Welcome to had's workspace Enjoy reading!

> offsec engineer, CVE(s) and tools...

Recent Posts

CVE-2026-27639 Mercator — Account Takeover via Stored XSS

CVE-2026-27639 Stored XSS to admin account takeover in Mercator

February 21, 2026 • 994 words • 5 min

cve xss account-takeover

Because reading JSON at 2 a.m. is a no-go.

From Sarif to TODOLIST

February 20, 2026 • 599 words • 3 min