Uphack Application Security Blog uphack.io

Practical AppSec research, secure engineering lessons, exploit breakdowns, and security career advice.

The Hugging Face Incident Is Not an AI Story

uphack.ioDiscussed on Hacker News10 min read
Feeds

Reflected XSS via Nested Form Parameters

uphack.io4 min read
Feeds

Base64 IDOR in a Return Credit Claim

uphack.io4 min read
Feeds

XSS2Shell: Pre-auth XSS in WordPress Login Page (CVE-2026-64638)

uphack.io5 min read
Feeds

WP2Shell: Pre-Auth WordPress RCE (CVE-2026-63030), Reproduced

uphack.io8 min read
Feeds

Fundamental security principles

uphack.io8 min read
Feeds

Your Are the Bottleneck Now

uphack.ioDiscussed on Hacker News
Feeds

The Illusion of Building

uphack.ioDiscussed on Hacker News (2 threads)
Feeds

Security Is Not a Code Problem

uphack.ioDiscussed on Hacker News
Feeds

Access Controls: Auth and Authz

uphack.io4 min read
Feeds

Foundations of Information Security - CIA Triad

uphack.io4 min read
Feeds

Introduction to Information Security

uphack.io6 min read
Feeds

How to start your offensive security career

uphack.io10 min read
Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Not for me
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help