Lab Link Lab: Calliope Gallery Overview Calliope Gallery allows artists to upload portfolio images through their account dashboard. A forgotten configuration change introduced for an image thum...
Lab Link Lab: Foldmark Overview Foldmark is a document envelope platform that allows organizations to import XML envelopes from competing e-signature providers. The importer parses user-supplie...
Lab Link Lab: CostThis Overview CostThis uses a simple page router that dynamically loads content from files stored on disk. The page being rendered is controlled through a URL parameter, making...
Lab Link Lab: TheForms Overview TheForms is a community platform featuring chat functionality, user profiles, and administrative controls. During testing, the password reset functionality was fo...
Lab Link Lab: Halftone Studio Overview Halftone Studio recently migrated from API keys to JWT-based authentication. During the migration, support was temporarily expanded to accommodate multiple...
Lab Link Lab: Noted Overview Noted is a collaboration platform used for meeting notes, summaries, and workspace management. While exploring the application, an insecure password change mechanism...
Lab Link Lab: Coined Overview Coined is a cryptocurrency exchange whose treasury account controls access to a high-value recovery phrase stored within a secure Vault. During testing, the login ...
Lab Link Lab: Tamper Temple Overview Tamper Temple presents itself as a hardened portal protecting Temple Trust’s internal systems. Behind the modern interface sits a legacy API, forgotten devel...
title: “Unsafe YAML Deserialization Leads to Remote Code Execution | Autovation” date: 2026-06-09 21:00:00 +0530 categories: [A08 - Software or Data Integrity Failures, Unsafe Deserialization] tags...
Lab Link Lab: The Oak Overview The Oak challenge demonstrates how a vulnerable third-party component in an image-processing pipeline can lead to complete server compromise. During testing, us...