side JavaScript Injection via template literals to bypass keyword filters

Heap UAF to tcache poisoning for arbitrary write