YesWeHack Lab

Don’t eat the ChocoPoCs!

Don’t eat the ChocoPoCs! How vulnerability researchers were repeatedly targeted by trojanised exploits

CVE-2026-48907: Unauthenticated RCE in Joomla Content Editor

CVE-2026-48907: Unauthenticated RCE in the Joomla Content Editor extension

Security Alert: PostgreSQL SQL Injection in Drupal

CVE-2026-9082: PostgreSQL SQL Injection in Drupal

Python pitfalls: Turning developer mistakes into vulnerabilities

Python pitfalls: Turning developer mistakes into vulnerabilities

Python pitfalls: Turning developer mistakes into vulnerabilities

Python pitfalls: Turning developer mistakes into vulnerabilities

The minefield between syntaxes: exploiting syntax confusions in the wild

The minefield between syntaxes: exploiting syntax confusions in the wild

The minefield between syntaxes: exploiting syntax confusions in the wild

The minefield between syntaxes: exploiting syntax confusions in the wild

You've reached the end.