Working on AI, cybersecurity, software development and vulnerability research, and sharing what I learn.https://eminuzun.com/en-ushttps://eminuzun.com/en/blog/what-is-xss/https://eminuzun.com/en/blog/what-is-xss/A flaw that comes from a site printing user input to the page without checking it; the attacker's code runs in someone else's browser.Sun, 19 Jul 2026 00:00:00 GMThttps://eminuzun.com/en/blog/host-header-injection/https://eminuzun.com/en/blog/host-header-injection/The Host header is entirely under the user's control; when some applications trust it too much, the password reset link goes to the attacker's server.Thu, 04 Jun 2026 00:00:00 GMThttps://eminuzun.com/en/blog/cpanel-whm-crlf-injection/https://eminuzun.com/en/blog/cpanel-whm-crlf-injection/A pre-auth CRLF injection in cPanel, patched on May 13, 2026; data written to the status parameter is added to the response header without sanitization.Tue, 19 May 2026 00:00:00 GMThttps://eminuzun.com/en/blog/cpanel-dns-cluster-ssl-bypass/https://eminuzun.com/en/blog/cpanel-dns-cluster-ssl-bypass/cPanel's DNS Cluster module never verifies the other side's certificate on the TLS connection; with CVE-2026-32992, credentials between clusters are exposed.Sun, 17 May 2026 00:00:00 GMThttps://eminuzun.com/en/blog/apache-activemq-fileserver-rce/https://eminuzun.com/en/blog/apache-activemq-fileserver-rce/Put the two forgotten checks in the fileserver component of Apache ActiveMQ before 5.14.0 side by side and you get a root shell.Thu, 14 May 2026 00:00:00 GMThttps://eminuzun.com/en/blog/apache-http-2-double-free/https://eminuzun.com/en/blog/apache-http-2-double-free/A flaw disclosed in the mod_http2 module crashes Apache HTTP Server 2.4.66 and earlier with a single malicious request, and leads to RCE on some setups.Sat, 09 May 2026 00:00:00 GMThttps://eminuzun.com/en/blog/copy-fail-linux-root-cve-2026-31431/https://eminuzun.com/en/blog/copy-fail-linux-root-cve-2026-31431/A 2017 optimization commit opened a bug chain in algif_aead; a 732-byte script gets you root on major Linux distributions (CVE-2026-31431).Sun, 03 May 2026 00:00:00 GMThttps://eminuzun.com/en/blog/cpanel-pre-auth-session-takeover-cve-2026-41940/https://eminuzun.com/en/blog/cpanel-pre-auth-session-takeover-cve-2026-41940/cPanel writes a pre-auth session file to disk even on a failed login; CRLF injection gets credentials written into that file for an auth bypass (CVE-2026-41940).Sun, 03 May 2026 00:00:00 GMThttps://eminuzun.com/en/blog/windows-shell-zero-click-ntlm-leak-cve-2026-32202/https://eminuzun.com/en/blog/windows-shell-zero-click-ntlm-leak-cve-2026-32202/Half of the RCE flaw APT28 exploited via LNK files stayed open even after the patch; with CVE-2026-32202, an NTLM hash can be leaked without the victim clicking anything.Sun, 03 May 2026 00:00:00 GMThttps://eminuzun.com/en/blog/command-injection-browser-to-terminal/https://eminuzun.com/en/blog/command-injection-browser-to-terminal/Command injection means that when a web application adds user input to an operating system command without filtering it, you can write shell commands there.Sat, 25 Apr 2026 00:00:00 GMThttps://eminuzun.com/en/blog/sqlmap-sql-injection-kali/https://eminuzun.com/en/blog/sqlmap-sql-injection-kali/SQLmap is an open-source tool that automates SQL injection testing; it handles what you'd do manually with a few commands.Sat, 18 Apr 2026 00:00:00 GMThttps://eminuzun.com/en/blog/prompt-injection-to-data-leak/https://eminuzun.com/en/blog/prompt-injection-to-data-leak/Agentic AI agents can read email, search files and call APIs; prompt injection, data leaks and privilege abuse are expanding this new attack surface.Tue, 14 Apr 2026 00:00:00 GMThttps://eminuzun.com/en/blog/linux-inside-a-pdf-linuxpdf/https://eminuzun.com/en/blog/linux-inside-a-pdf-linuxpdf/You open a PDF in your browser, there's a terminal inside, and you can run commands. linuxpdf does exactly that.Fri, 10 Apr 2026 00:00:00 GMThttps://eminuzun.com/en/blog/what-is-hashcat/https://eminuzun.com/en/blog/what-is-hashcat/Hashcat is a password cracking tool; if you have a hash value and want to find the password, it's one of the tools you turn to.Fri, 10 Apr 2026 00:00:00 GMThttps://eminuzun.com/en/blog/hash-functions-theory-to-attacks/https://eminuzun.com/en/blog/hash-functions-theory-to-attacks/A hash function turns input into a fixed-length output with no way back; from MD5 to bcrypt, the avalanche effect, rainbow tables and salt are explained with real attacks.Thu, 09 Apr 2026 00:00:00 GMT