// blog

Writing & Research

Writeups, research notes, and things I figured out the hard way.

2026.04.16

MCPwn — The nginx-ui Auth Bypass That Hands Attackers the Keys to Your Server

Critical CVE-2026-33032 CVSS 9.8 A missing authentication middleware on a single HTTP endpoint is all it takes. Attackers are

Read →
2026.04.09

Hello world!

Hey everyone, my name is Alex and I'm 21. Welcome to my blog. I'm a computer

Read →