> signal_acquired // 10 write-ups indexed

Research Board

Offensive security findings, filed and cross-referenced. Memory safety, authentication bypass, business logic, and cloud attack paths.

Target
Intelligence
Category
CVE
Date
Time
Action
ImageMagick
DestroyXMLTree_ returns at recursion depth 600 before freeing the current node, abandoning an…
Fuzzing
CVE-2026-116154
Oct 25, 2026
7 min read
→
ImageMagick
ParseInternalDoctype stores parameter-entity values from an XMP DOCTYPE internal subset in a local vector,…
Fuzzing
CVE-2026-116155
Oct 25, 2026
7 min read
→
Claris FileMaker Server
A 2-byte field in the file header was all it took. This post breaks down CVE-2026-86926, a heap buffer…
Fuzzing
CVE-2026-86926
Sep 27, 2026
9 min read
→
Claris FileMaker Server
A single forged HTTP header re-enabled an entire admin-disabled API. This post breaks down CVE-2026-86934, a…
Web Security
CVE-2026-86934
Sep 23, 2026
7 min read
→
AppleID
This blog discusses an AppleID account takeover vulnerability via brute-forcing app-specific passwords or…
Web Security
—
Jan 9, 2025
5 min read
→
Web Cache Deception
This blog discusses a Web Cache Deception vulnerability that exposes Personally Identifiable Information (PII)…
Web Security
—
Sep 23, 2023
4 min read
→
ImageMagick
This article details a heap-based buffer overflow vulnerability (CVE-2023-1906) discovered in ImageMagick…
Fuzzing
CVE-2023-1906
Apr 23, 2023
2 min read
→
Clipchamp
Discover how a race condition vulnerability in Clipchamp’s internal environments exposed sensitive data,…
Web Security
—
Mar 10, 2023
4 min read
→
Azure Video Indexer
How We Discovered a Critical Flaw in Azure Video Indexer. Learn how Agilehunt can help protect your…
Azure
—
Dec 7, 2022
4 min read
→
Microsoft Teams
Discover how privilege escalation vulnerabilities in Microsoft Teams can lead to severe security risks. Learn…
Web Security
—
Dec 7, 2021
4 min read
→