All Posts

2 articles

Bypassing Promotion Logic in Sylius via Race Condition.

Deep dive into CVE-2026-31824: Exploiting Time-of-Check to Time-of-Use (TOCTOU) race condition in Sylius 2.3 allowing attackers to bypass promotion coupon usage limits.

security research race-condition sylius toctou CVE-2026-31824

Jun 6, 2026

One click remote code execution in CyberPanel v2.4.3

Critical vulnerability chain allowing complete server compromise in CyberPanel v2.4.3 through XSS and CSRF chaining.

security research xss cyberpanel csrf CVE-2026-41472 CVE-2026-41473 rce

Jan 18, 2026