The Bug Bounty Hunter

UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range https://boschko.ca/g1-ble-rce/

Escaping Google Cloud Application Integration Sandbox: Straight into Borg https://nopnop.pro/2026/08/26/escaping-google-cloud-application-integration-sandbox/

Plausible Analytics: Pre-Auth RCE, Cross-Tenant IDORs, and SSRF-to-RCE https://whoareme.com/blog/plausible-analytics-multiple-criticals/

I had some free time, so I tried to pwn V8 https://blog.himanshuanand.com/2026/08/i-had-some-free-time-so-i-tried-to-pwn-v8/

The Art of Business Logic — When the Checkout Got the Price Wrong https://zuksh.medium.com/the-art-of-business-logic-when-the-checkout-got-the-price-wrong-4d548971b4a3

When the NASA Ground Station Has No Lock on the Door: Unauthenticated Command Execution in AIT-GUI (GHSA-p9r8-2q67-fp86) https://cycode.com/blog/ait-gui-unauthenticated-command-execution/

Hacking SAML with Claude Code https://oblique.security/blog/hacking-saml/

Pre-Auth RCE in UniFi OS - CVE-2026-34909: One Request to Root Behind Seven Products ($42,751) https://www.catchify.sa/post/pre-auth-rce-unifi-os-one-request-to-root

Chaining IDOR to Privilege Escalation: A $$$$ Microsoft Bug Bounty https://medium.com/@dsmodi484/chaining-idor-to-privilege-escalation-a-microsoft-bug-bounty-936656cf47a2

The Critical Unauthenticated RCE Vulnerability In CircleCI’s MCP Server https://remedio.io/blog/the-critical-unauthenticated-rce-vulnerability-in-circlecis-mcp-server/