MindPatch·Sep 1, 2025CVE-2025–9074: Docker Desktop Container Escape AnalysisDeep dive analysis of CVE-2025–9074, a critical Docker Desktop vulnerability that allowed container escape through unauthenticated API…
MindPatch·Aug 31, 2025Review of HTB’s Most Challenging Web Security Certification (CWEE)The CWEE certification is one of the most challenging web security certifications available these days, I hope this review helps future…A response icon1A response icon1
MindPatch·Apr 28, 2025[CIT CTF 2025] Solving all Web challengesMr. ChatbotA response icon2A response icon2
MindPatch·Mar 14, 2025Legacy SDK Flaws Cause Stored XSS and Account Takeover (ATO)Before we dive in, let’s quickly mention that I know writing Medium articles about XSS are common and cringy, but this one has something…A response icon3A response icon3
MindPatch·Jan 10, 2025Analysis of CVE-2022–30781How Git Fetch Resulted in Critical Remote Code Execution in Gitea
MindPatch·Aug 20, 2024[HTB] Solving DoxPit ChallangeIn this write-up, I’ll walk you through the process of solving the HTB DoxPit challengeA response icon1A response icon1
MindPatch·Feb 22, 2023With a single request, you can kill any Gitea serverin this blog I’m going to tell you how I was able to kill/dos any Gitea server I discovered this bug in Gitea version 1.14.2 in 2021